$ rpki-client -vvvf repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft File: B9262144237A3404C105DA97D69318D9BE295E42.mft (raw, json) Hash identifier: XCJSr6JyVW9TEWSzhDliDy2vRky2kZV88T18Q3yuhTw= Subject key identifier: BE:FC:77:F2:D4:0C:DE:C7:8B:F1:16:D1:45:91:B6:8A:CE:13:F3:E8 Authority key identifier: B9:26:21:44:23:7A:34:04:C1:05:DA:97:D6:93:18:D9:BE:29:5E:42 Certificate issuer: /CN=B9262144237A3404C105DA97D69318D9BE295E42 Certificate serial: 1BB4CDBB0A671A643B53C5AC6E3FD92917447ABA Authority info access: rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer Subject info access: rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft Manifest number: 40 Signing time: Thu 24 Sep 2026 09:09:50 +0000 Manifest this update: Thu 24 Sep 2026 09:04:50 +0000 Manifest next update: Fri 25 Sep 2026 12:06:50 +0000 Files and hashes: 1: AS59182.asa (hash: efaGRkFWdaqDTuibLbGWRCn7PY/OInRm11zewK13Bd0=) 2: 3130332e36362e3135362e302f32322d3234203d3e203539313832.roa (hash: 2kNY2J/bNUioX97b3C4h3fYPZCG5WqZQbSZ7z5McE7I=) 3: B9262144237A3404C105DA97D69318D9BE295E42.crl (hash: uQPuTLBX0a7K+cljnWZZBL0S2RyewbMB0zu+uzUXvi8=) Validation: OK Signature path: rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.crl rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b4:cd:bb:0a:67:1a:64:3b:53:c5:ac:6e:3f:d9:29:17:44:7a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9262144237A3404C105DA97D69318D9BE295E42 Validity Not Before: Sep 24 09:04:50 2026 GMT Not After : Sep 25 12:06:50 2026 GMT Subject: CN=BEFC77F2D40CDEC78BF116D14591B68ACE13F3E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:43:3b:6b:7e:3a:5a:d0:60:01:a4:bb:51:4a: 5d:c1:04:30:3e:c8:f1:4c:66:fa:31:d8:f2:3a:b7: 12:7d:f2:e3:b7:4b:63:c0:6d:23:66:fa:da:a3:90: 63:70:29:10:e7:ab:0d:47:80:19:b6:e8:27:72:03: d2:9b:0e:e0:f1:aa:73:55:b1:6c:bc:9a:ce:01:f9: 02:76:a4:d1:68:c2:60:d7:46:d4:1a:cd:ca:dd:be: 24:54:c8:07:aa:95:f7:d6:b6:d8:54:29:ff:3a:b6: ab:8e:10:c4:98:95:12:95:d5:e7:21:78:19:23:37: 5d:81:ef:99:77:20:a0:23:e8:92:46:bc:a2:6e:43: 21:0b:08:a5:c9:ca:f0:d1:22:9e:be:e9:e1:a3:ec: 30:a1:33:6e:03:13:58:73:47:06:bc:b1:15:45:90: b8:e0:70:ad:10:97:65:f2:86:11:5d:b7:96:5e:58: 26:47:cb:20:14:c8:a7:8c:eb:27:8d:25:d0:6a:6f: 60:4a:8a:2b:61:45:f9:73:40:0e:71:6f:c8:49:91: c3:e3:8f:a7:8b:68:0b:6b:92:de:0d:02:28:83:6c: 1b:28:0d:43:bc:f8:2b:53:db:fa:88:3b:06:3c:2a: bc:08:70:57:d7:b5:5a:20:0b:fc:e1:f3:4f:ce:8a: 7e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FC:77:F2:D4:0C:DE:C7:8B:F1:16:D1:45:91:B6:8A:CE:13:F3:E8 X509v3 Authority Key Identifier: keyid:B9:26:21:44:23:7A:34:04:C1:05:DA:97:D6:93:18:D9:BE:29:5E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.crl Authority Information Access: CA Issuers - URI:rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer Subject Information Access: Signed Object - URI:rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:0b:e0:a4:31:4c:12:b6:fc:95:69:54:32:78:50:f8:e6:9b: e8:75:0f:26:2d:45:70:62:52:28:af:9d:df:88:ac:9f:6f:5b: e0:15:77:63:87:b6:05:cf:a1:5e:76:3e:3a:48:5d:b6:fb:34: dd:cc:7e:56:94:2f:3a:83:23:d0:e3:0c:a4:16:19:07:2c:81: b0:ed:fa:c3:3f:bd:f7:76:71:9b:cf:19:5d:e5:4c:77:f0:4b: 27:c0:1b:19:23:6f:38:7e:af:ca:70:33:2a:03:c6:59:2c:e4: fe:44:03:69:05:f7:9f:81:87:2f:88:bb:90:8f:10:65:61:72: 07:ea:e6:a6:8b:c9:6b:fe:3e:88:0d:31:35:af:2d:0f:79:77: ab:a2:fe:74:75:cf:60:32:02:9f:c0:73:44:89:44:e8:0e:f0: 25:09:2d:2a:d1:8c:f2:ff:bf:81:47:bc:be:0c:d4:76:a8:59: 0e:45:81:84:26:fd:2d:fb:ab:09:04:17:d2:ef:a2:17:68:82: 7b:44:08:0f:0d:f0:a8:4d:6d:a0:bb:e7:98:8e:ca:3b:bc:e3: c8:23:06:c7:8b:9e:e0:5c:f0:62:4e:89:66:26:d0:8c:4e:fc: db:b5:78:8e:95:e8:cf:50:4b:9c:a7:71:9b:62:bf:c6:2e:17: 5b:1c:4e:ad -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUG7TNuwpnGmQ7U8Wsbj/ZKRdEerowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyNjIxNDQyMzdBMzQwNEMxMDVEQTk3RDY5MzE4RDlC RTI5NUU0MjAeFw0yNjA5MjQwOTA0NTBaFw0yNjA5MjUxMjA2NTBaMDMxMTAvBgNV BAMTKEJFRkM3N0YyRDQwQ0RFQzc4QkYxMTZEMTQ1OTFCNjhBQ0UxM0YzRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClQztrfjpa0GABpLtRSl3BBDA+ yPFMZvox2PI6txJ98uO3S2PAbSNm+tqjkGNwKRDnqw1HgBm26CdyA9KbDuDxqnNV sWy8ms4B+QJ2pNFowmDXRtQazcrdviRUyAeqlffWtthUKf86tquOEMSYlRKV1ech eBkjN12B75l3IKAj6JJGvKJuQyELCKXJyvDRIp6+6eGj7DChM24DE1hzRwa8sRVF kLjgcK0Ql2XyhhFdt5ZeWCZHyyAUyKeM6yeNJdBqb2BKiithRflzQA5xb8hJkcPj j6eLaAtrkt4NAiiDbBsoDUO8+CtT2/qIOwY8KrwIcFfXtVogC/zh80/Oin43AgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUvvx38tQM3seL8RbRRZG2is4T8+gwHwYDVR0j BBgwFoAUuSYhRCN6NATBBdqX1pMY2b4pXkIwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud HwRWMFQwUqBQoE6GTHJzeW5jOi8vcmVwby5ua24uaW4vcmVwby9QRE5TLzAvQjky NjIxNDQyMzdBMzQwNEMxMDVEQTk3RDY5MzE4RDlCRTI5NUU0Mi5jcmwwaAYIKwYB BQUHAQEEXDBaMFgGCCsGAQUFBzAChkxyc3luYzovL3JlcG8yLm5rbi5pbi9yZXBv L05LTi8wL0I5MjYyMTQ0MjM3QTM0MDRDMTA1REE5N0Q2OTMxOEQ5QkUyOTVFNDIu Y2VyMGgGCCsGAQUFBwELBFwwWjBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9yZXBvLm5r bi5pbi9yZXBvL1BETlMvMC9COTI2MjE0NDIzN0EzNDA0QzEwNURBOTdENjkzMThE OUJFMjk1RTQyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAZAvgpDFMErb8lWlUMnhQ+Oab6HUPJi1FcGJS KK+d34isn29b4BV3Y4e2Bc+hXnY+Okhdtvs03cx+VpQvOoMj0OMMpBYZByyBsO36 wz+993Zxm88ZXeVMd/BLJ8AbGSNvOH6vynAzKgPGWSzk/kQDaQX3n4GHL4i7kI8Q ZWFyB+rmpovJa/4+iA0xNa8tD3l3q6L+dHXPYDICn8BzRIlE6A7wJQktKtGM8v+/ gUe8vgzUdqhZDkWBhCb9LfurCQQX0u+iF2iCe0QIDw3wqE1toLvnmI7KO7zjyCMG x4ue4FzwYk6JZibQjE7827V4jpXoz1BLnKdxm2K/xi4XWxxOrQ== -----END CERTIFICATE-----Generated at Thu Sep 24 14:57:35 2026 by rpki-client