Manifest

$ rpki-client -vvvf rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
File:                     9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft (raw, json)
Hash identifier:          zppRtnWJWOjvBFmLr/dUmrtlvM5nOMcpUX61ztzz4SE=
Subject key identifier:   EA:88:5B:A9:9D:C7:F8:64:97:80:67:3E:E3:A2:59:76:47:FE:4A:62
Authority key identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91
Certificate issuer:       /CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
Certificate serial:       504BA6075B8710A361CF924252FAF1EEDFF31ABF
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
Subject info access:      rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
Manifest number:          04C0
Signing time:             Mon 21 Sep 2026 04:33:18 +0000
Manifest this update:     Mon 21 Sep 2026 04:28:18 +0000
Manifest next update:     Tue 22 Sep 2026 07:06:18 +0000
Files and hashes:         1: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl (hash: Gl1Ia2kJ0cmaKPYd/ZcB803MS0gLqwj0f3SVcyi3u78=)
                          2: 323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa (hash: cB9Zwjx3Hi9b0UOooFxL64n4CFupbZ1thBhMYsT2yH0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl
                          rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 07:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4b:a6:07:5b:87:10:a3:61:cf:92:42:52:fa:f1:ee:df:f3:1a:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
        Validity
            Not Before: Sep 21 04:28:18 2026 GMT
            Not After : Sep 22 07:06:18 2026 GMT
        Subject: CN=EA885BA99DC7F8649780673EE3A2597647FE4A62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:03:8f:3e:c7:8a:a8:aa:4a:2b:de:14:02:a7:
                    b5:e7:7e:2a:2c:ab:e6:e4:e8:6a:96:17:91:ab:fa:
                    aa:1a:2a:1d:42:30:bf:fc:d1:23:6f:b0:41:24:81:
                    c1:f2:b6:d2:81:0c:b8:7e:55:1a:6b:a5:a3:97:fa:
                    59:32:fb:0b:ed:37:0d:b9:6e:30:d0:d3:a9:77:a9:
                    7b:74:72:d0:66:40:65:a7:e6:fe:ce:5d:a5:8c:a4:
                    90:a5:f3:c6:f9:26:2e:5e:88:eb:39:b8:80:10:76:
                    88:aa:b3:79:28:f4:07:5d:eb:b8:fd:bd:0e:3b:f4:
                    0b:08:f5:86:d1:e2:1c:99:c2:56:b6:6e:d1:6b:3d:
                    48:66:a3:ca:f3:cb:88:46:6e:20:be:32:ad:9c:88:
                    45:63:01:b6:9b:7e:64:7d:a7:47:f1:f4:35:18:7a:
                    64:ab:99:c7:02:68:fc:e8:96:6f:14:2a:ee:27:f7:
                    40:5e:52:25:27:13:5e:5a:cd:71:f2:6b:96:64:b2:
                    90:11:ac:44:26:d8:4d:f0:25:46:28:d0:68:d8:eb:
                    92:85:37:a1:84:7f:2d:8c:e5:4a:40:24:5a:49:de:
                    99:83:39:71:98:62:94:e1:98:47:9e:d3:a2:f4:91:
                    1e:18:da:b2:04:63:87:d7:2c:f2:73:6f:0a:35:1e:
                    77:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:88:5B:A9:9D:C7:F8:64:97:80:67:3E:E3:A2:59:76:47:FE:4A:62
            X509v3 Authority Key Identifier:
                keyid:9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:57:6a:b2:a1:14:ef:86:fc:18:49:39:fa:de:6b:05:4b:f9:
         ef:a1:a8:11:c5:1b:09:cf:66:d9:fc:72:ae:c7:0d:21:8f:d0:
         7c:e5:27:92:e9:31:5a:b6:f4:cb:1f:b3:41:96:5f:2d:dc:db:
         7d:39:eb:88:0c:96:f1:f3:c0:54:3a:08:39:82:0a:76:be:d7:
         26:a0:af:db:b4:a9:3a:8b:3d:c0:50:cd:62:50:ed:7c:68:79:
         c8:54:6e:b0:1f:34:95:5b:5d:8d:c0:11:c1:f4:16:d3:92:3e:
         da:92:23:bb:b3:55:ce:ab:a1:fe:84:d2:b1:be:5f:27:f4:90:
         c3:a2:b7:cb:d4:85:90:3f:bd:66:82:ab:c4:f6:d5:16:5b:a8:
         77:63:4e:31:a2:1f:e2:79:ba:99:6b:48:df:51:72:96:cb:8f:
         3a:9f:b7:f8:4b:39:2f:70:bb:ec:c7:85:e3:23:34:94:7c:5f:
         dc:3b:0e:43:8b:5b:ad:52:da:67:d9:f1:e3:d8:3f:d6:a0:ab:
         ca:09:fc:a9:b8:89:86:89:4f:39:cf:6c:34:5e:41:e2:92:c0:
         3e:9a:91:38:cb:17:a0:57:14:79:01:c5:e9:9b:bf:59:a9:61:
         44:26:09:81:07:40:a6:45:51:88:42:b8:ee:fd:14:7d:c2:79:
         dd:b7:5d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:03:10 2026 by rpki-client