Manifest
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: hZf1s8eI8F1R4f1BVsO2BjRfzAfOpoMpdC8HwNGIpF8=
Subject key identifier: C7:59:D9:C9:26:51:06:27:EE:9C:7E:61:39:9C:7C:07:B0:5A:87:49
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 13589E0FBB1B2E135D6399E9584412E455480DF8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0A97
Signing time: Sat 26 Apr 2025 21:32:00 +0000
Manifest this update: Sat 26 Apr 2025 21:27:00 +0000
Manifest next update: Sun 27 Apr 2025 21:32:00 +0000
Files and hashes: 1: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: hcG7VB/C6KmitB50fULNFLrMHR8q8s7u567f5d1+GZY=)
2: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: L9SKOfzlWCbf3ZEfwVUoxYt9hsBGjULfYjAnC6NGFMc=)
3: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: /jBviPSFdFKZh4Pbl7qtj9AMKAzv67R3Ny4r/CA/pdU=)
4: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: lOH37mNZ7GeDqNovMClGKLJ0pYQzmLTzievvpRu1ycw=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Apr 2025 21:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:58:9e:0f:bb:1b:2e:13:5d:63:99:e9:58:44:12:e4:55:48:0d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Apr 26 21:27:00 2025 GMT
Not After : May 3 21:32:00 2025 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:d8:f1:51:4a:36:1c:79:be:e4:7e:49:d7:
2f:36:0a:98:33:b4:f7:43:9a:ee:f6:8f:4e:e2:ff:
62:28:4f:f8:c9:cb:c8:e8:06:cd:64:00:b4:d5:2a:
b5:bb:61:7c:c4:78:98:0f:4d:96:64:d3:9c:90:e7:
cb:c0:64:3c:46:19:6a:4a:8d:33:33:b2:be:78:97:
62:ba:3d:99:45:40:e5:fb:09:e3:12:c5:ce:c5:e9:
d2:f3:dd:c3:ec:00:ef:b0:d3:d0:59:c0:37:89:02:
12:d1:d3:ab:6f:dd:35:7b:9a:42:a5:f3:4a:de:5c:
9d:c8:d1:c8:ec:89:a1:cc:e9:c1:9c:2c:72:3c:9f:
ea:cf:22:76:ae:23:83:55:a6:02:3d:38:1b:31:11:
f7:bb:3b:c7:cd:f2:79:21:73:5d:bc:5b:15:36:70:
9f:b8:51:0c:a1:a4:4d:e4:10:bb:47:b0:44:77:da:
11:d2:8e:cf:61:33:7b:23:18:b3:d8:75:02:d3:e3:
89:b6:da:af:a0:0b:c8:07:9d:43:28:7b:36:29:cd:
d4:55:21:6a:1d:a6:00:d2:d7:79:f3:a0:4e:0a:9d:
fb:50:03:d8:9d:c9:19:ff:8b:55:da:71:99:c1:11:
f4:80:fa:14:a9:6d:32:0c:5a:98:19:f0:17:3e:b1:
39:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:59:D9:C9:26:51:06:27:EE:9C:7E:61:39:9C:7C:07:B0:5A:87:49
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:dc:11:2d:8c:27:94:5b:1a:a1:22:0b:1f:e9:93:c3:e0:ca:
84:0e:a1:ab:73:89:63:8c:e4:7e:43:1c:b7:60:55:0d:43:e3:
66:5e:dd:53:eb:cb:ae:08:eb:9d:48:cd:8a:70:f3:80:1f:45:
8c:f3:39:f9:4d:26:6f:41:e4:46:38:56:ba:21:5a:1e:2a:72:
f6:b5:b3:a3:a4:7e:0d:de:45:2a:86:12:b9:9b:41:0d:fc:18:
0e:f2:c2:14:1d:4f:8f:0a:b0:99:a7:f5:a8:de:61:da:41:d9:
36:10:1b:73:3c:a7:c0:c3:8d:2f:80:c1:00:43:e4:56:e5:49:
7f:42:d8:70:c1:e2:9b:40:54:f9:46:58:ab:a1:04:36:8e:e9:
56:13:12:a8:8c:c0:d1:ad:65:e4:c3:0e:64:f8:31:dd:1d:87:
02:b3:55:46:88:a5:9a:4e:3b:64:bf:4f:0f:10:88:a8:a4:bf:
4d:48:98:bf:93:ae:0a:3b:3f:6d:a4:ce:d2:9d:2e:20:a0:2a:
5f:6b:a9:fb:1e:1a:72:9c:cf:3e:33:c3:0a:ab:e5:7f:9d:cf:
95:b2:5b:e9:b2:23:e0:a3:60:a7:99:9e:38:db:b3:ba:66:1a:
18:87:ca:c5:3f:43:b9:6e:3a:ed:33:89:46:7a:39:15:1d:b7:
1e:65:f3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:59:54 2025 by rpki-client