$ rpki-client -vvf rpki.luys.cloud/repo/LY-RPKI/1/47717A8A2E301D872DAC129F2CBAC587F01A0813.mft File: 47717A8A2E301D872DAC129F2CBAC587F01A0813.mft (raw, json) Hash identifier: cjs0oVcl4hcdz/bSBTbOiicHm4BYRUsauwQcVsA/gg8= Subject key identifier: D9:ED:F5:86:3B:B3:41:5F:22:D2:04:7E:05:2D:DF:88:EB:36:8C:3E Authority key identifier: 47:71:7A:8A:2E:30:1D:87:2D:AC:12:9F:2C:BA:C5:87:F0:1A:08:13 Certificate issuer: /CN=47717A8A2E301D872DAC129F2CBAC587F01A0813 Certificate serial: 6D6B9D84C58AF0995708E2C43431FF56777B7202 Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/47717A8A2E301D872DAC129F2CBAC587F01A0813.cer Subject info access: rsync://rpki.luys.cloud/repo/LY-RPKI/1/47717A8A2E301D872DAC129F2CBAC587F01A0813.mft Manifest number: 07A8 Signing time: Tue 29 Apr 2025 14:38:29 +0000 Manifest this update: Tue 29 Apr 2025 14:33:29 +0000 Manifest next update: Wed 30 Apr 2025 14:50:29 +0000 Files and hashes: 1: 47717A8A2E301D872DAC129F2CBAC587F01A0813.crl (hash: DZrEyTN+ZLhj08O3ndZyPZUc/VOEevtyWtSbkmI5EK4=) Validation: OK Signature path: rsync://rpki.luys.cloud/repo/LY-RPKI/1/47717A8A2E301D872DAC129F2CBAC587F01A0813.crl rsync://rpki.luys.cloud/repo/LY-RPKI/1/47717A8A2E301D872DAC129F2CBAC587F01A0813.mft rsync://sakuya.nat.moe/repo/NATOCA/1/47717A8A2E301D872DAC129F2CBAC587F01A0813.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 12:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6b:9d:84:c5:8a:f0:99:57:08:e2:c4:34:31:ff:56:77:7b:72:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47717A8A2E301D872DAC129F2CBAC587F01A0813 Validity Not Before: Apr 29 14:33:29 2025 GMT Not After : Apr 30 14:50:29 2025 GMT Subject: CN=D9EDF5863BB3415F22D2047E052DDF88EB368C3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:61:7e:4e:90:eb:13:b3:0f:ae:4f:37:a2:9a: bc:f4:24:60:22:ae:da:fb:f2:93:9f:b1:9e:28:13: 39:f9:41:6c:dc:b9:9a:08:6b:02:df:14:ba:70:07: eb:e8:79:a2:40:0c:ed:a1:a0:f3:ef:3e:d6:68:0b: ef:15:30:40:ce:e0:37:64:e3:43:f4:2c:09:1e:69: 33:8c:1b:0f:96:82:5b:27:58:3e:f3:74:96:ec:4d: 97:e7:2f:ec:73:5d:b3:fc:5a:de:12:9c:ec:b5:bd: 61:4d:21:30:0c:f5:36:65:eb:25:43:20:3c:eb:24: 6d:43:59:ad:d4:84:03:9e:26:01:2c:04:15:93:ae: 55:26:80:0e:39:69:a3:18:4e:80:98:51:40:70:4e: bd:85:65:3a:09:0c:b1:2a:e0:35:00:56:68:62:3d: 1c:c6:87:f8:2e:00:5c:42:35:67:2a:99:96:37:52: 40:3f:21:23:35:fa:43:c5:01:f2:80:88:81:d3:d8: 01:77:f9:24:89:6f:25:95:dc:8c:6e:51:75:2f:30: 13:4c:06:31:52:13:39:71:14:79:d9:57:6f:6d:09: 48:8a:13:b4:d6:32:d6:d2:d1:9e:55:ff:d1:de:1d: c8:30:0c:e4:ae:f4:09:a0:7a:f4:92:74:be:60:91: 60:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:ED:F5:86:3B:B3:41:5F:22:D2:04:7E:05:2D:DF:88:EB:36:8C:3E X509v3 Authority Key Identifier: keyid:47:71:7A:8A:2E:30:1D:87:2D:AC:12:9F:2C:BA:C5:87:F0:1A:08:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.luys.cloud/repo/LY-RPKI/1/47717A8A2E301D872DAC129F2CBAC587F01A0813.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/47717A8A2E301D872DAC129F2CBAC587F01A0813.cer Subject Information Access: Signed Object - URI:rsync://rpki.luys.cloud/repo/LY-RPKI/1/47717A8A2E301D872DAC129F2CBAC587F01A0813.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:63:22:ed:aa:c1:0c:0c:29:06:ac:44:02:29:b2:9b:1e:1b: 92:cc:fa:fe:a4:da:5b:21:cc:2d:27:f6:7c:c4:6e:06:21:12: 4f:4c:45:38:97:70:91:51:f4:aa:f1:9a:56:96:c3:ed:5a:ef: 6b:19:bb:26:72:e0:55:0f:fc:f9:87:e8:91:26:9c:96:63:73: e2:13:16:02:b3:ee:01:a4:89:07:15:06:c4:db:d4:54:ff:0f: 81:2f:fb:02:79:d8:7a:2f:83:9f:30:6b:3a:44:aa:48:84:c5: 4f:63:3c:97:f5:38:02:33:ea:03:4b:11:92:95:5d:05:8a:71: 78:04:3b:af:81:b0:18:e4:0d:75:e9:f3:a6:60:3f:01:4f:d2: 52:37:7e:e6:3f:c0:73:ad:17:7f:d3:0b:94:cf:f6:c9:a9:bd: 0d:50:ff:fd:68:13:00:1d:88:37:2f:02:8b:0e:07:3c:e0:58: a5:45:de:e3:85:25:7e:13:1b:72:91:a7:b5:b3:3d:8b:07:d6: b9:38:83:9f:2e:bf:8a:85:2c:48:35:bf:b7:d0:fc:a1:8d:6f: cd:0d:e9:65:cb:67:14:65:f3:09:35:d1:92:5a:d4:48:cb:ec: e2:dd:b6:8c:d4:f1:15:2a:dd:a8:ac:cb:80:6a:0e:dc:e9:40: 81:f8:7d:7a -----BEGIN CERTIFICATE----- MIIE5DCCA8ygAwIBAgIUbWudhMWK8JlXCOLENDH/Vnd7cgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc3MTdBOEEyRTMwMUQ4NzJEQUMxMjlGMkNCQUM1ODdG MDFBMDgxMzAeFw0yNTA0MjkxNDMzMjlaFw0yNTA0MzAxNDUwMjlaMDMxMTAvBgNV BAMTKEQ5RURGNTg2M0JCMzQxNUYyMkQyMDQ3RTA1MkRERjg4RUIzNjhDM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnYX5OkOsTsw+uTzeimrz0JGAi rtr78pOfsZ4oEzn5QWzcuZoIawLfFLpwB+voeaJADO2hoPPvPtZoC+8VMEDO4Ddk 40P0LAkeaTOMGw+WglsnWD7zdJbsTZfnL+xzXbP8Wt4SnOy1vWFNITAM9TZl6yVD IDzrJG1DWa3UhAOeJgEsBBWTrlUmgA45aaMYToCYUUBwTr2FZToJDLEq4DUAVmhi PRzGh/guAFxCNWcqmZY3UkA/ISM1+kPFAfKAiIHT2AF3+SSJbyWV3IxuUXUvMBNM BjFSEzlxFHnZV29tCUiKE7TWMtbS0Z5V/9HeHcgwDOSu9AmgevSSdL5gkWDzAgMB AAGjggHuMIIB6jAdBgNVHQ4EFgQU2e31hjuzQV8i0gR+BS3fiOs2jD4wHwYDVR0j BBgwFoAUR3F6ii4wHYctrBKfLLrFh/AaCBMwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraS5sdXlzLmNsb3VkL3JlcG8vTFktUlBL SS8xLzQ3NzE3QThBMkUzMDFEODcyREFDMTI5RjJDQkFDNTg3RjAxQTA4MTMuY3Js MG0GCCsGAQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9zYWt1eWEubmF0 Lm1vZS9yZXBvL05BVE9DQS8xLzQ3NzE3QThBMkUzMDFEODcyREFDMTI5RjJDQkFD NTg3RjAxQTA4MTMuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5 bmM6Ly9ycGtpLmx1eXMuY2xvdWQvcmVwby9MWS1SUEtJLzEvNDc3MTdBOEEyRTMw MUQ4NzJEQUMxMjlGMkNCQUM1ODdGMDFBMDgxMy5tZnQwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUG CCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHdjIu2qwQwM KQasRAIpspseG5LM+v6k2lshzC0n9nzEbgYhEk9MRTiXcJFR9KrxmlaWw+1a72sZ uyZy4FUP/PmH6JEmnJZjc+ITFgKz7gGkiQcVBsTb1FT/D4Ev+wJ52Hovg58wazpE qkiExU9jPJf1OAIz6gNLEZKVXQWKcXgEO6+BsBjkDXXp86ZgPwFP0lI3fuY/wHOt F3/TC5TP9smpvQ1Q//1oEwAdiDcvAosOBzzgWKVF3uOFJX4TG3KRp7WzPYsH1rk4 g58uv4qFLEg1v7fQ/KGNb80N6WXLZxRl8wk10ZJa1EjL7OLdtozU8RUq3aisy4Bq DtzpQIH4fXo= -----END CERTIFICATE-----Generated at Wed Apr 30 03:41:58 2025 by rpki-client