Manifest
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: Pb5GIbLt+gSaNQ8yjMmF23QYKBbu5S2lkzdZciQ89Jc=
Subject key identifier: AD:43:E4:42:85:78:B9:B0:81:B1:02:29:1A:C4:A7:E2:13:E3:87:C3
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 45759714F332D5DF4CB5A323E8F2904F38A5ACC2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0ACB
Signing time: Sat 31 May 2025 13:22:00 +0000
Manifest this update: Sat 31 May 2025 13:17:00 +0000
Manifest next update: Sun 01 Jun 2025 13:22:00 +0000
Files and hashes: 1: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: L9SKOfzlWCbf3ZEfwVUoxYt9hsBGjULfYjAnC6NGFMc=)
2: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: lOH37mNZ7GeDqNovMClGKLJ0pYQzmLTzievvpRu1ycw=)
3: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: /jBviPSFdFKZh4Pbl7qtj9AMKAzv67R3Ny4r/CA/pdU=)
4: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: FKUExPH/J5Bxo1wCtX6OvF6L97mr5HOKOeNYApQ9R7I=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Jun 2025 13:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:75:97:14:f3:32:d5:df:4c:b5:a3:23:e8:f2:90:4f:38:a5:ac:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: May 31 13:17:00 2025 GMT
Not After : Jun 7 13:22:00 2025 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:4a:a3:52:59:f8:c9:5c:b2:fb:2e:d3:6e:b0:
99:83:ba:19:07:30:74:5c:29:5e:ce:af:4d:10:0f:
a4:98:d9:6e:4d:ef:bf:04:eb:3b:36:dc:98:df:0e:
0b:cf:a2:0e:93:24:15:33:d5:69:e6:a3:e8:83:33:
32:4e:2f:5f:cf:9e:38:aa:1a:b2:ff:60:22:82:36:
79:f3:44:70:34:38:e6:46:b8:5a:f3:d9:d7:29:01:
3c:8c:f2:5d:e6:91:f1:88:cc:41:53:8a:e8:b8:d3:
a1:b9:8e:86:fa:d4:36:2f:9e:9d:24:23:8c:de:52:
ae:eb:34:d6:10:75:fb:8e:03:24:62:72:e1:bd:ec:
1a:75:78:bf:0d:f4:1b:dc:a8:69:3d:eb:30:92:e9:
2d:55:5d:2b:01:e4:3d:44:91:09:1c:41:ea:57:4b:
02:92:28:75:f5:3d:3c:8e:7a:37:22:af:90:ee:e7:
95:a9:f7:e3:1b:e1:83:e0:04:f6:6a:54:39:99:f6:
f8:b7:7a:29:0f:b9:d4:a1:59:d6:b8:31:ae:04:cd:
8e:48:a7:79:79:b9:02:c5:7d:69:99:37:c5:5a:98:
61:90:b8:86:2d:39:54:d4:20:23:ec:46:0e:fd:bc:
9a:09:21:c8:0d:d9:aa:f5:12:da:d3:d9:aa:1d:83:
f4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:43:E4:42:85:78:B9:B0:81:B1:02:29:1A:C4:A7:E2:13:E3:87:C3
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:8d:82:63:ff:b5:cc:f9:1c:9b:ab:ac:3f:11:73:3a:46:65:
cf:b0:8a:e3:95:61:1e:10:d7:26:24:27:16:c0:f0:e8:a0:b3:
2e:c3:fb:08:8e:1a:82:fd:ad:22:25:18:3c:bd:ea:e8:56:e5:
b1:36:e2:5a:13:af:ed:1b:93:9f:9d:a1:94:06:8d:4d:01:f4:
97:7a:50:e7:3c:d9:f1:92:e3:00:87:46:af:61:67:2c:c1:31:
0e:8d:e6:67:70:5a:22:c5:70:1d:6b:34:f3:f1:23:7b:51:09:
ba:83:9a:b5:7e:d5:82:1b:68:81:9c:16:58:35:aa:53:5e:bd:
e3:ac:6b:1c:31:05:be:1a:2e:65:fa:e0:94:84:66:cf:f9:f1:
60:b2:3d:97:d1:d3:db:10:42:4a:01:0d:c9:13:0c:3b:bb:8d:
90:8c:4f:e5:1d:17:a6:39:d1:e2:db:5d:1d:01:ef:2a:cb:90:
9c:32:f5:54:71:a1:3a:ca:f3:0d:02:3a:a1:fb:eb:a1:89:70:
9b:d1:6d:37:7a:e1:c5:0c:b5:cb:d4:a9:42:9c:9c:d9:09:c4:
61:6b:2d:d6:d4:b1:aa:a5:a9:b3:4a:a9:6f:cf:27:e9:3f:c9:
e0:a3:bd:3c:8f:62:f6:df:95:55:e2:a9:88:ca:4d:dd:bc:52:
19:e7:1e:72
-----BEGIN CERTIFICATE-----
MIIHBDCCBeygAwIBAgIURXWXFPMy1d9MtaMj6PKQTzilrMIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTRFNzUwMDAwMTEwLwYDVQQFEyg1QTE3OTY0OEIz
RUYyMzY5RENFN0JEQjU4MTQwRkY3REM3MDYwQUJGMB4XDTI1MDUzMTEzMTcwMFoX
DTI1MDYwNzEzMjIwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBGQjRBQTM1MjU5RjhDOTVDQjJGQjJFRDM2RUIwOTk4M0JBMTkwNzMwNzQ1
QzI5NUVDRUFGNEQxMDBGQTQ5OEQ5NkU0REVGQkYwNEVCM0IzNkRDOThERjBFMEJD
RkEyMEU5MzI0MTUzM0Q1NjlFNkEzRTg4MzMzMzI0RTJGNUZDRjlFMzhBQTFBQjJG
RjYwMjI4MjM2NzlGMzQ0NzAzNDM4RTY0NkI4NUFGM0Q5RDcyOTAxM0M4Q0YyNURF
NjkxRjE4OENDNDE1MzhBRThCOEQzQTFCOThFODZGQUQ0MzYyRjlFOUQyNDIzOENE
RTUyQUVFQjM0RDYxMDc1RkI4RTAzMjQ2MjcyRTFCREVDMUE3NTc4QkYwREY0MUJE
Q0E4NjkzREVCMzA5MkU5MkQ1NTVEMkIwMUU0M0Q0NDkxMDkxQzQxRUE1NzRCMDI5
MjI4NzVGNTNEM0M4RTdBMzcyMkFGOTBFRUU3OTVBOUY3RTMxQkUxODNFMDA0RjY2
QTU0Mzk5OUY2RjhCNzdBMjkwRkI5RDRBMTU5RDZCODMxQUUwNENEOEU0OEE3Nzk3
OUI5MDJDNTdENjk5OTM3QzU1QTk4NjE5MEI4ODYyRDM5NTRENDIwMjNFQzQ2MEVG
REJDOUEwOTIxQzgwREQ5QUFGNTEyREFEM0Q5QUExRDgzRjRGOTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7SqNSWfjJXLL7LtNusJmD
uhkHMHRcKV7Or00QD6SY2W5N778E6zs23JjfDgvPog6TJBUz1Wnmo+iDMzJOL1/P
njiqGrL/YCKCNnnzRHA0OOZGuFrz2dcpATyM8l3mkfGIzEFTiui406G5job61DYv
np0kI4zeUq7rNNYQdfuOAyRicuG97Bp1eL8N9BvcqGk96zCS6S1VXSsB5D1EkQkc
QepXSwKSKHX1PTyOejcir5Du55Wp9+Mb4YPgBPZqVDmZ9vi3eikPudShWda4Ma4E
zY5Ip3l5uQLFfWmZN8VamGGQuIYtOVTUICPsRg79vJoJIcgN2ar1EtrT2aodg/T5
AgMBAAGjggH7MIIB9zAdBgNVHQ4EFgQUrUPkQoV4ubCBsQIpGsSn4hPjh8MwHwYD
VR0jBBgwFoAUWheWSLPvI2nc5721gUD/fccGCr8wDgYDVR0PAQH/BAQDAgeAMGIG
A1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRP
Q0EvMS81QTE3OTY0OEIzRUYyMzY5RENFN0JEQjU4MTQwRkY3REM3MDYwQUJGLmNy
bDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZG
Mi9XaGVXU0xQdkkybmM1NzIxZ1VEX2ZjY0dDcjguY2VyMG0GCCsGAQUFBwELBGEw
XzBdBggrBgEFBQcwC4ZRcnN5bmM6Ly9zYWt1eWEubmF0Lm1vZS9yZXBvL05BVE9D
QS8xLzVBMTc5NjQ4QjNFRjIzNjlEQ0U3QkRCNTgxNDBGRjdEQzcwNjBBQkYubWZ0
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE
AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC+jYJj/7XM+Rybq6w/EXM6RmXPsIrjlWEeENcmJCcWwPDooLMuw/sI
jhqC/a0iJRg8veroVuWxNuJaE6/tG5OfnaGUBo1NAfSXelDnPNnxkuMAh0avYWcs
wTEOjeZncFoixXAdazTz8SN7UQm6g5q1ftWCG2iBnBZYNapTXr3jrGscMQW+Gi5l
+uCUhGbP+fFgsj2X0dPbEEJKAQ3JEww7u42QjE/lHRemOdHi210dAe8qy5CcMvVU
caE6yvMNAjqh++uhiXCb0W03euHFDLXL1KlCnJzZCcRhay3W1LGqpamzSqlvzyfp
P8ngo708j2L235VV4qmIyk3dvFIZ5x5y
-----END CERTIFICATE-----
Generated at Sat May 31 16:42:04 2025 by rpki-client