Manifest
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: N/250QK9ASHPvqFMLLt0yPL2kMkKIskR6dcjV0xwZdQ=
Subject key identifier: BC:3D:D0:6C:10:05:F6:2D:41:E2:FC:23:80:25:BB:DC:44:C6:4D:E9
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 36DCBA1B153402439F7C52F416EF368F2FFAFD1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0C67
Signing time: Sun 01 Mar 2026 21:48:00 +0000
Manifest this update: Sun 01 Mar 2026 21:43:00 +0000
Manifest next update: Mon 02 Mar 2026 21:48:00 +0000
Files and hashes: 1: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: /jBviPSFdFKZh4Pbl7qtj9AMKAzv67R3Ny4r/CA/pdU=)
2: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: M1Aw8kDAtVwJe1cGpFIH+V7h/3Lczhi4fkp8J1zsqtU=)
3: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: h+0EP79o3dt9j8KeOFXtuEikFl92W4Nmukl+8hYyBEk=)
4: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: L9SKOfzlWCbf3ZEfwVUoxYt9hsBGjULfYjAnC6NGFMc=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Mar 2026 21:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:dc:ba:1b:15:34:02:43:9f:7c:52:f4:16:ef:36:8f:2f:fa:fd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Mar 1 21:43:00 2026 GMT
Not After : Mar 8 21:48:00 2026 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:fd:e4:17:d4:25:c3:41:d1:64:77:9d:25:
b7:0d:b4:0a:bc:f9:78:cf:53:c7:73:9a:25:91:b9:
25:ed:57:0e:a6:48:e1:f4:a9:e0:b7:ae:d0:74:71:
07:d1:de:25:cb:5c:cf:5a:fb:34:88:1f:9c:f3:6b:
a5:f3:1d:08:0b:fc:14:24:85:37:8f:21:55:e7:e7:
45:b6:62:51:6f:64:fb:54:db:c5:b3:f1:ae:7b:dd:
d1:6d:bd:b6:50:45:ae:86:14:8f:77:b1:6f:8d:97:
47:14:e3:9a:30:51:7f:8d:0e:70:38:c9:fc:f7:6e:
21:85:29:54:6e:96:8f:91:6c:3c:ac:d4:7a:1b:8d:
ee:dc:f9:f6:ab:9e:2a:75:1f:52:fe:4c:fd:60:5b:
e2:f4:89:c4:72:b9:29:cf:e4:d2:f9:61:da:c3:9f:
a5:b3:57:00:2e:96:0a:0a:16:02:ad:7c:55:44:6b:
40:c2:15:c2:d2:ab:3a:a2:ab:82:f6:01:71:3b:b8:
3e:11:21:7e:ba:07:b3:7d:96:a9:da:fe:4b:c9:22:
4e:11:55:f6:57:e3:11:40:de:08:71:2b:ab:e3:dd:
10:52:4b:9b:7a:d0:6a:0a:0d:42:63:f1:48:af:8f:
b2:66:f3:89:00:96:6c:81:6b:62:4f:8f:72:c4:cc:
96:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3D:D0:6C:10:05:F6:2D:41:E2:FC:23:80:25:BB:DC:44:C6:4D:E9
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:99:31:63:df:10:f9:ce:79:fc:f2:c6:13:67:e6:eb:52:37:
7b:d7:ae:86:d1:64:b4:d7:91:4d:f3:8a:57:b3:1e:2f:98:c5:
d4:0d:7c:ee:c5:14:92:01:7c:4a:42:bc:c9:3d:18:5b:3d:61:
8c:95:51:9e:3c:3d:32:82:6b:fa:ab:15:3b:b9:66:10:05:0a:
b9:0b:53:8e:b6:3b:c6:c9:1c:25:f4:bf:16:36:52:fa:1e:f4:
36:e7:0d:a8:c6:b3:88:01:86:51:8e:d9:1e:c9:59:4e:67:4d:
c2:44:c7:fb:38:db:5b:22:9b:ed:23:df:dd:30:4a:a3:9e:6e:
f5:12:e3:83:ec:f9:95:a5:ae:03:78:58:d3:2f:50:08:1e:4c:
38:bb:ed:d7:cd:41:2c:33:f6:09:25:2b:7e:7e:03:0a:68:9d:
be:b2:06:89:a3:05:33:7f:db:f2:8a:17:9d:cf:16:7b:31:6d:
75:62:c9:e6:f0:33:8e:eb:b3:3f:73:12:71:dd:bf:d1:e8:1d:
6b:40:4d:52:b3:46:fa:a4:99:4c:e2:2b:17:fe:62:ea:d7:91:
72:7b:2a:60:a6:71:a2:cf:17:1e:3b:22:4d:9e:39:ec:a3:a2:
6c:0e:12:23:3a:f5:2a:fd:62:fd:4f:ba:33:87:be:a8:45:9e:
73:7f:87:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:34:38 2026 by rpki-client