
$ rpki-client -vvvf repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft
File: B9262144237A3404C105DA97D69318D9BE295E42.mft (raw, json)
Hash identifier: aJA/b/VIZXIk8A50q176WnSh2vn/+RSEaZpmAE5aQVw=
Subject key identifier: 0D:DA:8F:CB:67:57:74:F5:53:04:0D:A6:43:9A:8B:4D:C8:BB:E5:27
Authority key identifier: B9:26:21:44:23:7A:34:04:C1:05:DA:97:D6:93:18:D9:BE:29:5E:42
Certificate issuer: /CN=B9262144237A3404C105DA97D69318D9BE295E42
Certificate serial: 51E37FBD3CCC7D934E23184F43A104C214FFDD54
Authority info access: rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer
Subject info access: rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft
Manifest number: 3C
Signing time: Mon 21 Sep 2026 07:59:46 +0000
Manifest this update: Mon 21 Sep 2026 07:54:46 +0000
Manifest next update: Tue 22 Sep 2026 11:08:46 +0000
Files and hashes: 1: B9262144237A3404C105DA97D69318D9BE295E42.crl (hash: 0Z4p5P8NngLPNdXNg8f3yhyY2AXX52zml76sSSvjb5I=)
2: AS59182.asa (hash: efaGRkFWdaqDTuibLbGWRCn7PY/OInRm11zewK13Bd0=)
3: 3130332e36362e3135362e302f32322d3234203d3e203539313832.roa (hash: 2kNY2J/bNUioX97b3C4h3fYPZCG5WqZQbSZ7z5McE7I=)
Validation: OK
Signature path: rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.crl
rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft
rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer
rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl
rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:44:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:e3:7f:bd:3c:cc:7d:93:4e:23:18:4f:43:a1:04:c2:14:ff:dd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9262144237A3404C105DA97D69318D9BE295E42
Validity
Not Before: Sep 21 07:54:46 2026 GMT
Not After : Sep 22 11:08:46 2026 GMT
Subject: CN=0DDA8FCB675774F553040DA6439A8B4DC8BBE527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:59:a0:4d:86:ce:ce:c6:cd:81:8f:cd:4f:7c:
3b:54:79:02:95:98:d3:ea:b3:b1:eb:c6:3e:6f:8e:
38:4f:19:fd:3d:26:3c:48:49:56:5b:d6:3b:21:99:
27:00:42:a5:79:23:65:86:23:2d:cd:fc:aa:53:dd:
18:b7:22:b0:76:a9:46:b3:29:01:6a:11:9e:73:35:
17:c4:46:5f:ce:c6:9a:c5:fb:d7:b2:5c:1d:cd:ba:
1b:3e:34:89:56:fd:d4:47:04:0b:0e:4e:14:46:61:
39:0d:19:95:48:bc:a5:55:f4:59:f2:f3:6d:23:e2:
b9:93:ec:dd:64:02:98:f9:62:22:1f:90:81:5b:bd:
61:41:9e:2a:b7:d8:b2:be:a6:b7:e8:08:51:2d:8e:
f8:ca:f3:a4:f9:54:7b:47:4d:74:29:23:63:2a:53:
2a:ef:7a:2e:93:4f:fa:fa:06:0f:d3:06:7b:f4:5d:
26:68:7a:75:a1:65:9a:9e:7c:6a:10:ef:35:cd:9d:
8a:f3:67:ec:37:db:0f:1d:ac:32:50:1c:37:0f:17:
1f:c9:51:20:1d:07:cc:3d:99:d3:34:ed:4f:ca:e1:
76:07:05:c9:8b:68:6b:13:4a:5c:c4:9e:63:95:9b:
f3:a0:42:93:e8:86:1a:7f:76:26:96:58:4b:a8:00:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DA:8F:CB:67:57:74:F5:53:04:0D:A6:43:9A:8B:4D:C8:BB:E5:27
X509v3 Authority Key Identifier:
keyid:B9:26:21:44:23:7A:34:04:C1:05:DA:97:D6:93:18:D9:BE:29:5E:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.crl
Authority Information Access:
CA Issuers - URI:rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer
Subject Information Access:
Signed Object - URI:rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:de:55:4a:84:f8:4c:06:bb:1a:c5:14:ca:5b:b5:f8:4f:eb:
dc:0a:5a:b2:b0:5a:0d:26:f5:e9:25:f1:86:27:b6:be:82:fc:
22:de:a7:35:51:77:ce:70:a8:b6:a2:1d:c3:36:58:38:19:94:
62:57:84:be:96:75:1e:31:29:31:0d:48:e7:76:d5:ec:a2:05:
2b:86:3f:64:a6:c3:5c:10:08:9b:27:7e:8a:63:b5:2a:d0:92:
0b:03:38:d9:12:e9:08:8c:2a:c2:04:06:3a:b2:cb:43:38:ac:
9e:98:84:1a:81:a8:92:c8:02:ef:bf:5e:50:4b:e3:14:cf:1a:
e2:f0:c4:33:45:59:7c:0a:7e:76:16:f8:15:50:16:1c:32:2a:
29:4a:c2:ce:0f:91:1d:c4:eb:52:f8:3f:0e:28:43:b5:06:47:
54:ec:d9:e4:43:17:b4:bb:08:fe:0e:1e:0b:65:51:17:1f:56:
05:60:e8:1d:b1:92:31:ac:b3:b3:e3:8e:52:4f:f4:f7:40:31:
4e:f9:c1:09:31:98:67:5f:be:e0:b4:3e:a5:2c:65:38:0f:1e:
c1:d5:43:ad:f4:bb:8a:54:6a:38:83:7a:88:0b:6f:e3:b4:5a:
04:8a:b3:e8:c8:21:ab:5a:52:f6:e2:dc:22:27:6c:33:35:c1:
af:de:4d:6a
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgIUUeN/vTzMfZNOIxhPQ6EEwhT/3VQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjkyNjIxNDQyMzdBMzQwNEMxMDVEQTk3RDY5MzE4RDlC
RTI5NUU0MjAeFw0yNjA5MjEwNzU0NDZaFw0yNjA5MjIxMTA4NDZaMDMxMTAvBgNV
BAMTKDBEREE4RkNCNjc1Nzc0RjU1MzA0MERBNjQzOUE4QjREQzhCQkU1MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQWaBNhs7Oxs2Bj81PfDtUeQKV
mNPqs7Hrxj5vjjhPGf09JjxISVZb1jshmScAQqV5I2WGIy3N/KpT3Ri3IrB2qUaz
KQFqEZ5zNRfERl/OxprF+9eyXB3Nuhs+NIlW/dRHBAsOThRGYTkNGZVIvKVV9Fny
820j4rmT7N1kApj5YiIfkIFbvWFBniq32LK+prfoCFEtjvjK86T5VHtHTXQpI2Mq
Uyrvei6TT/r6Bg/TBnv0XSZoenWhZZqefGoQ7zXNnYrzZ+w32w8drDJQHDcPFx/J
USAdB8w9mdM07U/K4XYHBcmLaGsTSlzEnmOVm/OgQpPohhp/diaWWEuoACezAgMB
AAGjggHbMIIB1zAdBgNVHQ4EFgQUDdqPy2dXdPVTBA2mQ5qLTci75ScwHwYDVR0j
BBgwFoAUuSYhRCN6NATBBdqX1pMY2b4pXkIwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcmVwby5ua24uaW4vcmVwby9QRE5TLzAvQjky
NjIxNDQyMzdBMzQwNEMxMDVEQTk3RDY5MzE4RDlCRTI5NUU0Mi5jcmwwaAYIKwYB
BQUHAQEEXDBaMFgGCCsGAQUFBzAChkxyc3luYzovL3JlcG8yLm5rbi5pbi9yZXBv
L05LTi8wL0I5MjYyMTQ0MjM3QTM0MDRDMTA1REE5N0Q2OTMxOEQ5QkUyOTVFNDIu
Y2VyMGgGCCsGAQUFBwELBFwwWjBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9yZXBvLm5r
bi5pbi9yZXBvL1BETlMvMC9COTI2MjE0NDIzN0EzNDA0QzEwNURBOTdENjkzMThE
OUJFMjk1RTQyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAAN5VSoT4TAa7GsUUylu1+E/r3ApasrBaDSb1
6SXxhie2voL8It6nNVF3znCotqIdwzZYOBmUYleEvpZ1HjEpMQ1I53bV7KIFK4Y/
ZKbDXBAImyd+imO1KtCSCwM42RLpCIwqwgQGOrLLQzisnpiEGoGoksgC779eUEvj
FM8a4vDEM0VZfAp+dhb4FVAWHDIqKUrCzg+RHcTrUvg/DihDtQZHVOzZ5EMXtLsI
/g4eC2VRFx9WBWDoHbGSMayzs+OOUk/090AxTvnBCTGYZ1++4LQ+pSxlOA8ewdVD
rfS7ilRqOIN6iAtv47RaBIqz6Mghq1pS9uLcIidsMzXBr95Nag==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:35 2026 by rpki-client