Certificate

$ rpki-client -vvvf repo2.nkn.in/repo/NKN/0/F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.cer
File:                     F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.cer (raw, json)
Hash identifier:          +Z2MOYgKe4/mfC7o77W2G38lZrYRVXbn2MWzjyIcvUc=
Subject key identifier:   F0:F8:1B:51:47:26:02:A7:FB:64:BB:DA:FC:A2:8E:B9:E6:A7:49:55
Authority key identifier: C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45
Certificate issuer:       /CN=A918EDB20000/serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45
Certificate serial:       205337C7A03EE4AFB00F2BD8727A9DE345C3D465
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
Manifest:                 rsync://repo2.nkn.in/repo/PROK/0/F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.mft
caRepository:             rsync://repo2.nkn.in/repo/PROK/0/
Notify URL:               https://repo2.nkn.in/notification.xml
Certificate not before:   Mon 17 Aug 2026 12:51:12 +0000
Certificate not after:    Mon 16 Aug 2027 12:56:12 +0000
Subordinate resources:    AS: 148100
                          IP: 113.30.172.0/22
                          IP: 2001:de8:1::/48
Validation:               OK
Signature path:           rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl
                          rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 10:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:53:37:c7:a0:3e:e4:af:b0:0f:2b:d8:72:7a:9d:e3:45:c3:d4:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB20000, serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45
        Validity
            Not Before: Aug 17 12:51:12 2026 GMT
            Not After : Aug 16 12:56:12 2027 GMT
        Subject: CN=F0F81B51472602A7FB64BBDAFCA28EB9E6A74955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:55:27:fa:48:fb:57:0c:13:36:f3:e6:dc:
                    15:6c:4e:1a:8e:62:99:17:0e:db:e6:a3:41:11:bc:
                    68:57:6e:63:1b:e1:ff:92:a0:11:0a:75:cd:8e:01:
                    ca:73:98:9c:e1:c5:9a:8b:66:8f:bd:a5:60:c6:da:
                    0f:10:82:d0:d7:76:75:a5:31:da:f9:2e:3f:0a:2a:
                    67:b1:0b:dc:a0:9f:43:4b:a1:21:04:ff:2b:88:38:
                    ee:3a:13:10:1d:8d:d6:35:b2:2a:4a:2e:1c:97:71:
                    cd:1f:8a:63:80:60:43:de:30:2b:42:bb:37:18:26:
                    ee:25:3b:0e:c6:ac:49:ea:ae:28:95:be:24:10:b7:
                    ce:c0:31:d6:d9:4b:93:64:86:3d:45:55:5d:20:65:
                    9e:cd:bf:6d:5f:2a:7d:3c:15:4a:68:7d:85:0a:b7:
                    0d:c6:5d:50:13:81:28:35:1a:1b:16:b3:4a:95:78:
                    8a:96:e0:9c:36:70:e6:56:6c:4f:2c:db:9e:7a:f8:
                    a3:a2:32:37:bb:06:fb:3b:2a:b6:e6:7b:9e:7a:26:
                    71:16:02:52:d3:06:3e:27:fc:8d:56:cb:71:6d:9e:
                    2e:d4:62:cb:07:46:2a:e7:9b:7d:2e:f5:7d:0f:dd:
                    f3:6d:54:7a:59:70:aa:67:a7:99:1f:4e:2c:e3:2c:
                    8c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F0:F8:1B:51:47:26:02:A7:FB:64:BB:DA:FC:A2:8E:B9:E6:A7:49:55
            X509v3 Authority Key Identifier:
                keyid:C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo2.nkn.in/repo/PROK/0/
                RPKI Manifest - URI:rsync://repo2.nkn.in/repo/PROK/0/F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.mft
                RPKI Notify - URI:https://repo2.nkn.in/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.30.172.0/22
                IPv6:
                  2001:de8:1::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  148100

    Signature Algorithm: sha256WithRSAEncryption
         2a:5a:97:27:5e:e1:42:38:68:c8:12:df:db:11:e3:21:0b:8e:
         e8:b6:8b:97:76:51:f8:fc:e7:f9:d0:34:f2:e9:bd:1e:6f:d6:
         1c:39:d1:aa:ad:08:20:c4:d5:96:c5:a5:db:18:4a:18:2f:bc:
         c2:b9:2c:92:4e:4b:2e:02:47:61:2b:f0:35:8d:95:ba:7f:64:
         26:9c:65:b1:7a:e6:51:2b:7e:73:46:7a:c7:ee:09:99:1e:db:
         86:06:de:29:cf:5c:db:70:e0:8a:6a:d6:50:0f:82:29:a6:24:
         ad:85:0f:ef:ae:c6:af:35:56:ac:89:03:73:cc:76:d5:d0:d1:
         ce:79:9f:e0:d8:97:1a:a6:a8:47:85:cc:50:c2:27:af:51:35:
         1d:88:67:89:fb:71:38:74:6a:fa:9b:e0:e0:fd:77:a8:48:f6:
         56:da:a9:9f:33:77:da:3e:f5:b3:53:e8:ef:2d:11:bb:e0:48:
         60:db:42:c1:bb:e0:4b:d9:18:a8:b2:a4:b5:09:dc:7e:95:7c:
         41:fd:ee:c9:66:10:00:fb:ab:3d:fa:c2:75:b8:3a:cb:0a:60:
         47:2e:28:82:52:bf:5e:9c:74:2c:a2:34:75:9e:f3:b3:c7:be:
         96:a7:0f:27:ef:a3:04:8e:b1:d8:cd:02:08:6b:68:af:6a:9a:
         54:97:c7:15
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIUIFM3x6A+5K+wDyvYcnqd40XD1GUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOEVEQjIwMDAwMTEwLwYDVQQFEyhDOTQ1QzkyMTFD
NUEyQ0EwMkM1MUU3QzRDNzk4NUZBMEY0NTQ1QjQ1MB4XDTI2MDgxNzEyNTExMloX
DTI3MDgxNjEyNTYxMlowMzExMC8GA1UEAxMoRjBGODFCNTE0NzI2MDJBN0ZCNjRC
QkRBRkNBMjhFQjlFNkE3NDk1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMUnVSf6SPtXDBM28+bcFWxOGo5imRcO2+ajQRG8aFduYxvh/5KgEQp1zY4B
ynOYnOHFmotmj72lYMbaDxCC0Nd2daUx2vkuPwoqZ7EL3KCfQ0uhIQT/K4g47joT
EB2N1jWyKkouHJdxzR+KY4BgQ94wK0K7Nxgm7iU7DsasSequKJW+JBC3zsAx1tlL
k2SGPUVVXSBlns2/bV8qfTwVSmh9hQq3DcZdUBOBKDUaGxazSpV4ipbgnDZw5lZs
Tyzbnnr4o6IyN7sG+zsqtuZ7nnomcRYCUtMGPif8jVbLcW2eLtRiywdGKuebfS71
fQ/d821UellwqmenmR9OLOMsjDUCAwEAAaOCAnwwggJ4MA8GA1UdEwEB/wQFMAMB
Af8wHQYDVR0OBBYEFPD4G1FHJgKn+2S72vyijrnmp0lVMB8GA1UdIwQYMBaAFMlF
ySEcWiygLFHnxMeYX6D0VFtFMA4GA1UdDwEB/wQEAwIBBjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3JlcG8yLm5rbi5pbi9yZXBvL05LTi8wL0M5NDVDOTIxMUM1
QTJDQTAyQzUxRTdDNEM3OTg1RkEwRjQ1NDVCNDUuY3JsMH4GCCsGAQUFBwEBBHIw
cDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5
L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3QzcyRkQxRkYyL3lVWEpJUnhhTEtBc1Vl
ZkV4NWhmb1BSVVcwVS5jZXIwgc0GCCsGAQUFBwELBIHAMIG9MC0GCCsGAQUFBzAF
hiFyc3luYzovL3JlcG8yLm5rbi5pbi9yZXBvL1BST0svMC8wWQYIKwYBBQUHMAqG
TXJzeW5jOi8vcmVwbzIubmtuLmluL3JlcG8vUFJPSy8wL0YwRjgxQjUxNDcyNjAy
QTdGQjY0QkJEQUZDQTI4RUI5RTZBNzQ5NTUubWZ0MDEGCCsGAQUFBzANhiVodHRw
czovL3JlcG8yLm5rbi5pbi9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwMAYIKwYBBQUHAQcBAf8EITAfMAwEAgABMAYDBAJxHqwwDwQC
AAIwCQMHACABDegAATAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMCQoQwDQYJKoZI
hvcNAQELBQADggEBACpalyde4UI4aMgS39sR4yELjui2i5d2Ufj85/nQNPLpvR5v
1hw50aqtCCDE1ZbFpdsYShgvvMK5LJJOSy4CR2Er8DWNlbp/ZCacZbF65lErfnNG
esfuCZke24YG3inPXNtw4Ipq1lAPgimmJK2FD++uxq81VqyJA3PMdtXQ0c55n+DY
lxqmqEeFzFDCJ69RNR2IZ4n7cTh0avqb4OD9d6hI9lbaqZ8zd9o+9bNT6O8tEbvg
SGDbQsG74EvZGKiypLUJ3H6VfEH97slmEAD7qz36wnW4OssKYEcuKIJSv16cdCyi
NHWe87PHvpanDyfvowSOsdjNAghraK9qmlSXxxU=
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:08:18 2026 by rpki-client