$ rpki-client -vvf rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft File: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft (raw, json) Hash identifier: 5M8dCEJk1huLVpGAqwArbwTithULxAIutKQPdArKiBA= Subject key identifier: 0E:2E:7C:3B:F6:92:47:54:EC:2E:B9:57:3C:FF:71:4F:32:BE:3A:23 Authority key identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91 Certificate issuer: /CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91 Certificate serial: 37067B8C1AE6011E54F4C52797B8C40D519ED6D3 Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer Subject info access: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft Manifest number: 03F3 Signing time: Thu 03 Jul 2025 00:47:30 +0000 Manifest this update: Thu 03 Jul 2025 00:42:30 +0000 Manifest next update: Fri 04 Jul 2025 02:07:30 +0000 Files and hashes: 1: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl (hash: 2QMz9NYmm/VF0PKFnBiu4mQ9KkGFWpXUFrKL3c+VFHw=) 2: 323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa (hash: NOwi2jYQ8FHV+5iFygC9Tyw/h3+CkwWSkGkdIOKT9Zg=) Validation: OK Signature path: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 02:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:06:7b:8c:1a:e6:01:1e:54:f4:c5:27:97:b8:c4:0d:51:9e:d6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91 Validity Not Before: Jul 3 00:42:30 2025 GMT Not After : Jul 4 02:07:30 2025 GMT Subject: CN=0E2E7C3BF6924754EC2EB9573CFF714F32BE3A23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:24:7b:d9:eb:da:9d:6b:e9:de:ec:0e:66:b3: a0:18:39:be:91:8f:d5:35:40:97:65:96:f1:71:2c: a5:44:6b:59:ea:9c:7c:5e:56:a7:ec:50:7f:bd:ef: fd:2d:ff:79:01:85:83:0c:10:55:e8:7f:cb:e7:ca: d4:1d:1c:4e:57:48:24:9e:62:96:db:2c:cf:5d:3a: ba:f0:e3:c8:94:8a:de:c4:b0:be:a2:86:24:fc:6b: b6:34:4a:12:0a:07:91:f6:34:1b:4d:10:fd:19:b5: 44:71:b6:46:ac:d6:9e:d4:d6:84:43:c6:4f:a2:f5: a4:9f:25:b0:19:5f:d5:e7:99:21:e7:b5:9b:2b:67: f2:a3:84:91:63:8c:f2:e6:48:e6:ce:7e:fc:2c:a0: 5d:91:fc:4f:57:0e:3f:5d:04:3b:06:d0:98:09:26: c5:6c:74:4d:10:9c:19:d4:01:d2:07:e7:8c:07:b9: 0b:d0:b0:e6:c6:fa:67:67:f9:a7:4e:14:e4:04:2d: 67:b7:fe:27:f0:bc:de:24:e6:52:3a:c3:62:db:21: 0e:e1:2a:dc:4e:d0:eb:ee:16:79:5b:0d:28:f5:19: 7e:be:50:84:e2:47:c4:25:a6:ea:d2:69:28:44:9e: e2:ca:d5:d7:29:4b:1e:96:48:39:90:80:ff:24:6f: cd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2E:7C:3B:F6:92:47:54:EC:2E:B9:57:3C:FF:71:4F:32:BE:3A:23 X509v3 Authority Key Identifier: keyid:9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:b3:5b:f1:88:9a:ba:79:94:05:fa:6e:d5:b8:00:24:fa:bb: 86:1f:04:26:42:f3:5c:fe:f6:88:d6:ba:f6:cf:73:1f:b3:10: 2b:d1:96:26:98:25:66:e3:c2:14:5b:38:86:0a:38:23:62:4d: 01:f2:5f:08:ee:49:ac:ec:ed:55:c6:98:21:9b:99:48:b8:ce: c8:9c:b4:1e:fb:e1:e3:79:7f:70:6a:39:e2:9f:59:c9:4b:b5: 3e:0f:45:9f:9c:76:44:4b:76:af:c7:dd:32:7a:21:c7:e9:ae: f6:2e:2d:cc:5d:75:71:df:cc:83:e2:99:b2:f0:41:92:0c:4d: 4c:f6:e5:af:69:e4:94:d5:64:67:48:c7:09:c1:57:fb:34:3a: 57:6a:b9:d8:fc:a2:08:de:3b:b1:13:d9:20:33:00:63:7c:db: a2:28:da:fd:79:52:78:05:e9:84:5c:af:30:50:65:cc:7c:34: f4:98:c9:9b:27:63:35:54:37:3c:9b:2d:3b:bf:1b:20:86:cf: b4:b9:9a:da:b2:a7:4d:a9:fb:7e:05:77:01:73:53:c4:6b:44: ac:c4:dd:19:3d:89:dd:26:f8:c4:57:0a:bf:39:cd:bd:25:39: 30:a5:b0:d2:91:73:f0:3d:1e:a1:fa:93:9c:0b:16:9b:b4:01: 93:48:42:ff -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgIUNwZ7jBrmAR5U9MUnl7jEDVGe1tMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFOUI0QzMwOTAyMDZENUIyOENFRDRGNTE3OTUzOUY2 OThBREI5MTAeFw0yNTA3MDMwMDQyMzBaFw0yNTA3MDQwMjA3MzBaMDMxMTAvBgNV BAMTKDBFMkU3QzNCRjY5MjQ3NTRFQzJFQjk1NzNDRkY3MTRGMzJCRTNBMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJHvZ69qda+ne7A5ms6AYOb6R j9U1QJdllvFxLKVEa1nqnHxeVqfsUH+97/0t/3kBhYMMEFXof8vnytQdHE5XSCSe YpbbLM9dOrrw48iUit7EsL6ihiT8a7Y0ShIKB5H2NBtNEP0ZtURxtkas1p7U1oRD xk+i9aSfJbAZX9XnmSHntZsrZ/KjhJFjjPLmSObOfvwsoF2R/E9XDj9dBDsG0JgJ JsVsdE0QnBnUAdIH54wHuQvQsObG+mdn+adOFOQELWe3/ifwvN4k5lI6w2LbIQ7h KtxO0OvuFnlbDSj1GX6+UITiR8QlpurSaShEnuLK1dcpSx6WSDmQgP8kb83XAgMB AAGjggICMIIB/jAdBgNVHQ4EFgQUDi58O/aSR1TsLrlXPP9xTzK+OiMwHwYDVR0j BBgwFoAUn+m0wwkCBtWyjO1PUXlTn2mK25EwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8v bW5paHljLXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1MTc5NTM5RjY5 OEFEQjkxLmNybDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8v c2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS85RkU5QjRDMzA5MDIwNkQ1QjI4 Q0VENEY1MTc5NTM5RjY5OEFEQjkxLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYB BQUHMAuGXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8vbW5paHlj LXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1MTc5NTM5RjY5OEFEQjkx Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAorNb8YiaunmUBfpu1bgAJPq7hh8EJkLzXP72iNa69s9zH7MQ K9GWJpglZuPCFFs4hgo4I2JNAfJfCO5JrOztVcaYIZuZSLjOyJy0Hvvh43l/cGo5 4p9ZyUu1Pg9Fn5x2REt2r8fdMnohx+mu9i4tzF11cd/Mg+KZsvBBkgxNTPblr2nk lNVkZ0jHCcFX+zQ6V2q52PyiCN47sRPZIDMAY3zboija/XlSeAXphFyvMFBlzHw0 9JjJmydjNVQ3PJstO78bIIbPtLma2rKnTan7fgV3AXNTxGtErMTdGT2J3Sb4xFcK vznNvSU5MKWw0pFz8D0eofqTnAsWm7QBk0hC/w== -----END CERTIFICATE-----Generated at Thu Jul 3 12:25:48 2025 by rpki-client