Manifest
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: rZ3dr0sgTU4HEDn5HEFXNnGvjnxvaaiL7CTAzrZ2hz8=
Subject key identifier: A7:59:86:02:04:A0:F7:2F:08:AA:B8:87:C0:9D:AC:C9:FE:E7:20:6B
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 01B7AA4476C2B04F6F6A41D7A110FBF86B11EC9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0BAA
Signing time: Mon 27 Oct 2025 09:14:00 +0000
Manifest this update: Mon 27 Oct 2025 09:09:00 +0000
Manifest next update: Tue 28 Oct 2025 09:14:00 +0000
Files and hashes: 1: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: /jBviPSFdFKZh4Pbl7qtj9AMKAzv67R3Ny4r/CA/pdU=)
2: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: UypBmoCnlmL9+kZcm+Ze04lt6d6IKeGZYgmVu53Oml0=)
3: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: lOH37mNZ7GeDqNovMClGKLJ0pYQzmLTzievvpRu1ycw=)
4: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: L9SKOfzlWCbf3ZEfwVUoxYt9hsBGjULfYjAnC6NGFMc=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Oct 2025 09:14:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:b7:aa:44:76:c2:b0:4f:6f:6a:41:d7:a1:10:fb:f8:6b:11:ec:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Oct 27 09:09:00 2025 GMT
Not After : Nov 3 09:14:00 2025 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:02:7d:06:0a:8e:74:49:52:61:f7:85:dd:
d6:45:19:97:b9:43:b9:6c:f9:0b:6c:1c:45:fa:fc:
16:07:3b:3d:15:83:45:1e:dc:7c:76:a7:27:a1:b7:
ec:b7:61:e0:0d:bd:42:f6:cf:0c:bf:04:55:79:92:
9d:67:0b:11:28:98:d1:66:e0:38:cf:45:a2:c4:11:
3c:9a:c1:f5:e3:d4:11:01:f5:98:5d:e2:66:a1:80:
8e:40:2d:9d:8e:aa:ad:29:7e:8c:6b:87:17:12:c2:
12:c7:8b:3f:39:b4:2a:c0:5a:59:13:24:10:08:33:
41:cd:af:07:eb:c3:e9:1c:f5:da:41:44:64:be:4c:
ff:0d:cc:86:74:23:4f:c0:db:08:81:58:04:6d:02:
bb:c3:07:5a:2c:14:22:69:70:7e:20:8b:e4:2a:82:
2c:0a:48:fe:09:a8:d0:8c:3b:97:cf:79:d4:3d:ba:
dd:53:8c:2f:e9:a4:8e:67:c8:fc:84:af:4f:7d:c4:
a1:24:8b:50:cb:af:29:f9:1a:b8:79:d3:ac:a1:8e:
d1:5f:9d:0d:9d:aa:b2:5c:6c:51:11:b5:1d:38:69:
05:be:8e:ce:b7:bd:02:3f:25:9f:cf:f2:af:9c:2f:
1d:00:6a:f5:a7:59:47:90:ba:6f:20:74:ae:1e:9a:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:59:86:02:04:A0:F7:2F:08:AA:B8:87:C0:9D:AC:C9:FE:E7:20:6B
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:56:f5:46:34:62:d5:9e:8d:8d:c5:a4:f7:55:8c:0e:47:41:
a6:84:d5:0e:51:fc:6e:f8:62:45:3a:05:f6:cd:9b:69:3a:6d:
7d:c7:f3:6c:cf:b3:b4:2c:e4:37:43:54:1b:25:52:4a:7e:76:
e8:4e:47:da:84:59:4c:42:e1:37:6d:1c:e1:e5:2b:40:00:83:
a7:48:7c:13:87:04:ed:46:32:c5:e8:cc:ba:19:af:1b:a0:94:
5c:8a:08:79:23:37:36:79:80:f3:d7:f5:2b:32:6b:19:6d:64:
ec:9f:be:b3:6c:bc:b9:ba:43:91:26:8c:4e:21:f1:3f:af:de:
f0:07:02:ec:4d:f9:79:15:4d:18:01:4b:5d:34:80:05:0c:39:
c1:c8:e0:db:be:71:5f:4c:3f:86:12:ed:53:18:92:62:bf:b7:
38:2b:47:dd:20:61:16:7e:28:4d:6d:81:a8:1e:ab:85:2e:16:
85:62:c6:58:e3:a6:f0:78:3d:f8:6a:2b:2f:01:a7:ec:a4:6a:
f2:16:77:e6:ae:34:ea:6f:ac:67:f9:4e:4e:c3:5b:38:9d:01:
e8:e5:ab:6d:6a:21:9b:fd:b8:9c:e8:ea:b0:d1:2c:3a:1a:df:
52:2e:e8:92:f5:53:da:c1:8a:4e:a4:b1:d8:1f:6b:8a:4d:ed:
a2:7f:87:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:47:16 2025 by rpki-client