
$ rpki-client -vvvf rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
File: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft (raw, json)
Hash identifier: F6ynKh6vETcf0ghuS2nuzBQjenjJ4jGJgdF9vGwlZls=
Subject key identifier: 1C:A7:DC:93:0D:0B:23:71:12:98:B6:32:A7:36:4C:42:D9:81:F8:E4
Authority key identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91
Certificate issuer: /CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
Certificate serial: 527001D6D2A292DD2F0299CF2F4BD76E19F34FE4
Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
Subject info access: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
Manifest number: 04C2
Signing time: Tue 22 Sep 2026 15:38:18 +0000
Manifest this update: Tue 22 Sep 2026 15:33:18 +0000
Manifest next update: Wed 23 Sep 2026 18:15:18 +0000
Files and hashes: 1: 323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa (hash: cB9Zwjx3Hi9b0UOooFxL64n4CFupbZ1thBhMYsT2yH0=)
2: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl (hash: cjKnSWhZ6Ykzapw7qcxLOiyWWnNIEmItLDgFhq3f158=)
Validation: OK
Signature path: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl
rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 18:15:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:70:01:d6:d2:a2:92:dd:2f:02:99:cf:2f:4b:d7:6e:19:f3:4f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
Validity
Not Before: Sep 22 15:33:18 2026 GMT
Not After : Sep 23 18:15:18 2026 GMT
Subject: CN=1CA7DC930D0B23711298B632A7364C42D981F8E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0d:9a:78:46:f1:ca:f4:59:31:98:bd:c5:33:
30:ec:e0:cf:cc:50:b8:5d:6c:fb:52:db:57:42:0d:
d9:e0:67:c3:4d:f7:43:86:eb:fc:ec:01:66:b3:43:
9d:c6:ac:3c:fa:24:ea:e3:bf:47:93:9d:9f:4f:be:
d5:8e:0e:0f:8b:e6:a6:34:95:26:84:77:b4:ca:03:
0b:8f:ed:78:24:52:09:56:5d:c0:20:62:be:20:fa:
26:66:06:99:ac:38:83:41:8d:c9:40:df:e4:05:5b:
17:b8:e1:8f:af:c0:ed:33:77:19:65:29:92:7c:fa:
de:9c:df:ce:90:98:b6:ab:2c:e0:84:e8:2c:be:f9:
63:77:7d:cc:4d:a9:2a:e7:1b:02:8b:7c:92:bb:61:
96:bb:79:63:28:84:60:cf:21:ea:3d:5a:f9:6e:40:
c4:f8:c1:a0:38:91:0a:74:ff:8c:c9:77:90:1a:16:
a1:4e:f2:55:a5:9f:51:3e:46:c2:23:55:4a:c6:55:
af:de:38:90:a6:1b:bd:78:01:fe:7d:21:c9:a4:c9:
22:ff:f7:45:4d:39:55:4d:ae:b3:e4:e1:1b:5d:79:
86:db:e9:14:c3:12:93:5a:c5:e6:a9:a4:4c:bb:94:
93:66:c9:d4:cb:ec:68:75:fb:7e:4b:76:2b:02:c0:
8e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A7:DC:93:0D:0B:23:71:12:98:B6:32:A7:36:4C:42:D9:81:F8:E4
X509v3 Authority Key Identifier:
keyid:9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl
Authority Information Access:
CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:db:1a:28:e5:db:cd:22:3b:81:45:7c:c7:17:b0:0a:d4:b7:
13:0e:b6:c8:fd:9e:08:b9:f5:6c:8f:c7:fa:a9:45:f1:06:ac:
dc:73:2b:4c:52:0b:de:43:c2:3d:c4:d2:b2:97:e6:cd:79:87:
f4:44:2f:c6:79:2f:da:63:ca:35:8e:56:3e:d2:85:cd:37:d7:
b6:97:1e:38:84:e7:93:60:f6:93:81:05:7b:27:d3:03:93:b5:
e4:c1:da:a2:9f:75:c8:74:a9:0b:22:7b:cd:a7:60:20:d8:d4:
38:a1:dc:83:fd:6f:1b:be:5d:dc:0f:a8:d0:3d:e9:fa:7d:70:
65:b2:0c:79:57:b5:38:5e:86:e9:de:28:79:33:0c:21:da:66:
4b:40:c9:b1:ef:67:39:f6:b2:3a:e5:cf:1c:3a:18:06:7f:7d:
08:e1:db:dc:34:93:8d:6c:9a:e6:dd:2d:a8:d5:c4:50:c6:5f:
09:b0:02:cd:77:42:2c:69:f2:4d:3b:64:d5:1c:53:da:85:f5:
e7:40:cc:02:93:90:31:cb:e2:95:44:0d:2c:ea:40:97:9e:7f:
7f:fa:02:96:71:a5:34:66:1f:6e:7c:35:50:37:64:8c:8f:e1:
34:a3:d0:ab:3f:a7:7d:0e:ed:55:2a:f6:ed:61:67:f0:5c:8f:
59:78:7c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:02:07 2026 by rpki-client