Manifest
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: FtTrLW4GyAdI3ODp9ZAANQrjlCyPEJNA1S4BKvB2ih0=
Subject key identifier: 71:DD:74:08:A1:77:C7:F9:91:02:EA:C4:35:FB:01:BD:84:99:A8:A0
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 347CBDC5F4B9D578EE289D1729424013CC7049BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0B1E
Signing time: Fri 25 Jul 2025 22:46:00 +0000
Manifest this update: Fri 25 Jul 2025 22:41:00 +0000
Manifest next update: Sat 26 Jul 2025 22:46:00 +0000
Files and hashes: 1: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: +PK+2ddEa5BB/3aWwxTC66OGczoNlFf7WG2txXPTmsE=)
2: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: /jBviPSFdFKZh4Pbl7qtj9AMKAzv67R3Ny4r/CA/pdU=)
3: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: L9SKOfzlWCbf3ZEfwVUoxYt9hsBGjULfYjAnC6NGFMc=)
4: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: lOH37mNZ7GeDqNovMClGKLJ0pYQzmLTzievvpRu1ycw=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Jul 2025 22:46:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:7c:bd:c5:f4:b9:d5:78:ee:28:9d:17:29:42:40:13:cc:70:49:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Jul 25 22:41:00 2025 GMT
Not After : Aug 1 22:46:00 2025 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ad:ed:21:11:c4:76:29:db:6d:51:3d:21:96:
04:2f:cc:25:bb:08:ae:82:69:40:3c:fa:52:82:a2:
3d:36:a2:6a:d9:dd:7d:ba:8f:49:9f:3d:bd:5f:ad:
40:c4:1d:28:2e:95:47:a5:65:87:47:7a:15:a6:38:
43:64:95:22:e8:dd:76:19:cf:2d:20:f8:71:62:84:
8c:0e:4d:de:df:fb:68:ae:8a:14:6c:6e:71:bd:c5:
e0:e9:b7:27:d4:d2:27:24:f7:31:ad:2a:7d:b5:12:
4e:51:ba:dc:8b:47:14:55:8b:3f:f3:72:b0:72:f1:
62:36:16:f3:28:0d:32:d2:44:5d:ba:b1:a8:f1:80:
cf:98:3f:20:96:f8:98:aa:f5:5f:3d:58:ed:77:b7:
b1:14:c9:e9:8d:18:e4:d9:58:21:c4:8b:ea:9e:24:
f4:98:8b:09:f1:38:22:df:a2:65:0b:91:48:d2:c9:
27:0d:7b:3e:5d:b6:09:bc:27:73:ff:7c:07:c5:b2:
72:59:18:26:6e:58:58:d2:82:3e:ad:78:52:52:02:
6a:8e:9d:be:ef:a4:21:5c:aa:1d:14:db:1d:82:a2:
eb:a6:5f:c1:4a:ef:7c:34:83:77:69:42:96:85:39:
ed:f8:00:02:eb:3f:0e:2f:1b:4f:f0:a4:99:33:5e:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DD:74:08:A1:77:C7:F9:91:02:EA:C4:35:FB:01:BD:84:99:A8:A0
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fa:ec:73:d5:f5:d3:58:d8:75:80:fb:9c:a5:82:3c:d0:87:
31:a7:1f:2e:6a:38:33:3f:b9:19:37:a8:ec:a9:52:fc:be:53:
0f:df:62:d4:5f:07:b7:20:99:03:69:3e:60:12:3b:9e:c4:bc:
86:e7:a0:96:24:f2:51:d1:e6:77:45:7f:18:8a:f4:a0:f2:f0:
f8:b6:e7:14:b4:6a:43:95:de:fc:56:e0:d7:35:e2:2c:70:b3:
43:56:55:4b:e8:9e:e8:f7:b6:9d:ca:7c:95:a6:18:c2:2b:13:
0c:7c:26:02:bd:44:c5:fa:2d:11:29:6a:49:da:85:db:df:6d:
df:5a:ac:ae:bc:9b:32:eb:9e:e9:d3:28:20:97:1c:ce:6c:d3:
ad:a6:c0:8d:7f:94:87:f7:e0:a6:88:30:36:38:24:f5:63:95:
cb:af:18:fe:e5:05:cb:51:da:9c:26:c1:47:39:71:de:d0:39:
e0:02:14:93:ee:80:35:29:70:d1:a9:e9:81:59:7d:13:86:f6:
de:45:3d:46:5f:11:db:38:9b:14:c3:ea:94:9d:6a:54:79:b8:
3e:8b:2e:b2:3e:98:26:a7:42:af:f7:c1:6b:97:20:e1:cc:97:
c3:f8:e2:a7:54:5d:bd:61:2c:b8:2b:cf:fd:a7:18:56:c1:a4:
9e:ba:25:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:53:56 2025 by rpki-client