$ rpki-client -vvf rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft File: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft (raw, json) Hash identifier: 3agCVmkALHAcVyQyzYmwPHIRvjplIP3JLgnAgOVq8XA= Subject key identifier: AB:63:6A:4F:5D:DA:DE:96:88:36:E2:40:2A:5D:A2:67:13:96:E5:51 Authority key identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91 Certificate issuer: /CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91 Certificate serial: 4D8001A4CFA1270BAC40BC020800A523B295DF1C Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer Subject info access: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft Manifest number: 03B4 Signing time: Sat 17 May 2025 03:02:07 +0000 Manifest this update: Sat 17 May 2025 02:57:07 +0000 Manifest next update: Sun 18 May 2025 05:00:07 +0000 Files and hashes: 1: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl (hash: 4arExONrfeoHKjo1vD4cBHi3q3nle5By/8ljtIeX8IY=) 2: 323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa (hash: NOwi2jYQ8FHV+5iFygC9Tyw/h3+CkwWSkGkdIOKT9Zg=) Validation: OK Signature path: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 May 2025 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:80:01:a4:cf:a1:27:0b:ac:40:bc:02:08:00:a5:23:b2:95:df:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91 Validity Not Before: May 17 02:57:07 2025 GMT Not After : May 18 05:00:07 2025 GMT Subject: CN=AB636A4F5DDADE968836E2402A5DA2671396E551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7d:dc:65:62:80:f2:73:c3:76:5c:eb:54:bd: 32:04:19:07:e5:cd:10:d9:66:6c:d7:3a:c3:99:bb: 81:24:eb:8e:a7:6e:29:3b:ba:99:b0:33:11:f5:26: b5:c2:b2:ec:aa:24:a0:a0:00:58:77:78:1d:58:fe: 76:76:8d:8e:39:d2:b1:5d:7f:35:8c:ef:2a:3e:db: a8:69:18:5e:10:ed:8c:ee:68:95:5a:62:5a:fb:81: 57:c8:1b:94:a6:9f:bf:ef:5a:b1:3f:a8:10:7d:fa: 93:7e:8b:f9:d6:af:0d:1f:a2:8c:04:3a:33:da:8f: e9:1e:32:41:b0:91:d0:2d:52:75:48:68:57:41:a4: 9c:32:32:d9:45:2c:a3:f8:48:23:cc:a3:ce:4d:22: a8:79:f9:d1:21:90:b7:09:bd:52:85:9f:6d:67:74: 8e:ef:40:20:f4:ec:45:04:49:a4:24:d3:7c:ba:f4: 4d:68:3d:21:e1:b1:61:8c:65:68:ae:3c:48:65:85: 85:5d:79:a1:bb:b1:67:aa:38:78:df:e2:80:5c:85: 69:7c:db:da:7f:d9:76:9e:47:6e:79:ae:fc:9c:33: 21:fe:d7:df:e8:38:28:26:7b:a8:44:da:31:5f:49: 85:3f:8a:7d:c0:57:99:5d:15:5f:b9:83:8b:81:a5: ba:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:63:6A:4F:5D:DA:DE:96:88:36:E2:40:2A:5D:A2:67:13:96:E5:51 X509v3 Authority Key Identifier: keyid:9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:08:ae:f7:0d:c7:47:85:7b:fb:0f:76:8c:13:ca:c4:ed:04: ef:e1:c3:36:fe:aa:21:0b:8a:c5:83:6e:8c:b0:d7:0f:2f:41: 40:c7:bc:87:e8:0d:c6:98:f7:14:3d:c8:a5:ba:11:3c:33:cb: 9e:44:95:52:a8:26:89:4a:53:ab:b8:1f:27:e7:5d:0b:95:9c: 44:22:35:bc:18:27:5f:86:3b:c1:f6:a9:65:f9:6e:90:17:27: aa:f1:58:4b:0e:9b:1e:e9:6d:6f:42:4d:76:85:b0:9f:34:7b: 82:20:db:a5:dd:bb:71:1c:1e:b8:1b:00:85:3a:77:a5:b2:4f: 41:74:ae:3f:9c:19:cd:3b:f2:0e:80:95:dc:f6:73:52:58:1e: 15:d2:15:b5:61:0c:07:20:84:f8:04:41:50:ee:d8:5a:09:52: 2d:12:fd:ec:91:16:05:df:32:43:61:67:0b:9f:50:99:b2:cc: 0d:fb:db:e7:0e:31:25:17:f1:0a:10:7f:ec:55:04:27:7c:01: fd:52:86:08:78:58:77:2d:36:29:f3:54:fd:8a:8c:7f:ae:9c: ed:fb:d4:f1:3c:16:85:fc:43:6e:5e:3c:57:96:7f:54:74:57: ea:96:79:ab:66:32:33:e9:f2:0c:70:aa:0d:00:7a:69:6b:39: b4:a7:f3:de -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgIUTYABpM+hJwusQLwCCAClI7KV3xwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFOUI0QzMwOTAyMDZENUIyOENFRDRGNTE3OTUzOUY2 OThBREI5MTAeFw0yNTA1MTcwMjU3MDdaFw0yNTA1MTgwNTAwMDdaMDMxMTAvBgNV BAMTKEFCNjM2QTRGNUREQURFOTY4ODM2RTI0MDJBNURBMjY3MTM5NkU1NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEfdxlYoDyc8N2XOtUvTIEGQfl zRDZZmzXOsOZu4Ek646nbik7upmwMxH1JrXCsuyqJKCgAFh3eB1Y/nZ2jY450rFd fzWM7yo+26hpGF4Q7YzuaJVaYlr7gVfIG5Smn7/vWrE/qBB9+pN+i/nWrw0foowE OjPaj+keMkGwkdAtUnVIaFdBpJwyMtlFLKP4SCPMo85NIqh5+dEhkLcJvVKFn21n dI7vQCD07EUESaQk03y69E1oPSHhsWGMZWiuPEhlhYVdeaG7sWeqOHjf4oBchWl8 29p/2XaeR255rvycMyH+19/oOCgme6hE2jFfSYU/in3AV5ldFV+5g4uBpbrnAgMB AAGjggICMIIB/jAdBgNVHQ4EFgQUq2NqT13a3paINuJAKl2iZxOW5VEwHwYDVR0j BBgwFoAUn+m0wwkCBtWyjO1PUXlTn2mK25EwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8v bW5paHljLXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1MTc5NTM5RjY5 OEFEQjkxLmNybDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8v c2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS85RkU5QjRDMzA5MDIwNkQ1QjI4 Q0VENEY1MTc5NTM5RjY5OEFEQjkxLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYB BQUHMAuGXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8vbW5paHlj LXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1MTc5NTM5RjY5OEFEQjkx Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEASAiu9w3HR4V7+w92jBPKxO0E7+HDNv6qIQuKxYNujLDXDy9B QMe8h+gNxpj3FD3IpboRPDPLnkSVUqgmiUpTq7gfJ+ddC5WcRCI1vBgnX4Y7wfap ZflukBcnqvFYSw6bHultb0JNdoWwnzR7giDbpd27cRweuBsAhTp3pbJPQXSuP5wZ zTvyDoCV3PZzUlgeFdIVtWEMByCE+ARBUO7YWglSLRL97JEWBd8yQ2FnC59QmbLM Dfvb5w4xJRfxChB/7FUEJ3wB/VKGCHhYdy02KfNU/YqMf66c7fvU8TwWhfxDbl48 V5Z/VHRX6pZ5q2YyM+nyDHCqDQB6aWs5tKfz3g== -----END CERTIFICATE-----Generated at Sat May 17 17:59:22 2025 by rpki-client