$ rpki-client -vvf rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft File: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft (raw, json) Hash identifier: DZZeN0QRhr92npAQO9V2L8nlmXGBmYY+IveiaYkZq2I= Subject key identifier: 4F:67:82:00:35:01:5F:D5:58:23:85:DF:08:BF:C0:34:BD:B1:81:A5 Authority key identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91 Certificate issuer: /CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91 Certificate serial: 6145D1560B22D3D3A6375FB4342C7FB02916E0F4 Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer Subject info access: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft Manifest number: 02CC Signing time: Mon 25 Nov 2024 02:16:52 +0000 Manifest this update: Mon 25 Nov 2024 02:11:52 +0000 Manifest next update: Tue 26 Nov 2024 05:41:52 +0000 Files and hashes: 1: 323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa (hash: 3htjqrkOETtvCBkOdiBEFlIBWqUdmw7gxdOiciCi4Ik=) 2: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl (hash: y4YGtHNVABlwIf7wy9Vbd79adsZoRbUu6OvIumOgWz8=) Validation: OK Signature path: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Nov 2024 12:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:45:d1:56:0b:22:d3:d3:a6:37:5f:b4:34:2c:7f:b0:29:16:e0:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91 Validity Not Before: Nov 25 02:11:52 2024 GMT Not After : Nov 26 05:41:52 2024 GMT Subject: CN=4F67820035015FD5582385DF08BFC034BDB181A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:06:a1:0b:a9:31:63:61:5e:bf:46:df:fd:88: af:fd:a6:25:dd:0b:16:8c:68:db:1b:88:9b:0a:f9: a0:32:ee:1f:4f:2b:96:3a:b4:75:47:25:7d:00:ed: d4:4d:5f:5e:e1:ef:2f:5f:f6:f7:3b:f7:05:8f:db: 6c:e3:d6:cf:18:06:02:d9:25:93:4e:a1:7c:a4:48: 47:85:53:bd:11:aa:c1:1a:45:dc:3d:c6:7f:98:c0: e3:cd:84:96:05:82:1e:21:dc:f9:74:de:34:a8:e3: 05:86:9b:89:6e:e9:b7:73:2d:15:80:8e:93:39:03: d7:63:be:92:cf:03:35:dc:bd:82:36:e0:70:ac:22: 17:ab:79:7f:c8:7f:1f:b1:15:c5:52:ea:a7:fc:c0: fa:a3:cb:10:b5:de:28:6f:84:1c:7d:76:2b:c6:99: 9a:20:f8:48:b8:7d:bc:cd:d4:7f:d3:17:27:1c:ef: 7d:1e:c6:86:3c:50:76:23:e4:2a:ab:1c:40:64:22: 24:41:2e:0e:31:9d:33:08:f8:ab:7b:74:1b:4d:74: 7a:13:96:b7:73:03:c3:17:85:a2:c6:6e:8c:89:00: 84:0d:17:8c:fd:b8:d6:a1:47:27:85:a0:19:d7:3a: e7:81:6f:f4:81:9d:bc:03:e1:a7:0d:ce:36:c1:67: ab:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:67:82:00:35:01:5F:D5:58:23:85:DF:08:BF:C0:34:BD:B1:81:A5 X509v3 Authority Key Identifier: keyid:9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:59:82:f4:15:40:e6:33:61:ad:50:68:fd:60:f9:dd:a9:6c: ce:34:49:80:f8:8b:08:3a:ae:f5:58:d3:42:8c:56:39:2e:ff: 39:b7:d2:e5:fd:af:06:e1:da:2a:c1:09:2a:92:5f:0a:fe:cc: cf:de:6b:13:3d:cb:8a:8a:d4:72:48:8b:cd:a0:67:92:d2:2f: 31:c2:e7:a6:ab:03:87:be:f7:78:8f:2b:1a:7e:a7:85:c1:02: 28:d3:47:1b:31:c4:2c:22:97:34:ba:fc:b6:3b:a7:dc:10:8a: 81:a6:fd:8d:4f:5d:b0:d4:6c:7e:a4:d4:9c:13:92:8c:aa:9d: 75:64:1c:0b:87:bc:a3:ce:24:a9:bb:1d:39:b7:13:da:14:10: 83:13:b0:a1:3b:e2:c4:90:60:a4:15:37:db:45:6b:54:17:e7: bb:62:11:a5:5e:86:89:e3:9b:ba:a4:1c:a6:86:17:67:63:e4: dd:4b:56:61:ca:42:6d:7d:4b:b2:95:f0:7b:c2:b2:59:17:5d: e2:76:a4:a0:d3:cd:e6:db:28:ee:18:5e:d5:f4:4f:49:34:a4: b7:80:bf:b4:cd:9e:91:7b:dd:bd:8e:d0:61:27:a0:f9:a8:05: 9b:3b:89:76:8a:86:4c:ff:90:a7:fd:a5:90:c0:b1:e2:01:ca: ff:9a:38:14 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgIUYUXRVgsi09OmN1+0NCx/sCkW4PQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFOUI0QzMwOTAyMDZENUIyOENFRDRGNTE3OTUzOUY2 OThBREI5MTAeFw0yNDExMjUwMjExNTJaFw0yNDExMjYwNTQxNTJaMDMxMTAvBgNV BAMTKDRGNjc4MjAwMzUwMTVGRDU1ODIzODVERjA4QkZDMDM0QkRCMTgxQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOBqELqTFjYV6/Rt/9iK/9piXd CxaMaNsbiJsK+aAy7h9PK5Y6tHVHJX0A7dRNX17h7y9f9vc79wWP22zj1s8YBgLZ JZNOoXykSEeFU70RqsEaRdw9xn+YwOPNhJYFgh4h3Pl03jSo4wWGm4lu6bdzLRWA jpM5A9djvpLPAzXcvYI24HCsIhereX/Ifx+xFcVS6qf8wPqjyxC13ihvhBx9divG mZog+Ei4fbzN1H/TFycc730exoY8UHYj5CqrHEBkIiRBLg4xnTMI+Kt7dBtNdHoT lrdzA8MXhaLGboyJAIQNF4z9uNahRyeFoBnXOueBb/SBnbwD4acNzjbBZ6uhAgMB AAGjggICMIIB/jAdBgNVHQ4EFgQUT2eCADUBX9VYI4XfCL/ANL2xgaUwHwYDVR0j BBgwFoAUn+m0wwkCBtWyjO1PUXlTn2mK25EwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8v bW5paHljLXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1MTc5NTM5RjY5 OEFEQjkxLmNybDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8v c2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS85RkU5QjRDMzA5MDIwNkQ1QjI4 Q0VENEY1MTc5NTM5RjY5OEFEQjkxLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYB BQUHMAuGXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8vbW5paHlj LXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1MTc5NTM5RjY5OEFEQjkx Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAj1mC9BVA5jNhrVBo/WD53alszjRJgPiLCDqu9VjTQoxWOS7/ ObfS5f2vBuHaKsEJKpJfCv7Mz95rEz3LiorUckiLzaBnktIvMcLnpqsDh773eI8r Gn6nhcECKNNHGzHELCKXNLr8tjun3BCKgab9jU9dsNRsfqTUnBOSjKqddWQcC4e8 o84kqbsdObcT2hQQgxOwoTvixJBgpBU320VrVBfnu2IRpV6GieObuqQcpoYXZ2Pk 3UtWYcpCbX1LspXwe8KyWRdd4nakoNPN5tso7hhe1fRPSTSkt4C/tM2ekXvdvY7Q YSeg+agFmzuJdoqGTP+Qp/2lkMCx4gHK/5o4FA== -----END CERTIFICATE-----Generated at Mon Nov 25 04:54:18 2024 by rpki-client on console-fra.rpki-client.org