Manifest

$ rpki-client -vvvf rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
File:                     9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft (raw, json)
Hash identifier:          F6ynKh6vETcf0ghuS2nuzBQjenjJ4jGJgdF9vGwlZls=
Subject key identifier:   1C:A7:DC:93:0D:0B:23:71:12:98:B6:32:A7:36:4C:42:D9:81:F8:E4
Authority key identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91
Certificate issuer:       /CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
Certificate serial:       527001D6D2A292DD2F0299CF2F4BD76E19F34FE4
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
Subject info access:      rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
Manifest number:          04C2
Signing time:             Tue 22 Sep 2026 15:38:18 +0000
Manifest this update:     Tue 22 Sep 2026 15:33:18 +0000
Manifest next update:     Wed 23 Sep 2026 18:15:18 +0000
Files and hashes:         1: 323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa (hash: cB9Zwjx3Hi9b0UOooFxL64n4CFupbZ1thBhMYsT2yH0=)
                          2: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl (hash: cjKnSWhZ6Ykzapw7qcxLOiyWWnNIEmItLDgFhq3f158=)
Validation:               OK
Signature path:           rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl
                          rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 18:15:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:70:01:d6:d2:a2:92:dd:2f:02:99:cf:2f:4b:d7:6e:19:f3:4f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
        Validity
            Not Before: Sep 22 15:33:18 2026 GMT
            Not After : Sep 23 18:15:18 2026 GMT
        Subject: CN=1CA7DC930D0B23711298B632A7364C42D981F8E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0d:9a:78:46:f1:ca:f4:59:31:98:bd:c5:33:
                    30:ec:e0:cf:cc:50:b8:5d:6c:fb:52:db:57:42:0d:
                    d9:e0:67:c3:4d:f7:43:86:eb:fc:ec:01:66:b3:43:
                    9d:c6:ac:3c:fa:24:ea:e3:bf:47:93:9d:9f:4f:be:
                    d5:8e:0e:0f:8b:e6:a6:34:95:26:84:77:b4:ca:03:
                    0b:8f:ed:78:24:52:09:56:5d:c0:20:62:be:20:fa:
                    26:66:06:99:ac:38:83:41:8d:c9:40:df:e4:05:5b:
                    17:b8:e1:8f:af:c0:ed:33:77:19:65:29:92:7c:fa:
                    de:9c:df:ce:90:98:b6:ab:2c:e0:84:e8:2c:be:f9:
                    63:77:7d:cc:4d:a9:2a:e7:1b:02:8b:7c:92:bb:61:
                    96:bb:79:63:28:84:60:cf:21:ea:3d:5a:f9:6e:40:
                    c4:f8:c1:a0:38:91:0a:74:ff:8c:c9:77:90:1a:16:
                    a1:4e:f2:55:a5:9f:51:3e:46:c2:23:55:4a:c6:55:
                    af:de:38:90:a6:1b:bd:78:01:fe:7d:21:c9:a4:c9:
                    22:ff:f7:45:4d:39:55:4d:ae:b3:e4:e1:1b:5d:79:
                    86:db:e9:14:c3:12:93:5a:c5:e6:a9:a4:4c:bb:94:
                    93:66:c9:d4:cb:ec:68:75:fb:7e:4b:76:2b:02:c0:
                    8e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A7:DC:93:0D:0B:23:71:12:98:B6:32:A7:36:4C:42:D9:81:F8:E4
            X509v3 Authority Key Identifier:
                keyid:9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:db:1a:28:e5:db:cd:22:3b:81:45:7c:c7:17:b0:0a:d4:b7:
         13:0e:b6:c8:fd:9e:08:b9:f5:6c:8f:c7:fa:a9:45:f1:06:ac:
         dc:73:2b:4c:52:0b:de:43:c2:3d:c4:d2:b2:97:e6:cd:79:87:
         f4:44:2f:c6:79:2f:da:63:ca:35:8e:56:3e:d2:85:cd:37:d7:
         b6:97:1e:38:84:e7:93:60:f6:93:81:05:7b:27:d3:03:93:b5:
         e4:c1:da:a2:9f:75:c8:74:a9:0b:22:7b:cd:a7:60:20:d8:d4:
         38:a1:dc:83:fd:6f:1b:be:5d:dc:0f:a8:d0:3d:e9:fa:7d:70:
         65:b2:0c:79:57:b5:38:5e:86:e9:de:28:79:33:0c:21:da:66:
         4b:40:c9:b1:ef:67:39:f6:b2:3a:e5:cf:1c:3a:18:06:7f:7d:
         08:e1:db:dc:34:93:8d:6c:9a:e6:dd:2d:a8:d5:c4:50:c6:5f:
         09:b0:02:cd:77:42:2c:69:f2:4d:3b:64:d5:1c:53:da:85:f5:
         e7:40:cc:02:93:90:31:cb:e2:95:44:0d:2c:ea:40:97:9e:7f:
         7f:fa:02:96:71:a5:34:66:1f:6e:7c:35:50:37:64:8c:8f:e1:
         34:a3:d0:ab:3f:a7:7d:0e:ed:55:2a:f6:ed:61:67:f0:5c:8f:
         59:78:7c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:02:07 2026 by rpki-client