Manifest
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: 0TGD49tHj8ChcJLeUbDKH7f6lZk06XeYlgEZvxzWo7Y=
Subject key identifier: 6C:1B:6A:41:F3:34:ED:FF:A2:E3:ED:13:B7:10:7C:4C:F2:A4:76:B1
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 301BAD1F00AD26564D01E2417339F55DCA2B1BF7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0BB7
Signing time: Wed 05 Nov 2025 01:32:00 +0000
Manifest this update: Wed 05 Nov 2025 01:27:00 +0000
Manifest next update: Thu 06 Nov 2025 01:32:00 +0000
Files and hashes: 1: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: lOH37mNZ7GeDqNovMClGKLJ0pYQzmLTzievvpRu1ycw=)
2: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: CS8RKHna1jp46TU0bKQ8LAeEjELljLh8k7oWqVoxRUI=)
3: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: L9SKOfzlWCbf3ZEfwVUoxYt9hsBGjULfYjAnC6NGFMc=)
4: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: /jBviPSFdFKZh4Pbl7qtj9AMKAzv67R3Ny4r/CA/pdU=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 06 Nov 2025 01:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:1b:ad:1f:00:ad:26:56:4d:01:e2:41:73:39:f5:5d:ca:2b:1b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Nov 5 01:27:00 2025 GMT
Not After : Nov 12 01:32:00 2025 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:c8:c8:61:e4:56:b7:f4:83:1d:1f:0f:71:
66:e6:cc:e7:9b:10:e9:6a:ac:5c:14:d6:9f:b2:f9:
f1:72:68:51:5e:7a:ed:21:5b:55:aa:65:87:55:64:
05:4d:d6:8a:b4:bc:17:fb:ee:ca:a1:82:48:81:82:
a4:ad:e4:57:df:df:7c:78:de:83:c2:f3:c5:a1:49:
45:09:e4:ce:67:de:27:a7:db:18:30:8c:c3:4e:d5:
15:5d:46:ed:0e:b3:23:d2:8f:97:7d:07:7b:d3:8c:
3f:97:01:98:5d:d0:7a:43:b4:55:15:3a:be:22:06:
b0:07:45:96:e5:c9:d5:ad:46:d8:2e:5c:80:93:41:
12:60:d0:5f:0a:c4:ec:68:4a:4f:d6:21:22:81:6b:
e4:8f:ef:43:b3:4c:b1:d9:d5:d9:ec:41:30:04:98:
79:14:6b:83:c4:9c:6d:d3:23:05:58:0c:26:a5:7d:
1c:e5:9b:df:ba:99:f9:51:67:5d:e7:2b:0f:12:51:
06:9e:06:c2:48:e6:96:17:de:2c:d8:c6:82:fe:d4:
34:90:e0:95:e7:29:7e:67:47:32:87:fb:77:0b:9b:
1a:94:03:7b:8a:8e:dd:c0:29:7e:ae:90:eb:d1:95:
e0:86:64:41:85:b0:bc:64:aa:0e:3c:32:a9:86:1e:
39:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1B:6A:41:F3:34:ED:FF:A2:E3:ED:13:B7:10:7C:4C:F2:A4:76:B1
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:4a:7b:01:e2:7c:d7:f3:7b:12:bb:96:72:5e:48:97:98:9e:
ad:ea:f2:9a:17:53:d5:8e:42:ea:db:b5:43:d0:5f:66:65:a1:
60:7a:49:7a:1a:ec:07:c8:90:8b:ac:72:da:68:d7:54:c5:59:
89:8a:fa:6f:23:a8:f5:d2:f9:a3:8e:01:59:fb:5b:c5:a4:1b:
89:c8:8f:b0:4e:86:97:17:ed:03:56:86:65:01:7c:b5:74:c8:
7f:93:b1:34:73:73:c9:1b:cb:a1:61:26:a3:aa:30:7e:74:12:
53:81:b2:13:ce:4e:5e:b6:0f:50:61:bc:da:97:30:a4:7a:04:
a8:5a:48:7f:d1:08:e3:f3:c1:36:e0:65:e1:99:9e:39:47:bc:
72:f5:de:bd:b7:e8:8f:d8:bd:18:3a:72:ac:5c:ff:f2:d8:3b:
d4:d0:b2:52:56:c5:50:0f:36:d0:73:d0:2f:8c:de:eb:61:40:
5c:3e:11:67:82:c7:d9:92:6c:c2:42:8c:52:62:a4:a0:64:f0:
11:19:4b:de:f6:7e:f1:82:eb:19:00:f8:57:99:be:71:40:6b:
8e:66:9d:02:a4:da:b0:f5:11:3d:db:b2:78:af:49:89:7c:2b:
f9:8b:88:1f:69:c4:46:06:d5:2e:0e:6b:c5:5d:f8:3a:a2:1c:
db:71:47:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:47:53 2025 by rpki-client