$ rpki-client -vvf rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft File: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft (raw, json) Hash identifier: b2okbfBVQaac+bYQAtbwoua8P9XPIlYzEPVI30ir/1I= Subject key identifier: 77:5D:41:0A:42:26:E8:46:72:9E:23:50:42:FF:46:D9:BD:38:3C:08 Authority key identifier: 9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91 Certificate issuer: /CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91 Certificate serial: 3D57E47E15087C7ED05EADC3E774B67D41FCE5D8 Authority info access: rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer Subject info access: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft Manifest number: 039B Signing time: Mon 28 Apr 2025 02:56:07 +0000 Manifest this update: Mon 28 Apr 2025 02:51:07 +0000 Manifest next update: Tue 29 Apr 2025 06:12:07 +0000 Files and hashes: 1: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl (hash: vxuC1cq5JwvllFNf7x10gj/Udz8vn2F9G/6XTx9u+NM=) 2: 323430363a343434303a653030303a3a2f34302d3438203d3e20313430393338.roa (hash: NOwi2jYQ8FHV+5iFygC9Tyw/h3+CkwWSkGkdIOKT9Zg=) Validation: OK Signature path: rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 04:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:57:e4:7e:15:08:7c:7e:d0:5e:ad:c3:e7:74:b6:7d:41:fc:e5:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9FE9B4C3090206D5B28CED4F5179539F698ADB91 Validity Not Before: Apr 28 02:51:07 2025 GMT Not After : Apr 29 06:12:07 2025 GMT Subject: CN=775D410A4226E846729E235042FF46D9BD383C08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3d:ca:80:20:07:e8:8d:f0:ed:dd:fb:54:12: c4:c6:5f:1c:25:f1:a3:6d:c2:9a:fd:52:c5:b6:76: bb:77:e3:3d:5b:3a:ff:6f:fe:f3:29:a8:72:12:57: 58:40:1f:e8:8e:1f:78:5f:ed:9c:2f:f4:bd:bc:c4: d0:3b:7a:14:8b:0d:81:31:f3:87:3f:c1:3a:d0:33: f6:0a:56:ec:d7:46:32:70:88:33:4f:9c:1e:20:b4: 78:f0:71:b0:66:1e:b8:d8:e2:63:37:8a:88:19:e9: 2e:b7:27:0e:4c:d5:f3:b2:aa:b3:8d:b0:be:84:7a: 4a:8c:f7:b2:70:ce:73:ff:96:28:3e:32:9c:97:f1: 8d:f9:ff:b3:00:12:48:98:39:fb:80:05:bc:d0:52: 17:6d:10:07:48:b0:b2:40:d5:49:1a:32:2f:9a:5f: ec:dc:d1:5b:fa:f2:b4:8f:73:e8:1e:0f:0d:f0:c3: a3:9e:4b:4d:bc:94:ae:03:8c:c3:71:3d:56:9e:85: 8f:99:9b:c8:8c:16:e3:28:31:a7:36:16:72:f0:e3: 40:94:a9:cd:23:41:e6:aa:d2:4c:7a:a5:a0:25:19: 67:7c:5c:b8:63:7a:a5:e2:18:dd:81:7b:92:5c:ff: a3:57:bb:33:b9:bd:ae:40:3e:92:70:e7:0f:6a:ac: 3f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5D:41:0A:42:26:E8:46:72:9E:23:50:42:FF:46:D9:BD:38:3C:08 X509v3 Authority Key Identifier: keyid:9F:E9:B4:C3:09:02:06:D5:B2:8C:ED:4F:51:79:53:9F:69:8A:DB:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.crl Authority Information Access: CA Issuers - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.mnihyc.com/repo/mnihyc-rpki/1/9FE9B4C3090206D5B28CED4F5179539F698ADB91.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:63:6b:6b:c6:f4:05:61:64:8c:33:0c:5b:d1:76:59:c0:f5: a6:a5:c5:a0:8a:26:f2:f1:15:47:a0:69:e0:1f:2a:28:2f:ce: 09:da:d4:17:df:ed:cc:9b:24:62:20:33:a3:bb:97:ed:50:e2: 23:09:48:77:ed:e9:f4:17:ef:ff:08:14:3e:33:03:26:09:d3: 01:55:c7:51:7c:1f:f5:54:a5:14:12:87:b2:59:2f:dd:06:4a: 38:83:5b:ca:64:dc:23:7a:16:2a:64:62:ab:f4:66:5b:33:09: cd:90:89:eb:94:c5:1e:54:eb:a7:a7:5a:d7:14:e9:9f:39:5d: 64:cc:f4:bd:8d:75:13:08:a5:af:7e:29:5d:55:c8:07:69:a9: 50:c1:c8:2b:b7:fc:5a:7d:36:79:e8:a8:99:ce:c0:9e:71:af: 9f:ec:6e:a8:12:a4:7a:30:ec:bf:49:26:47:d9:4b:73:72:50: eb:10:ce:82:7e:e0:54:a0:5e:43:1b:56:d0:d6:32:02:8a:11: 31:56:8b:52:4f:c2:84:0d:de:15:ef:ad:ca:33:66:f3:38:f0: 45:ac:49:cd:0f:52:73:fa:e3:59:76:14:ca:ce:b3:86:9f:24: 83:12:51:61:c4:03:6e:39:53:a4:bc:1e:41:14:e3:b6:f2:20: f3:00:f6:bd -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgIUPVfkfhUIfH7QXq3D53S2fUH85dgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUZFOUI0QzMwOTAyMDZENUIyOENFRDRGNTE3OTUzOUY2 OThBREI5MTAeFw0yNTA0MjgwMjUxMDdaFw0yNTA0MjkwNjEyMDdaMDMxMTAvBgNV BAMTKDc3NUQ0MTBBNDIyNkU4NDY3MjlFMjM1MDQyRkY0NkQ5QkQzODNDMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnPcqAIAfojfDt3ftUEsTGXxwl 8aNtwpr9UsW2drt34z1bOv9v/vMpqHISV1hAH+iOH3hf7Zwv9L28xNA7ehSLDYEx 84c/wTrQM/YKVuzXRjJwiDNPnB4gtHjwcbBmHrjY4mM3iogZ6S63Jw5M1fOyqrON sL6EekqM97JwznP/lig+MpyX8Y35/7MAEkiYOfuABbzQUhdtEAdIsLJA1UkaMi+a X+zc0Vv68rSPc+geDw3ww6OeS028lK4DjMNxPVaehY+Zm8iMFuMoMac2FnLw40CU qc0jQeaq0kx6paAlGWd8XLhjeqXiGN2Be5Jc/6NXuzO5va5APpJw5w9qrD9xAgMB AAGjggICMIIB/jAdBgNVHQ4EFgQUd11BCkIm6EZyniNQQv9G2b04PAgwHwYDVR0j BBgwFoAUn+m0wwkCBtWyjO1PUXlTn2mK25EwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8v bW5paHljLXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1MTc5NTM5RjY5 OEFEQjkxLmNybDBtBggrBgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8v c2FrdXlhLm5hdC5tb2UvcmVwby9OQVRPQ0EvMS85RkU5QjRDMzA5MDIwNkQ1QjI4 Q0VENEY1MTc5NTM5RjY5OEFEQjkxLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYB BQUHMAuGXXJzeW5jOi8vcnBraS1yc3luYy5tbmloeWMuY29tL3JlcG8vbW5paHlj LXJwa2kvMS85RkU5QjRDMzA5MDIwNkQ1QjI4Q0VENEY1MTc5NTM5RjY5OEFEQjkx Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG 9w0BAQsFAAOCAQEAYGNra8b0BWFkjDMMW9F2WcD1pqXFoIom8vEVR6Bp4B8qKC/O CdrUF9/tzJskYiAzo7uX7VDiIwlId+3p9Bfv/wgUPjMDJgnTAVXHUXwf9VSlFBKH slkv3QZKOINbymTcI3oWKmRiq/RmWzMJzZCJ65TFHlTrp6da1xTpnzldZMz0vY11 Ewilr34pXVXIB2mpUMHIK7f8Wn02eeiomc7AnnGvn+xuqBKkejDsv0kmR9lLc3JQ 6xDOgn7gVKBeQxtW0NYyAooRMVaLUk/ChA3eFe+tyjNm8zjwRaxJzQ9Sc/rjWXYU ys6zhp8kgxJRYcQDbjlTpLweQRTjtvIg8wD2vQ== -----END CERTIFICATE-----Generated at Mon Apr 28 06:02:08 2025 by rpki-client on console.sobornost.net