Manifest

$ rpki-client -vvvf repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
File:                     C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft (raw, json)
Hash identifier:          VHwjfH1vWaevZEVHlq++Uoe3zjVZOHWsllgE/b2g2Tw=
Subject key identifier:   1B:76:2A:9F:B4:ED:65:54:81:2D:AC:E1:7E:CA:C5:8E:B6:0E:42:54
Authority key identifier: C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45
Certificate issuer:       /CN=A918EDB20000/serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45
Certificate serial:       320BB8E54E5A5F2CDB11C6922875468892FE8A82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
Subject info access:      rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
Manifest number:          55
Signing time:             Sun 20 Sep 2026 09:35:53 +0000
Manifest this update:     Sun 20 Sep 2026 09:30:53 +0000
Manifest next update:     Mon 21 Sep 2026 10:35:53 +0000
Files and hashes:         1: B9262144237A3404C105DA97D69318D9BE295E42.cer (hash: ll3VhzgW2otGcDfhY4N5oodPfy1RyGZxiryTnnkRZeM=)
                          2: AS59181.asa (hash: 7Gvk04P659WbTUjqsiVAShv2Ls34F70ybYnsX83a8Wo=)
                          3: 3130332e3136352e3137322e302f32332d3234203d3e20313431343934.roa (hash: 3CTTNoAXpucPbu4P+2fyMfa4cRQc4YvylwOuoaSLk+g=)
                          4: 3130332e36352e33322e302f32322d3234203d3e203538383939.roa (hash: AMaQv0tcCrAYU3U6uIGSjdcFSwXRcka6u5R1BXYEIRw=)
                          5: AS58899.asa (hash: 4vyoRdJqKDKLlGhCeezgxGlYJlawvrVHAoR6QB2PlaI=)
                          6: 3130332e3232302e3233362e302f32322d3234203d3e203538383939.roa (hash: bESgYykf5jIsqrq4DGBWqam8+n359Fj4v6ec8df3s7c=)
                          7: AS59182.asa (hash: /+lnwaAuYzgJ6W6pgML68zGgTSKwfkiLufQ6IJO5XIA=)
                          8: AS148100.asa (hash: ih4yDHb0jP4o9dh5YaFnsjXSgZhdDsPJ2uRPe4yoeRw=)
                          9: 3130332e36352e33322e302f32322d3234203d3e2030.roa (hash: emMEL3IXD5SmKi1V541hTjdCLPfeAv+QVWBz287PFrg=)
                          10: 3130332e3232302e3232382e302f32322d3234203d3e2030.roa (hash: jqhVmI/+lu4UEkPDcHEUqW8dvf6LS93GW8F4PvPWlN8=)
                          11: F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.cer (hash: +Z2MOYgKe4/mfC7o77W2G38lZrYRVXbn2MWzjyIcvUc=)
                          12: C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl (hash: 0rueBY80ZqzNUWnbioRKzgsgMw/UKhLtDDEDSFkOiqA=)
Validation:               OK
Signature path:           rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl
                          rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 10:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0b:b8:e5:4e:5a:5f:2c:db:11:c6:92:28:75:46:88:92:fe:8a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB20000, serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45
        Validity
            Not Before: Sep 20 09:30:53 2026 GMT
            Not After : Sep 21 10:35:53 2026 GMT
        Subject: CN=1B762A9FB4ED6554812DACE17ECAC58EB60E4254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d9:00:ff:d4:f6:04:0b:5f:70:01:33:e7:06:
                    cc:89:65:65:37:1b:17:05:12:3d:1e:60:19:74:91:
                    7c:b0:b5:04:06:1c:77:74:8c:fc:3c:ca:7f:15:1b:
                    cd:0e:fd:a1:d5:ce:da:e6:ee:bf:cf:9a:d5:a5:5f:
                    b2:c9:9e:ca:ee:8a:11:a0:a6:49:1b:94:11:72:ba:
                    3f:b9:a1:13:05:14:e5:c1:4e:c0:fa:9c:b3:4a:5c:
                    01:85:5a:5b:ae:98:b6:50:c4:f1:1d:71:f8:18:b5:
                    37:73:f2:f4:bf:0a:5d:ea:bc:0d:50:5b:9a:e9:26:
                    a8:c6:02:f4:82:a6:78:54:b4:bb:fb:28:93:1e:ac:
                    4b:35:dc:ee:1e:25:c5:22:84:d0:f6:1b:b7:6f:1d:
                    7d:64:cb:fb:c6:12:6a:e6:a1:17:42:88:78:29:46:
                    6b:70:c9:c2:ac:c1:22:36:fb:e1:2b:c1:89:a5:29:
                    28:ad:93:c9:06:2e:e1:e8:01:97:38:4c:35:79:ab:
                    38:58:53:6d:73:60:56:40:65:14:e9:3e:41:a4:ca:
                    8c:c5:b2:59:03:38:34:24:b5:44:2b:74:19:86:b8:
                    36:e2:ad:03:2d:c0:22:27:73:ce:df:b0:d0:d4:c0:
                    c1:30:1b:2e:3b:7d:fa:34:f6:ab:2c:e5:e6:be:c4:
                    5d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:76:2A:9F:B4:ED:65:54:81:2D:AC:E1:7E:CA:C5:8E:B6:0E:42:54
            X509v3 Authority Key Identifier:
                keyid:C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:48:1c:13:a7:cd:d8:40:75:4c:a0:ac:5b:4a:cb:78:b6:23:
         d6:2f:33:bb:ed:01:aa:f0:b9:58:5f:a2:83:c1:70:66:84:43:
         d2:4c:b2:54:62:ed:0f:fa:a2:b5:07:1f:f9:5a:37:cb:27:a8:
         32:5c:ff:ac:77:05:cd:b7:15:5b:c3:15:c4:89:cc:26:50:d9:
         2b:f3:fb:9e:ac:e5:69:ff:a6:58:69:38:46:bb:40:6c:fd:35:
         c2:b3:30:4f:ed:44:3c:94:3b:0b:6a:3e:7e:1f:fd:c2:a0:ab:
         55:e3:69:2e:91:1a:13:4e:e0:25:0b:c6:25:ad:e0:1d:0e:d1:
         48:3c:a2:71:6d:83:e9:2b:db:7f:77:c0:a2:c0:22:4d:ed:74:
         e1:92:73:4f:84:3c:12:1d:27:a6:a4:f1:50:9e:f5:72:74:26:
         de:86:47:83:0f:9e:8e:d1:a6:8e:a8:b3:02:2e:0e:48:2b:cb:
         10:a5:36:3d:e6:1b:c0:60:0b:a2:4e:2c:26:c1:67:0b:ab:e0:
         f0:32:31:df:39:7a:53:c6:ea:ec:d5:86:fe:9b:b1:42:6c:68:
         7d:48:39:45:d4:04:cf:eb:71:4d:a1:d3:9c:1b:0f:ec:a2:a3:
         9a:08:09:7d:cb:b3:1c:67:2e:b7:39:1f:04:72:88:c6:f3:69:
         2a:01:74:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:21:50 2026 by rpki-client