Certificate
$ rpki-client -vvvf repo2.nkn.in/repo/NKN/0/6FF556A83E45446A1E576BB82B35806D7F3C7C1F.cer
File: 6FF556A83E45446A1E576BB82B35806D7F3C7C1F.cer (raw, json)
Hash identifier: ysFR+RfnBb7HpAvvSEfyHKqm8SiBXmDfFJy5nFh4W3g=
Subject key identifier: 6F:F5:56:A8:3E:45:44:6A:1E:57:6B:B8:2B:35:80:6D:7F:3C:7C:1F
Authority key identifier: C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45
Certificate issuer: /CN=A918EDB20000/serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45
Certificate serial: 1D5BE15A804BDE874855837BA190665AD1F9E5BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
Manifest: rsync://repo2.nkn.in/repo/NIXI/0/6FF556A83E45446A1E576BB82B35806D7F3C7C1F.mft
caRepository: rsync://repo2.nkn.in/repo/NIXI/0/
Notify URL: https://repo2.nkn.in/notification.xml
Certificate not before: Wed 21 Oct 2026 09:33:04 +0000
Certificate not after: Wed 20 Oct 2027 09:38:04 +0000
Subordinate resources: AS: 148110 -- 148120
IP: 103.136.209.0/24
IP: 103.161.186.0/23
IP: 103.218.116.0/22
IP: 103.218.232.0/22
IP: 2401:dc00::/32
Validation: OK
Signature path: rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl
rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 13:53:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:5b:e1:5a:80:4b:de:87:48:55:83:7b:a1:90:66:5a:d1:f9:e5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB20000, serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45
Validity
Not Before: Oct 21 09:33:04 2026 GMT
Not After : Oct 20 09:38:04 2027 GMT
Subject: CN=6FF556A83E45446A1E576BB82B35806D7F3C7C1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:00:d8:15:9a:6c:5a:0b:32:c4:28:36:e6:ea:
5f:f9:ce:9b:cf:1b:67:3f:7f:8e:71:c1:10:b3:5c:
9a:fb:1d:21:ab:70:fd:f8:7e:92:2d:88:e3:7a:1b:
f0:59:e6:4a:39:92:26:ca:e0:c5:f2:8c:6b:8e:a2:
99:7f:64:04:37:04:de:ab:01:14:82:85:eb:59:9a:
50:a7:c5:b4:bc:66:82:37:3b:2a:52:3a:35:ec:ad:
ca:ac:37:19:ab:7c:22:04:8f:dd:25:43:eb:11:35:
43:7b:74:d3:5e:50:94:83:24:64:ad:34:c7:cb:3b:
bc:6a:b2:be:c6:ce:71:8c:45:19:49:2f:1b:e0:fc:
dc:a2:59:d0:c9:d2:13:69:2b:d1:0e:0e:72:f7:d8:
27:0c:06:69:b3:85:c2:84:ac:60:dc:9b:0e:45:74:
26:2f:51:8b:ad:e2:07:43:49:03:27:8c:2d:2e:17:
16:38:f0:5c:3e:e2:b6:5b:50:b7:b9:49:af:75:c2:
8c:ba:65:3a:9e:0e:e0:3a:c4:8f:bc:9a:9a:ea:a4:
49:64:64:ed:f9:fe:a1:dc:49:c5:de:89:34:3b:75:
9b:a6:f3:0b:39:61:6e:6c:9b:7b:84:21:45:88:40:
47:c7:c7:05:a2:b5:8e:06:cc:46:e0:75:f1:ef:d3:
ec:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
6F:F5:56:A8:3E:45:44:6A:1E:57:6B:B8:2B:35:80:6D:7F:3C:7C:1F
X509v3 Authority Key Identifier:
keyid:C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
Subject Information Access:
CA Repository - URI:rsync://repo2.nkn.in/repo/NIXI/0/
RPKI Manifest - URI:rsync://repo2.nkn.in/repo/NIXI/0/6FF556A83E45446A1E576BB82B35806D7F3C7C1F.mft
RPKI Notify - URI:https://repo2.nkn.in/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.136.209.0/24
103.161.186.0/23
103.218.116.0/22
103.218.232.0/22
IPv6:
2401:dc00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
148110-148120
Signature Algorithm: sha256WithRSAEncryption
7e:90:7e:2c:1c:d0:53:b0:97:6a:8e:7f:71:65:cb:b5:9d:27:
09:73:d0:84:56:37:0a:54:b7:32:1f:5d:b2:a3:31:1e:a2:6b:
06:82:a1:24:b5:ad:80:25:68:9e:b3:1c:f7:dd:ff:ad:c4:82:
dc:9f:91:6c:dc:6c:b8:7e:21:3d:58:41:be:97:f8:36:0c:81:
1a:b2:11:54:17:24:71:88:de:5d:c8:92:e3:83:f2:6d:6c:9d:
c4:70:5c:a4:c0:9e:27:bc:9a:ff:ce:e6:e4:68:0f:27:44:70:
b3:c1:4d:3e:1e:a7:68:41:6f:bd:76:4d:b9:be:8a:8e:7b:41:
ea:72:1a:2d:86:a5:0a:fc:42:cf:99:bd:72:e9:42:6c:3d:88:
1b:86:b2:32:07:4a:e4:75:63:fc:0a:04:1e:3a:9e:55:78:ce:
c5:89:2c:91:6e:b3:20:59:36:25:0b:08:38:61:68:92:43:b6:
25:71:19:29:8f:23:c2:51:40:bc:de:b9:8a:49:00:21:6c:85:
b9:7e:08:11:e6:51:99:d3:40:ba:b5:c9:66:37:1f:04:da:01:
b5:64:a1:85:df:50:66:39:b9:f6:fd:e3:97:b0:7c:fb:86:79:
d4:54:c1:b1:91:1c:40:f0:b7:2d:34:ca:77:3a:8c:6f:ce:7d:
f8:36:6c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:29:49 2026 by rpki-client