Manifest
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: ztpmP5w+Su8AyBKpTDLrYj2whEm7EmrY1x0StXMJ2Os=
Subject key identifier: 4B:A2:BD:BD:DB:DF:4A:6F:36:BD:16:DB:FA:C6:13:F2:DC:FD:32:85
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 0DAE2720CDF2A9781495238DC5FB9AA5474981F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0B65
Signing time: Thu 11 Sep 2025 07:58:00 +0000
Manifest this update: Thu 11 Sep 2025 07:53:00 +0000
Manifest next update: Fri 12 Sep 2025 07:58:00 +0000
Files and hashes: 1: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: 39uGyBbt3+yRkeCvdbaJeEkYFGdvxsDS6BQpn46SSJ8=)
2: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: L9SKOfzlWCbf3ZEfwVUoxYt9hsBGjULfYjAnC6NGFMc=)
3: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: lOH37mNZ7GeDqNovMClGKLJ0pYQzmLTzievvpRu1ycw=)
4: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: /jBviPSFdFKZh4Pbl7qtj9AMKAzv67R3Ny4r/CA/pdU=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Sep 2025 07:58:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:ae:27:20:cd:f2:a9:78:14:95:23:8d:c5:fb:9a:a5:47:49:81:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Sep 11 07:53:00 2025 GMT
Not After : Sep 18 07:58:00 2025 GMT
Subject: CN=3082010A0282010100B91B4FC9C9EBDF559D3017D1FAD8A46F99C14ADB9D473E8709AD7176E087C641CA5C5255E3E6CB8F2B1345F9C3BFAD15C432B8AC21400101E3393DBD55550D49912DB35DBB734CA225F01989B4CE8CEAAE3F38E7E55FF3848AB20E6B1E57044B5A26490D14D8700A29EE9CCDF937CB46C229741D20357F5BA1BC3BD65F20C23ADFEFCB94F1992153084BB01BA5EBF0ED4CB3F1D00588ED165FD21D4236AC9F1E6DD1F893315672AB85EC96FD7E20DC4528794A339252C9174A11C615909551D696D6687A991FE5D722F508145FFEAA15C1A27058B19D5C849078617B02E888646BE06B1DF9580F46100DD606674C3154366513B5848975688AE4DAAB1D5C2AD70203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:4f:c9:c9:eb:df:55:9d:30:17:d1:fa:d8:
a4:6f:99:c1:4a:db:9d:47:3e:87:09:ad:71:76:e0:
87:c6:41:ca:5c:52:55:e3:e6:cb:8f:2b:13:45:f9:
c3:bf:ad:15:c4:32:b8:ac:21:40:01:01:e3:39:3d:
bd:55:55:0d:49:91:2d:b3:5d:bb:73:4c:a2:25:f0:
19:89:b4:ce:8c:ea:ae:3f:38:e7:e5:5f:f3:84:8a:
b2:0e:6b:1e:57:04:4b:5a:26:49:0d:14:d8:70:0a:
29:ee:9c:cd:f9:37:cb:46:c2:29:74:1d:20:35:7f:
5b:a1:bc:3b:d6:5f:20:c2:3a:df:ef:cb:94:f1:99:
21:53:08:4b:b0:1b:a5:eb:f0:ed:4c:b3:f1:d0:05:
88:ed:16:5f:d2:1d:42:36:ac:9f:1e:6d:d1:f8:93:
31:56:72:ab:85:ec:96:fd:7e:20:dc:45:28:79:4a:
33:92:52:c9:17:4a:11:c6:15:90:95:51:d6:96:d6:
68:7a:99:1f:e5:d7:22:f5:08:14:5f:fe:aa:15:c1:
a2:70:58:b1:9d:5c:84:90:78:61:7b:02:e8:88:64:
6b:e0:6b:1d:f9:58:0f:46:10:0d:d6:06:67:4c:31:
54:36:65:13:b5:84:89:75:68:8a:e4:da:ab:1d:5c:
2a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A2:BD:BD:DB:DF:4A:6F:36:BD:16:DB:FA:C6:13:F2:DC:FD:32:85
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:50:d4:83:99:20:5f:c1:7f:0f:e9:4c:0b:30:5f:7c:5b:47:
6c:2e:31:d4:98:a2:68:4b:78:32:b4:16:61:9e:08:33:e5:2f:
21:24:41:ff:2c:e2:ee:2a:62:94:a2:62:ff:8b:f3:2b:74:90:
88:83:9b:aa:13:26:f3:dc:91:1d:0f:55:f1:b0:87:75:23:51:
17:24:48:36:bf:de:10:91:07:8f:ac:2e:99:68:4b:0a:35:83:
68:3f:65:13:3e:3a:77:59:dd:5b:5c:b2:67:cf:6a:a7:95:b7:
88:2f:7d:45:3b:4e:ad:65:5e:7d:a5:ee:e1:75:be:a8:e7:ab:
c0:a9:9d:c4:bf:d8:f3:c0:e2:bb:3c:65:91:8f:6e:b3:44:51:
8f:f3:2d:7b:06:6f:41:3e:4e:50:dc:e0:aa:b7:7b:15:de:ad:
49:ba:33:64:78:d0:30:22:b9:75:cd:89:fb:37:ed:b5:f5:32:
5d:34:d6:5a:d2:cd:35:44:ac:3e:98:59:cc:f1:5a:23:67:8f:
0e:00:dc:6d:b7:bc:4f:1c:f4:28:00:d2:96:8f:76:31:4d:58:
9e:77:14:61:de:89:92:ad:58:f4:c9:03:5b:37:f1:86:2e:8d:
2d:83:91:45:86:0c:5d:26:a8:65:f1:45:b1:d8:cc:80:db:fd:
83:27:11:9c
-----BEGIN CERTIFICATE-----
MIIHBDCCBeygAwIBAgIUDa4nIM3yqXgUlSONxfuapUdJgfUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTRFNzUwMDAwMTEwLwYDVQQFEyg1QTE3OTY0OEIz
RUYyMzY5RENFN0JEQjU4MTQwRkY3REM3MDYwQUJGMB4XDTI1MDkxMTA3NTMwMFoX
DTI1MDkxODA3NTgwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCOTFCNEZDOUM5RUJERjU1OUQzMDE3RDFGQUQ4QTQ2Rjk5QzE0QURCOUQ0
NzNFODcwOUFENzE3NkUwODdDNjQxQ0E1QzUyNTVFM0U2Q0I4RjJCMTM0NUY5QzNC
RkFEMTVDNDMyQjhBQzIxNDAwMTAxRTMzOTNEQkQ1NTU1MEQ0OTkxMkRCMzVEQkI3
MzRDQTIyNUYwMTk4OUI0Q0U4Q0VBQUUzRjM4RTdFNTVGRjM4NDhBQjIwRTZCMUU1
NzA0NEI1QTI2NDkwRDE0RDg3MDBBMjlFRTlDQ0RGOTM3Q0I0NkMyMjk3NDFEMjAz
NTdGNUJBMUJDM0JENjVGMjBDMjNBREZFRkNCOTRGMTk5MjE1MzA4NEJCMDFCQTVF
QkYwRUQ0Q0IzRjFEMDA1ODhFRDE2NUZEMjFENDIzNkFDOUYxRTZERDFGODkzMzE1
NjcyQUI4NUVDOTZGRDdFMjBEQzQ1Mjg3OTRBMzM5MjUyQzkxNzRBMTFDNjE1OTA5
NTUxRDY5NkQ2Njg3QTk5MUZFNUQ3MjJGNTA4MTQ1RkZFQUExNUMxQTI3MDU4QjE5
RDVDODQ5MDc4NjE3QjAyRTg4ODY0NkJFMDZCMURGOTU4MEY0NjEwMERENjA2Njc0
QzMxNTQzNjY1MTNCNTg0ODk3NTY4OEFFNERBQUIxRDVDMkFENzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5G0/JyevfVZ0wF9H62KRv
mcFK251HPocJrXF24IfGQcpcUlXj5suPKxNF+cO/rRXEMrisIUABAeM5Pb1VVQ1J
kS2zXbtzTKIl8BmJtM6M6q4/OOflX/OEirIOax5XBEtaJkkNFNhwCinunM35N8tG
wil0HSA1f1uhvDvWXyDCOt/vy5TxmSFTCEuwG6Xr8O1Ms/HQBYjtFl/SHUI2rJ8e
bdH4kzFWcquF7Jb9fiDcRSh5SjOSUskXShHGFZCVUdaW1mh6mR/l1yL1CBRf/qoV
waJwWLGdXISQeGF7AuiIZGvgax35WA9GEA3WBmdMMVQ2ZRO1hIl1aIrk2qsdXCrX
AgMBAAGjggH7MIIB9zAdBgNVHQ4EFgQUS6K9vdvfSm82vRbb+sYT8tz9MoUwHwYD
VR0jBBgwFoAUWheWSLPvI2nc5721gUD/fccGCr8wDgYDVR0PAQH/BAQDAgeAMGIG
A1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRP
Q0EvMS81QTE3OTY0OEIzRUYyMzY5RENFN0JEQjU4MTQwRkY3REM3MDYwQUJGLmNy
bDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZG
Mi9XaGVXU0xQdkkybmM1NzIxZ1VEX2ZjY0dDcjguY2VyMG0GCCsGAQUFBwELBGEw
XzBdBggrBgEFBQcwC4ZRcnN5bmM6Ly9zYWt1eWEubmF0Lm1vZS9yZXBvL05BVE9D
QS8xLzVBMTc5NjQ4QjNFRjIzNjlEQ0U3QkRCNTgxNDBGRjdEQzcwNjBBQkYubWZ0
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE
AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC0UNSDmSBfwX8P6UwLMF98W0dsLjHUmKJoS3gytBZhnggz5S8hJEH/
LOLuKmKUomL/i/MrdJCIg5uqEybz3JEdD1XxsId1I1EXJEg2v94QkQePrC6ZaEsK
NYNoP2UTPjp3Wd1bXLJnz2qnlbeIL31FO06tZV59pe7hdb6o56vAqZ3Ev9jzwOK7
PGWRj26zRFGP8y17Bm9BPk5Q3OCqt3sV3q1JujNkeNAwIrl1zYn7N+219TJdNNZa
0s01RKw+mFnM8VojZ48OANxtt7xPHPQoANKWj3YxTViedxRh3omSrVj0yQNbN/GG
Lo0tg5FFhgxdJqhl8UWx2MyA2/2DJxGc
-----END CERTIFICATE-----
Generated at Thu Sep 11 08:39:44 2025 by rpki-client