$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer File: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (raw, json) Hash identifier: B9JNd2JEVLrX69QAHya7VMQxhkE1KOM4p8OQ/uKIX+k= Subject key identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91 Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF Certificate serial: 0B7E7D0FBC58A9449FDEB4945D88F549D8C97D91 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer Manifest: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft caRepository: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/ Notify URL: https://rpki-rrdp.mnihyc.com/rrdp/notification.xml Certificate not before: Tue 16 Jun 2026 03:22:52 +0000 Certificate not after: Tue 15 Jun 2027 03:27:52 +0000 Subordinate resources: AS: 140938 IP: 2406:4440:e000::/40 Validation: OK Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:7e:7d:0f:bc:58:a9:44:9f:de:b4:94:5d:88:f5:49:d8:c9:7d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF Validity Not Before: Jun 16 03:22:52 2026 GMT Not After : Jun 15 03:27:52 2027 GMT Subject: CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:91:5b:f7:32:74:b1:74:b2:df:8a:62:79:3b: 22:3b:10:e8:7d:37:e5:9e:14:30:27:3e:81:0d:d3: 1f:07:63:3d:39:22:7f:99:06:ae:66:45:07:69:0a: d6:ef:e0:0d:3b:7c:fa:a2:d6:ae:f9:2d:87:9a:3d: 64:a9:09:a8:3c:9d:08:2c:98:d0:da:1c:df:fd:f6: eb:15:6e:c9:ca:67:e0:99:e4:88:5c:c3:67:7d:ad: e2:5d:6c:3b:0f:5d:29:59:5b:c9:fa:52:23:5e:4b: 68:53:e5:f7:b8:55:a4:12:33:d8:6e:54:29:a1:44: fd:d7:37:69:0e:7a:99:88:f1:78:10:a2:9f:93:15: 05:e5:43:76:45:8a:59:93:3f:31:ff:a0:8c:6f:3a: bf:f2:0f:68:cb:ba:01:dc:a2:c3:13:7c:29:30:25: 82:9b:2a:cf:06:5c:e6:2e:79:f1:f6:62:a3:4e:7c: e9:c8:56:6c:22:4a:8e:4c:ca:b5:35:4f:1f:9b:a4: 52:52:a1:a9:80:f9:91:92:05:c6:1c:48:70:68:64: 03:81:40:c0:ef:e4:e6:ba:31:31:ab:8f:7b:51:3d: bf:ae:e8:4f:0e:14:09:8e:54:7a:23:10:4f:1b:53: be:0f:a7:e3:aa:5b:7b:74:1f:d7:48:02:86:1a:7d: 16:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91 X509v3 Authority Key Identifier: keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer Subject Information Access: CA Repository - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/ RPKI Manifest - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft RPKI Notify - URI:https://rpki-rrdp.mnihyc.com/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:4440:e000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 140938 Signature Algorithm: sha256WithRSAEncryption 1c:63:ee:06:45:2e:b2:22:89:38:a0:df:77:71:8d:3d:9e:48: 7c:a4:bd:3b:27:e5:3b:3a:4e:ce:77:6a:12:9e:f1:f5:6a:40: ca:5c:57:fd:ef:a4:78:c5:58:01:43:bc:ef:c4:f9:be:ac:06: 3c:3a:37:a1:9f:fd:8d:1c:20:a1:5c:4e:53:7b:6a:57:7b:67: 6a:fc:2b:12:3e:03:1d:36:70:9d:e1:c6:ec:ac:c7:a7:bb:8a: 28:9e:c6:b3:d5:ff:3f:7f:f3:6c:08:03:44:14:af:d1:be:f2: 9a:79:5b:d6:1d:75:be:50:24:39:e2:92:11:2b:cd:b2:84:bb: ea:27:ce:0f:6b:78:f2:19:10:68:59:f1:93:ea:da:5f:35:61: 79:dc:c9:89:f6:ba:54:5e:26:d3:a6:d8:eb:0f:fa:b9:57:77: 88:fe:14:67:81:aa:fd:d7:5e:85:68:83:31:8b:6f:9d:a8:3d: bb:61:fb:1a:5e:51:71:41:6c:58:69:d5:17:af:76:be:28:d4: 43:9c:d2:32:4a:fb:7b:10:92:82:b1:d4:c5:23:2f:51:ec:0e: c8:fa:d9:f0:c8:62:47:15:32:e7:5d:ad:61:61:ca:fe:3f:07: 71:f5:e1:57:e9:4b:99:fb:11:1f:cb:43:1c:f7:8a:b6:e1:0d: 6a:d6:2a:73 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgIUC359D7xYqUSf3rSUXYj1SdjJfZEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMTRFNzUwMDAwMTEwLwYDVQQFEyg1QTE3OTY0OEIz RUYyMzY5RENFN0JEQjU4MTQwRkY3REM3MDYwQUJGMB4XDTI2MDYxNjAzMjI1MloX DTI3MDYxNTAzMjc1MlowMzExMC8GA1UEAxMoOUZFOUI0QzMwOTAyMDZENUIyOENF RDRGNTE3OTUzOUY2OThBREI5MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKWRW/cydLF0st+KYnk7IjsQ6H035Z4UMCc+gQ3THwdjPTkif5kGrmZFB2kK 1u/gDTt8+qLWrvkth5o9ZKkJqDydCCyY0Noc3/326xVuycpn4JnkiFzDZ32t4l1s Ow9dKVlbyfpSI15LaFPl97hVpBIz2G5UKaFE/dc3aQ56mYjxeBCin5MVBeVDdkWK WZM/Mf+gjG86v/IPaMu6AdyiwxN8KTAlgpsqzwZc5i558fZio0586chWbCJKjkzK tTVPH5ukUlKhqYD5kZIFxhxIcGhkA4FAwO/k5roxMauPe1E9v67oTw4UCY5UeiMQ TxtTvg+n46pbe3Qf10gChhp9FvkCAwEAAaOCAp8wggKbMA8GA1UdEwEB/wQFMAMB Af8wHQYDVR0OBBYEFJ/ptMMJAgbVsoztT1F5U59pituRMB8GA1UdIwQYMBaAFFoX lkiz7yNp3Oe9tYFA/33HBgq/MA4GA1UdDwEB/wQEAwIBBjBiBgNVHR8EWzBZMFeg VaBThlFyc3luYzovL3Nha3V5YS5uYXQubW9lL3JlcG8vTkFUT0NBLzEvNUExNzk2 NDhCM0VGMjM2OURDRTdCREI1ODE0MEZGN0RDNzA2MEFCRi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvV2hlV1NMUHZJ Mm5jNTcyMWdVRF9mY2NHQ3I4LmNlcjCB+gYIKwYBBQUHAQsEge0wgeowPQYIKwYB BQUHMAWGMXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8vbW5paHlj LXJwa2kvMS8waQYIKwYBBQUHMAqGXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMu Y29tL3JlcG8vbW5paHljLXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1 MTc5NTM5RjY5OEFEQjkxLm1mdDA+BggrBgEFBQcwDYYyaHR0cHM6Ly9ycGtpLXJy ZHAubW5paHljLmNvbS9ycmRwL25vdGlmaWNhdGlvbi54bWwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACQGREDg MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwImijANBgkqhkiG9w0BAQsFAAOCAQEA HGPuBkUusiKJOKDfd3GNPZ5IfKS9OyflOzpOzndqEp7x9WpAylxX/e+keMVYAUO8 78T5vqwGPDo3oZ/9jRwgoVxOU3tqV3tnavwrEj4DHTZwneHG7KzHp7uKKJ7Gs9X/ P3/zbAgDRBSv0b7ymnlb1h11vlAkOeKSESvNsoS76ifOD2t48hkQaFnxk+raXzVh edzJifa6VF4m06bY6w/6uVd3iP4UZ4Gq/ddehWiDMYtvnag9u2H7Gl5RcUFsWGnV F692vijUQ5zSMkr7exCSgrHUxSMvUewOyPrZ8MhiRxUy512tYWHK/j8HcfXhV+lL mfsRH8tDHPeKtuENatYqcw== -----END CERTIFICATE-----Generated at Wed Jun 17 10:09:23 2026 by rpki-client