Manifest

$ rpki-client -vvvf rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
File:                     9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft (raw, json)
Hash identifier:          NF8sjLo/i+yl/LK0l7i5pV/u3jYPnoEWSZ7OS3Mr/AI=
Subject key identifier:   41:36:A4:EA:32:3C:33:1C:79:06:9D:09:E4:1B:29:D7:35:7E:33:D5
Authority key identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91
Certificate issuer:       /CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
Certificate serial:       1633783EC9143480B21B7BBD0B41D4647B1EF665
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
Subject info access:      rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
Manifest number:          04C4
Signing time:             Thu 24 Sep 2026 02:53:18 +0000
Manifest this update:     Thu 24 Sep 2026 02:48:18 +0000
Manifest next update:     Fri 25 Sep 2026 05:08:18 +0000
Files and hashes:         1: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl (hash: JIq1iVoYGrQ6azdK2O0kdiPvaHvIpuFWYY71K0MBJ38=)
                          2: 323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa (hash: cB9Zwjx3Hi9b0UOooFxL64n4CFupbZ1thBhMYsT2yH0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl
                          rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 05:08:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:33:78:3e:c9:14:34:80:b2:1b:7b:bd:0b:41:d4:64:7b:1e:f6:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
        Validity
            Not Before: Sep 24 02:48:18 2026 GMT
            Not After : Sep 25 05:08:18 2026 GMT
        Subject: CN=4136A4EA323C331C79069D09E41B29D7357E33D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b2:f2:0e:eb:88:a3:43:90:3b:29:18:ff:a6:
                    72:d7:13:7b:0a:bd:a2:d0:20:5f:50:c2:b4:5a:29:
                    b0:87:68:ef:d3:6a:ce:ec:4e:44:02:43:5c:2a:cd:
                    00:bd:7d:b4:b3:e0:d4:5d:7a:ad:04:43:7e:39:cb:
                    01:ae:ec:09:22:a6:b3:01:7f:54:d2:24:c9:4d:cf:
                    69:d4:a0:af:78:7d:25:c9:b1:3e:a6:28:77:dd:1b:
                    4e:cc:ed:ba:e2:b5:21:2a:22:b4:e2:d9:ce:29:bd:
                    84:64:b7:c4:74:30:c2:d0:e1:85:d8:14:f9:92:36:
                    c4:0e:d0:a7:c9:2b:d0:6c:68:ee:34:73:57:c3:0a:
                    17:54:31:9b:a2:19:9d:9e:63:6c:59:4e:45:84:1f:
                    43:7a:a5:39:3c:c2:1f:c5:9c:fd:0d:4b:a6:02:83:
                    e9:49:5c:4e:e2:ee:3b:3e:5c:08:cb:69:68:12:93:
                    47:0a:20:92:33:55:db:5d:5d:71:70:d4:d7:31:0f:
                    70:04:21:ea:a7:d3:62:8c:a8:cf:fe:6b:c7:2b:a6:
                    f4:20:21:69:5b:64:1d:4b:73:18:be:93:22:ff:b1:
                    80:6a:21:f3:1d:fc:c9:5f:6e:9b:b6:38:ca:23:fd:
                    7c:72:ea:23:7f:91:d6:4b:99:b5:cc:50:b6:d0:36:
                    7c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:36:A4:EA:32:3C:33:1C:79:06:9D:09:E4:1B:29:D7:35:7E:33:D5
            X509v3 Authority Key Identifier:
                keyid:9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:14:53:39:fa:9f:ce:4b:ee:a3:69:d7:e9:3f:8a:c7:a4:59:
         cf:02:f2:3d:9d:8c:bc:88:87:a4:f2:e3:e2:4a:a4:d7:80:6e:
         76:93:57:aa:18:36:5e:c6:f2:0a:4f:ef:27:d5:81:a9:2c:d1:
         f6:46:2c:bb:0d:fc:8d:52:cf:3e:e6:04:46:f4:4a:53:2c:07:
         8c:39:8d:fd:78:c2:b4:7c:78:d8:f8:9f:11:a8:b1:d1:8d:39:
         5e:d9:71:54:d2:aa:7d:25:a2:02:60:33:10:bd:12:42:b5:61:
         b2:28:72:a6:cf:fb:df:2d:d6:97:93:05:0c:fa:4a:47:6a:f9:
         31:75:48:c1:d4:67:64:1a:ac:b4:57:68:8f:d6:b4:66:1d:77:
         1c:d3:4e:8d:6c:7e:b9:c5:2f:7d:5f:86:b8:25:a7:84:72:2e:
         f5:94:3a:fe:30:be:4f:42:23:ce:20:ad:46:f9:79:66:10:33:
         66:f4:3b:67:c7:24:79:fb:a2:76:83:48:68:7a:9b:92:8a:9c:
         98:34:22:fb:44:89:cc:b1:9e:c6:f1:f5:e5:c2:74:f0:af:c0:
         c3:29:29:e9:33:93:df:17:fb:1c:a0:6a:09:0f:b1:da:c1:d2:
         09:ac:f0:aa:50:4f:6d:b2:ab:c8:46:af:ea:6e:f5:11:30:d9:
         ca:21:5d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:52:11 2026 by rpki-client