Manifest
$ rpki-client -vvf rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
File: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft (raw, json)
Hash identifier: ZG5T53FQ8oUhULkA2VhjwWlLrVwdXfHuHVg6p1nomnI=
Subject key identifier: 8E:B8:8A:7A:17:89:0D:A2:D3:07:68:17:A6:BC:63:0D:E0:D1:03:51
Authority key identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91
Certificate issuer: /CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
Certificate serial: 4F0EC7582E2EBD36F7F96D4C6110680DFEEAB12A
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
Subject info access: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
Manifest number: 046A
Signing time: Tue 30 Sep 2025 12:09:24 +0000
Manifest this update: Tue 30 Sep 2025 12:04:24 +0000
Manifest next update: Wed 01 Oct 2025 15:31:24 +0000
Files and hashes: 1: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl (hash: fZrnO+D2QsaKCz+kAvKaaY1BqmZ9hTtRlQbviW+1Qsg=)
2: 323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa (hash: NOwi2jYQ8FHV+5iFygC9Tyw/h3+CkwWSkGkdIOKT9Zg=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:0e:c7:58:2e:2e:bd:36:f7:f9:6d:4c:61:10:68:0d:fe:ea:b1:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
Validity
Not Before: Sep 30 12:04:24 2025 GMT
Not After : Oct 1 15:31:24 2025 GMT
Subject: CN=8EB88A7A17890DA2D3076817A6BC630DE0D10351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:11:4e:02:17:f3:97:1f:4f:7c:70:88:7c:9d:
70:47:5d:65:a0:42:d1:98:f5:5f:38:f2:48:48:6c:
75:4c:d2:5a:0f:3f:ab:0f:f2:ff:c6:19:08:78:b1:
80:f4:50:1e:d4:3c:91:47:2a:a8:af:3b:d1:e0:17:
6d:3d:47:b3:16:1f:89:56:52:4f:53:1c:18:87:7b:
12:a0:b7:ee:80:d0:d7:79:09:28:54:5c:81:6d:48:
00:9d:7b:d1:c4:cb:c0:b6:01:7d:47:3d:30:2f:62:
64:66:b2:88:5a:77:97:64:45:82:25:ce:0f:2b:90:
ef:c7:ba:ba:43:7d:7f:e5:3b:08:dd:dc:3e:15:a3:
10:6d:e9:35:75:fe:2d:f9:e8:07:d0:3f:de:6b:36:
c2:6c:a0:6b:1a:5e:c3:11:65:db:47:cb:32:04:b2:
d4:a2:61:cf:d5:e3:e7:13:a6:00:ed:8a:63:6a:f2:
c0:91:47:a5:6d:ff:30:47:be:3a:77:bc:be:25:de:
18:3b:f8:96:bc:d8:02:4f:68:b0:47:fe:4c:f0:10:
80:a4:5e:81:4f:10:b5:d6:59:62:63:21:d7:93:b0:
fd:38:4a:5a:fb:c3:ad:9f:f3:76:ce:b3:a1:f8:03:
a0:6f:7c:d6:fd:49:b3:1b:cf:6d:e2:73:32:f9:d9:
60:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B8:8A:7A:17:89:0D:A2:D3:07:68:17:A6:BC:63:0D:E0:D1:03:51
X509v3 Authority Key Identifier:
keyid:9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:71:b1:92:46:1e:ca:e3:b6:3d:8f:18:b1:ed:17:33:3a:50:
33:36:cb:90:26:70:d0:bd:d9:bf:ce:bc:8f:b5:80:bd:ca:74:
25:d8:d6:d0:7a:04:8a:62:2d:49:48:0d:4e:83:37:c8:9d:bf:
a5:25:8b:82:9b:0f:be:1e:9c:7d:df:e5:2f:f1:b0:48:05:51:
56:28:af:8f:a2:a1:24:97:37:c0:c6:a6:41:02:7e:27:0a:4b:
73:c1:c0:d3:31:b5:58:c3:53:25:f7:4c:92:87:6e:64:b8:07:
53:14:56:95:0c:64:69:a3:6f:af:20:b8:9a:74:82:87:36:6d:
c4:8f:11:00:42:15:f5:2f:28:9f:67:2a:98:b2:62:aa:af:54:
b7:37:79:f6:b5:51:6c:50:f7:ec:43:73:11:92:67:0d:61:6d:
eb:23:dc:02:ed:c5:d6:3d:81:02:e3:41:ab:8f:17:73:66:e6:
a1:25:39:cd:3c:4e:1a:5d:dd:6e:f1:b7:51:7e:dd:f1:57:d1:
bd:25:96:e3:2d:e3:28:15:8a:b8:78:00:c9:e5:b6:f7:a7:66:
8b:13:21:72:aa:8f:af:86:e4:92:ca:5c:d0:f2:40:57:40:43:
6b:f9:cc:a5:f4:0a:df:cf:f5:0f:2f:0f:a3:c4:86:2e:60:6d:
95:dd:0f:f4
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgIUTw7HWC4uvTb3+W1MYRBoDf7qsSowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZFOUI0QzMwOTAyMDZENUIyOENFRDRGNTE3OTUzOUY2
OThBREI5MTAeFw0yNTA5MzAxMjA0MjRaFw0yNTEwMDExNTMxMjRaMDMxMTAvBgNV
BAMTKDhFQjg4QTdBMTc4OTBEQTJEMzA3NjgxN0E2QkM2MzBERTBEMTAzNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYEU4CF/OXH098cIh8nXBHXWWg
QtGY9V848khIbHVM0loPP6sP8v/GGQh4sYD0UB7UPJFHKqivO9HgF209R7MWH4lW
Uk9THBiHexKgt+6A0Nd5CShUXIFtSACde9HEy8C2AX1HPTAvYmRmsohad5dkRYIl
zg8rkO/HurpDfX/lOwjd3D4VoxBt6TV1/i356AfQP95rNsJsoGsaXsMRZdtHyzIE
stSiYc/V4+cTpgDtimNq8sCRR6Vt/zBHvjp3vL4l3hg7+Ja82AJPaLBH/kzwEICk
XoFPELXWWWJjIdeTsP04Slr7w62f83bOs6H4A6BvfNb9SbMbz23iczL52WCzAgMB
AAGjggICMIIB/jAdBgNVHQ4EFgQUjriKeheJDaLTB2gXprxjDeDRA1EwHwYDVR0j
BBgwFoAUn+m0wwkCBtWyjO1PUXlTn2mK25EwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8v
bW5paHljLXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1MTc5NTM5RjY5
OEFEQjkxLmNybDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8v
c2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS85RkU5QjRDMzA5MDIwNkQ1QjI4
Q0VENEY1MTc5NTM5RjY5OEFEQjkxLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYB
BQUHMAuGXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8vbW5paHlj
LXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1MTc5NTM5RjY5OEFEQjkx
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAFHGxkkYeyuO2PY8Yse0XMzpQMzbLkCZw0L3Zv868j7WAvcp0
JdjW0HoEimItSUgNToM3yJ2/pSWLgpsPvh6cfd/lL/GwSAVRViivj6KhJJc3wMam
QQJ+JwpLc8HA0zG1WMNTJfdMkoduZLgHUxRWlQxkaaNvryC4mnSChzZtxI8RAEIV
9S8on2cqmLJiqq9Utzd59rVRbFD37ENzEZJnDWFt6yPcAu3F1j2BAuNBq48Xc2bm
oSU5zTxOGl3dbvG3UX7d8VfRvSWW4y3jKBWKuHgAyeW296dmixMhcqqPr4bkkspc
0PJAV0BDa/nMpfQK38/1Dy8Po8SGLmBtld0P9A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:35:01 2025 by rpki-client