Manifest
$ rpki-client -vvf sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
File: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft (raw, json)
Hash identifier: 1sJQxEhxrNXyz6zu4NgK+UDmJ9qaG1O9JtWj0zwmmyI=
Subject key identifier: D8:27:AB:84:A8:A1:9B:99:0B:F2:4A:ED:7F:08:D9:E4:DC:23:94:82
Authority key identifier: 5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
Certificate issuer: /CN=A9114E750000/serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Certificate serial: 2DBBBDB853E3228316F1A09F4787E7E610732A51
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject info access: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
Manifest number: 0A94
Signing time: Thu 24 Apr 2025 21:32:00 +0000
Manifest this update: Thu 24 Apr 2025 21:27:00 +0000
Manifest next update: Fri 25 Apr 2025 21:32:00 +0000
Files and hashes: 1: 5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl (hash: VWeUDwQOM072Oelq3PMo2fd4Gra3CaybOkRa4961S3g=)
2: 9FE9B4C3090206D5B28CED4F5179539F698ADB91.cer (hash: L9SKOfzlWCbf3ZEfwVUoxYt9hsBGjULfYjAnC6NGFMc=)
3: FCB1805FA7AE22D565E0A502D08D37EB2BD837A7.cer (hash: /jBviPSFdFKZh4Pbl7qtj9AMKAzv67R3Ny4r/CA/pdU=)
4: 47717A8A2E301D872DAC129F2CBAC587F01A0813.cer (hash: lOH37mNZ7GeDqNovMClGKLJ0pYQzmLTzievvpRu1ycw=)
Validation: OK
Signature path: rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Apr 2025 21:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:bb:bd:b8:53:e3:22:83:16:f1:a0:9f:47:87:e7:e6:10:73:2a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9114E750000, serialNumber=5A179648B3EF2369DCE7BDB58140FF7DC7060ABF
Validity
Not Before: Apr 24 21:27:00 2025 GMT
Not After : May 1 21:32:00 2025 GMT
Subject: CN=3082010A0282010100B41020D18E1E193CB3DCEC2F2AD1F5848506DF14707517C9C2F0A5E93A41C3BABC7734AA5D78FDA5B0672DDB4E5D4E7064E84F95BFA998F824E32FB62D6EE58C080E9694D40EAA5E36B2DCA453F75A60BA3D06B0EBFBAA3E089178AC8C8341852F16AD71FED24CD2219BC202FA7355217B457049255B6C24AFAE8442415EC7BAD807A0E53477C7CE9D88B8DE77DC7F22500E333C970B8BE6E752E454B3B3E12EDFA78771F070F630D11A11968C4EA5D08DA8D5170DE255B8E92806F4D1AB008188096A998D6E4B4247B49D9F3105FFA6A597DC83823823199F4E71C1308BF267EA1A38A14FCB4BF4BAF625077AE0B74986D8163A3D275D245BA2D5A4A50E20250203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:20:d1:8e:1e:19:3c:b3:dc:ec:2f:2a:d1:
f5:84:85:06:df:14:70:75:17:c9:c2:f0:a5:e9:3a:
41:c3:ba:bc:77:34:aa:5d:78:fd:a5:b0:67:2d:db:
4e:5d:4e:70:64:e8:4f:95:bf:a9:98:f8:24:e3:2f:
b6:2d:6e:e5:8c:08:0e:96:94:d4:0e:aa:5e:36:b2:
dc:a4:53:f7:5a:60:ba:3d:06:b0:eb:fb:aa:3e:08:
91:78:ac:8c:83:41:85:2f:16:ad:71:fe:d2:4c:d2:
21:9b:c2:02:fa:73:55:21:7b:45:70:49:25:5b:6c:
24:af:ae:84:42:41:5e:c7:ba:d8:07:a0:e5:34:77:
c7:ce:9d:88:b8:de:77:dc:7f:22:50:0e:33:3c:97:
0b:8b:e6:e7:52:e4:54:b3:b3:e1:2e:df:a7:87:71:
f0:70:f6:30:d1:1a:11:96:8c:4e:a5:d0:8d:a8:d5:
17:0d:e2:55:b8:e9:28:06:f4:d1:ab:00:81:88:09:
6a:99:8d:6e:4b:42:47:b4:9d:9f:31:05:ff:a6:a5:
97:dc:83:82:38:23:19:9f:4e:71:c1:30:8b:f2:67:
ea:1a:38:a1:4f:cb:4b:f4:ba:f6:25:07:7a:e0:b7:
49:86:d8:16:3a:3d:27:5d:24:5b:a2:d5:a4:a5:0e:
20:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:27:AB:84:A8:A1:9B:99:0B:F2:4A:ED:7F:08:D9:E4:DC:23:94:82
X509v3 Authority Key Identifier:
keyid:5A:17:96:48:B3:EF:23:69:DC:E7:BD:B5:81:40:FF:7D:C7:06:0A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WheWSLPvI2nc5721gUD_fccGCr8.cer
Subject Information Access:
Signed Object - URI:rsync://sakuya.nat.moe/repo/NATOCA/1/5A179648B3EF2369DCE7BDB58140FF7DC7060ABF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:1d:55:98:5e:dc:91:d6:c4:0c:c2:7c:96:95:e1:59:0b:0a:
7b:c3:85:68:7f:17:17:11:3c:dc:1d:9e:a5:8e:11:9e:4a:a8:
cf:e5:ec:36:33:b2:c2:47:2d:af:7b:73:c2:54:5a:8a:df:3b:
b6:8e:91:9a:17:43:79:0f:a6:d7:27:9c:f6:25:a7:bb:88:1e:
d9:2e:aa:5d:fc:c7:4e:a5:ac:1d:98:81:1d:7b:f1:81:4c:d9:
95:41:83:f3:eb:9a:43:dd:f9:a3:b8:2d:82:7f:8a:eb:e4:ff:
75:cb:be:08:11:50:31:97:40:03:ce:e9:d6:a0:2a:fc:d8:51:
5e:b4:3d:9f:b7:0b:5e:1d:69:7a:fc:66:2a:68:a1:a6:52:dc:
66:fa:33:dd:b1:50:75:18:ea:02:da:ab:da:69:db:4a:6b:74:
b3:25:01:e1:cd:11:a8:5b:c6:35:27:c3:90:7f:f8:a1:e7:63:
0d:8d:a0:69:42:d2:24:6c:38:6e:0d:b4:39:c9:08:fe:7e:e7:
4b:57:50:85:f3:94:c8:07:98:ce:b5:de:8f:f5:54:f2:ce:c7:
5a:e3:ee:ca:dd:20:cc:86:80:30:c1:b7:82:97:59:0d:ef:1b:
91:1e:f8:2f:7f:23:09:d2:60:c6:9f:11:0c:3c:9b:ae:5b:3c:
de:23:99:a8
-----BEGIN CERTIFICATE-----
MIIHBDCCBeygAwIBAgIULbu9uFPjIoMW8aCfR4fn5hBzKlEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMTRFNzUwMDAwMTEwLwYDVQQFEyg1QTE3OTY0OEIz
RUYyMzY5RENFN0JEQjU4MTQwRkY3REM3MDYwQUJGMB4XDTI1MDQyNDIxMjcwMFoX
DTI1MDUwMTIxMzIwMFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBCNDEwMjBEMThFMUUxOTNDQjNEQ0VDMkYyQUQxRjU4NDg1MDZERjE0NzA3
NTE3QzlDMkYwQTVFOTNBNDFDM0JBQkM3NzM0QUE1RDc4RkRBNUIwNjcyRERCNEU1
RDRFNzA2NEU4NEY5NUJGQTk5OEY4MjRFMzJGQjYyRDZFRTU4QzA4MEU5Njk0RDQw
RUFBNUUzNkIyRENBNDUzRjc1QTYwQkEzRDA2QjBFQkZCQUEzRTA4OTE3OEFDOEM4
MzQxODUyRjE2QUQ3MUZFRDI0Q0QyMjE5QkMyMDJGQTczNTUyMTdCNDU3MDQ5MjU1
QjZDMjRBRkFFODQ0MjQxNUVDN0JBRDgwN0EwRTUzNDc3QzdDRTlEODhCOERFNzdE
QzdGMjI1MDBFMzMzQzk3MEI4QkU2RTc1MkU0NTRCM0IzRTEyRURGQTc4NzcxRjA3
MEY2MzBEMTFBMTE5NjhDNEVBNUQwOERBOEQ1MTcwREUyNTVCOEU5MjgwNkY0RDFB
QjAwODE4ODA5NkE5OThENkU0QjQyNDdCNDlEOUYzMTA1RkZBNkE1OTdEQzgzODIz
ODIzMTk5RjRFNzFDMTMwOEJGMjY3RUExQTM4QTE0RkNCNEJGNEJBRjYyNTA3N0FF
MEI3NDk4NkQ4MTYzQTNEMjc1RDI0NUJBMkQ1QTRBNTBFMjAyNTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ECDRjh4ZPLPc7C8q0fWE
hQbfFHB1F8nC8KXpOkHDurx3NKpdeP2lsGct205dTnBk6E+Vv6mY+CTjL7YtbuWM
CA6WlNQOql42stykU/daYLo9BrDr+6o+CJF4rIyDQYUvFq1x/tJM0iGbwgL6c1Uh
e0VwSSVbbCSvroRCQV7HutgHoOU0d8fOnYi43nfcfyJQDjM8lwuL5udS5FSzs+Eu
36eHcfBw9jDRGhGWjE6l0I2o1RcN4lW46SgG9NGrAIGICWqZjW5LQke0nZ8xBf+m
pZfcg4I4IxmfTnHBMIvyZ+oaOKFPy0v0uvYlB3rgt0mG2BY6PSddJFui1aSlDiAl
AgMBAAGjggH7MIIB9zAdBgNVHQ4EFgQU2CerhKihm5kL8krtfwjZ5NwjlIIwHwYD
VR0jBBgwFoAUWheWSLPvI2nc5721gUD/fccGCr8wDgYDVR0PAQH/BAQDAgeAMGIG
A1UdHwRbMFkwV6BVoFOGUXJzeW5jOi8vc2FrdXlhLm5hdC5tb2UvcmVwby9OQVRP
Q0EvMS81QTE3OTY0OEIzRUYyMzY5RENFN0JEQjU4MTQwRkY3REM3MDYwQUJGLmNy
bDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5p
Yy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZG
Mi9XaGVXU0xQdkkybmM1NzIxZ1VEX2ZjY0dDcjguY2VyMG0GCCsGAQUFBwELBGEw
XzBdBggrBgEFBQcwC4ZRcnN5bmM6Ly9zYWt1eWEubmF0Lm1vZS9yZXBvL05BVE9D
QS8xLzVBMTc5NjQ4QjNFRjIzNjlEQ0U3QkRCNTgxNDBGRjdEQzcwNjBBQkYubWZ0
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYE
AgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCoHVWYXtyR1sQMwnyWleFZCwp7w4VofxcXETzcHZ6ljhGeSqjP5ew2
M7LCRy2ve3PCVFqK3zu2jpGaF0N5D6bXJ5z2Jae7iB7ZLqpd/MdOpawdmIEde/GB
TNmVQYPz65pD3fmjuC2Cf4rr5P91y74IEVAxl0ADzunWoCr82FFetD2ftwteHWl6
/GYqaKGmUtxm+jPdsVB1GOoC2qvaadtKa3SzJQHhzRGoW8Y1J8OQf/ih52MNjaBp
QtIkbDhuDbQ5yQj+fudLV1CF85TIB5jOtd6P9VTyzsda4+7K3SDMhoAwwbeCl1kN
7xuRHvgvfyMJ0mDGnxEMPJuuWzzeI5mo
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:47:34 2025 by rpki-client on console.sobornost.net