$ rpki-client -vvf rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft File: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft (raw, json) Hash identifier: /7cZeiCeyRtPlYVXfAw2mfcwSnkXjFQ3wcvhriwgBNU= Subject key identifier: C5:9C:E0:25:1F:93:D2:66:BC:68:65:5E:EB:55:1A:9C:20:36:F7:54 Authority key identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91 Certificate issuer: /CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91 Certificate serial: 50924BEE13485A031093661A9BB7F8F10AB067C3 Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer Subject info access: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft Manifest number: 03CE Signing time: Thu 05 Jun 2025 13:05:11 +0000 Manifest this update: Thu 05 Jun 2025 13:00:11 +0000 Manifest next update: Fri 06 Jun 2025 15:41:11 +0000 Files and hashes: 1: 323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa (hash: NOwi2jYQ8FHV+5iFygC9Tyw/h3+CkwWSkGkdIOKT9Zg=) 2: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl (hash: MzxpjAAJ2oTvoie0HQGs1fabZteXNK43/fbdqQgnNQ8=) Validation: OK Signature path: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 05:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:92:4b:ee:13:48:5a:03:10:93:66:1a:9b:b7:f8:f1:0a:b0:67:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91 Validity Not Before: Jun 5 13:00:11 2025 GMT Not After : Jun 6 15:41:11 2025 GMT Subject: CN=C59CE0251F93D266BC68655EEB551A9C2036F754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:67:17:51:fd:f1:d1:37:d1:eb:dc:43:6a:72: 79:2b:8a:f5:34:0f:bc:ea:df:36:e0:00:45:5d:ed: d4:76:83:7a:95:87:f1:41:71:2e:bf:d1:9b:e1:71: eb:7a:27:34:d9:b6:eb:22:07:06:6f:66:a0:a0:d2: 91:af:db:99:2e:42:d6:9c:66:4c:c4:5f:c4:ca:85: 53:5d:9b:a2:06:0f:df:ed:e5:d3:3a:25:3d:83:50: 57:03:94:0e:1b:33:cc:8e:f0:a9:bc:6d:78:49:bf: 92:58:6c:97:da:75:d1:97:7c:7e:c0:48:87:34:0b: 7c:e3:a5:dd:dd:60:bc:90:25:81:0a:71:ff:e2:d3: ea:5d:82:5d:38:c4:bf:cc:50:46:bf:61:85:81:f1: 0e:cb:c5:c0:43:f8:c9:b9:dc:2f:13:4f:3d:43:f8: b2:5a:b9:0e:e7:97:e4:1e:f7:a6:0d:33:eb:9d:c8: 14:6c:01:d3:57:59:c8:f6:e7:df:19:e7:82:d8:14: a6:7d:2a:cb:5d:28:73:ec:84:c5:cb:c0:80:72:1e: d7:99:a4:05:d1:50:25:52:63:ca:da:e1:94:cf:44: f8:2c:fc:c8:8b:e7:98:ce:17:e5:ac:8b:ba:59:11: 46:b0:92:a8:40:93:c4:52:36:57:0b:c5:00:3e:83: 74:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9C:E0:25:1F:93:D2:66:BC:68:65:5E:EB:55:1A:9C:20:36:F7:54 X509v3 Authority Key Identifier: keyid:9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:f2:58:81:5f:72:6c:4b:99:76:a4:f7:85:5e:85:6c:cf:bc: 9b:3d:e7:2c:04:73:e3:37:06:67:85:2a:8d:e1:33:37:87:df: 92:cb:ae:3d:b5:9f:6d:06:74:f5:f5:9e:57:9b:b9:dc:16:a4: 1f:3e:c6:01:c3:16:b3:f8:76:17:34:45:29:13:7b:4e:e1:82: 5e:7b:8c:6e:6f:39:37:aa:1c:ec:30:fd:b1:3d:9a:fd:0a:d8: 2e:f9:fc:8a:ce:bf:ed:f9:d0:27:79:ec:e0:b3:2f:6d:c9:e8: 05:d8:0e:e2:cb:d8:f0:fe:20:ca:d4:d4:79:51:3a:3a:82:38: 1f:76:6e:7b:aa:b3:4e:50:a1:44:7d:89:bc:13:7b:dd:c8:d7: d2:ff:d5:b6:19:d3:ed:2b:8e:a9:fc:cf:8b:c4:15:64:60:97: 6b:3f:12:71:a0:88:4e:96:31:50:92:2e:4e:7a:e2:b8:3f:2c: f5:76:61:8b:78:92:13:a9:7a:2b:e5:73:2a:17:b5:38:a6:d8: 44:0e:0f:e8:a0:24:25:82:d5:87:1a:4d:26:41:a2:1a:f8:fd: ab:bf:45:1c:9e:5b:9e:c1:a1:fa:fe:18:ec:46:84:80:00:68: 49:4e:fd:2d:94:75:07:66:3b:58:e4:23:c2:8b:d2:e9:03:44: 40:f3:43:2c -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgIUUJJL7hNIWgMQk2Yam7f48QqwZ8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFOUI0QzMwOTAyMDZENUIyOENFRDRGNTE3OTUzOUY2 OThBREI5MTAeFw0yNTA2MDUxMzAwMTFaFw0yNTA2MDYxNTQxMTFaMDMxMTAvBgNV BAMTKEM1OUNFMDI1MUY5M0QyNjZCQzY4NjU1RUVCNTUxQTlDMjAzNkY3NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMZxdR/fHRN9Hr3ENqcnkrivU0 D7zq3zbgAEVd7dR2g3qVh/FBcS6/0Zvhcet6JzTZtusiBwZvZqCg0pGv25kuQtac ZkzEX8TKhVNdm6IGD9/t5dM6JT2DUFcDlA4bM8yO8Km8bXhJv5JYbJfaddGXfH7A SIc0C3zjpd3dYLyQJYEKcf/i0+pdgl04xL/MUEa/YYWB8Q7LxcBD+Mm53C8TTz1D +LJauQ7nl+Qe96YNM+udyBRsAdNXWcj2598Z54LYFKZ9KstdKHPshMXLwIByHteZ pAXRUCVSY8ra4ZTPRPgs/MiL55jOF+Wsi7pZEUawkqhAk8RSNlcLxQA+g3QpAgMB AAGjggICMIIB/jAdBgNVHQ4EFgQUxZzgJR+T0ma8aGVe61UanCA291QwHwYDVR0j BBgwFoAUn+m0wwkCBtWyjO1PUXlTn2mK25EwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8v bW5paHljLXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1MTc5NTM5RjY5 OEFEQjkxLmNybDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8v c2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS85RkU5QjRDMzA5MDIwNkQ1QjI4 Q0VENEY1MTc5NTM5RjY5OEFEQjkxLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYB BQUHMAuGXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8vbW5paHlj LXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1MTc5NTM5RjY5OEFEQjkx Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAJvJYgV9ybEuZdqT3hV6FbM+8mz3nLARz4zcGZ4UqjeEzN4ff ksuuPbWfbQZ09fWeV5u53BakHz7GAcMWs/h2FzRFKRN7TuGCXnuMbm85N6oc7DD9 sT2a/QrYLvn8is6/7fnQJ3ns4LMvbcnoBdgO4svY8P4gytTUeVE6OoI4H3Zue6qz TlChRH2JvBN73cjX0v/VthnT7SuOqfzPi8QVZGCXaz8ScaCITpYxUJIuTnriuD8s 9XZhi3iSE6l6K+VzKhe1OKbYRA4P6KAkJYLVhxpNJkGiGvj9q79FHJ5bnsGh+v4Y 7EaEgABoSU79LZR1B2Y7WOQjwovS6QNEQPNDLA== -----END CERTIFICATE-----Generated at Thu Jun 5 20:13:45 2025 by rpki-client