Manifest
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: 4Z97Z+oQLOYF6emnRjDSTWni1mkp8Pq0SH4kQLljUEw=
Subject key identifier: 44:F6:7D:76:7A:68:82:56:AB:F7:3F:44:85:E2:16:4B:9C:82:C4:54
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 0373F09220905656CBCDC5DA62BADD8914B8851D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0AA3
Signing time: Sun 04 May 2025 20:32:00 +0000
Manifest this update: Sun 04 May 2025 20:27:00 +0000
Manifest next update: Mon 05 May 2025 20:32:00 +0000
Files and hashes: 1: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: Hr6zpzGvUK/3BGgIcoTkReHPD1TxkQkp3VyfhjHO1Ss=)
2: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: lOH37mNZ7GeDqNovMClGKLJ0pYQzmLTzievvpRu1ycw=)
3: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: /jBviPSFdFKZh4Pbl7qtj9AMKAzv67R3Ny4r/CA/pdU=)
4: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: L9SKOfzlWCbf3ZEfwVUoxYt9hsBGjULfYjAnC6NGFMc=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 May 2025 20:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:73:f0:92:20:90:56:56:cb:cd:c5:da:62:ba:dd:89:14:b8:85:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: May 4 20:27:00 2025 GMT
Not After : May 11 20:32:00 2025 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:a7:6f:e9:75:a3:c3:bc:70:3a:a9:c4:5a:
e0:8f:cb:e4:41:02:74:1e:43:52:3e:99:6f:93:4a:
aa:6d:98:e5:29:91:a1:fb:49:a5:23:a2:d3:cf:9e:
53:64:7c:51:8a:1e:d5:ea:1a:13:26:7b:84:cc:04:
c7:e0:e2:54:7b:df:5f:ac:88:7f:db:4a:9d:60:78:
9b:e2:f9:ff:b3:5d:7a:9f:7c:af:7c:40:a7:df:cc:
53:23:aa:7d:e4:d1:99:5f:ef:8a:df:a3:9d:5f:a2:
16:4e:19:a2:89:06:6a:ed:d0:10:b9:f0:48:c2:f4:
2a:03:de:3d:ad:5b:7b:69:c2:09:c2:46:f9:40:d8:
81:29:d5:dd:28:4d:28:ca:81:00:9a:4b:3b:3a:c2:
7d:ac:41:06:3c:a4:ba:ba:bd:79:51:89:a5:b7:da:
9b:26:f6:37:72:9d:6b:05:4e:66:42:74:ff:8b:4e:
04:70:93:df:a7:72:4d:74:d0:78:05:2b:d3:e8:b5:
79:f1:f6:c2:d7:b3:f5:05:d7:8c:88:d4:ec:60:6f:
d3:ef:02:0d:75:ba:64:1b:35:85:13:b9:b7:a3:70:
b2:96:68:9a:bd:15:37:38:e3:98:f9:ee:df:d4:bc:
cb:81:30:e8:19:fc:62:9a:6d:9d:a4:4a:20:d0:52:
c2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F6:7D:76:7A:68:82:56:AB:F7:3F:44:85:E2:16:4B:9C:82:C4:54
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d7:32:98:0e:be:a2:02:71:fd:18:8f:03:16:a9:6a:0d:b5:
17:83:91:f7:9f:21:31:27:37:65:57:a7:d8:2e:ad:0a:ee:fe:
92:f6:3e:07:78:38:40:34:5d:03:67:37:03:6d:b8:10:a9:ce:
7c:ae:e5:d7:02:2c:a8:11:86:70:5d:d7:0c:9d:ee:ff:db:2b:
a2:8a:c7:b2:b7:04:18:62:95:24:51:82:8e:d2:c4:3e:80:36:
07:8e:ed:1d:d0:ab:62:49:ca:b9:82:c7:3e:92:e3:b0:aa:be:
0b:fc:7a:7e:a6:ac:4b:4f:f9:80:2e:4e:5c:9f:a8:a0:3d:f3:
6b:75:ec:35:56:04:4d:81:09:fb:b4:91:ec:2b:83:87:1b:ce:
ee:5a:94:a1:f1:f2:9a:ca:0e:4f:63:41:f4:56:0e:c9:82:25:
7b:d5:47:68:c5:af:89:64:f4:72:50:86:e0:fb:f3:97:b9:6e:
d6:20:00:02:c2:88:04:2e:78:f0:ac:e1:0f:0c:25:3b:6a:a9:
8b:72:06:62:18:fd:76:ff:af:9f:eb:e3:c4:a9:be:3a:7b:ee:
11:6e:7f:af:1a:c5:ec:68:30:be:2e:a0:ae:d6:14:00:aa:75:
7e:9b:33:68:a7:06:3c:c5:af:20:7e:01:dc:7d:36:86:70:c2:
78:09:e0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:07:25 2025 by rpki-client