$ rpki-client -vvvf repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft File: B9262144237A3404C105DA97D69318D9BE295E42.mft (raw, json) Hash identifier: Tgs5X8RqcWlwoaXEEau0/p/MPT46++n2rT16LG67hGg= Subject key identifier: 67:CA:71:D1:1D:61:80:69:79:7D:8A:E8:93:30:AE:4C:87:AC:40:13 Authority key identifier: B9:26:21:44:23:7A:34:04:C1:05:DA:97:D6:93:18:D9:BE:29:5E:42 Certificate issuer: /CN=B9262144237A3404C105DA97D69318D9BE295E42 Certificate serial: 41F1DC5B2F8F8CFBA27F0366930416B03E37FA52 Authority info access: rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer Subject info access: rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft Manifest number: 48 Signing time: Wed 30 Sep 2026 10:52:03 +0000 Manifest this update: Wed 30 Sep 2026 10:47:03 +0000 Manifest next update: Thu 01 Oct 2026 11:24:03 +0000 Files and hashes: 1: AS59182.asa (hash: efaGRkFWdaqDTuibLbGWRCn7PY/OInRm11zewK13Bd0=) 2: B9262144237A3404C105DA97D69318D9BE295E42.crl (hash: 6cnc2U11EmODTredmuYy2jmSLNi1qqOWFMbVfXqM81Y=) 3: 3130332e36362e3135362e302f32322d3234203d3e203539313832.roa (hash: 2kNY2J/bNUioX97b3C4h3fYPZCG5WqZQbSZ7z5McE7I=) Validation: OK Signature path: rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.crl rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 11:24:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:f1:dc:5b:2f:8f:8c:fb:a2:7f:03:66:93:04:16:b0:3e:37:fa:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B9262144237A3404C105DA97D69318D9BE295E42 Validity Not Before: Sep 30 10:47:03 2026 GMT Not After : Oct 1 11:24:03 2026 GMT Subject: CN=67CA71D11D618069797D8AE89330AE4C87AC4013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:08:1b:0f:94:4d:19:c0:45:54:21:1d:54:08: 2c:b4:b4:c1:0c:c5:98:e9:26:66:2a:24:3a:1a:ed: c2:d9:65:be:4b:d7:e4:66:ef:07:c0:4a:ad:17:48: a9:44:33:b5:08:ec:b7:45:51:ed:78:2a:30:87:d8: 84:03:fc:a9:30:2d:e4:5d:a3:2e:62:03:de:da:a2: 3d:6a:ee:43:a4:f4:ec:61:c8:df:5e:9c:26:df:93: 13:d0:f6:8d:ce:93:fe:11:fd:d1:3e:89:2c:1d:1e: 9b:4e:27:48:92:8f:f1:4d:ff:db:3a:e8:c4:fb:48: 85:de:63:51:3a:17:99:ab:78:92:c7:7a:59:17:66: 36:4a:77:16:b3:eb:94:12:cf:6d:c9:aa:b2:73:4e: 3b:61:bc:73:62:bd:1f:7d:44:44:28:47:3d:ad:1b: d7:5f:54:ba:62:5e:0a:0e:0d:a3:f7:23:94:78:d9: 2f:0f:46:6d:ef:59:ca:70:b3:20:8c:31:44:f8:f6: 89:ef:85:a5:36:dd:c8:a2:24:37:ec:a2:67:0d:87: 72:de:6e:a1:28:d4:bb:6a:57:65:74:d7:70:bc:aa: d8:af:10:ec:71:48:0e:b7:2b:33:08:8c:16:22:08: 21:f0:4f:64:97:a8:58:74:e8:ff:d6:0c:92:48:b2: e2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CA:71:D1:1D:61:80:69:79:7D:8A:E8:93:30:AE:4C:87:AC:40:13 X509v3 Authority Key Identifier: keyid:B9:26:21:44:23:7A:34:04:C1:05:DA:97:D6:93:18:D9:BE:29:5E:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.crl Authority Information Access: CA Issuers - URI:rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer Subject Information Access: Signed Object - URI:rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:93:dc:5c:6b:a2:8e:95:c9:e7:2f:8e:6c:a0:00:03:28:69: d1:c6:f1:aa:26:b7:79:fc:2b:e1:9f:a0:f7:53:0b:3a:40:bd: a6:28:2d:d6:fe:9e:37:38:85:f7:39:e8:18:28:87:5a:b8:f9: ab:1d:ee:5d:2d:0f:1e:80:e5:1e:d3:ec:fe:73:4f:83:32:65: de:de:73:69:8c:78:b2:72:19:61:d3:0c:00:67:be:b4:b9:bf: 74:13:09:92:22:72:f1:88:e2:fd:92:f2:79:00:fd:5d:b9:d8: da:fe:e6:7a:09:1d:e9:79:9d:53:b2:0b:b5:07:bd:47:8a:da: 6e:58:29:48:4b:5e:15:20:19:30:af:24:56:3a:f0:65:bb:88: fe:57:b1:47:c2:a7:38:3d:d8:06:1c:60:1d:2e:3e:63:51:cc: 3f:c6:20:6d:bb:19:31:82:2b:ec:05:98:33:11:3a:38:01:7c: 32:a8:fb:d9:98:a8:77:4a:7b:9d:14:ba:74:fd:ba:77:8a:03: 8c:41:e3:d5:04:eb:f6:f1:10:58:28:4b:07:a9:76:c3:a9:62: 37:25:4c:90:33:26:85:8d:72:b9:58:85:06:04:d4:01:d4:34: d3:c7:da:8b:8f:6e:20:02:3c:db:b5:66:65:86:2e:fb:ac:44: a1:fc:ea:fe -----BEGIN CERTIFICATE----- MIIE0TCCA7mgAwIBAgIUQfHcWy+PjPuifwNmkwQWsD43+lIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkyNjIxNDQyMzdBMzQwNEMxMDVEQTk3RDY5MzE4RDlC RTI5NUU0MjAeFw0yNjA5MzAxMDQ3MDNaFw0yNjEwMDExMTI0MDNaMDMxMTAvBgNV BAMTKDY3Q0E3MUQxMUQ2MTgwNjk3OTdEOEFFODkzMzBBRTRDODdBQzQwMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHCBsPlE0ZwEVUIR1UCCy0tMEM xZjpJmYqJDoa7cLZZb5L1+Rm7wfASq0XSKlEM7UI7LdFUe14KjCH2IQD/KkwLeRd oy5iA97aoj1q7kOk9OxhyN9enCbfkxPQ9o3Ok/4R/dE+iSwdHptOJ0iSj/FN/9s6 6MT7SIXeY1E6F5mreJLHelkXZjZKdxaz65QSz23JqrJzTjthvHNivR99REQoRz2t G9dfVLpiXgoODaP3I5R42S8PRm3vWcpwsyCMMUT49onvhaU23ciiJDfsomcNh3Le bqEo1LtqV2V013C8qtivEOxxSA63KzMIjBYiCCHwT2SXqFh06P/WDJJIsuL1AgMB AAGjggHbMIIB1zAdBgNVHQ4EFgQUZ8px0R1hgGl5fYrokzCuTIesQBMwHwYDVR0j BBgwFoAUuSYhRCN6NATBBdqX1pMY2b4pXkIwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud HwRWMFQwUqBQoE6GTHJzeW5jOi8vcmVwby5ua24uaW4vcmVwby9QRE5TLzAvQjky NjIxNDQyMzdBMzQwNEMxMDVEQTk3RDY5MzE4RDlCRTI5NUU0Mi5jcmwwaAYIKwYB BQUHAQEEXDBaMFgGCCsGAQUFBzAChkxyc3luYzovL3JlcG8yLm5rbi5pbi9yZXBv L05LTi8wL0I5MjYyMTQ0MjM3QTM0MDRDMTA1REE5N0Q2OTMxOEQ5QkUyOTVFNDIu Y2VyMGgGCCsGAQUFBwELBFwwWjBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9yZXBvLm5r bi5pbi9yZXBvL1BETlMvMC9COTI2MjE0NDIzN0EzNDA0QzEwNURBOTdENjkzMThE OUJFMjk1RTQyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEALpPcXGuijpXJ5y+ObKAAAyhp0cbxqia3efwr 4Z+g91MLOkC9pigt1v6eNziF9znoGCiHWrj5qx3uXS0PHoDlHtPs/nNPgzJl3t5z aYx4snIZYdMMAGe+tLm/dBMJkiJy8Yji/ZLyeQD9XbnY2v7megkd6XmdU7ILtQe9 R4rablgpSEteFSAZMK8kVjrwZbuI/lexR8KnOD3YBhxgHS4+Y1HMP8YgbbsZMYIr 7AWYMxE6OAF8Mqj72Ziod0p7nRS6dP26d4oDjEHj1QTr9vEQWChLB6l2w6liNyVM kDMmhY1yuViFBgTUAdQ008fai49uIAI827VmZYYu+6xEofzq/g== -----END CERTIFICATE-----Generated at Wed Sep 30 22:40:47 2026 by rpki-client