$ rpki-client -vvf rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft File: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft (raw, json) Hash identifier: sOlVqG1RMhTuijXEbIp/XinbQ4GD0wkPrWRWnS7u3z4= Subject key identifier: F5:17:D8:75:9A:EB:F0:BC:49:FA:79:B9:C9:FE:FC:41:3D:51:6E:9E Authority key identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91 Certificate issuer: /CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91 Certificate serial: 72AEB524AACCC814F732994BDC8EB4986024BA81 Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer Subject info access: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft Manifest number: 0380 Signing time: Tue 08 Apr 2025 16:57:17 +0000 Manifest this update: Tue 08 Apr 2025 16:52:17 +0000 Manifest next update: Wed 09 Apr 2025 18:55:17 +0000 Files and hashes: 1: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl (hash: uv2tnvGlSFAegO8dZ5RjetwST8OFwW6bQrmtlpc1Ctc=) 2: 323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa (hash: 3htjqrkOETtvCBkOdiBEFlIBWqUdmw7gxdOiciCi4Ik=) Validation: OK Signature path: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 14:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ae:b5:24:aa:cc:c8:14:f7:32:99:4b:dc:8e:b4:98:60:24:ba:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91 Validity Not Before: Apr 8 16:52:17 2025 GMT Not After : Apr 9 18:55:17 2025 GMT Subject: CN=F517D8759AEBF0BC49FA79B9C9FEFC413D516E9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a6:5e:a3:b6:27:32:1e:a8:21:3e:f3:b2:cf: 7a:ee:42:06:b5:05:6b:6d:5e:5f:00:13:d1:51:b5: 87:14:1a:96:c5:26:ce:0a:fe:f6:bc:71:04:6f:aa: 66:82:70:f1:60:e8:b6:24:b7:67:86:89:a8:2c:7d: 36:c2:20:ee:b2:65:ce:7d:bd:b0:3d:d4:71:4b:2e: fc:dc:37:ef:e9:f9:48:58:5b:43:09:9f:e8:90:1d: da:d4:07:e8:cf:51:5a:9e:13:c5:30:74:2b:59:af: d8:07:79:df:39:3e:3e:71:36:ae:f3:32:be:57:33: 04:09:a8:d5:6c:f1:1f:1e:eb:10:25:59:d2:5f:26: e7:34:ad:b7:27:42:1a:da:a8:d8:88:8c:4c:5e:a7: d3:a2:d8:5e:64:a3:cb:b1:1d:cd:94:b0:ba:7c:3f: 2e:17:e1:71:9d:ff:02:a4:97:31:04:e8:f8:d0:2b: 2c:a2:75:cb:4e:18:50:10:27:d7:85:a7:9c:43:0d: 2c:0b:cb:e8:db:d2:50:ad:b5:5c:f9:c3:28:f2:ff: e9:ac:8f:d6:31:d9:61:7c:bd:03:fe:ad:b5:7f:32: d5:9e:12:19:6e:53:82:68:56:90:0e:49:01:66:c1: 04:f2:0a:58:62:fe:41:5a:32:4f:f7:71:5d:eb:1f: e1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:17:D8:75:9A:EB:F0:BC:49:FA:79:B9:C9:FE:FC:41:3D:51:6E:9E X509v3 Authority Key Identifier: keyid:9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:59:68:40:ea:d4:8c:c8:a7:9f:ef:37:91:2c:fe:45:b9:5f: 16:28:d4:63:38:60:40:17:91:cc:42:c2:49:30:c7:3f:69:66: bc:77:d3:18:26:e5:fe:fb:4a:c4:e7:04:59:91:9c:1c:b6:5a: 9e:c5:fa:0a:eb:74:fc:48:7e:ef:e8:d4:de:9d:f6:5c:b4:af: 8c:0d:40:bf:4d:2b:5f:5d:26:ed:68:3d:e4:0d:20:f1:3b:73: 50:a4:a9:6a:bd:cd:e2:6e:2e:de:93:5d:c3:1b:0b:7e:25:32: a6:40:c0:52:e8:9f:fb:ef:49:a1:82:8f:0c:8c:28:07:7d:3e: 9e:ef:04:00:9f:5f:34:81:2b:df:91:f7:6d:83:37:9c:57:a4: 3a:87:3f:ea:c9:51:99:59:92:5b:75:a1:30:ad:50:17:00:37: 57:67:a6:18:ea:95:1e:5f:5b:2c:ae:9d:4b:18:c4:08:05:a5: db:b2:d7:9e:b3:31:2c:da:0b:72:f3:ce:d7:31:17:5d:4e:41: 7f:77:99:fa:c7:fb:23:be:11:64:ef:38:1a:0d:3e:f5:5d:09: 3e:d9:4d:ca:42:87:5b:a9:4e:39:7e:b1:eb:06:70:b9:6c:a9: 10:38:da:e7:ea:40:ee:89:f2:43:a4:ac:7e:fa:4e:65:f1:af: de:02:83:81 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgIUcq61JKrMyBT3MplL3I60mGAkuoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFOUI0QzMwOTAyMDZENUIyOENFRDRGNTE3OTUzOUY2 OThBREI5MTAeFw0yNTA0MDgxNjUyMTdaFw0yNTA0MDkxODU1MTdaMDMxMTAvBgNV BAMTKEY1MTdEODc1OUFFQkYwQkM0OUZBNzlCOUM5RkVGQzQxM0Q1MTZFOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUpl6jticyHqghPvOyz3ruQga1 BWttXl8AE9FRtYcUGpbFJs4K/va8cQRvqmaCcPFg6LYkt2eGiagsfTbCIO6yZc59 vbA91HFLLvzcN+/p+UhYW0MJn+iQHdrUB+jPUVqeE8UwdCtZr9gHed85Pj5xNq7z Mr5XMwQJqNVs8R8e6xAlWdJfJuc0rbcnQhraqNiIjExep9Oi2F5ko8uxHc2UsLp8 Py4X4XGd/wKklzEE6PjQKyyidctOGFAQJ9eFp5xDDSwLy+jb0lCttVz5wyjy/+ms j9Yx2WF8vQP+rbV/MtWeEhluU4JoVpAOSQFmwQTyClhi/kFaMk/3cV3rH+F9AgMB AAGjggICMIIB/jAdBgNVHQ4EFgQU9RfYdZrr8LxJ+nm5yf78QT1Rbp4wHwYDVR0j BBgwFoAUn+m0wwkCBtWyjO1PUXlTn2mK25EwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8v bW5paHljLXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1MTc5NTM5RjY5 OEFEQjkxLmNybDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8v c2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS85RkU5QjRDMzA5MDIwNkQ1QjI4 Q0VENEY1MTc5NTM5RjY5OEFEQjkxLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYB BQUHMAuGXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8vbW5paHlj LXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1MTc5NTM5RjY5OEFEQjkx Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEARlloQOrUjMinn+83kSz+RblfFijUYzhgQBeRzELCSTDHP2lm vHfTGCbl/vtKxOcEWZGcHLZansX6Cut0/Eh+7+jU3p32XLSvjA1Av00rX10m7Wg9 5A0g8TtzUKSpar3N4m4u3pNdwxsLfiUypkDAUuif++9JoYKPDIwoB30+nu8EAJ9f NIEr35H3bYM3nFekOoc/6slRmVmSW3WhMK1QFwA3V2emGOqVHl9bLK6dSxjECAWl 27LXnrMxLNoLcvPO1zEXXU5Bf3eZ+sf7I74RZO84Gg0+9V0JPtlNykKHW6lOOX6x 6wZwuWypEDja5+pA7onyQ6SsfvpOZfGv3gKDgQ== -----END CERTIFICATE-----Generated at Wed Apr 9 01:35:49 2025 by rpki-client