Manifest

$ rpki-client -vvf rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
File:                     9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft (raw, json)
Hash identifier:          7w9K8nucLW2d+aai7Bxtbt9ukT3VzSDnnNGqJ4rhJOs=
Subject key identifier:   79:31:1D:8C:22:F5:5A:BA:DC:50:D8:63:42:B4:B9:15:80:D2:75:85
Authority key identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91
Certificate issuer:       /CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
Certificate serial:       5F999DF36F8360D53F532F5B68DC847122CC8390
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
Subject info access:      rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
Manifest number:          0412
Signing time:             Sat 26 Jul 2025 04:52:32 +0000
Manifest this update:     Sat 26 Jul 2025 04:47:32 +0000
Manifest next update:     Sun 27 Jul 2025 07:12:32 +0000
Files and hashes:         1: 323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa (hash: NOwi2jYQ8FHV+5iFygC9Tyw/h3+CkwWSkGkdIOKT9Zg=)
                          2: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl (hash: fwN1pu8jAwrfpARlq05zGnkNwmjyR9HJFn2kpKLl0Hk=)
Validation:               OK
Signature path:           rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl
                          rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 07:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:99:9d:f3:6f:83:60:d5:3f:53:2f:5b:68:dc:84:71:22:cc:83:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
        Validity
            Not Before: Jul 26 04:47:32 2025 GMT
            Not After : Jul 27 07:12:32 2025 GMT
        Subject: CN=79311D8C22F55ABADC50D86342B4B91580D27585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:08:73:26:78:9b:fb:17:c8:21:0d:d8:8e:18:
                    92:5c:81:54:6a:71:44:df:1f:b8:a2:b5:56:44:b0:
                    88:95:db:9f:51:06:44:41:3e:c3:ea:2a:ef:2b:f4:
                    95:3c:b4:49:41:d2:10:e4:68:8c:c8:c3:53:fa:93:
                    ea:8d:d3:1d:2e:25:3b:24:5d:9d:42:e8:7c:b3:39:
                    b4:9f:59:a7:f5:47:3f:e2:8e:72:c7:13:cd:f0:4c:
                    06:ad:00:7a:fd:4c:b5:fd:3b:91:08:60:cf:1b:69:
                    6f:7a:f3:6f:0c:57:e2:81:83:24:9f:39:e3:4e:06:
                    74:cc:d8:5d:88:88:85:a4:ea:e9:4e:9f:c7:17:d4:
                    0e:d3:f0:ed:05:5e:cd:83:bd:b8:80:8d:53:bd:30:
                    28:5f:e1:d0:2f:7d:87:41:2d:d2:62:55:2d:ae:0f:
                    cc:0e:bc:6e:70:3a:87:10:fd:db:ff:85:25:03:f7:
                    ed:f3:23:4b:e3:79:52:cf:2f:d3:d3:25:1a:94:1d:
                    c4:70:ee:8c:c8:e6:e8:b4:09:52:1f:f0:a2:ea:2d:
                    38:d6:71:32:e8:a4:c1:cc:21:b5:08:9c:0e:a1:f6:
                    ac:80:aa:d0:1e:74:b2:b9:61:dc:2e:c1:05:2b:5f:
                    1d:87:7a:40:c5:48:db:85:8c:37:59:d6:8c:b3:13:
                    f4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:31:1D:8C:22:F5:5A:BA:DC:50:D8:63:42:B4:B9:15:80:D2:75:85
            X509v3 Authority Key Identifier:
                keyid:9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:94:46:28:b0:6d:dd:54:83:6d:67:9a:72:1c:80:db:a6:b8:
         ea:fa:40:13:13:5f:c3:eb:d1:16:d4:6e:11:85:c4:a7:00:57:
         3e:5f:60:e1:3a:55:ea:e6:4d:86:79:99:ca:4d:46:a2:39:b5:
         ca:86:81:f4:9f:01:9e:02:28:9c:a1:d4:ed:06:1c:cd:93:c3:
         8b:d9:77:70:4d:64:2a:c9:71:9a:30:47:97:c3:52:b7:0b:c2:
         5e:db:83:95:08:95:cf:3c:a2:de:2a:e5:72:c7:3c:aa:9f:9e:
         52:9a:2e:35:44:31:12:a5:fd:b9:7d:39:4d:82:f4:22:e8:5d:
         a1:df:2a:87:5e:f0:2b:24:9f:ef:3e:10:4e:28:3d:7a:5e:b1:
         6b:80:7a:92:87:5a:a4:f7:4e:7b:50:8e:d1:f9:1b:8a:51:22:
         56:af:47:fb:1e:0a:93:fe:36:de:41:59:a9:45:9c:15:1c:2d:
         d6:1a:4d:9b:98:fb:f3:fb:f3:3c:8d:6c:da:7e:a0:1a:31:b7:
         d6:75:de:5c:01:59:5b:8c:92:a8:27:48:59:8e:2e:5b:ff:e6:
         a4:b8:28:83:28:a4:87:fe:1f:bb:8c:8f:a8:81:1f:2a:e3:f6:
         f5:b4:7d:c3:5c:1d:5a:3a:9a:2c:6c:bf:2a:93:d2:4e:b8:06:
         78:6d:6f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:09:35 2025 by rpki-client