Manifest

$ rpki-client -vvvf repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
File:                     C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft (raw, json)
Hash identifier:          C78XDc/pPb7yhU7HtPWEENzg5036wARRAmN/IQSEB1s=
Subject key identifier:   07:13:1A:88:67:64:7F:A2:9C:48:DB:EB:FE:CD:DF:F1:EA:E6:E2:40
Authority key identifier: C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45
Certificate issuer:       /CN=A918EDB20000/serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45
Certificate serial:       63DA1FE7F459E2BD750311B79BCA6F13F7F43580
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
Subject info access:      rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
Manifest number:          4D
Signing time:             Mon 14 Sep 2026 08:46:54 +0000
Manifest this update:     Mon 14 Sep 2026 08:41:54 +0000
Manifest next update:     Tue 15 Sep 2026 09:39:54 +0000
Files and hashes:         1: AS59181.asa (hash: 7Gvk04P659WbTUjqsiVAShv2Ls34F70ybYnsX83a8Wo=)
                          2: 3130332e36352e33322e302f32322d3234203d3e2030.roa (hash: emMEL3IXD5SmKi1V541hTjdCLPfeAv+QVWBz287PFrg=)
                          3: 3130332e3232302e3232382e302f32322d3234203d3e2030.roa (hash: jqhVmI/+lu4UEkPDcHEUqW8dvf6LS93GW8F4PvPWlN8=)
                          4: 3130332e36352e33322e302f32322d3234203d3e203538383939.roa (hash: AMaQv0tcCrAYU3U6uIGSjdcFSwXRcka6u5R1BXYEIRw=)
                          5: B9262144237A3404C105DA97D69318D9BE295E42.cer (hash: ll3VhzgW2otGcDfhY4N5oodPfy1RyGZxiryTnnkRZeM=)
                          6: F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.cer (hash: +Z2MOYgKe4/mfC7o77W2G38lZrYRVXbn2MWzjyIcvUc=)
                          7: C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl (hash: nlU01kBINv6F6/KN3d4Tb91Sk7GNoSk+/bSJSY2T37k=)
                          8: AS59182.asa (hash: /+lnwaAuYzgJ6W6pgML68zGgTSKwfkiLufQ6IJO5XIA=)
                          9: AS148100.asa (hash: ih4yDHb0jP4o9dh5YaFnsjXSgZhdDsPJ2uRPe4yoeRw=)
                          10: 3130332e3232302e3233362e302f32322d3234203d3e203538383939.roa (hash: bESgYykf5jIsqrq4DGBWqam8+n359Fj4v6ec8df3s7c=)
                          11: 3130332e3136352e3137322e302f32332d3234203d3e20313431343934.roa (hash: 3CTTNoAXpucPbu4P+2fyMfa4cRQc4YvylwOuoaSLk+g=)
                          12: AS58899.asa (hash: 4vyoRdJqKDKLlGhCeezgxGlYJlawvrVHAoR6QB2PlaI=)
Validation:               OK
Signature path:           rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl
                          rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Sep 2026 09:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:da:1f:e7:f4:59:e2:bd:75:03:11:b7:9b:ca:6f:13:f7:f4:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB20000, serialNumber=C945C9211C5A2CA02C51E7C4C7985FA0F4545B45
        Validity
            Not Before: Sep 14 08:41:54 2026 GMT
            Not After : Sep 15 09:39:54 2026 GMT
        Subject: CN=07131A8867647FA29C48DBEBFECDDFF1EAE6E240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:28:32:f9:26:32:db:32:88:22:cd:f5:92:7b:
                    db:14:91:b1:2d:b6:6e:1a:69:a9:ca:a0:61:e0:a5:
                    59:56:3e:73:91:88:c4:fa:d6:44:56:53:32:c0:fe:
                    1a:5b:d4:af:e4:25:40:3d:04:8a:d8:a4:15:e3:c0:
                    70:a8:9d:ff:68:67:50:42:c4:60:b5:9f:f2:a5:d5:
                    3d:cf:6e:32:48:0c:fc:2c:a1:e9:03:b5:33:11:e0:
                    76:89:b3:3f:64:92:c9:08:8f:89:60:9e:5b:34:fe:
                    11:a3:8a:49:bf:9e:ca:9e:23:fe:30:c8:de:ab:60:
                    56:3d:c5:16:35:cb:01:3f:05:c2:bc:4a:c5:6e:87:
                    cc:0c:53:10:1d:c9:9c:b5:e1:55:c8:43:b3:31:63:
                    71:8d:d8:5a:72:e4:56:9e:71:d5:8d:f5:63:da:c3:
                    92:8b:cf:ef:64:75:35:81:60:4d:ae:aa:92:11:55:
                    d7:4a:fc:83:d0:b2:8a:ca:cb:d8:4a:db:fb:3d:7d:
                    18:07:b9:20:fe:73:d2:02:8d:98:f5:53:0b:b2:92:
                    4a:1a:02:61:0e:24:90:2e:42:39:26:89:92:05:ab:
                    3a:f9:4a:61:47:d0:96:52:53:3d:7e:aa:1c:26:1e:
                    89:74:21:83:8a:73:92:9d:2a:d8:c0:46:cf:ac:36:
                    b6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:13:1A:88:67:64:7F:A2:9C:48:DB:EB:FE:CD:DF:F1:EA:E6:E2:40
            X509v3 Authority Key Identifier:
                keyid:C9:45:C9:21:1C:5A:2C:A0:2C:51:E7:C4:C7:98:5F:A0:F4:54:5B:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:10:7f:ca:cb:ba:a0:c5:7a:dc:c0:cc:84:2a:e9:f7:76:1d:
         55:39:e0:79:40:2d:fc:6a:dc:bb:4d:06:bb:1b:e0:2a:3b:cc:
         15:74:ca:4f:be:55:31:c1:69:b1:da:97:a7:4f:b7:48:52:f3:
         e2:b3:80:2f:2b:48:d1:1f:b0:2e:63:c6:41:7a:ee:57:e7:ff:
         e7:02:ba:8b:3a:8e:fa:19:e2:9b:6f:56:c0:ff:1c:16:a9:c4:
         9b:c4:c7:81:47:8c:0d:e4:f1:36:a9:2c:74:8a:fc:2f:03:00:
         a1:c8:7e:64:dd:f5:ec:bd:d2:66:8d:40:86:0d:c3:87:7b:75:
         1a:94:1c:df:c4:84:80:36:ea:0f:cb:4c:7c:32:23:36:6e:1b:
         2f:4e:cc:cd:e5:7e:18:5d:b1:c2:2c:5e:82:0f:45:6d:e6:8b:
         9a:90:7c:01:6d:c0:f5:15:62:39:90:f6:bc:57:a2:ec:63:6e:
         06:c6:8b:a4:3f:b1:58:51:98:39:49:ec:03:f5:13:50:6a:6d:
         fb:58:c1:aa:ab:b9:dd:ea:3a:77:58:50:c5:50:dd:ef:90:86:
         7f:b2:41:df:7c:fa:03:b5:bb:88:dc:3e:8a:4e:ae:69:91:af:
         85:88:db:9d:4d:86:44:8b:fe:d4:a2:dd:eb:7e:f1:63:e0:e5:
         4b:35:be:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 17:57:10 2026 by rpki-client