Certificate

$ rpki-client -vvf repo2.nkn.in/repo/NKN/0/B9262144237A3404C105DA97D69318D9BE295E42.cer
File:                     B9262144237A3404C105DA97D69318D9BE295E42.cer (raw, json)
Hash identifier:          ll3VhzgW2otGcDfhY4N5oodPfy1RyGZxiryTnnkRZeM=
Subject key identifier:   B9:26:21:44:23:7A:34:04:C1:05:DA:97:D6:93:18:D9:BE:29:5E:42
Authority key identifier: C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45
Certificate issuer:       /CN=A918EDB20000/serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45
Certificate serial:       2C4C13EDB1CFE812749D39F28DCEAC429CE2869F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
Manifest:                 rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft
caRepository:             rsync://repo.nkn.in/repo/PDNS/0/
Notify URL:               https://repo.nkn.in/notification.xml
Certificate not before:   Tue 11 Aug 2026 08:39:14 +0000
Certificate not after:    Tue 10 Aug 2027 08:44:14 +0000
Subordinate resources:    AS: 59182
                          IP: 103.66.156.0/22
Validation:               OK
Signature path:           rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl
                          rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Aug 2026 06:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4c:13:ed:b1:cf:e8:12:74:9d:39:f2:8d:ce:ac:42:9c:e2:86:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB20000, serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45
        Validity
            Not Before: Aug 11 08:39:14 2026 GMT
            Not After : Aug 10 08:44:14 2027 GMT
        Subject: CN=B9262144237A3404C105DA97D69318D9BE295E42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f8:a8:b9:19:34:25:ff:e7:26:1b:1d:bb:85:
                    23:2e:2c:15:eb:86:bb:8d:70:51:6d:3b:28:18:08:
                    c8:24:b6:84:b4:6b:4b:a0:72:33:ac:4b:fa:fa:5b:
                    19:77:c0:64:5d:70:2e:aa:ae:77:d4:9c:2f:05:b6:
                    9f:ce:2a:cc:39:8e:d6:29:b8:88:f1:91:0f:ee:af:
                    50:ae:d3:77:11:00:a2:89:ae:ff:4a:0f:14:7c:df:
                    81:19:29:31:09:34:65:b0:c4:44:97:35:9d:44:13:
                    9c:fd:2a:5d:f8:1c:7f:8a:30:51:a1:bc:7b:59:1e:
                    f5:3d:4f:dc:51:07:3f:0c:79:d1:24:10:df:6e:56:
                    a2:cf:3b:cc:0e:b0:9e:1f:d6:42:0c:df:a9:f4:11:
                    ef:99:0a:c0:38:bb:76:48:b1:2e:6b:38:c5:61:27:
                    6e:ee:b2:de:a3:b3:bb:20:e0:b4:da:09:cc:c5:0c:
                    7a:55:80:34:33:42:0b:ff:65:d4:a5:8c:e9:42:49:
                    1e:d8:5d:cf:3d:2c:a9:e5:ba:25:43:b7:ae:40:ae:
                    db:51:cb:95:ec:40:36:10:51:87:1c:a9:84:1a:1b:
                    83:c1:ae:de:f6:5d:85:a2:cd:85:e5:90:b7:89:16:
                    fa:f7:16:19:51:22:cc:8c:29:ef:9a:d8:d7:07:14:
                    7f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B9:26:21:44:23:7A:34:04:C1:05:DA:97:D6:93:18:D9:BE:29:5E:42
            X509v3 Authority Key Identifier:
                keyid:C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer

            Subject Information Access:
                CA Repository - URI:rsync://repo.nkn.in/repo/PDNS/0/
                RPKI Manifest - URI:rsync://repo.nkn.in/repo/PDNS/0/B9262144237A3404C105DA97D69318D9BE295E42.mft
                RPKI Notify - URI:https://repo.nkn.in/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.156.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  59182

    Signature Algorithm: sha256WithRSAEncryption
         70:26:50:c3:97:48:d1:77:48:7f:bd:c7:f6:e4:a8:66:13:e9:
         b0:23:aa:4e:48:8f:7d:a0:b3:0d:0f:50:0c:21:da:f1:cd:fc:
         8a:98:8c:bd:96:31:e9:ab:3c:42:b5:a7:e1:b7:c4:85:3f:08:
         99:83:bc:88:12:1b:7d:81:6c:a4:2a:a4:8c:6c:3b:6d:bc:95:
         82:bc:e3:1e:04:a4:e7:21:4f:be:8e:47:a8:8a:34:c8:15:4f:
         b5:3a:04:68:6b:cc:f2:04:08:65:a1:3a:ec:5d:b0:61:7c:9f:
         88:a1:db:2a:db:c5:43:30:30:e3:13:09:4d:7d:cc:61:48:1b:
         df:b9:3f:84:b9:25:48:5b:c3:24:2c:6e:ca:79:e7:5c:af:29:
         28:81:a4:7b:b0:0b:9c:f0:45:25:ea:ac:b9:7b:3d:35:39:9d:
         99:82:dc:a2:d9:65:9f:3a:3a:8a:71:07:4e:0a:d3:68:94:1c:
         e5:2d:1c:c3:28:ed:7e:3f:05:53:5e:8e:e2:4e:cf:26:e2:e2:
         61:1d:33:61:11:74:b5:3f:d0:b9:1b:d2:68:15:85:c1:c1:f1:
         9c:43:46:b8:e4:d1:87:8b:3c:29:7b:dc:70:24:24:32:d8:57:
         5b:8d:8d:1c:e1:ba:b7:6e:40:9d:4e:5e:0c:5f:c4:9e:3a:9e:
         f5:08:bf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:46:16 2026 by rpki-client