Manifest

$ rpki-client -vvf rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
File:                     9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft (raw, json)
Hash identifier:          xCJ7ChSjjJf/VREvnSKquMLXZ57nemg69hNec4d2Pqk=
Subject key identifier:   C3:F2:8A:12:04:3E:50:46:68:D9:A2:72:E2:5A:C9:0B:43:EF:D6:F0
Authority key identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91
Certificate issuer:       /CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
Certificate serial:       68D5A1137267EF72CBAD0279CFE028A6081CE38A
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
Subject info access:      rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
Manifest number:          0490
Signing time:             Mon 13 Jul 2026 06:54:10 +0000
Manifest this update:     Mon 13 Jul 2026 06:49:10 +0000
Manifest next update:     Tue 14 Jul 2026 10:36:10 +0000
Files and hashes:         1: 323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa (hash: cB9Zwjx3Hi9b0UOooFxL64n4CFupbZ1thBhMYsT2yH0=)
                          2: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl (hash: MGIkPDwvCSfwC+7Oyfi60xTwCor0Qaaq7GkeaWlsIis=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d5:a1:13:72:67:ef:72:cb:ad:02:79:cf:e0:28:a6:08:1c:e3:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
        Validity
            Not Before: Jul 13 06:49:10 2026 GMT
            Not After : Jul 14 10:36:10 2026 GMT
        Subject: CN=C3F28A12043E504668D9A272E25AC90B43EFD6F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bb:a8:66:99:5b:15:06:91:22:33:6e:23:9b:
                    87:bc:44:28:33:b7:49:80:b3:e8:2d:79:b9:79:ab:
                    ca:e0:3a:b2:25:8e:ef:84:78:5b:61:b7:c2:61:e5:
                    8d:d5:ff:23:5b:ce:43:77:54:b3:eb:af:f3:68:c4:
                    1c:72:ce:9a:ad:36:7c:ce:98:42:56:aa:08:13:9c:
                    bc:83:05:04:ca:f6:52:85:52:80:4e:b1:23:09:df:
                    f9:4a:07:4c:39:b0:a9:1f:11:cd:68:57:87:40:29:
                    be:0a:0e:21:f1:a2:eb:94:bb:e5:7c:c6:54:1e:1b:
                    0b:75:7c:c3:c8:0f:e9:07:80:a0:67:ac:c2:b6:3d:
                    90:ed:c5:af:49:a4:83:ba:46:6b:b1:ec:86:1b:30:
                    6a:91:f6:41:98:da:ee:5e:74:d3:a8:7b:85:8d:c5:
                    e3:f4:78:7f:7a:d1:91:00:1d:00:9d:58:ca:bd:d1:
                    26:4e:56:9b:25:1c:23:da:5b:9e:56:4e:42:88:db:
                    30:0c:97:f8:53:7b:38:93:fe:31:51:41:26:b1:1a:
                    ce:d5:47:f4:64:8c:2a:b5:e7:61:3c:ff:31:bd:68:
                    93:f4:30:bf:d5:aa:09:39:0d:b3:70:12:e0:9c:81:
                    b4:dc:4d:dd:ad:05:7a:3c:d0:68:da:7e:03:07:79:
                    aa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F2:8A:12:04:3E:50:46:68:D9:A2:72:E2:5A:C9:0B:43:EF:D6:F0
            X509v3 Authority Key Identifier:
                keyid:9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:6c:0d:8f:f0:ee:43:02:b0:63:4e:70:02:d3:b4:86:03:73:
         b5:af:39:80:35:0c:2f:16:f8:d0:68:fb:15:f2:0e:dd:30:86:
         c4:ce:07:73:8d:44:f2:07:72:37:89:10:01:43:65:5c:a2:61:
         2d:32:d5:d7:81:4f:50:d7:08:b8:49:1d:02:30:c9:05:f4:a2:
         75:36:90:23:2b:fc:c0:32:50:dd:58:1a:d2:89:d0:3c:cf:37:
         3a:e7:c6:9f:61:57:e3:70:58:b3:d8:32:97:54:38:31:37:ef:
         34:06:16:4e:1c:51:a1:d1:a8:6f:f5:65:76:e4:43:58:1f:83:
         6f:9c:b0:53:e1:8a:5e:41:88:ec:0a:64:1d:71:a4:c1:05:fc:
         ec:30:2d:8a:3c:7f:ac:0e:bd:a2:9a:c7:e1:7c:a0:0d:cd:92:
         6c:45:a0:1e:42:a9:ed:5f:c0:8e:93:88:d9:9f:55:cd:72:29:
         40:99:a3:69:70:d6:0c:7d:4a:48:f8:51:a9:b0:f0:5f:3a:07:
         de:c4:05:cc:6f:ff:8c:63:7e:7a:fb:77:52:59:cf:6e:d7:a7:
         b0:cb:a8:c3:0c:7f:c7:82:f6:91:5e:96:44:0f:9a:e9:1e:b0:
         83:4f:98:9c:ee:dc:e3:23:66:5b:7d:94:0b:56:45:07:b0:10:
         49:60:62:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:35 2026 by rpki-client