Manifest
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: 9B57pFZd9U5gOlP98H213hz25fjonLVhgOCoDYux9P0=
Subject key identifier: 7A:7B:B4:1A:FB:D7:AC:31:14:CE:DA:1D:2D:4C:85:91:55:66:DD:B2
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 405518F4BD2AE8DA730D1BF707B2C79115163D69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0AE0
Signing time: Sat 14 Jun 2025 13:48:00 +0000
Manifest this update: Sat 14 Jun 2025 13:43:00 +0000
Manifest next update: Sun 15 Jun 2025 13:48:00 +0000
Files and hashes: 1: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: 7tSMds9slTLNdg1TC5/B/+p57yh4Zbc7W3GSXve70Dc=)
2: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: L9SKOfzlWCbf3ZEfwVUoxYt9hsBGjULfYjAnC6NGFMc=)
3: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: lOH37mNZ7GeDqNovMClGKLJ0pYQzmLTzievvpRu1ycw=)
4: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: /jBviPSFdFKZh4Pbl7qtj9AMKAzv67R3Ny4r/CA/pdU=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Jun 2025 13:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:55:18:f4:bd:2a:e8:da:73:0d:1b:f7:07:b2:c7:91:15:16:3d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Jun 14 13:43:00 2025 GMT
Not After : Jun 21 13:48:00 2025 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d6:7c:c3:3e:44:13:42:bd:63:76:a9:73:25:
c2:4b:b2:60:ef:69:d9:a7:14:8c:13:4d:7b:ad:47:
2c:64:a0:d0:28:53:00:74:8d:09:63:6a:a5:12:df:
fd:25:4c:56:24:55:38:d4:df:b5:56:f3:1e:06:bc:
fa:e5:cf:3d:06:ff:2e:d1:50:9b:11:84:ed:9e:ff:
ca:11:a4:ab:5b:69:36:cd:be:84:34:c7:47:c0:fc:
56:90:44:53:83:c0:3e:cc:04:8d:ad:4e:ac:66:25:
34:91:d7:63:29:0e:fa:13:e6:54:4b:4a:ca:c6:3a:
ca:52:83:5a:6d:e8:d1:ce:07:c5:3e:69:ea:e5:55:
79:5d:65:c9:e4:26:1f:3c:06:b2:a7:ea:b3:d6:5b:
63:62:f3:2c:b7:9e:e8:56:c3:c1:f4:ec:23:e8:17:
8c:ca:45:12:13:7f:2a:53:ee:fc:17:70:9b:8d:85:
25:86:b3:fe:99:41:ed:5f:45:5f:ed:c8:96:29:9b:
80:4b:ee:9f:c1:cd:45:0b:76:8e:05:4a:d1:df:81:
c7:3a:9e:52:b5:81:38:ef:3c:c3:23:9f:bc:8a:6e:
6e:d1:eb:f3:a1:d5:ca:bf:1c:79:d2:70:49:67:28:
5b:31:ce:a4:7c:97:d8:e2:29:32:2f:a8:5a:aa:b3:
9f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7B:B4:1A:FB:D7:AC:31:14:CE:DA:1D:2D:4C:85:91:55:66:DD:B2
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:af:aa:8c:a2:1d:d2:f8:d7:b1:74:f1:f1:72:1b:c8:8f:2f:
06:98:d9:a2:bc:ad:96:e4:e7:ca:e8:e1:39:a4:89:35:d0:b4:
db:24:41:16:c6:2a:7b:6b:25:4d:c5:83:27:0c:b2:df:45:ff:
a5:a5:45:9a:85:a8:8c:b0:44:f7:e2:cd:0a:a8:f2:22:fb:bc:
b8:15:62:97:54:62:46:33:10:76:e4:86:e1:60:8b:fb:77:bf:
4d:07:23:8d:51:0d:be:3a:49:a4:50:66:d0:77:06:77:7a:7b:
c2:89:44:8f:44:5b:5e:99:a3:f1:2c:d4:80:0c:f9:d8:7a:a1:
32:74:8f:ef:05:b3:10:71:b8:70:cb:42:1e:cc:5d:cf:bf:35:
9f:f6:86:b7:72:9c:ed:d2:5d:12:ec:d1:93:49:aa:6d:9d:1b:
a5:ad:e5:2a:c8:b3:07:e7:9e:36:17:14:2a:22:d4:ca:aa:10:
26:a2:85:81:19:c9:22:14:de:e3:1d:bc:c5:ff:b7:4e:47:e7:
a9:91:c6:81:7b:05:e2:dd:13:38:bc:63:19:d7:cc:26:6b:f6:
b9:56:46:a3:46:0f:20:38:6b:39:33:8e:a0:d1:c7:ee:83:a8:
1d:6e:41:d7:77:1f:7d:32:b4:70:f2:42:d6:44:9a:ef:41:57:
8f:a3:bf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:55:02 2025 by rpki-client