$ rpki-client -vvf rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft File: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft (raw, json) Hash identifier: ZgHdc65NZWHrOpZ2yA2cKPPYwRkzlvQGDqNgr6TE65M= Subject key identifier: 05:D7:DA:B5:9B:DF:17:46:55:B8:EF:02:86:8D:A1:C9:34:A7:1E:43 Authority key identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91 Certificate issuer: /CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91 Certificate serial: 45872452CC12AC3821F8E351DA2CD845101FC26D Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer Subject info access: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft Manifest number: 0450 Signing time: Thu 11 Sep 2025 04:03:35 +0000 Manifest this update: Thu 11 Sep 2025 03:58:35 +0000 Manifest next update: Fri 12 Sep 2025 05:00:35 +0000 Files and hashes: 1: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl (hash: jb2gmsUB+ygmvkP+KCA6lijyTJyF+QO6VfPaSFsd9oU=) 2: 323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa (hash: NOwi2jYQ8FHV+5iFygC9Tyw/h3+CkwWSkGkdIOKT9Zg=) Validation: OK Signature path: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:87:24:52:cc:12:ac:38:21:f8:e3:51:da:2c:d8:45:10:1f:c2:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91 Validity Not Before: Sep 11 03:58:35 2025 GMT Not After : Sep 12 05:00:35 2025 GMT Subject: CN=05D7DAB59BDF174655B8EF02868DA1C934A71E43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9a:15:5d:23:34:9d:24:13:db:81:55:af:e3: a7:50:94:26:f1:96:53:2c:fa:43:50:aa:53:3e:e4: a3:d6:09:7e:61:7c:6c:1c:21:36:3d:3a:c8:34:1b: 45:b4:9e:41:bc:23:1d:71:db:8e:54:56:0c:9a:72: 5e:55:0f:05:fa:68:4b:0a:34:d4:93:5f:49:75:93: b5:44:6d:d8:c2:b7:d0:6c:56:69:bf:06:8d:09:c7: f3:72:d5:03:ab:7b:a1:db:cd:36:ad:37:cb:7e:fe: 0e:43:db:f4:d8:e4:5d:cd:4e:26:8f:d4:78:a5:45: 5f:35:ed:84:ed:09:f5:d2:8c:dc:db:62:19:7d:28: ae:27:92:33:22:e1:06:03:2b:ac:3e:22:7b:5d:c2: 2c:5d:4d:ce:9f:a3:87:b1:90:5b:c3:fa:95:c8:23: 0a:72:49:63:a9:65:2e:2e:97:d2:5c:17:76:28:c0: f6:02:c9:94:1b:9e:24:69:04:51:6c:09:8f:19:da: d1:96:70:79:96:60:e9:a2:5d:57:16:47:37:1d:c8: c1:5c:10:1e:5b:fa:c5:6c:f9:22:df:2f:14:d1:4a: d2:db:71:c2:c0:b7:38:69:da:ef:c2:38:f6:41:ab: 8c:51:17:2d:a6:9b:f9:c2:b1:6a:f7:9b:3b:74:0f: 4b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D7:DA:B5:9B:DF:17:46:55:B8:EF:02:86:8D:A1:C9:34:A7:1E:43 X509v3 Authority Key Identifier: keyid:9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:ae:3a:e0:35:cc:eb:f4:31:cd:62:fe:bd:44:4e:a2:6c:51: 21:dd:2a:a6:53:31:07:14:7f:2c:c0:98:f8:1b:33:48:ad:aa: 60:ad:c6:6d:8b:80:73:60:2f:7d:09:65:87:22:a1:9e:44:0e: 0c:f2:81:00:6f:52:82:ba:db:cf:e0:b6:17:8f:19:7a:48:e7: 80:cb:38:de:5f:99:5d:eb:b6:03:33:b1:1a:48:8f:70:29:76: 9d:78:7f:01:2c:e5:60:73:5c:f1:88:4c:e9:b9:08:ed:31:a1: db:3d:c7:21:90:d6:c9:80:a3:7e:d3:a7:90:f9:02:38:da:56: 44:73:73:c4:3e:14:f5:d7:2c:17:20:fe:2e:b4:46:83:a1:87: b8:94:53:b8:a5:a7:47:76:68:6a:6f:ad:75:0e:64:9e:ba:62: 53:54:93:cd:be:45:cb:49:ff:f7:4b:39:a8:7f:dd:53:96:a1: f8:7d:9a:27:9d:fe:86:85:2e:bc:0c:0e:a3:27:b3:9a:82:6d: d3:3d:c2:00:ce:9d:70:83:82:19:37:79:7b:35:a8:81:ca:56: e6:77:27:d5:20:d7:9c:93:aa:70:46:c5:46:5f:76:36:be:db: 06:05:90:d8:d4:fc:36:67:f2:0c:18:c2:52:26:4d:59:e5:ef: ff:0a:6c:0e -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgIURYckUswSrDgh+ONR2izYRRAfwm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFOUI0QzMwOTAyMDZENUIyOENFRDRGNTE3OTUzOUY2 OThBREI5MTAeFw0yNTA5MTEwMzU4MzVaFw0yNTA5MTIwNTAwMzVaMDMxMTAvBgNV BAMTKDA1RDdEQUI1OUJERjE3NDY1NUI4RUYwMjg2OERBMUM5MzRBNzFFNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpmhVdIzSdJBPbgVWv46dQlCbx llMs+kNQqlM+5KPWCX5hfGwcITY9Osg0G0W0nkG8Ix1x245UVgyacl5VDwX6aEsK NNSTX0l1k7VEbdjCt9BsVmm/Bo0Jx/Ny1QOre6HbzTatN8t+/g5D2/TY5F3NTiaP 1HilRV817YTtCfXSjNzbYhl9KK4nkjMi4QYDK6w+IntdwixdTc6fo4exkFvD+pXI IwpySWOpZS4ul9JcF3YowPYCyZQbniRpBFFsCY8Z2tGWcHmWYOmiXVcWRzcdyMFc EB5b+sVs+SLfLxTRStLbccLAtzhp2u/COPZBq4xRFy2mm/nCsWr3mzt0D0v3AgMB AAGjggICMIIB/jAdBgNVHQ4EFgQUBdfatZvfF0ZVuO8Cho2hyTSnHkMwHwYDVR0j BBgwFoAUn+m0wwkCBtWyjO1PUXlTn2mK25EwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8v bW5paHljLXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1MTc5NTM5RjY5 OEFEQjkxLmNybDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8v c2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS85RkU5QjRDMzA5MDIwNkQ1QjI4 Q0VENEY1MTc5NTM5RjY5OEFEQjkxLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYB BQUHMAuGXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8vbW5paHlj LXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1MTc5NTM5RjY5OEFEQjkx Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAk6464DXM6/QxzWL+vUROomxRId0qplMxBxR/LMCY+BszSK2q YK3GbYuAc2AvfQllhyKhnkQODPKBAG9Sgrrbz+C2F48ZekjngMs43l+ZXeu2AzOx GkiPcCl2nXh/ASzlYHNc8YhM6bkI7TGh2z3HIZDWyYCjftOnkPkCONpWRHNzxD4U 9dcsFyD+LrRGg6GHuJRTuKWnR3Zoam+tdQ5knrpiU1STzb5Fy0n/90s5qH/dU5ah +H2aJ53+hoUuvAwOoyezmoJt0z3CAM6dcIOCGTd5ezWogcpW5ncn1SDXnJOqcEbF Rl92Nr7bBgWQ2NT8NmfyDBjCUiZNWeXv/wpsDg== -----END CERTIFICATE-----Generated at Thu Sep 11 14:23:36 2025 by rpki-client