
$ rpki-client -vvvf repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
File: C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft (raw, json)
Hash identifier: LxKD6koVpxFy5h9erNqIp0JbMTnjHYmqFVkyqtNTXiY=
Subject key identifier: 47:6C:92:F5:7D:A4:92:06:45:30:E8:29:83:1E:72:04:52:C5:08:27
Authority key identifier: C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45
Certificate issuer: /CN=A918EDB20000/serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45
Certificate serial: 08D1B3B40678A7B83288B7CE51984D36F170F931
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
Subject info access: rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
Manifest number: 59
Signing time: Wed 23 Sep 2026 09:15:57 +0000
Manifest this update: Wed 23 Sep 2026 09:10:57 +0000
Manifest next update: Thu 24 Sep 2026 10:51:57 +0000
Files and hashes: 1: AS59181.asa (hash: 7Gvk04P659WbTUjqsiVAShv2Ls34F70ybYnsX83a8Wo=)
2: C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl (hash: 8e+RYNjNjTxOgjeJrzmn6Ittd4fwI6y2grRM3kA5UMs=)
3: 3130332e3232302e3232382e302f32322d3234203d3e2030.roa (hash: jqhVmI/+lu4UEkPDcHEUqW8dvf6LS93GW8F4PvPWlN8=)
4: AS59182.asa (hash: /+lnwaAuYzgJ6W6pgML68zGgTSKwfkiLufQ6IJO5XIA=)
5: 3130332e3232302e3233362e302f32322d3234203d3e203538383939.roa (hash: bESgYykf5jIsqrq4DGBWqam8+n359Fj4v6ec8df3s7c=)
6: AS58899.asa (hash: 4vyoRdJqKDKLlGhCeezgxGlYJlawvrVHAoR6QB2PlaI=)
7: 3130332e3136352e3137322e302f32332d3234203d3e20313431343934.roa (hash: 3CTTNoAXpucPbu4P+2fyMfa4cRQc4YvylwOuoaSLk+g=)
8: F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.cer (hash: +Z2MOYgKe4/mfC7o77W2G38lZrYRVXbn2MWzjyIcvUc=)
9: 3130332e36352e33322e302f32322d3234203d3e203538383939.roa (hash: AMaQv0tcCrAYU3U6uIGSjdcFSwXRcka6u5R1BXYEIRw=)
10: AS148100.asa (hash: ih4yDHb0jP4o9dh5YaFnsjXSgZhdDsPJ2uRPe4yoeRw=)
11: B9262144237A3404C105DA97D69318D9BE295E42.cer (hash: ll3VhzgW2otGcDfhY4N5oodPfy1RyGZxiryTnnkRZeM=)
12: 3130332e36352e33322e302f32322d3234203d3e2030.roa (hash: emMEL3IXD5SmKi1V541hTjdCLPfeAv+QVWBz287PFrg=)
Validation: OK
Signature path: rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl
rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 10:51:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d1:b3:b4:06:78:a7:b8:32:88:b7:ce:51:98:4d:36:f1:70:f9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB20000, serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45
Validity
Not Before: Sep 23 09:10:57 2026 GMT
Not After : Sep 24 10:51:57 2026 GMT
Subject: CN=476C92F57DA492064530E829831E720452C50827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:69:32:15:9c:a7:b3:2e:87:96:f3:5b:31:
ff:39:a6:60:0a:ba:a0:bc:21:d5:d0:de:b9:b6:d2:
32:e6:d4:1a:0e:0d:05:d8:3b:0b:f0:44:cd:ec:db:
57:c5:e3:81:9f:6e:3a:24:7a:55:37:4b:1f:0c:c8:
2f:8f:72:ea:66:8d:eb:1c:4a:73:f5:81:29:68:10:
e6:40:6c:8a:cb:87:10:8f:46:88:cc:fc:0d:5f:20:
56:9b:99:e4:ed:9a:e1:7c:cf:63:c4:7b:e8:a0:26:
4d:2c:9b:01:83:e4:23:cd:58:07:03:7d:a4:fe:33:
cc:29:fd:55:f5:3e:62:85:7a:41:1e:1b:94:6b:b5:
4e:e0:73:93:67:32:05:ca:e7:cc:2e:f9:02:0f:78:
45:ce:e9:f6:23:0e:62:e6:b6:fc:ba:43:cf:32:01:
8f:49:32:94:96:89:b9:0c:0d:ac:9b:3e:56:5a:12:
3a:17:73:48:79:8e:c0:bd:f8:61:4a:b8:06:87:06:
3d:0f:42:d4:62:10:f0:d4:98:cd:42:c4:e7:83:42:
3b:50:63:a3:4b:bd:82:9f:d0:26:a3:48:30:88:e6:
d9:77:c0:c8:62:84:52:c7:4d:3f:b1:be:b2:f4:ac:
05:7d:4b:f2:72:c6:f7:d3:a3:ee:a1:da:89:d7:8e:
0a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6C:92:F5:7D:A4:92:06:45:30:E8:29:83:1E:72:04:52:C5:08:27
X509v3 Authority Key Identifier:
keyid:C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
Subject Information Access:
Signed Object - URI:rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b5:af:b5:21:3c:8f:cb:41:9b:de:26:49:bd:d9:71:20:0e:
4e:fe:c3:e2:26:bb:b7:92:73:40:11:a8:2d:b7:f9:de:0d:4c:
7d:8f:81:b1:84:17:97:59:26:38:66:80:01:9c:a1:49:a7:b1:
c1:04:d7:8e:f7:d5:c6:e6:80:dd:08:b3:d8:27:f3:98:a4:94:
db:44:6d:a5:52:2a:fd:c8:de:0e:1b:c7:87:4d:b7:ab:7f:31:
c0:9f:c7:17:34:28:67:60:f4:b4:fe:e1:72:13:87:ce:fd:68:
f8:49:fc:64:c1:e8:f8:31:3a:1d:c3:1e:65:2a:2c:a9:77:ab:
95:cd:9b:d5:ae:64:b5:0f:a0:a1:90:f0:3d:56:c2:b7:7c:eb:
9d:a9:d1:89:77:9d:73:6c:77:82:7a:33:d5:04:71:f3:50:ee:
11:99:20:42:38:80:1a:24:05:5c:7f:36:53:6e:8f:d5:fd:74:
7d:95:04:59:71:da:2d:8b:a3:c1:aa:89:f1:dc:b6:75:7a:19:
6e:37:8e:77:b8:27:64:53:45:1f:6f:32:11:4b:71:86:6a:38:
05:52:16:36:d5:8e:62:1f:a2:f8:0b:03:3d:9b:77:c1:2b:cb:
74:a6:45:fc:37:e0:e0:4c:85:51:26:96:91:06:2e:ea:47:22:
87:4a:8e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:47:06 2026 by rpki-client