
$ rpki-client -vvvf repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
File: C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft (raw, json)
Hash identifier: CkJ3PunzXg+044/e2NFiipihVI/yt4kxyFGLRW7N2u0=
Subject key identifier: 2F:DA:2F:DD:1F:F1:9B:17:A9:F9:7C:C6:5D:B1:FE:D2:4D:09:0E:CA
Authority key identifier: C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45
Certificate issuer: /CN=A918EDB20000/serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45
Certificate serial: 02895E5302267A910284A4C8CB452B057B7DB5D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
Subject info access: rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
Manifest number: A3
Signing time: Sun 15 Nov 2026 03:40:27 +0000
Manifest this update: Sun 15 Nov 2026 03:35:27 +0000
Manifest next update: Mon 16 Nov 2026 05:19:27 +0000
Files and hashes: 1: 3130332e3232302e3233362e302f32322d3234203d3e203538383939.roa (hash: bESgYykf5jIsqrq4DGBWqam8+n359Fj4v6ec8df3s7c=)
2: 6FF556A83E45446A1E576BB82B35806D7F3C7C1F.cer (hash: ysFR+RfnBb7HpAvvSEfyHKqm8SiBXmDfFJy5nFh4W3g=)
3: AS59181.asa (hash: 7Gvk04P659WbTUjqsiVAShv2Ls34F70ybYnsX83a8Wo=)
4: 3130332e36362e3131362e302f32322d3232203d3e20313438313030.roa (hash: v7RsjJZ5dbR5+CqcoGTlQBoT5hrwD51NA56+ibj/vP4=)
5: 3130332e3232302e3232382e302f32322d3234203d3e2030.roa (hash: jqhVmI/+lu4UEkPDcHEUqW8dvf6LS93GW8F4PvPWlN8=)
6: 3130332e3136352e3137322e302f32332d3234203d3e20313431343934.roa (hash: 3CTTNoAXpucPbu4P+2fyMfa4cRQc4YvylwOuoaSLk+g=)
7: 3130332e36352e33322e302f32322d3234203d3e2030.roa (hash: emMEL3IXD5SmKi1V541hTjdCLPfeAv+QVWBz287PFrg=)
8: AS58899.asa (hash: I2iQAqZNYOZtjNe34S/qk8qwNf/7e95FLGQx/mnW9cA=)
9: B9262144237A3404C105DA97D69318D9BE295E42.cer (hash: ll3VhzgW2otGcDfhY4N5oodPfy1RyGZxiryTnnkRZeM=)
10: AS148100.asa (hash: ih4yDHb0jP4o9dh5YaFnsjXSgZhdDsPJ2uRPe4yoeRw=)
11: F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.cer (hash: +Z2MOYgKe4/mfC7o77W2G38lZrYRVXbn2MWzjyIcvUc=)
12: AS59182.asa (hash: /+lnwaAuYzgJ6W6pgML68zGgTSKwfkiLufQ6IJO5XIA=)
13: C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl (hash: KBLyiBwpmGV/PsDrhwCncpPfTRY4QlkAWaxkj689EXs=)
Validation: OK
Signature path: rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl
rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 05:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:89:5e:53:02:26:7a:91:02:84:a4:c8:cb:45:2b:05:7b:7d:b5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB20000, serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45
Validity
Not Before: Nov 15 03:35:27 2026 GMT
Not After : Nov 16 05:19:27 2026 GMT
Subject: CN=2FDA2FDD1FF19B17A9F97CC65DB1FED24D090ECA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1b:7f:fc:f3:4e:1e:39:eb:f5:8b:f8:9d:5c:
74:25:0b:65:c6:24:ff:b2:9f:66:4d:31:58:fb:ae:
1f:8e:41:59:54:a3:ee:5b:86:a8:86:23:a0:45:35:
0e:cc:19:8f:50:61:4e:8f:07:7a:27:d7:10:2f:67:
37:38:e7:20:eb:be:d8:2c:e3:8e:91:d3:2e:28:84:
38:61:ef:cc:5e:b4:0e:c6:b8:54:bf:6e:f7:37:e7:
02:93:4a:65:7e:02:d4:03:1c:28:e9:cb:12:a1:4b:
a7:18:95:bb:93:51:3c:94:eb:1a:5d:55:6b:88:55:
e5:a2:a4:e0:4d:7f:2b:fb:55:a8:41:b2:02:74:a5:
9d:e6:64:45:8b:b4:71:e3:d9:70:dc:ce:bb:27:a7:
d7:6e:fd:c9:37:d2:1b:2b:03:0a:45:4d:fd:44:b7:
4a:ee:cc:cc:8c:03:c4:ce:27:d6:45:35:bc:fa:c5:
b1:3e:04:f0:ee:d4:a6:83:f4:b2:96:20:fe:48:0c:
40:bd:ba:5e:6c:4c:7c:50:8a:8d:e7:b6:d8:58:86:
6c:ff:51:c2:b4:b8:07:9c:79:ba:1d:ee:1d:9b:02:
c0:43:b4:89:e2:e6:6d:6f:7e:9c:0a:3f:5d:5d:57:
06:d0:30:ad:31:90:f0:8b:26:30:e4:40:00:8a:db:
2e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DA:2F:DD:1F:F1:9B:17:A9:F9:7C:C6:5D:B1:FE:D2:4D:09:0E:CA
X509v3 Authority Key Identifier:
keyid:C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
Subject Information Access:
Signed Object - URI:rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3a:25:20:00:40:16:70:c2:99:d0:05:e8:07:cc:29:16:80:
13:a5:c3:f7:6e:5a:bf:aa:3d:84:e8:bc:4f:02:1b:36:95:4e:
10:33:c3:82:e0:2e:3e:42:e5:78:18:72:01:45:8e:19:79:4b:
7f:32:ce:86:a3:de:8b:fb:91:53:26:2b:42:0d:a8:10:ca:67:
73:3b:d9:10:2c:be:55:56:c7:0e:a1:53:2e:54:f7:c4:49:09:
90:ed:5d:99:92:bb:33:3c:e1:76:c1:97:8f:78:7d:08:4d:fc:
32:56:b8:49:49:3c:01:2e:af:bc:dd:2b:fb:5f:33:85:28:22:
f1:a6:c8:da:b5:dd:62:ed:cd:59:8c:19:92:96:60:18:3a:e1:
0b:f5:dc:43:a4:d5:4f:47:7c:6c:6a:57:e5:47:a3:9c:d8:81:
9e:99:a2:6c:b9:2c:4e:31:05:83:1a:1c:be:ce:11:c2:6c:52:
c0:2b:d7:a6:f1:2d:63:12:8b:97:ad:66:a7:b8:7a:33:7a:bb:
94:b6:cf:43:62:4d:86:30:c4:9a:6c:d9:77:6f:f7:0a:7b:59:
20:f4:d5:d7:39:da:b6:ed:da:b8:7e:3b:f0:3c:1e:7c:2c:39:
9f:39:dd:3e:b4:fa:c7:a3:0e:36:6e:71:05:5b:28:0a:53:fc:
33:03:30:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:08:33 2026 by rpki-client