Manifest
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: 5DRGJidYe0x+Y2ddn5d2SXHCBDB/huCScVcfBwCoaAc=
Subject key identifier: 6E:C7:BD:7F:FF:B0:6E:0D:2A:86:43:5D:1F:18:6A:64:1E:24:0B:9E
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 19F1026E320C4BD5A944B8B5401F32B5E0AC7930
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0B32
Signing time: Fri 08 Aug 2025 07:06:00 +0000
Manifest this update: Fri 08 Aug 2025 07:01:00 +0000
Manifest next update: Sat 09 Aug 2025 07:06:00 +0000
Files and hashes: 1: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: L9SKOfzlWCbf3ZEfwVUoxYt9hsBGjULfYjAnC6NGFMc=)
2: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: lOH37mNZ7GeDqNovMClGKLJ0pYQzmLTzievvpRu1ycw=)
3: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: /jBviPSFdFKZh4Pbl7qtj9AMKAzv67R3Ny4r/CA/pdU=)
4: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: Xopzz9oARzkkmxFU3Z15uWE9qmRXpvBE14KhREhiMrQ=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 09 Aug 2025 07:06:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:f1:02:6e:32:0c:4b:d5:a9:44:b8:b5:40:1f:32:b5:e0:ac:79:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Aug 8 07:01:00 2025 GMT
Not After : Aug 15 07:06:00 2025 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cb:69:61:7e:ab:b3:8c:99:10:80:45:f5:af:
98:cd:58:d2:11:98:2f:d6:51:b1:55:4d:8e:98:27:
40:a4:f0:36:8d:cf:60:1f:66:be:0c:81:c4:25:52:
01:0c:02:18:5f:c5:b0:79:8b:d2:11:e8:ec:6e:cf:
61:aa:70:95:b2:f3:3a:fd:03:c3:3c:ad:f2:90:ca:
47:5f:ad:f8:15:ab:8a:3b:0f:2d:a3:5f:29:68:24:
c3:9b:1a:0b:94:85:0a:ba:9d:c0:ae:0a:04:1a:c1:
77:47:a8:20:c7:2f:7c:c9:ed:19:2f:49:ff:f3:7c:
19:32:19:33:f3:85:15:75:44:42:2a:22:fa:57:c1:
a5:be:af:93:65:1c:bf:4b:56:5e:b4:ca:3b:8f:2b:
dd:55:cd:b6:1b:f9:55:e4:28:4f:08:1a:09:ad:ea:
7a:d4:8e:a0:da:ec:55:88:c4:48:57:8d:2a:0a:29:
be:33:8f:99:61:ab:71:31:7b:01:07:12:e9:b9:2c:
c4:e8:cd:f2:2f:4c:46:c1:0c:5b:5e:cc:ce:aa:65:
b8:b1:ec:40:56:02:00:5a:47:46:56:4c:d8:0c:8a:
ac:0a:1d:01:0e:88:a8:c4:90:82:49:8f:64:26:13:
b8:ec:b0:cb:cb:23:55:bf:24:41:b9:1c:83:d7:3b:
01:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C7:BD:7F:FF:B0:6E:0D:2A:86:43:5D:1F:18:6A:64:1E:24:0B:9E
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f5:26:b8:cf:06:9e:17:85:b3:d3:1a:2e:d7:9c:5e:a8:fb:
24:56:a5:b8:5e:94:c6:10:6f:34:05:02:0e:cc:7f:65:01:32:
79:a1:ca:35:96:69:97:64:67:91:4a:70:bb:69:c9:b8:9d:bc:
72:12:20:50:a2:52:0e:0a:05:70:05:4a:67:8b:8a:53:f5:78:
63:7f:7e:fa:9f:2f:0d:f9:2c:0f:d8:d2:fb:c5:71:9b:81:c2:
22:d1:64:a5:75:14:28:32:6d:7f:4b:2c:61:92:c4:e8:a5:48:
9f:6e:d2:d5:da:28:13:e3:a3:aa:94:c7:47:bb:68:df:71:36:
29:69:fe:b3:0d:cd:7f:9c:12:e9:f6:47:60:24:42:0c:e1:1e:
54:c2:85:28:99:bf:10:f5:38:e5:1a:d3:c1:25:34:08:10:e6:
d5:d1:45:ea:79:90:fb:d2:50:9b:0a:24:0a:dd:50:95:e6:40:
f8:53:20:9c:83:a8:21:48:c5:9f:4e:92:5e:f5:47:8a:54:ab:
26:d6:bf:8f:50:11:51:fd:21:58:1d:c4:d8:4c:5b:26:20:c2:
31:34:f4:62:24:47:71:35:ee:59:16:a3:d3:e9:9b:42:70:4f:
15:2c:7e:28:57:cc:a0:cd:16:43:b8:2d:6c:05:53:37:07:ef:
40:b7:90:5c
-----BEGIN CERTIFICATE-----
MIIHBDCCBeygAwIBAgIUGfECbjIMS9WpRLi1QB8yteCseTAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTRFNzUwMDAwMTEwLwYDVQQFEyg1QTE3OTY0OEIz
RUYyMzY5RENFN0JEQjU4MTQwRkY3REM3MDYwQUJGMB4XDTI1MDgwODA3MDEwMFoX
DTI1MDgxNTA3MDYwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBEQUNCNjk2MTdFQUJCMzhDOTkxMDgwNDVGNUFGOThDRDU4RDIxMTk4MkZE
NjUxQjE1NTREOEU5ODI3NDBBNEYwMzY4RENGNjAxRjY2QkUwQzgxQzQyNTUyMDEw
QzAyMTg1RkM1QjA3OThCRDIxMUU4RUM2RUNGNjFBQTcwOTVCMkYzM0FGRDAzQzMz
Q0FERjI5MENBNDc1RkFERjgxNUFCOEEzQjBGMkRBMzVGMjk2ODI0QzM5QjFBMEI5
NDg1MEFCQTlEQzBBRTBBMDQxQUMxNzc0N0E4MjBDNzJGN0NDOUVEMTkyRjQ5RkZG
MzdDMTkzMjE5MzNGMzg1MTU3NTQ0NDIyQTIyRkE1N0MxQTVCRUFGOTM2NTFDQkY0
QjU2NUVCNENBM0I4RjJCREQ1NUNEQjYxQkY5NTVFNDI4NEYwODFBMDlBREVBN0FE
NDhFQTBEQUVDNTU4OEM0NDg1NzhEMkEwQTI5QkUzMzhGOTk2MUFCNzEzMTdCMDEw
NzEyRTlCOTJDQzRFOENERjIyRjRDNDZDMTBDNUI1RUNDQ0VBQTY1QjhCMUVDNDA1
NjAyMDA1QTQ3NDY1NjRDRDgwQzhBQUMwQTFEMDEwRTg4QThDNDkwODI0OThGNjQy
NjEzQjhFQ0IwQ0JDQjIzNTVCRjI0NDFCOTFDODNENzNCMDE4MzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDay2lhfquzjJkQgEX1r5jN
WNIRmC/WUbFVTY6YJ0Ck8DaNz2AfZr4MgcQlUgEMAhhfxbB5i9IR6Oxuz2GqcJWy
8zr9A8M8rfKQykdfrfgVq4o7Dy2jXyloJMObGguUhQq6ncCuCgQawXdHqCDHL3zJ
7RkvSf/zfBkyGTPzhRV1REIqIvpXwaW+r5NlHL9LVl60yjuPK91VzbYb+VXkKE8I
Ggmt6nrUjqDa7FWIxEhXjSoKKb4zj5lhq3ExewEHEum5LMTozfIvTEbBDFtezM6q
Zbix7EBWAgBaR0ZWTNgMiqwKHQEOiKjEkIJJj2QmE7jssMvLI1W/JEG5HIPXOwGD
AgMBAAGjggH7MIIB9zAdBgNVHQ4EFgQUbse9f/+wbg0qhkNdHxhqZB4kC54wHwYD
VR0jBBgwFoAUWheWSLPvI2nc5721gUD/fccGCr8wDgYDVR0PAQH/BAQDAgeAMGIG
A1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRP
Q0EvMS81QTE3OTY0OEIzRUYyMzY5RENFN0JEQjU4MTQwRkY3REM3MDYwQUJGLmNy
bDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZG
Mi9XaGVXU0xQdkkybmM1NzIxZ1VEX2ZjY0dDcjguY2VyMG0GCCsGAQUFBwELBGEw
XzBdBggrBgEFBQcwC4ZRcnN5bmM6Ly9zYWt1eWEubmF0Lm1vZS9yZXBvL05BVE9D
QS8xLzVBMTc5NjQ4QjNFRjIzNjlEQ0U3QkRCNTgxNDBGRjdEQzcwNjBBQkYubWZ0
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE
AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCS9Sa4zwaeF4Wz0xou15xeqPskVqW4XpTGEG80BQIOzH9lATJ5oco1
lmmXZGeRSnC7acm4nbxyEiBQolIOCgVwBUpni4pT9Xhjf376ny8N+SwP2NL7xXGb
gcIi0WSldRQoMm1/SyxhksTopUifbtLV2igT46OqlMdHu2jfcTYpaf6zDc1/nBLp
9kdgJEIM4R5UwoUomb8Q9TjlGtPBJTQIEObV0UXqeZD70lCbCiQK3VCV5kD4UyCc
g6ghSMWfTpJe9UeKVKsm1r+PUBFR/SFYHcTYTFsmIMIxNPRiJEdxNe5ZFqPT6ZtC
cE8VLH4oV8ygzRZDuC1sBVM3B+9At5Bc
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:56:43 2025 by rpki-client