
$ rpki-client -vvvf repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft
File: B9262144237A3404C105DA97D69318D9BE295E42.mft (raw, json)
Hash identifier: WioQLlvr0f7oyXIYNwwpQvPjZBpn2pJAoZ3oPpGtsR4=
Subject key identifier: 7D:72:0D:C3:9E:B2:2C:0F:E3:B7:96:F0:6A:4C:6F:85:53:CE:89:29
Authority key identifier: B9:26:21:44:23:7A:34:04:C1:05:DA:97:D6:93:18:D9:BE:29:5E:42
Certificate issuer: /CN=B9262144237A3404C105DA97D69318D9BE295E42
Certificate serial: 35E95F732E411405B93B1D1C6E83A25066493D57
Authority info access: rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer
Subject info access: rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft
Manifest number: 86
Signing time: Sun 15 Nov 2026 08:55:52 +0000
Manifest this update: Sun 15 Nov 2026 08:50:52 +0000
Manifest next update: Mon 16 Nov 2026 12:14:52 +0000
Files and hashes: 1: B9262144237A3404C105DA97D69318D9BE295E42.crl (hash: T3mhADEQT6+CKWlsWVFnLFY/28Q8mJvQH04CFRjcsxM=)
2: AS59182.asa (hash: pXwD2tP85p381hInItCcU8eeYnhn4s+LctK+pQb7c68=)
3: 3130332e36362e3135362e302f32322d3234203d3e203539313832.roa (hash: 2kNY2J/bNUioX97b3C4h3fYPZCG5WqZQbSZ7z5McE7I=)
Validation: OK
Signature path: rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.crl
rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft
rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer
rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl
rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 05:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:e9:5f:73:2e:41:14:05:b9:3b:1d:1c:6e:83:a2:50:66:49:3d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9262144237A3404C105DA97D69318D9BE295E42
Validity
Not Before: Nov 15 08:50:52 2026 GMT
Not After : Nov 16 12:14:52 2026 GMT
Subject: CN=7D720DC39EB22C0FE3B796F06A4C6F8553CE8929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:52:fb:39:7b:47:01:ce:2a:54:02:6d:7f:
b9:35:b4:5f:d0:08:99:32:f9:54:70:ee:5d:a4:d1:
5c:14:f1:a5:89:cc:39:fb:04:ab:5c:48:2b:89:35:
5e:a8:ec:b9:dc:a3:e4:56:7b:8b:15:76:f6:cc:93:
ec:71:60:bf:d2:5c:60:41:f2:cf:be:b8:8c:10:87:
48:d3:42:bc:cb:3f:03:48:1c:6a:76:20:b2:10:ac:
2d:b5:14:2d:4a:43:95:b5:ec:32:84:18:c8:07:7e:
54:72:36:fc:6e:50:50:01:6f:75:97:a7:d6:a2:85:
c0:a7:cc:be:a2:e5:38:85:e9:89:50:18:90:b0:9b:
c4:ce:5c:04:e9:9c:0a:e1:c8:fd:7c:da:5c:7b:cd:
30:f8:ee:ff:25:3b:0a:22:90:5f:d0:4c:eb:76:d8:
5e:cf:b7:ba:e3:c6:92:32:91:7e:42:e2:45:c8:a9:
fb:70:f5:0f:25:4e:34:26:9a:5e:52:40:eb:f8:29:
77:1e:b5:5e:cd:b7:52:4d:5b:f6:22:1b:bf:b1:80:
df:89:88:bf:6a:9b:eb:00:02:36:5d:35:83:6d:42:
09:9c:66:75:0f:a0:92:39:aa:f8:6c:32:0f:db:36:
a3:f5:8c:df:9a:d9:f9:e9:b3:1d:60:58:a8:a9:08:
cb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:72:0D:C3:9E:B2:2C:0F:E3:B7:96:F0:6A:4C:6F:85:53:CE:89:29
X509v3 Authority Key Identifier:
keyid:B9:26:21:44:23:7A:34:04:C1:05:DA:97:D6:93:18:D9:BE:29:5E:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.crl
Authority Information Access:
CA Issuers - URI:rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer
Subject Information Access:
Signed Object - URI:rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a5:51:d1:01:f2:ea:ca:ee:7a:0f:37:50:dd:09:2c:39:43:
61:e0:0e:df:b9:c3:ee:da:37:81:1b:86:8b:51:a7:72:77:74:
25:9c:11:98:50:5a:e0:66:1f:ee:fd:c7:28:59:9d:1f:1e:7d:
bf:63:79:55:7a:8e:36:ae:82:90:b7:75:59:55:3f:12:9b:30:
68:5d:67:f1:77:68:7e:98:04:fa:8c:71:1c:3a:bf:cd:a1:31:
54:79:f2:bb:80:54:3f:11:15:22:62:d8:95:35:5b:84:1d:f0:
3d:34:01:e8:62:aa:a1:db:6d:f4:93:f7:86:5f:3a:25:76:4b:
66:41:5b:e3:62:ce:bc:0f:a1:25:b1:a3:71:80:d3:69:6c:0d:
4f:e3:dc:d4:76:43:38:b9:e2:69:9c:57:0b:7e:a2:93:a5:a4:
e7:55:fa:8a:d8:c6:71:d8:30:60:12:de:52:df:26:93:e1:c4:
b1:f6:75:83:46:e2:6a:fa:05:2b:99:a7:d8:d1:04:bc:39:95:
eb:3f:2c:49:e5:ef:11:a7:dd:e5:78:e5:58:f9:6a:db:fa:48:
2a:74:36:f0:8a:ab:5c:3c:cb:19:42:45:a5:a7:ef:74:4c:be:
98:1a:94:40:47:80:85:a4:46:73:50:1f:7b:25:58:17:dd:16:
09:fb:30:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:28:53 2026 by rpki-client