
$ rpki-client -vvf repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft
File: B9262144237A3404C105DA97D69318D9BE295E42.mft (raw, json)
Hash identifier: YEmnjmcR0KE2H0KCO2iTA9L6LCDQ60w9aVqqTht5XQ8=
Subject key identifier: D1:AB:9D:B9:8D:B4:C6:61:14:DF:14:CB:39:6B:D1:51:CB:9A:B0:A9
Authority key identifier: B9:26:21:44:23:7A:34:04:C1:05:DA:97:D6:93:18:D9:BE:29:5E:42
Certificate issuer: /CN=B9262144237A3404C105DA97D69318D9BE295E42
Certificate serial: 604D0AD4DCB38250FAA75B44F30E1756C8E8247F
Authority info access: rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer
Subject info access: rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft
Manifest number: 07
Signing time: Thu 13 Aug 2026 01:31:22 +0000
Manifest this update: Thu 13 Aug 2026 01:26:22 +0000
Manifest next update: Fri 14 Aug 2026 02:25:22 +0000
Files and hashes: 1: AS59182.asa (hash: efaGRkFWdaqDTuibLbGWRCn7PY/OInRm11zewK13Bd0=)
2: 3130332e36362e3135362e302f32322d3234203d3e203539313832.roa (hash: 2kNY2J/bNUioX97b3C4h3fYPZCG5WqZQbSZ7z5McE7I=)
3: B9262144237A3404C105DA97D69318D9BE295E42.crl (hash: bILn8NieXIsr/wTp+n256lnwikcfzAK+UMHSDhLq5ZM=)
Validation: OK
Signature path: rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.crl
rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft
rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer
rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl
rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 14 Aug 2026 02:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:4d:0a:d4:dc:b3:82:50:fa:a7:5b:44:f3:0e:17:56:c8:e8:24:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9262144237A3404C105DA97D69318D9BE295E42
Validity
Not Before: Aug 13 01:26:22 2026 GMT
Not After : Aug 14 02:25:22 2026 GMT
Subject: CN=D1AB9DB98DB4C66114DF14CB396BD151CB9AB0A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:90:d1:9c:75:66:56:5d:a7:23:e3:32:85:ea:
84:87:0d:00:dd:b0:43:8d:d1:c9:83:12:87:c9:2f:
f0:65:66:f1:f7:46:76:f6:f8:93:93:86:6a:38:ea:
08:49:7b:fa:af:bc:b5:f0:80:4c:f6:0b:b2:95:9a:
08:b6:65:a8:c3:33:43:70:bd:7d:1b:32:d4:21:df:
e3:e5:a0:c3:90:c2:c3:ca:5a:5d:d3:95:8a:15:b0:
57:93:22:53:ba:c3:40:e6:45:49:19:2c:3e:5a:e5:
48:9d:f1:10:56:97:da:b4:38:77:80:ac:37:19:e6:
f1:85:bd:14:d0:5a:3b:15:37:e1:c4:77:c3:7f:23:
be:a0:02:6d:dd:25:53:7b:31:9b:71:0b:80:1f:d7:
66:f6:fa:0a:d0:61:77:43:33:d7:ae:da:04:e3:7f:
8f:56:48:00:b9:3b:55:df:70:67:04:e7:6a:4e:57:
32:2c:02:34:6d:7d:16:5c:13:85:d0:85:21:42:ad:
68:25:be:20:ff:34:2b:8e:0d:a6:ca:1c:90:d0:ac:
cd:f8:b9:a5:93:05:7d:c2:f3:28:f4:b7:c2:62:64:
0b:f3:5a:8e:2b:6c:c7:fc:4e:25:22:0e:31:9a:58:
ff:ee:56:28:15:84:f1:e2:87:24:dc:b7:8e:0d:a7:
9b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AB:9D:B9:8D:B4:C6:61:14:DF:14:CB:39:6B:D1:51:CB:9A:B0:A9
X509v3 Authority Key Identifier:
keyid:B9:26:21:44:23:7A:34:04:C1:05:DA:97:D6:93:18:D9:BE:29:5E:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.crl
Authority Information Access:
CA Issuers - URI:rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer
Subject Information Access:
Signed Object - URI:rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:47:f9:73:9d:e4:a0:6d:bb:7c:b3:c1:b7:a6:fb:f6:75:12:
dc:69:aa:0c:db:54:92:9c:ec:b0:8b:2a:fb:fb:20:bb:a6:ae:
87:de:d8:b6:39:36:fe:4c:bc:93:46:9e:fa:f9:4e:d3:3c:36:
c9:71:72:35:d7:44:62:3c:68:50:3d:c9:52:bb:d2:7c:a3:e8:
aa:20:a2:30:87:f9:9e:5e:4c:36:55:f3:09:10:09:c9:0b:6a:
75:06:df:77:e3:ae:8e:72:b5:59:58:49:2f:52:cf:0d:01:ad:
23:ec:61:f4:d8:b5:3c:d6:2a:e6:9b:1a:c2:06:85:f6:c9:87:
b6:6a:7d:af:e2:af:2c:7e:df:35:75:4c:1b:03:91:50:30:22:
e8:d3:34:f5:7f:25:7b:85:60:8f:11:d5:9e:64:a9:3d:33:71:
86:82:1b:35:38:85:c2:30:9f:eb:63:40:35:7f:41:33:15:3d:
af:48:66:19:35:a9:55:76:74:f8:7d:6d:2f:dc:ce:a5:7a:93:
f2:d1:95:25:7a:89:0a:75:2a:39:a0:7e:7f:44:c8:e9:22:43:
3b:3d:b6:91:64:90:37:59:eb:8d:d2:42:a2:09:95:d5:4e:b4:
f0:c4:f1:8f:6d:cb:e4:71:f1:97:06:1b:2b:39:57:e3:75:75:
d9:c7:b8:1c
-----BEGIN CERTIFICATE-----
MIIE0TCCA7mgAwIBAgIUYE0K1NyzglD6p1tE8w4XVsjoJH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjkyNjIxNDQyMzdBMzQwNEMxMDVEQTk3RDY5MzE4RDlC
RTI5NUU0MjAeFw0yNjA4MTMwMTI2MjJaFw0yNjA4MTQwMjI1MjJaMDMxMTAvBgNV
BAMTKEQxQUI5REI5OERCNEM2NjExNERGMTRDQjM5NkJEMTUxQ0I5QUIwQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdkNGcdWZWXacj4zKF6oSHDQDd
sEON0cmDEofJL/BlZvH3Rnb2+JOThmo46ghJe/qvvLXwgEz2C7KVmgi2ZajDM0Nw
vX0bMtQh3+PloMOQwsPKWl3TlYoVsFeTIlO6w0DmRUkZLD5a5Uid8RBWl9q0OHeA
rDcZ5vGFvRTQWjsVN+HEd8N/I76gAm3dJVN7MZtxC4Af12b2+grQYXdDM9eu2gTj
f49WSAC5O1XfcGcE52pOVzIsAjRtfRZcE4XQhSFCrWglviD/NCuODabKHJDQrM34
uaWTBX3C8yj0t8JiZAvzWo4rbMf8TiUiDjGaWP/uVigVhPHihyTct44Np5tNAgMB
AAGjggHbMIIB1zAdBgNVHQ4EFgQU0auduY20xmEU3xTLOWvRUcuasKkwHwYDVR0j
BBgwFoAUuSYhRCN6NATBBdqX1pMY2b4pXkIwDgYDVR0PAQH/BAQDAgeAMF0GA1Ud
HwRWMFQwUqBQoE6GTHJzeW5jOi8vcmVwby5ua24uaW4vcmVwby9QRE5TLzAvQjky
NjIxNDQyMzdBMzQwNEMxMDVEQTk3RDY5MzE4RDlCRTI5NUU0Mi5jcmwwaAYIKwYB
BQUHAQEEXDBaMFgGCCsGAQUFBzAChkxyc3luYzovL3JlcG8yLm5rbi5pbi9yZXBv
L05LTi8wL0I5MjYyMTQ0MjM3QTM0MDRDMTA1REE5N0Q2OTMxOEQ5QkUyOTVFNDIu
Y2VyMGgGCCsGAQUFBwELBFwwWjBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9yZXBvLm5r
bi5pbi9yZXBvL1BETlMvMC9COTI2MjE0NDIzN0EzNDA0QzEwNURBOTdENjkzMThE
OUJFMjk1RTQyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF
BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEABkf5c53koG27fLPBt6b79nUS3GmqDNtUkpzs
sIsq+/sgu6auh97Ytjk2/ky8k0ae+vlO0zw2yXFyNddEYjxoUD3JUrvSfKPoqiCi
MIf5nl5MNlXzCRAJyQtqdQbfd+OujnK1WVhJL1LPDQGtI+xh9Ni1PNYq5psawgaF
9smHtmp9r+KvLH7fNXVMGwORUDAi6NM09X8le4VgjxHVnmSpPTNxhoIbNTiFwjCf
62NANX9BMxU9r0hmGTWpVXZ0+H1tL9zOpXqT8tGVJXqJCnUqOaB+f0TI6SJDOz22
kWSQN1nrjdJCogmV1U608MTxj23L5HHxlwYbKzlX43V12ce4HA==
-----END CERTIFICATE-----
Generated at Thu Aug 13 09:54:21 2026 by rpki-client