Manifest

$ rpki-client -vvf repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft
File:                     B9262144237A3404C105DA97D69318D9BE295E42.mft (raw, json)
Hash identifier:          YEmnjmcR0KE2H0KCO2iTA9L6LCDQ60w9aVqqTht5XQ8=
Subject key identifier:   D1:AB:9D:B9:8D:B4:C6:61:14:DF:14:CB:39:6B:D1:51:CB:9A:B0:A9
Authority key identifier: B9:26:21:44:23:7A:34:04:C1:05:DA:97:D6:93:18:D9:BE:29:5E:42
Certificate issuer:       /CN=B9262144237A3404C105DA97D69318D9BE295E42
Certificate serial:       604D0AD4DCB38250FAA75B44F30E1756C8E8247F
Authority info access:    rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer
Subject info access:      rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft
Manifest number:          07
Signing time:             Thu 13 Aug 2026 01:31:22 +0000
Manifest this update:     Thu 13 Aug 2026 01:26:22 +0000
Manifest next update:     Fri 14 Aug 2026 02:25:22 +0000
Files and hashes:         1: AS59182.asa (hash: efaGRkFWdaqDTuibLbGWRCn7PY/OInRm11zewK13Bd0=)
                          2: 3130332e36362e3135362e302f32322d3234203d3e203539313832.roa (hash: 2kNY2J/bNUioX97b3C4h3fYPZCG5WqZQbSZ7z5McE7I=)
                          3: B9262144237A3404C105DA97D69318D9BE295E42.crl (hash: bILn8NieXIsr/wTp+n256lnwikcfzAK+UMHSDhLq5ZM=)
Validation:               OK
Signature path:           rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.crl
                          rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft
                          rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer
                          rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl
                          rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Aug 2026 02:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4d:0a:d4:dc:b3:82:50:fa:a7:5b:44:f3:0e:17:56:c8:e8:24:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9262144237A3404C105DA97D69318D9BE295E42
        Validity
            Not Before: Aug 13 01:26:22 2026 GMT
            Not After : Aug 14 02:25:22 2026 GMT
        Subject: CN=D1AB9DB98DB4C66114DF14CB396BD151CB9AB0A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:90:d1:9c:75:66:56:5d:a7:23:e3:32:85:ea:
                    84:87:0d:00:dd:b0:43:8d:d1:c9:83:12:87:c9:2f:
                    f0:65:66:f1:f7:46:76:f6:f8:93:93:86:6a:38:ea:
                    08:49:7b:fa:af:bc:b5:f0:80:4c:f6:0b:b2:95:9a:
                    08:b6:65:a8:c3:33:43:70:bd:7d:1b:32:d4:21:df:
                    e3:e5:a0:c3:90:c2:c3:ca:5a:5d:d3:95:8a:15:b0:
                    57:93:22:53:ba:c3:40:e6:45:49:19:2c:3e:5a:e5:
                    48:9d:f1:10:56:97:da:b4:38:77:80:ac:37:19:e6:
                    f1:85:bd:14:d0:5a:3b:15:37:e1:c4:77:c3:7f:23:
                    be:a0:02:6d:dd:25:53:7b:31:9b:71:0b:80:1f:d7:
                    66:f6:fa:0a:d0:61:77:43:33:d7:ae:da:04:e3:7f:
                    8f:56:48:00:b9:3b:55:df:70:67:04:e7:6a:4e:57:
                    32:2c:02:34:6d:7d:16:5c:13:85:d0:85:21:42:ad:
                    68:25:be:20:ff:34:2b:8e:0d:a6:ca:1c:90:d0:ac:
                    cd:f8:b9:a5:93:05:7d:c2:f3:28:f4:b7:c2:62:64:
                    0b:f3:5a:8e:2b:6c:c7:fc:4e:25:22:0e:31:9a:58:
                    ff:ee:56:28:15:84:f1:e2:87:24:dc:b7:8e:0d:a7:
                    9b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AB:9D:B9:8D:B4:C6:61:14:DF:14:CB:39:6B:D1:51:CB:9A:B0:A9
            X509v3 Authority Key Identifier:
                keyid:B9:26:21:44:23:7A:34:04:C1:05:DA:97:D6:93:18:D9:BE:29:5E:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:47:f9:73:9d:e4:a0:6d:bb:7c:b3:c1:b7:a6:fb:f6:75:12:
         dc:69:aa:0c:db:54:92:9c:ec:b0:8b:2a:fb:fb:20:bb:a6:ae:
         87:de:d8:b6:39:36:fe:4c:bc:93:46:9e:fa:f9:4e:d3:3c:36:
         c9:71:72:35:d7:44:62:3c:68:50:3d:c9:52:bb:d2:7c:a3:e8:
         aa:20:a2:30:87:f9:9e:5e:4c:36:55:f3:09:10:09:c9:0b:6a:
         75:06:df:77:e3:ae:8e:72:b5:59:58:49:2f:52:cf:0d:01:ad:
         23:ec:61:f4:d8:b5:3c:d6:2a:e6:9b:1a:c2:06:85:f6:c9:87:
         b6:6a:7d:af:e2:af:2c:7e:df:35:75:4c:1b:03:91:50:30:22:
         e8:d3:34:f5:7f:25:7b:85:60:8f:11:d5:9e:64:a9:3d:33:71:
         86:82:1b:35:38:85:c2:30:9f:eb:63:40:35:7f:41:33:15:3d:
         af:48:66:19:35:a9:55:76:74:f8:7d:6d:2f:dc:ce:a5:7a:93:
         f2:d1:95:25:7a:89:0a:75:2a:39:a0:7e:7f:44:c8:e9:22:43:
         3b:3d:b6:91:64:90:37:59:eb:8d:d2:42:a2:09:95:d5:4e:b4:
         f0:c4:f1:8f:6d:cb:e4:71:f1:97:06:1b:2b:39:57:e3:75:75:
         d9:c7:b8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:54:21 2026 by rpki-client