Manifest

$ rpki-client -vvvf repo2.nkn.in/repo/PROK/0/F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.mft
File:                     F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.mft (raw, json)
Hash identifier:          RCCbJQ66OHps4OWiFsKVT2JcAKDdW8cTBDR1BUOpV/Y=
Subject key identifier:   53:89:DE:E1:FC:18:CD:FC:98:57:53:5C:D6:3A:A9:ED:A9:7E:74:CB
Authority key identifier: F0:F8:1B:51:47:26:02:A7:FB:64:BB:DA:FC:A2:8E:B9:E6:A7:49:55
Certificate issuer:       /CN=F0F81B51472602A7FB64BBDAFCA28EB9E6A74955
Certificate serial:       119EA75527AEE3944C3EEB100978914E71093C72
Authority info access:    rsync://repo2.nkn.in/repo/NKN/0/F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.cer
Subject info access:      rsync://repo2.nkn.in/repo/PROK/0/F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.mft
Manifest number:          30
Signing time:             Sun 20 Sep 2026 18:16:28 +0000
Manifest this update:     Sun 20 Sep 2026 18:11:28 +0000
Manifest next update:     Mon 21 Sep 2026 22:00:28 +0000
Files and hashes:         1: F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.crl (hash: R41Q0iv9tMFjUdYx+Em0XIaR99NJtmk4gKczwu2XpAc=)
                          2: 3131332e33302e3137322e302f32322d3234203d3e20313438313030.roa (hash: HXPMlvXGkYcgnjcx8oZ663rx/ZZHqpV5UoZok5d753s=)
                          3: AS148100.asa (hash: tvE0+ii9KG9pfujGWmWUmPRUnCCKMfDV4xBozygIwqU=)
Validation:               OK
Signature path:           rsync://repo2.nkn.in/repo/PROK/0/F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.crl
                          rsync://repo2.nkn.in/repo/PROK/0/F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.mft
                          rsync://repo2.nkn.in/repo/NKN/0/F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.cer
                          rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl
                          rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 22:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:9e:a7:55:27:ae:e3:94:4c:3e:eb:10:09:78:91:4e:71:09:3c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F81B51472602A7FB64BBDAFCA28EB9E6A74955
        Validity
            Not Before: Sep 20 18:11:28 2026 GMT
            Not After : Sep 21 22:00:28 2026 GMT
        Subject: CN=5389DEE1FC18CDFC9857535CD63AA9EDA97E74CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:01:49:0d:42:6f:8d:f6:bf:46:23:04:3b:f6:
                    0e:ca:1f:6b:95:64:af:39:36:f3:7e:54:fa:07:a3:
                    57:1e:3d:61:c3:75:bf:99:33:df:89:8b:85:13:a1:
                    00:28:ed:99:92:94:b4:98:2a:05:97:b7:63:24:e1:
                    82:29:df:fc:97:e1:db:e7:23:61:ac:57:7b:c7:15:
                    26:ee:23:54:14:50:62:74:46:a8:87:5b:ca:5a:8a:
                    f4:5e:5e:3c:34:89:70:ca:13:cb:4d:f8:0f:76:95:
                    c1:33:05:6b:44:37:c1:06:7a:ee:82:e0:5e:c4:e8:
                    b0:25:8e:a5:ea:c8:c8:26:29:93:33:09:70:9a:3c:
                    7e:ff:69:4d:0e:9e:e6:fd:8a:07:59:90:43:2f:4c:
                    ac:ea:49:f9:29:d7:06:94:f9:d3:26:38:79:ca:b5:
                    e0:bd:e4:c4:0c:ee:85:81:ca:a6:05:3e:07:32:11:
                    c3:8c:8e:55:6b:ee:74:b2:9a:0c:4e:a0:54:5a:ef:
                    d5:ee:72:44:39:ba:47:bf:4d:21:d1:03:55:2b:59:
                    0b:d0:25:80:fd:d6:a9:85:85:98:ea:8d:6a:7e:97:
                    e5:65:de:50:87:e4:28:44:20:86:4b:90:d0:0e:d4:
                    5e:4c:62:23:59:66:01:94:ec:5b:d8:95:49:12:9f:
                    e0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:89:DE:E1:FC:18:CD:FC:98:57:53:5C:D6:3A:A9:ED:A9:7E:74:CB
            X509v3 Authority Key Identifier:
                keyid:F0:F8:1B:51:47:26:02:A7:FB:64:BB:DA:FC:A2:8E:B9:E6:A7:49:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo2.nkn.in/repo/PROK/0/F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo2.nkn.in/repo/NKN/0/F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo2.nkn.in/repo/PROK/0/F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:5c:f6:6d:d3:3e:ff:23:a1:a1:4a:9f:4a:70:f0:b1:b1:cd:
         b1:5c:7d:39:51:23:a8:2d:56:a8:61:3f:cd:5d:ff:f1:27:84:
         10:c2:3a:12:69:0b:8f:38:62:02:3b:fb:a3:5d:10:9e:85:69:
         a2:85:e1:01:f3:29:37:74:a2:74:c7:80:13:1e:ff:cd:d4:2f:
         d9:b4:b8:1f:d8:9e:12:06:8d:71:7b:df:df:be:da:3a:58:be:
         9f:54:e9:e8:c9:76:05:1f:8e:21:cf:f6:69:7f:d9:a8:37:07:
         7e:68:8a:ab:41:d2:00:4b:f5:2a:04:5b:32:0c:a4:11:e3:0f:
         ad:a0:2a:7e:cf:c4:d2:ef:26:46:72:55:01:a6:24:bb:68:bc:
         29:76:0d:49:50:dd:77:a1:23:2c:9b:bd:61:c3:0e:68:46:6b:
         fc:8e:90:8e:d1:53:71:78:c9:2c:30:55:d3:c0:96:97:92:62:
         88:6a:a0:b1:33:12:1e:0b:69:34:07:91:c0:0d:ff:ee:e1:49:
         31:58:d0:4a:e7:37:b2:84:d0:85:93:5f:26:5e:d6:89:ee:a9:
         31:e7:fc:27:76:6f:57:8b:ce:37:c1:0c:7b:68:d4:8c:f8:a2:
         4c:1f:41:75:74:72:d4:ac:96:ed:6e:0f:cd:16:68:a7:ec:27:
         f0:ea:f7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:02:09 2026 by rpki-client