
$ rpki-client -vvvf repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
File: C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft (raw, json)
Hash identifier: EQCTKfBY5xvxjEUTixd9PZwLZVq1PUfsJvb1ySXGMiE=
Subject key identifier: 73:24:5F:07:8D:41:DB:8F:27:6D:36:F9:AA:60:F8:0E:20:10:34:58
Authority key identifier: C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45
Certificate issuer: /CN=A918EDB20000/serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45
Certificate serial: 5EBFD471A3B3038569DA0FF688D20400C5A2B232
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
Subject info access: rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
Manifest number: 60
Signing time: Mon 28 Sep 2026 01:26:08 +0000
Manifest this update: Mon 28 Sep 2026 01:21:08 +0000
Manifest next update: Tue 29 Sep 2026 01:53:08 +0000
Files and hashes: 1: AS58899.asa (hash: 4vyoRdJqKDKLlGhCeezgxGlYJlawvrVHAoR6QB2PlaI=)
2: B9262144237A3404C105DA97D69318D9BE295E42.cer (hash: ll3VhzgW2otGcDfhY4N5oodPfy1RyGZxiryTnnkRZeM=)
3: 3130332e3232302e3232382e302f32322d3234203d3e2030.roa (hash: jqhVmI/+lu4UEkPDcHEUqW8dvf6LS93GW8F4PvPWlN8=)
4: 3130332e36352e33322e302f32322d3234203d3e203538383939.roa (hash: AMaQv0tcCrAYU3U6uIGSjdcFSwXRcka6u5R1BXYEIRw=)
5: 3130332e36362e3131362e302f32322d3232203d3e20313438313030.roa (hash: v7RsjJZ5dbR5+CqcoGTlQBoT5hrwD51NA56+ibj/vP4=)
6: 3130332e3232302e3233362e302f32322d3234203d3e203538383939.roa (hash: bESgYykf5jIsqrq4DGBWqam8+n359Fj4v6ec8df3s7c=)
7: AS59181.asa (hash: 7Gvk04P659WbTUjqsiVAShv2Ls34F70ybYnsX83a8Wo=)
8: C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl (hash: 8m2fBd8b/FhbLBT6Fab56R56JzfEKAwLxjeAuJncVTQ=)
9: 3130332e3136352e3137322e302f32332d3234203d3e20313431343934.roa (hash: 3CTTNoAXpucPbu4P+2fyMfa4cRQc4YvylwOuoaSLk+g=)
10: 3130332e36352e33322e302f32322d3234203d3e2030.roa (hash: emMEL3IXD5SmKi1V541hTjdCLPfeAv+QVWBz287PFrg=)
11: AS148100.asa (hash: ih4yDHb0jP4o9dh5YaFnsjXSgZhdDsPJ2uRPe4yoeRw=)
12: AS59182.asa (hash: /+lnwaAuYzgJ6W6pgML68zGgTSKwfkiLufQ6IJO5XIA=)
13: F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.cer (hash: +Z2MOYgKe4/mfC7o77W2G38lZrYRVXbn2MWzjyIcvUc=)
Validation: OK
Signature path: rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl
rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 01:53:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:bf:d4:71:a3:b3:03:85:69:da:0f:f6:88:d2:04:00:c5:a2:b2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB20000, serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45
Validity
Not Before: Sep 28 01:21:08 2026 GMT
Not After : Sep 29 01:53:08 2026 GMT
Subject: CN=73245F078D41DB8F276D36F9AA60F80E20103458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e6:f1:17:d1:55:40:1b:97:e8:e3:f4:cf:f9:
de:b7:94:cb:18:29:cb:05:9d:f0:db:d8:18:72:aa:
7c:9c:12:ba:40:98:d3:db:c7:60:48:c3:9a:8c:0e:
21:c8:ec:93:7e:61:55:b9:53:0d:9a:81:00:98:ef:
77:18:66:64:7b:b9:bb:8d:3e:5b:65:7f:a7:48:30:
91:fd:cf:dc:63:61:06:a7:f4:e3:40:6b:af:98:51:
3b:a9:0e:c6:4b:da:18:8f:09:ff:c6:0f:ff:ef:d3:
f5:dd:32:f8:f0:be:49:57:7c:11:2a:dd:65:3d:83:
35:3b:ca:d9:1b:10:72:fd:10:6b:e0:20:cc:5e:b5:
91:f1:01:af:8b:36:ce:74:b8:6f:47:be:73:53:a2:
44:ef:92:45:1d:bb:ad:c3:00:6b:6b:34:ba:52:b6:
d6:84:fa:d3:46:8c:05:c2:62:15:7d:9f:66:93:e2:
f0:7b:5a:dc:ef:13:c8:e5:c6:92:45:90:ae:b8:78:
3f:3c:db:6e:c5:8e:20:64:ef:cc:c2:35:cb:43:a3:
6e:22:b6:08:b4:f3:81:0f:7c:e4:8b:84:43:f8:b7:
80:67:7a:f3:6a:0d:b2:2d:20:9b:86:94:02:94:14:
06:4a:49:bf:94:41:50:ea:d8:c9:31:4f:8f:25:e1:
08:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:24:5F:07:8D:41:DB:8F:27:6D:36:F9:AA:60:F8:0E:20:10:34:58
X509v3 Authority Key Identifier:
keyid:C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
Subject Information Access:
Signed Object - URI:rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:dc:91:c9:4f:e2:1f:2b:da:28:f4:56:5d:16:4b:85:67:a9:
39:89:31:c8:bf:8d:6a:50:f8:68:f2:4c:e6:9f:c7:03:a3:8d:
f8:68:f4:6f:fd:f8:e4:9f:09:19:25:0e:2a:03:01:05:be:70:
83:da:8c:81:29:6c:52:28:ed:33:c9:a4:97:21:c7:56:7f:f0:
cc:89:7b:3f:f0:7c:ad:71:74:2b:49:44:5a:70:c2:94:bd:97:
db:03:ea:af:6e:9d:b4:9a:18:51:4a:2b:93:54:73:eb:cf:8b:
eb:60:36:f2:4d:de:ad:f5:6b:04:6a:11:10:77:c3:94:29:a0:
89:a5:7a:2e:49:da:f9:7e:b0:15:f0:1d:b2:d1:61:e7:f5:07:
94:58:0e:53:01:86:0f:63:ad:c1:6a:c0:d4:ce:46:e1:75:97:
9b:cb:e4:38:61:97:f3:95:bc:81:84:6e:fa:d6:58:ce:c9:35:
0a:18:46:e2:7d:63:c4:21:7d:e0:fa:b4:80:48:58:84:fc:fc:
93:36:b2:19:9d:42:75:cd:a2:61:a3:e4:aa:63:34:53:94:44:
af:50:fd:3a:4a:3d:15:a8:70:2e:00:bc:76:64:25:d1:85:a3:
d9:aa:00:5a:0c:6c:b0:cc:9f:61:c1:d7:27:79:8a:12:f9:30:
02:18:92:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:06:38 2026 by rpki-client