$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer File: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (raw, json) Hash identifier: IzjV9o7U92frGI98YHgv9ZRw32C7S6fWskOoCebBdF4= Subject key identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91 Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF Certificate serial: 6A106263F88133615B7E8D3466C192CEC0904F2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer Manifest: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft caRepository: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/ Notify URL: https://rpki-rrdp.mnihyc.com/rrdp/notification.xml Certificate not before: Thu 19 Mar 2026 19:53:00 +0000 Certificate not after: Thu 18 Mar 2027 19:58:00 +0000 Subordinate resources: AS: 140938 IP: 2406:4440:e000::/40 Validation: OK Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:08:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:10:62:63:f8:81:33:61:5b:7e:8d:34:66:c1:92:ce:c0:90:4f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF Validity Not Before: Mar 19 19:53:00 2026 GMT Not After : Mar 18 19:58:00 2027 GMT Subject: CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:91:5b:f7:32:74:b1:74:b2:df:8a:62:79:3b: 22:3b:10:e8:7d:37:e5:9e:14:30:27:3e:81:0d:d3: 1f:07:63:3d:39:22:7f:99:06:ae:66:45:07:69:0a: d6:ef:e0:0d:3b:7c:fa:a2:d6:ae:f9:2d:87:9a:3d: 64:a9:09:a8:3c:9d:08:2c:98:d0:da:1c:df:fd:f6: eb:15:6e:c9:ca:67:e0:99:e4:88:5c:c3:67:7d:ad: e2:5d:6c:3b:0f:5d:29:59:5b:c9:fa:52:23:5e:4b: 68:53:e5:f7:b8:55:a4:12:33:d8:6e:54:29:a1:44: fd:d7:37:69:0e:7a:99:88:f1:78:10:a2:9f:93:15: 05:e5:43:76:45:8a:59:93:3f:31:ff:a0:8c:6f:3a: bf:f2:0f:68:cb:ba:01:dc:a2:c3:13:7c:29:30:25: 82:9b:2a:cf:06:5c:e6:2e:79:f1:f6:62:a3:4e:7c: e9:c8:56:6c:22:4a:8e:4c:ca:b5:35:4f:1f:9b:a4: 52:52:a1:a9:80:f9:91:92:05:c6:1c:48:70:68:64: 03:81:40:c0:ef:e4:e6:ba:31:31:ab:8f:7b:51:3d: bf:ae:e8:4f:0e:14:09:8e:54:7a:23:10:4f:1b:53: be:0f:a7:e3:aa:5b:7b:74:1f:d7:48:02:86:1a:7d: 16:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91 X509v3 Authority Key Identifier: keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/ RPKI Manifest - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft RPKI Notify - URI:https://rpki-rrdp.mnihyc.com/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:4440:e000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 140938 Signature Algorithm: sha256WithRSAEncryption 70:6e:35:74:e9:52:2d:a4:69:91:2e:56:7c:b0:9a:cc:4e:99: 1c:9d:e7:cd:35:9e:c1:d9:fa:24:fb:4a:49:41:72:dc:a5:51: ee:cc:43:6c:93:3a:f9:1a:54:f3:80:41:ab:f0:a9:d4:be:7b: 4a:8a:78:6b:88:a4:64:f4:8b:47:7f:e4:23:b4:71:40:cb:b2: 55:83:d6:da:45:d0:5b:3a:33:38:0c:59:37:bd:d8:3e:69:97: 22:34:66:ff:56:0d:50:eb:b9:b8:75:8b:87:97:fd:11:35:d9: 78:da:09:13:f1:6c:bd:c9:a0:63:c4:25:e7:fa:91:7b:e5:87: 33:3b:18:0f:9f:ad:74:81:37:41:bf:65:62:1c:e2:e3:75:f7: bb:3f:09:e9:36:57:c4:a4:93:92:4a:92:49:2b:d8:6f:d0:44: e2:40:d7:1f:6a:59:f0:e3:db:ce:f6:60:3e:1f:89:c9:69:b5: c1:1d:f6:09:68:27:5d:f1:25:f1:cb:13:6c:99:c7:37:b8:27: f2:c5:f2:15:0f:f9:73:83:18:c6:1c:67:fb:69:cc:c8:d1:09: 64:e0:85:2d:ca:d9:91:ad:64:e8:e8:4b:d2:ad:7c:68:f6:76: 61:91:bc:2e:56:eb:de:58:26:f5:ff:ff:41:d1:1c:e2:e5:6b: 7a:96:4e:a1 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgIUahBiY/iBM2Fbfo00ZsGSzsCQTy0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMTRFNzUwMDAwMTEwLwYDVQQFEyg1QTE3OTY0OEIz RUYyMzY5RENFN0JEQjU4MTQwRkY3REM3MDYwQUJGMB4XDTI2MDMxOTE5NTMwMFoX DTI3MDMxODE5NTgwMFowMzExMC8GA1UEAxMoOUZFOUI0QzMwOTAyMDZENUIyOENF RDRGNTE3OTUzOUY2OThBREI5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKWRW/cydLF0st+KYnk7IjsQ6H035Z4UMCc+gQ3THwdjPTkif5kGrmZFB2kK 1u/gDTt8+qLWrvkth5o9ZKkJqDydCCyY0Noc3/326xVuycpn4JnkiFzDZ32t4l1s Ow9dKVlbyfpSI15LaFPl97hVpBIz2G5UKaFE/dc3aQ56mYjxeBCin5MVBeVDdkWK WZM/Mf+gjG86v/IPaMu6AdyiwxN8KTAlgpsqzwZc5i558fZio0586chWbCJKjkzK tTVPH5ukUlKhqYD5kZIFxhxIcGhkA4FAwO/k5roxMauPe1E9v67oTw4UCY5UeiMQ TxtTvg+n46pbe3Qf10gChhp9FvkCAwEAAaOCAp8wggKbMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ/ptMMJAgbVsoztT1F5U59pituRMB8GA1UdIwQYMBaAFFoX lkiz7yNp3Oe9tYFA/33HBgq/MA4GA1UdDwEB/wQEAwIBBjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Nha3V5YS5uYXQubW9lL3JlcG8vTkFUT0NBLzEvNUExNzk2 NDhCM0VGMjM2OURDRTdCREI1ODE0MEZGN0RDNzA2MEFCRi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvV2hlV1NMUHZJ Mm5jNTcyMWdVRF9mY2NHQ3I4LmNlcjCB+gYIKwYBBQUHAQsEge0wgeowPQYIKwYB BQUHMAWGMXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8vbW5paHlj LXJwa2kvMS8waQYIKwYBBQUHMAqGXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMu Y29tL3JlcG8vbW5paHljLXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1 MTc5NTM5RjY5OEFEQjkxLm1mdDA+BggrBgEFBQcwDYYyaHR0cHM6Ly9ycGtpLXJy ZHAubW5paHljLmNvbS9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACQGREDg MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwImijANBgkqhkiG9w0BAQsFAAOCAQEA cG41dOlSLaRpkS5WfLCazE6ZHJ3nzTWewdn6JPtKSUFy3KVR7sxDbJM6+RpU84BB q/Cp1L57Sop4a4ikZPSLR3/kI7RxQMuyVYPW2kXQWzozOAxZN73YPmmXIjRm/1YN UOu5uHWLh5f9ETXZeNoJE/FsvcmgY8Ql5/qRe+WHMzsYD5+tdIE3Qb9lYhzi43X3 uz8J6TZXxKSTkkqSSSvYb9BE4kDXH2pZ8OPbzvZgPh+JyWm1wR32CWgnXfEl8csT bJnHN7gn8sXyFQ/5c4MYxhxn+2nMyNEJZOCFLcrZka1k6OhL0q18aPZ2YZG8Llbr 3lgm9f//QdEc4uVrepZOoQ== -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:06 2026 by rpki-client