$ rpki-client -vvf rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft File: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft (raw, json) Hash identifier: Eg6vqiIV2QImra3zjouZ7YQcbSOvNV7UzPJBfnezmL8= Subject key identifier: 95:99:29:D5:2A:84:FA:55:26:F1:7F:73:25:D8:F3:05:25:1F:AB:8C Authority key identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91 Certificate issuer: /CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91 Certificate serial: 7BED04950D3F9ABB1D5DF92C929822B6C7232B65 Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer Subject info access: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft Manifest number: 0426 Signing time: Sun 10 Aug 2025 11:30:40 +0000 Manifest this update: Sun 10 Aug 2025 11:25:40 +0000 Manifest next update: Mon 11 Aug 2025 14:19:40 +0000 Files and hashes: 1: 323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa (hash: NOwi2jYQ8FHV+5iFygC9Tyw/h3+CkwWSkGkdIOKT9Zg=) 2: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl (hash: SA5uxpNxJaDEbNbCtJEtfuemZb4QF4Ll8qyJA5MbKjE=) Validation: OK Signature path: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ed:04:95:0d:3f:9a:bb:1d:5d:f9:2c:92:98:22:b6:c7:23:2b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91 Validity Not Before: Aug 10 11:25:40 2025 GMT Not After : Aug 11 14:19:40 2025 GMT Subject: CN=959929D52A84FA5526F17F7325D8F305251FAB8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:69:f9:a0:ce:b9:85:bc:c2:1c:aa:7b:a2:7f: dc:b1:0e:a6:54:08:f9:c7:4d:9f:1f:0b:e5:5e:73: 64:88:a8:24:64:b3:e8:bd:51:be:fa:25:9b:63:92: 85:4c:e2:7b:26:52:19:dd:19:05:85:b3:3b:02:77: 43:c0:d1:50:13:77:19:99:12:8c:97:9c:8d:23:d0: b3:33:72:82:8b:2f:df:b3:4b:74:b5:7f:67:04:0a: bb:e0:93:6d:6e:e5:32:2a:20:02:cf:d3:3b:ac:15: b0:b7:3a:b9:ff:24:3b:2f:25:c2:2b:32:f1:f2:f4: 7a:3c:55:f4:ae:46:de:0f:77:ef:16:60:11:c2:55: 3b:6e:e1:d5:05:aa:6b:d6:75:02:57:5f:50:a8:13: 87:40:ac:1c:05:64:d9:2e:3d:b7:d9:b0:0f:e5:db: 48:e2:1c:79:a3:57:51:24:10:02:04:34:23:ca:9a: fe:9c:2c:9b:f7:83:a5:51:cd:63:8f:19:6d:9b:ce: 5e:44:07:1e:08:5f:48:d5:75:54:44:19:4c:41:3c: bf:48:c5:5d:41:7a:37:da:ae:59:39:5e:f8:30:d7: 35:2e:72:2c:c3:c2:97:c8:78:99:bf:ba:6b:0b:ff: e2:97:34:f5:05:8f:5a:4d:e2:52:43:56:cf:21:79: cd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:99:29:D5:2A:84:FA:55:26:F1:7F:73:25:D8:F3:05:25:1F:AB:8C X509v3 Authority Key Identifier: keyid:9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a8:7a:36:02:fe:dd:2c:d9:25:6a:c4:7c:13:04:46:0d:46: ea:da:79:e3:c8:0e:1e:07:17:19:ac:57:0d:a6:20:ce:a6:96: d0:7b:3c:34:2d:81:e9:e7:86:0f:cd:87:b6:68:d0:d5:a5:cf: e6:dc:db:8a:ab:67:89:2c:9b:ee:56:97:2b:73:f5:0a:2e:e0: ee:e7:af:ba:88:c2:0d:a2:87:f1:3e:10:0b:65:14:17:a8:8b: e2:1a:f7:36:0e:13:7c:88:6f:bf:05:b6:9c:28:75:b2:89:93: af:0e:e5:23:fe:16:a2:ed:cf:0a:37:f1:ea:ab:c2:1d:25:75: 2d:83:0c:5b:b6:38:b5:be:4d:03:69:5e:03:68:44:44:77:1e: 99:0f:c3:2d:8f:e4:a2:3a:9e:72:7e:68:9d:7d:14:71:cb:e3: e2:13:2d:64:86:9c:40:e8:5c:0a:e6:e4:d6:ca:69:3d:6c:28: 28:2c:38:61:7d:c1:6b:4b:73:3a:93:4b:29:d2:a1:4f:c3:bc: 36:94:7f:16:8f:13:d3:dc:2d:4b:b0:61:d6:f5:ae:3f:63:ae: 81:1f:a6:28:5d:fd:7a:14:4f:5f:16:71:39:35:69:aa:39:6a: 4d:2a:fa:03:56:99:4d:7c:53:63:b1:5e:a4:54:b2:53:1e:ad: 68:c3:95:14 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgIUe+0ElQ0/mrsdXfkskpgitscjK2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFOUI0QzMwOTAyMDZENUIyOENFRDRGNTE3OTUzOUY2 OThBREI5MTAeFw0yNTA4MTAxMTI1NDBaFw0yNTA4MTExNDE5NDBaMDMxMTAvBgNV BAMTKDk1OTkyOUQ1MkE4NEZBNTUyNkYxN0Y3MzI1RDhGMzA1MjUxRkFCOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6afmgzrmFvMIcqnuif9yxDqZU CPnHTZ8fC+Vec2SIqCRks+i9Ub76JZtjkoVM4nsmUhndGQWFszsCd0PA0VATdxmZ EoyXnI0j0LMzcoKLL9+zS3S1f2cECrvgk21u5TIqIALP0zusFbC3Orn/JDsvJcIr MvHy9Ho8VfSuRt4Pd+8WYBHCVTtu4dUFqmvWdQJXX1CoE4dArBwFZNkuPbfZsA/l 20jiHHmjV1EkEAIENCPKmv6cLJv3g6VRzWOPGW2bzl5EBx4IX0jVdVREGUxBPL9I xV1Bejfarlk5Xvgw1zUucizDwpfIeJm/umsL/+KXNPUFj1pN4lJDVs8hec3RAgMB AAGjggICMIIB/jAdBgNVHQ4EFgQUlZkp1SqE+lUm8X9zJdjzBSUfq4wwHwYDVR0j BBgwFoAUn+m0wwkCBtWyjO1PUXlTn2mK25EwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8v bW5paHljLXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1MTc5NTM5RjY5 OEFEQjkxLmNybDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8v c2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS85RkU5QjRDMzA5MDIwNkQ1QjI4 Q0VENEY1MTc5NTM5RjY5OEFEQjkxLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYB BQUHMAuGXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8vbW5paHlj LXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1MTc5NTM5RjY5OEFEQjkx Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEALKh6NgL+3SzZJWrEfBMERg1G6tp548gOHgcXGaxXDaYgzqaW 0Hs8NC2B6eeGD82HtmjQ1aXP5tzbiqtniSyb7laXK3P1Ci7g7uevuojCDaKH8T4Q C2UUF6iL4hr3Ng4TfIhvvwW2nCh1somTrw7lI/4Wou3PCjfx6qvCHSV1LYMMW7Y4 tb5NA2leA2hERHcemQ/DLY/kojqecn5onX0Uccvj4hMtZIacQOhcCubk1sppPWwo KCw4YX3Ba0tzOpNLKdKhT8O8NpR/Fo8T09wtS7Bh1vWuP2OugR+mKF39ehRPXxZx OTVpqjlqTSr6A1aZTXxTY7FepFSyUx6taMOVFA== -----END CERTIFICATE-----Generated at Mon Aug 11 04:38:00 2025 by rpki-client