Manifest

$ rpki-client -vvvf rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
File:                     9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft (raw, json)
Hash identifier:          /fluzFFegtKQvfETLvvgVDXrceDVlc9QL9NtNWfJcAk=
Subject key identifier:   96:08:60:19:72:01:53:07:C9:90:67:88:49:A9:BC:32:E2:C6:71:51
Authority key identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91
Certificate issuer:       /CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
Certificate serial:       3EA11DAB3B9DC29E3A73FA1CA717257FB2FFD9CD
Authority info access:    rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
Subject info access:      rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
Manifest number:          0509
Signing time:             Sun 15 Nov 2026 08:50:04 +0000
Manifest this update:     Sun 15 Nov 2026 08:45:04 +0000
Manifest next update:     Mon 16 Nov 2026 10:49:04 +0000
Files and hashes:         1: 323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa (hash: cB9Zwjx3Hi9b0UOooFxL64n4CFupbZ1thBhMYsT2yH0=)
                          2: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl (hash: gaxzO8ZiSmUS5mrQpkQ0Xi7uSqHVK4xktld0ZK9Bq/w=)
Validation:               OK
Signature path:           rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl
                          rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft
                          rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
                          rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 21:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a1:1d:ab:3b:9d:c2:9e:3a:73:fa:1c:a7:17:25:7f:b2:ff:d9:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91
        Validity
            Not Before: Nov 15 08:45:04 2026 GMT
            Not After : Nov 16 10:49:04 2026 GMT
        Subject: CN=9608601972015307C990678849A9BC32E2C67151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d8:5d:79:a5:94:d9:f0:20:ad:d8:fe:db:f5:
                    c1:85:82:96:57:c5:ee:df:23:11:78:9d:b2:9f:24:
                    7a:82:cc:b1:c1:75:54:64:aa:48:8b:33:3e:11:4d:
                    b8:d9:27:21:50:5d:8b:3d:d7:ad:7b:c7:17:10:99:
                    f6:3f:78:55:af:48:00:10:07:d1:d2:16:59:90:e6:
                    d4:42:26:cf:07:1f:7f:83:60:7a:1a:f7:58:9b:12:
                    7b:0c:21:9b:0c:7d:59:f5:9a:fe:9d:f7:15:34:26:
                    43:88:e9:ce:c2:e4:2f:08:ee:58:5b:14:fd:ea:a5:
                    03:ab:a9:6a:68:09:ab:3d:b1:e2:ef:45:dd:90:1b:
                    33:7d:9a:4a:51:8c:de:be:0c:c9:29:11:fd:6c:bd:
                    be:ec:17:cb:06:58:e8:ad:b1:9c:63:e7:c2:1c:ff:
                    a6:f2:7b:6e:77:9e:53:6e:97:08:bb:f2:0c:22:2d:
                    4e:f6:4d:9f:9a:27:84:50:01:4c:35:b3:09:df:fa:
                    30:b0:24:39:f9:31:cb:ec:92:9a:19:75:f5:48:a7:
                    38:48:ee:72:f1:c3:2f:5a:ab:3f:e4:1f:d8:2e:b1:
                    f9:9e:14:7b:1f:66:74:84:d8:41:50:70:62:fb:99:
                    5a:be:d0:44:81:81:4e:cd:bf:24:15:d3:83:e0:6c:
                    6e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:08:60:19:72:01:53:07:C9:90:67:88:49:A9:BC:32:E2:C6:71:51
            X509v3 Authority Key Identifier:
                keyid:9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0a:2f:c2:3d:d8:07:91:25:7c:6a:f1:71:ff:df:99:32:9d:
         3a:08:4f:e7:cc:78:55:c1:ed:f9:06:5a:86:76:bb:8f:a6:6b:
         7e:cc:aa:91:2d:7c:c9:a7:26:1f:83:fc:8d:15:b9:21:e5:d5:
         ac:f1:28:5d:60:11:b9:37:01:f0:d0:ee:b0:87:c4:3f:4e:3f:
         36:cb:c5:0c:21:58:09:57:9b:9e:50:c3:75:e1:a4:50:aa:8c:
         04:fd:c3:ef:22:e5:ee:84:5c:a8:61:ef:1e:66:5c:e9:fd:f7:
         07:6b:a9:15:05:63:a1:90:45:6e:c7:f2:90:9b:2f:45:52:a6:
         c9:48:f3:fe:54:50:91:c6:94:55:cf:b8:51:88:98:60:cd:fa:
         0d:38:bf:d6:69:a8:b1:a7:e5:b9:a2:f3:4c:9f:d9:ad:93:54:
         44:36:af:99:2e:23:db:81:66:0f:60:26:39:85:f5:28:f0:e2:
         e1:c6:4c:3b:43:9a:76:84:01:56:df:ac:eb:ec:a1:27:5d:25:
         f1:02:7a:12:f3:82:d0:6a:68:4a:71:c9:9f:49:e0:9b:de:66:
         e5:ef:60:64:fd:01:1c:ce:f4:c9:87:c3:1d:70:c5:cb:05:28:
         09:f6:4f:a2:54:d7:77:04:63:ce:74:93:6e:70:45:98:32:8b:
         dc:4f:c0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:42:42 2026 by rpki-client