Manifest
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: /IMVNbq5pHKDfaGIk0dV7kSYbvuKBx9xq/B34mRnBSE=
Subject key identifier: 2E:D1:94:77:BC:03:89:A3:8D:72:99:04:E8:AA:72:8A:43:18:3B:C1
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 6646C8E2F44301B942412C4A5768D75CF2EB0CA2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0AF9
Signing time: Tue 01 Jul 2025 06:12:00 +0000
Manifest this update: Tue 01 Jul 2025 06:07:00 +0000
Manifest next update: Wed 02 Jul 2025 06:12:00 +0000
Files and hashes: 1: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: L9SKOfzlWCbf3ZEfwVUoxYt9hsBGjULfYjAnC6NGFMc=)
2: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: /jBviPSFdFKZh4Pbl7qtj9AMKAzv67R3Ny4r/CA/pdU=)
3: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: lOH37mNZ7GeDqNovMClGKLJ0pYQzmLTzievvpRu1ycw=)
4: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: 6Xv4xO+sNR+gV6DulAi/AxO52ICVVgcPQa3NLKl6yrA=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Jul 2025 06:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:46:c8:e2:f4:43:01:b9:42:41:2c:4a:57:68:d7:5c:f2:eb:0c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Jul 1 06:07:00 2025 GMT
Not After : Jul 8 06:12:00 2025 GMT
Subject: CN=3082010A0282010100CBAAEB204FDCB537B6F103D531D1E431663C7E5F77A3D109B92906A7399BD615584B2F808EADF621E1F29D1FDE002CE0F4CD78ED279054AD19CA0B1B30ED1CBD049AF04DEC0C47E8DCA1926335D069B38A9DBC1FE5E4B5034EF9DED318FE5AB5623CA73C64EF86A6CD984BFCCAF6DFAEFEA3B9256774CE85F0A5C1003570101BC950F1F031A3D801ECC0382952721FCA4103CDB232157E748604F3AE984F8BB23FB6DFDDF69ED245DBBEEDE37EA314CC86779E07413E147FC35C1783BB62A3796C32E78172D9E612BA8CE08049BA35F1603696870B8AE87A74640FB66D862E3A1DF6FEE0C7A6E7977A25F77CEB00EC2E43B358F3CA413B5CB0ABBD7ED9A0B4A30203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:eb:20:4f:dc:b5:37:b6:f1:03:d5:31:d1:
e4:31:66:3c:7e:5f:77:a3:d1:09:b9:29:06:a7:39:
9b:d6:15:58:4b:2f:80:8e:ad:f6:21:e1:f2:9d:1f:
de:00:2c:e0:f4:cd:78:ed:27:90:54:ad:19:ca:0b:
1b:30:ed:1c:bd:04:9a:f0:4d:ec:0c:47:e8:dc:a1:
92:63:35:d0:69:b3:8a:9d:bc:1f:e5:e4:b5:03:4e:
f9:de:d3:18:fe:5a:b5:62:3c:a7:3c:64:ef:86:a6:
cd:98:4b:fc:ca:f6:df:ae:fe:a3:b9:25:67:74:ce:
85:f0:a5:c1:00:35:70:10:1b:c9:50:f1:f0:31:a3:
d8:01:ec:c0:38:29:52:72:1f:ca:41:03:cd:b2:32:
15:7e:74:86:04:f3:ae:98:4f:8b:b2:3f:b6:df:dd:
f6:9e:d2:45:db:be:ed:e3:7e:a3:14:cc:86:77:9e:
07:41:3e:14:7f:c3:5c:17:83:bb:62:a3:79:6c:32:
e7:81:72:d9:e6:12:ba:8c:e0:80:49:ba:35:f1:60:
36:96:87:0b:8a:e8:7a:74:64:0f:b6:6d:86:2e:3a:
1d:f6:fe:e0:c7:a6:e7:97:7a:25:f7:7c:eb:00:ec:
2e:43:b3:58:f3:ca:41:3b:5c:b0:ab:bd:7e:d9:a0:
b4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D1:94:77:BC:03:89:A3:8D:72:99:04:E8:AA:72:8A:43:18:3B:C1
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:f0:6a:c7:aa:65:58:c0:b3:de:40:34:88:65:44:9c:26:aa:
fe:3a:26:31:43:9e:86:65:3a:af:8a:e4:ab:61:54:60:8a:dc:
ab:27:c7:78:20:3e:c7:10:ac:50:71:f5:d9:b1:ab:9b:3b:aa:
54:29:9c:cb:f7:e0:b6:3e:34:3a:e1:81:57:07:b6:58:e5:18:
59:0a:ba:91:fb:1a:41:6b:b1:80:82:34:71:b4:48:19:24:7f:
35:b1:de:77:0c:8f:de:76:a8:80:f7:72:9d:3b:35:9d:f4:50:
5e:4a:8d:4e:d7:7a:ac:d6:2a:85:dd:f5:e9:e3:19:83:ee:22:
73:2d:b7:0f:b2:25:25:56:d5:51:19:80:54:7e:de:75:df:84:
db:21:4e:3f:9e:50:4e:57:5c:b1:e5:d4:4c:a2:29:83:55:e8:
f6:42:19:eb:86:7c:31:49:f8:ea:e9:24:f5:f2:b1:e2:59:94:
93:2a:3c:eb:60:03:4f:63:75:0b:f1:98:9b:98:23:de:84:23:
fb:d8:ef:b4:e1:cb:2b:5b:73:d9:59:04:13:bf:29:9a:ab:8c:
f4:ed:76:cd:31:16:fa:f2:0e:d7:16:ca:29:da:11:0c:11:3b:
72:3c:41:20:a7:d5:2a:94:1c:da:bc:8a:81:8e:ca:35:b1:a4:
8b:70:32:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:44:10 2025 by rpki-client