Manifest

$ rpki-client -vvvf repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft
File:                     B9262144237A3404C105DA97D69318D9BE295E42.mft (raw, json)
Hash identifier:          WioQLlvr0f7oyXIYNwwpQvPjZBpn2pJAoZ3oPpGtsR4=
Subject key identifier:   7D:72:0D:C3:9E:B2:2C:0F:E3:B7:96:F0:6A:4C:6F:85:53:CE:89:29
Authority key identifier: B9:26:21:44:23:7A:34:04:C1:05:DA:97:D6:93:18:D9:BE:29:5E:42
Certificate issuer:       /CN=B9262144237A3404C105DA97D69318D9BE295E42
Certificate serial:       35E95F732E411405B93B1D1C6E83A25066493D57
Authority info access:    rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer
Subject info access:      rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft
Manifest number:          86
Signing time:             Sun 15 Nov 2026 08:55:52 +0000
Manifest this update:     Sun 15 Nov 2026 08:50:52 +0000
Manifest next update:     Mon 16 Nov 2026 12:14:52 +0000
Files and hashes:         1: B9262144237A3404C105DA97D69318D9BE295E42.crl (hash: T3mhADEQT6+CKWlsWVFnLFY/28Q8mJvQH04CFRjcsxM=)
                          2: AS59182.asa (hash: pXwD2tP85p381hInItCcU8eeYnhn4s+LctK+pQb7c68=)
                          3: 3130332e36362e3135362e302f32322d3234203d3e203539313832.roa (hash: 2kNY2J/bNUioX97b3C4h3fYPZCG5WqZQbSZ7z5McE7I=)
Validation:               OK
Signature path:           rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.crl
                          rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft
                          rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer
                          rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl
                          rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Nov 2026 05:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e9:5f:73:2e:41:14:05:b9:3b:1d:1c:6e:83:a2:50:66:49:3d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9262144237A3404C105DA97D69318D9BE295E42
        Validity
            Not Before: Nov 15 08:50:52 2026 GMT
            Not After : Nov 16 12:14:52 2026 GMT
        Subject: CN=7D720DC39EB22C0FE3B796F06A4C6F8553CE8929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ec:52:fb:39:7b:47:01:ce:2a:54:02:6d:7f:
                    b9:35:b4:5f:d0:08:99:32:f9:54:70:ee:5d:a4:d1:
                    5c:14:f1:a5:89:cc:39:fb:04:ab:5c:48:2b:89:35:
                    5e:a8:ec:b9:dc:a3:e4:56:7b:8b:15:76:f6:cc:93:
                    ec:71:60:bf:d2:5c:60:41:f2:cf:be:b8:8c:10:87:
                    48:d3:42:bc:cb:3f:03:48:1c:6a:76:20:b2:10:ac:
                    2d:b5:14:2d:4a:43:95:b5:ec:32:84:18:c8:07:7e:
                    54:72:36:fc:6e:50:50:01:6f:75:97:a7:d6:a2:85:
                    c0:a7:cc:be:a2:e5:38:85:e9:89:50:18:90:b0:9b:
                    c4:ce:5c:04:e9:9c:0a:e1:c8:fd:7c:da:5c:7b:cd:
                    30:f8:ee:ff:25:3b:0a:22:90:5f:d0:4c:eb:76:d8:
                    5e:cf:b7:ba:e3:c6:92:32:91:7e:42:e2:45:c8:a9:
                    fb:70:f5:0f:25:4e:34:26:9a:5e:52:40:eb:f8:29:
                    77:1e:b5:5e:cd:b7:52:4d:5b:f6:22:1b:bf:b1:80:
                    df:89:88:bf:6a:9b:eb:00:02:36:5d:35:83:6d:42:
                    09:9c:66:75:0f:a0:92:39:aa:f8:6c:32:0f:db:36:
                    a3:f5:8c:df:9a:d9:f9:e9:b3:1d:60:58:a8:a9:08:
                    cb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:72:0D:C3:9E:B2:2C:0F:E3:B7:96:F0:6A:4C:6F:85:53:CE:89:29
            X509v3 Authority Key Identifier:
                keyid:B9:26:21:44:23:7A:34:04:C1:05:DA:97:D6:93:18:D9:BE:29:5E:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a5:51:d1:01:f2:ea:ca:ee:7a:0f:37:50:dd:09:2c:39:43:
         61:e0:0e:df:b9:c3:ee:da:37:81:1b:86:8b:51:a7:72:77:74:
         25:9c:11:98:50:5a:e0:66:1f:ee:fd:c7:28:59:9d:1f:1e:7d:
         bf:63:79:55:7a:8e:36:ae:82:90:b7:75:59:55:3f:12:9b:30:
         68:5d:67:f1:77:68:7e:98:04:fa:8c:71:1c:3a:bf:cd:a1:31:
         54:79:f2:bb:80:54:3f:11:15:22:62:d8:95:35:5b:84:1d:f0:
         3d:34:01:e8:62:aa:a1:db:6d:f4:93:f7:86:5f:3a:25:76:4b:
         66:41:5b:e3:62:ce:bc:0f:a1:25:b1:a3:71:80:d3:69:6c:0d:
         4f:e3:dc:d4:76:43:38:b9:e2:69:9c:57:0b:7e:a2:93:a5:a4:
         e7:55:fa:8a:d8:c6:71:d8:30:60:12:de:52:df:26:93:e1:c4:
         b1:f6:75:83:46:e2:6a:fa:05:2b:99:a7:d8:d1:04:bc:39:95:
         eb:3f:2c:49:e5:ef:11:a7:dd:e5:78:e5:58:f9:6a:db:fa:48:
         2a:74:36:f0:8a:ab:5c:3c:cb:19:42:45:a5:a7:ef:74:4c:be:
         98:1a:94:40:47:80:85:a4:46:73:50:1f:7b:25:58:17:dd:16:
         09:fb:30:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:28:53 2026 by rpki-client