$ rpki-client -vvf repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft File: C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft (raw, json) Hash identifier: StHtPXsoopFCvv654TArIboYhUxoFf573Ust9xk7oys= Subject key identifier: 0D:C8:54:30:E3:28:F6:3D:7C:F9:EE:D1:C9:26:2A:87:C5:68:A2:B7 Authority key identifier: C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45 Certificate issuer: /CN=A918EDB20000/serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45 Certificate serial: 03D567C18EA557F750019D13EB70578A746F1EBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer Subject info access: rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft Manifest number: 21 Signing time: Thu 13 Aug 2026 05:59:42 +0000 Manifest this update: Thu 13 Aug 2026 05:54:42 +0000 Manifest next update: Fri 14 Aug 2026 06:00:42 +0000 Files and hashes: 1: 3130332e36352e33322e302f32322d3234203d3e203538383939.roa (hash: AMaQv0tcCrAYU3U6uIGSjdcFSwXRcka6u5R1BXYEIRw=) 2: C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl (hash: YoRQxWWeHl16mZZ/WM9UG3TQGtd8UmHjSJ6lnonUlJ8=) 3: B9262144237A3404C105DA97D69318D9BE295E42.cer (hash: ll3VhzgW2otGcDfhY4N5oodPfy1RyGZxiryTnnkRZeM=) 4: AS59181.asa (hash: 7Gvk04P659WbTUjqsiVAShv2Ls34F70ybYnsX83a8Wo=) 5: 3130332e3232302e3232382e302f32322d3234203d3e2030.roa (hash: jqhVmI/+lu4UEkPDcHEUqW8dvf6LS93GW8F4PvPWlN8=) 6: AS58899.asa (hash: 4vyoRdJqKDKLlGhCeezgxGlYJlawvrVHAoR6QB2PlaI=) 7: AS59182.asa (hash: /+lnwaAuYzgJ6W6pgML68zGgTSKwfkiLufQ6IJO5XIA=) 8: 3130332e3232302e3233362e302f32322d3234203d3e203538383939.roa (hash: bESgYykf5jIsqrq4DGBWqam8+n359Fj4v6ec8df3s7c=) 9: 3130332e36352e33322e302f32322d3234203d3e2030.roa (hash: emMEL3IXD5SmKi1V541hTjdCLPfeAv+QVWBz287PFrg=) 10: AS148100.asa (hash: ih4yDHb0jP4o9dh5YaFnsjXSgZhdDsPJ2uRPe4yoeRw=) Validation: OK Signature path: rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 14 Aug 2026 06:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d5:67:c1:8e:a5:57:f7:50:01:9d:13:eb:70:57:8a:74:6f:1e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB20000, serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45 Validity Not Before: Aug 13 05:54:42 2026 GMT Not After : Aug 14 06:00:42 2026 GMT Subject: CN=0DC85430E328F63D7CF9EED1C9262A87C568A2B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8c:b4:ef:b9:b1:50:2a:c3:7a:7a:71:16:a3: cd:3f:aa:9c:4c:3c:78:ce:34:9e:d2:10:4f:87:21: 65:65:b4:8b:81:3e:94:c6:3c:96:16:c4:7f:e6:6b: be:a6:84:60:80:ec:b7:22:d1:4a:9c:ba:67:c5:b6: 2f:b4:ef:36:24:7c:25:6a:45:45:1b:16:aa:64:f3: 1b:c9:c1:6b:5d:b1:6d:70:ba:4a:a8:5d:53:3b:ea: 9b:61:33:d5:89:d1:2e:35:83:50:e8:47:25:e5:a9: f9:02:d3:7b:9f:25:ae:5d:4b:3f:21:2a:15:d5:d2: b6:cc:71:37:bd:8b:17:b6:6d:e8:cb:02:17:22:d3: 4c:b6:1d:cf:c4:0b:fb:c4:b8:4b:60:2c:da:22:47: 3b:39:ce:87:d4:ef:f6:af:db:9a:28:35:b9:1e:41: a6:17:aa:8d:c4:ee:4a:7a:e1:4c:db:3c:0f:96:e3: 9d:78:d7:99:41:44:22:10:a9:52:3a:0c:36:85:2f: 50:d4:c7:7f:8d:f5:97:8b:c5:12:87:f1:cf:03:8b: 24:dd:9f:07:01:89:af:39:26:78:8c:94:c5:59:80: b4:c8:93:66:5e:08:f6:54:33:cf:b8:bd:0c:0d:38: 4c:23:01:58:e4:91:a0:83:9b:d7:71:58:95:44:7b: 10:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C8:54:30:E3:28:F6:3D:7C:F9:EE:D1:C9:26:2A:87:C5:68:A2:B7 X509v3 Authority Key Identifier: keyid:C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer Subject Information Access: Signed Object - URI:rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:02:62:f2:24:d9:68:cb:01:53:3c:69:99:3d:5d:2b:55:1c: 5c:25:60:ff:4a:ec:7e:7b:ce:fa:ce:cc:48:7c:cf:7a:80:af: 1f:5c:51:32:49:8e:f8:8b:5d:e2:48:2c:b7:20:ba:b5:4d:f9: 2f:07:4b:5f:7d:72:94:75:7b:65:c4:5a:23:34:4b:44:6f:8c: 02:73:48:cb:32:d1:86:fd:0d:4b:e5:d1:4d:02:a2:c5:da:c8: 5c:e8:1a:6c:bb:5d:f5:f7:8a:fc:09:36:cf:f5:cc:61:24:2d: ea:0f:76:e4:1e:57:6f:2d:62:7d:b8:f6:61:1c:90:9d:b1:66: 52:f5:80:6c:1a:0c:0b:51:6c:d9:a2:b7:9f:71:ee:4e:14:43: d9:17:dd:77:75:7c:5a:e0:7a:0e:a1:4a:a3:06:80:c8:7d:fb: bc:cf:5f:a6:b8:8d:9d:0b:b0:49:42:a4:c6:cc:e1:be:e1:ef: 2c:66:3a:1d:84:4b:8a:f1:5c:71:97:77:68:a8:e1:cf:1d:e4: bc:c0:ef:5c:cd:85:2b:44:14:63:bb:3b:97:0a:c0:21:f9:d5: 5d:b9:2e:ee:e2:52:db:93:f3:28:83:dd:ce:fc:60:e9:0b:48: 54:6d:01:c3:ab:3d:a9:c6:f2:d3:99:3b:8c:28:4b:4a:d7:32: 8a:3c:29:30 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUA9VnwY6lV/dQAZ0T63BXinRvHr0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxOEVEQjIwMDAwMTEwLwYDVQQFEyhDOTQ1QzkyMTFD NUEyQ0EwMkM1MUU3QzRDNzk4NUZBMEY0NTQ1QjQ1MB4XDTI2MDgxMzA1NTQ0MloX DTI2MDgxNDA2MDA0MlowMzExMC8GA1UEAxMoMERDODU0MzBFMzI4RjYzRDdDRjlF RUQxQzkyNjJBODdDNTY4QTJCNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALOMtO+5sVAqw3p6cRajzT+qnEw8eM40ntIQT4chZWW0i4E+lMY8lhbEf+Zr vqaEYIDstyLRSpy6Z8W2L7TvNiR8JWpFRRsWqmTzG8nBa12xbXC6SqhdUzvqm2Ez 1YnRLjWDUOhHJeWp+QLTe58lrl1LPyEqFdXStsxxN72LF7Zt6MsCFyLTTLYdz8QL +8S4S2As2iJHOznOh9Tv9q/bmig1uR5BpheqjcTuSnrhTNs8D5bjnXjXmUFEIhCp UjoMNoUvUNTHf431l4vFEofxzwOLJN2fBwGJrzkmeIyUxVmAtMiTZl4I9lQzz7i9 DA04TCMBWOSRoIOb13FYlUR7EGcCAwEAAaOCAfEwggHtMB0GA1UdDgQWBBQNyFQw 4yj2PXz57tHJJiqHxWiitzAfBgNVHSMEGDAWgBTJRckhHFosoCxR58THmF+g9FRb RTAOBgNVHQ8BAf8EBAMCB4AwXQYDVR0fBFYwVDBSoFCgToZMcnN5bmM6Ly9yZXBv Mi5ua24uaW4vcmVwby9OS04vMC9DOTQ1QzkyMTFDNUEyQ0EwMkM1MUU3QzRDNzk4 NUZBMEY0NTQ1QjQ1LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJz eW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUy QkI0NjhGN0M3MkZEMUZGMi95VVhKSVJ4YUxLQXNVZWZFeDVoZm9QUlVXMFUuY2Vy MGgGCCsGAQUFBwELBFwwWjBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9yZXBvMi5ua24u aW4vcmVwby9OS04vMC9DOTQ1QzkyMTFDNUEyQ0EwMkM1MUU3QzRDNzk4NUZBMEY0 NTQ1QjQ1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH AQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAN BgkqhkiG9w0BAQsFAAOCAQEAdAJi8iTZaMsBUzxpmT1dK1UcXCVg/0rsfnvO+s7M SHzPeoCvH1xRMkmO+Itd4kgstyC6tU35LwdLX31ylHV7ZcRaIzRLRG+MAnNIyzLR hv0NS+XRTQKixdrIXOgabLtd9feK/Ak2z/XMYSQt6g925B5Xby1ifbj2YRyQnbFm UvWAbBoMC1Fs2aK3n3HuThRD2Rfdd3V8WuB6DqFKowaAyH37vM9fpriNnQuwSUKk xszhvuHvLGY6HYRLivFccZd3aKjhzx3kvMDvXM2FK0QUY7s7lwrAIfnVXbku7uJS 25PzKIPdzvxg6QtIVG0Bw6s9qcby05k7jChLStcyijwpMA== -----END CERTIFICATE-----Generated at Thu Aug 13 07:45:52 2026 by rpki-client