
$ rpki-client -vvvf repo2.nkn.in/repo/PROK/0/F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.mft
File: F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.mft (raw, json)
Hash identifier: RCCbJQ66OHps4OWiFsKVT2JcAKDdW8cTBDR1BUOpV/Y=
Subject key identifier: 53:89:DE:E1:FC:18:CD:FC:98:57:53:5C:D6:3A:A9:ED:A9:7E:74:CB
Authority key identifier: F0:F8:1B:51:47:26:02:A7:FB:64:BB:DA:FC:A2:8E:B9:E6:A7:49:55
Certificate issuer: /CN=F0F81B51472602A7FB64BBDAFCA28EB9E6A74955
Certificate serial: 119EA75527AEE3944C3EEB100978914E71093C72
Authority info access: rsync://repo2.nkn.in/repo/NKN/0/F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.cer
Subject info access: rsync://repo2.nkn.in/repo/PROK/0/F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.mft
Manifest number: 30
Signing time: Sun 20 Sep 2026 18:16:28 +0000
Manifest this update: Sun 20 Sep 2026 18:11:28 +0000
Manifest next update: Mon 21 Sep 2026 22:00:28 +0000
Files and hashes: 1: F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.crl (hash: R41Q0iv9tMFjUdYx+Em0XIaR99NJtmk4gKczwu2XpAc=)
2: 3131332e33302e3137322e302f32322d3234203d3e20313438313030.roa (hash: HXPMlvXGkYcgnjcx8oZ663rx/ZZHqpV5UoZok5d753s=)
3: AS148100.asa (hash: tvE0+ii9KG9pfujGWmWUmPRUnCCKMfDV4xBozygIwqU=)
Validation: OK
Signature path: rsync://repo2.nkn.in/repo/PROK/0/F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.crl
rsync://repo2.nkn.in/repo/PROK/0/F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.mft
rsync://repo2.nkn.in/repo/NKN/0/F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.cer
rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.crl
rsync://repo2.nkn.in/repo/NKN/0/C945C9211C5A2CA02C51E7C4C7985FA0F4545B45.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUXJIRxaLKAsUefEx5hfoPRUW0U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 22:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:9e:a7:55:27:ae:e3:94:4c:3e:eb:10:09:78:91:4e:71:09:3c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0F81B51472602A7FB64BBDAFCA28EB9E6A74955
Validity
Not Before: Sep 20 18:11:28 2026 GMT
Not After : Sep 21 22:00:28 2026 GMT
Subject: CN=5389DEE1FC18CDFC9857535CD63AA9EDA97E74CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:49:0d:42:6f:8d:f6:bf:46:23:04:3b:f6:
0e:ca:1f:6b:95:64:af:39:36:f3:7e:54:fa:07:a3:
57:1e:3d:61:c3:75:bf:99:33:df:89:8b:85:13:a1:
00:28:ed:99:92:94:b4:98:2a:05:97:b7:63:24:e1:
82:29:df:fc:97:e1:db:e7:23:61:ac:57:7b:c7:15:
26:ee:23:54:14:50:62:74:46:a8:87:5b:ca:5a:8a:
f4:5e:5e:3c:34:89:70:ca:13:cb:4d:f8:0f:76:95:
c1:33:05:6b:44:37:c1:06:7a:ee:82:e0:5e:c4:e8:
b0:25:8e:a5:ea:c8:c8:26:29:93:33:09:70:9a:3c:
7e:ff:69:4d:0e:9e:e6:fd:8a:07:59:90:43:2f:4c:
ac:ea:49:f9:29:d7:06:94:f9:d3:26:38:79:ca:b5:
e0:bd:e4:c4:0c:ee:85:81:ca:a6:05:3e:07:32:11:
c3:8c:8e:55:6b:ee:74:b2:9a:0c:4e:a0:54:5a:ef:
d5:ee:72:44:39:ba:47:bf:4d:21:d1:03:55:2b:59:
0b:d0:25:80:fd:d6:a9:85:85:98:ea:8d:6a:7e:97:
e5:65:de:50:87:e4:28:44:20:86:4b:90:d0:0e:d4:
5e:4c:62:23:59:66:01:94:ec:5b:d8:95:49:12:9f:
e0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:89:DE:E1:FC:18:CD:FC:98:57:53:5C:D6:3A:A9:ED:A9:7E:74:CB
X509v3 Authority Key Identifier:
keyid:F0:F8:1B:51:47:26:02:A7:FB:64:BB:DA:FC:A2:8E:B9:E6:A7:49:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo2.nkn.in/repo/PROK/0/F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.crl
Authority Information Access:
CA Issuers - URI:rsync://repo2.nkn.in/repo/NKN/0/F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.cer
Subject Information Access:
Signed Object - URI:rsync://repo2.nkn.in/repo/PROK/0/F0F81B51472602A7FB64BBDAFCA28EB9E6A74955.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5c:f6:6d:d3:3e:ff:23:a1:a1:4a:9f:4a:70:f0:b1:b1:cd:
b1:5c:7d:39:51:23:a8:2d:56:a8:61:3f:cd:5d:ff:f1:27:84:
10:c2:3a:12:69:0b:8f:38:62:02:3b:fb:a3:5d:10:9e:85:69:
a2:85:e1:01:f3:29:37:74:a2:74:c7:80:13:1e:ff:cd:d4:2f:
d9:b4:b8:1f:d8:9e:12:06:8d:71:7b:df:df:be:da:3a:58:be:
9f:54:e9:e8:c9:76:05:1f:8e:21:cf:f6:69:7f:d9:a8:37:07:
7e:68:8a:ab:41:d2:00:4b:f5:2a:04:5b:32:0c:a4:11:e3:0f:
ad:a0:2a:7e:cf:c4:d2:ef:26:46:72:55:01:a6:24:bb:68:bc:
29:76:0d:49:50:dd:77:a1:23:2c:9b:bd:61:c3:0e:68:46:6b:
fc:8e:90:8e:d1:53:71:78:c9:2c:30:55:d3:c0:96:97:92:62:
88:6a:a0:b1:33:12:1e:0b:69:34:07:91:c0:0d:ff:ee:e1:49:
31:58:d0:4a:e7:37:b2:84:d0:85:93:5f:26:5e:d6:89:ee:a9:
31:e7:fc:27:76:6f:57:8b:ce:37:c1:0c:7b:68:d4:8c:f8:a2:
4c:1f:41:75:74:72:d4:ac:96:ed:6e:0f:cd:16:68:a7:ec:27:
f0:ea:f7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:02:09 2026 by rpki-client