$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft File: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json) Hash identifier: 2PTEQKZ+PRSVjcFSTj/B6UkogHKVHr5D7nxll1CWck4= Subject key identifier: 98:EA:D6:19:B7:04:D5:0D:D3:EB:8C:16:C1:CC:40:5C:26:EA:A2:C8 Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Certificate serial: 076D1DAA124D216C9CA253D06563D4C00CB08473 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft Manifest number: 01A1 Signing time: Mon 03 Nov 2025 23:51:10 +0000 Manifest this update: Mon 03 Nov 2025 23:46:10 +0000 Manifest next update: Wed 05 Nov 2025 02:40:10 +0000 Files and hashes: 1: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: 4UYrDw3R1HMApdgBpMB/GcyfbyVxIeygboeA0NGcRKA=) 2: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: lk4vlitz+gwuhBTsjzbkneO7XBVp6Q4Lg//CvzP5wNU=) 3: 3138352e3230342e31322e302f32332d3233203d3e203631393631.roa (hash: 05KBv20ho05+9nNhARljl3KvN1w1xbUcP6YBmhidjZI=) 4: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: n9oD82N/Oc74KjefJWuXbdniXyTRuYdzVFV6P1uLFxM=) 5: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: 9lXsRq2vH27QU6oONZHHcOI2KgKrR7I1qDb4jmPN0NI=) 6: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: aQtSJ+DrPdjI6tdPjH35DjDz8hbObLwmapnYguKW8IE=) 7: 3138352e3230342e31342e302f32332d3233203d3e20323033393339.roa (hash: 0iU1VE4oIBeR0g+kEvaxFQYjnK8h1fW0reMHFIiSAYk=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Nov 2025 02:40:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:6d:1d:aa:12:4d:21:6c:9c:a2:53:d0:65:63:d4:c0:0c:b0:84:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Validity Not Before: Nov 3 23:46:10 2025 GMT Not After : Nov 5 02:40:10 2025 GMT Subject: CN=98EAD619B704D50DD3EB8C16C1CC405C26EAA2C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:21:65:28:76:a3:f8:88:20:fe:96:77:0d:02: 80:57:a1:ee:78:ba:76:3a:87:2a:1e:01:fc:ab:f0: 14:89:fb:71:9c:33:c8:c7:87:e1:46:bc:93:7c:4c: cc:bd:bd:34:6b:aa:78:be:e1:55:1d:60:82:bb:ca: ba:96:a9:3d:72:a1:4f:44:0e:f3:99:d1:9f:37:8d: 8a:f6:04:81:9a:e0:2d:3e:42:8c:fa:4e:ba:dc:39: 48:a2:f0:8d:b5:75:d9:63:f6:b8:c9:27:98:d2:e4: a5:23:7d:8a:1f:08:be:cf:8e:71:1b:71:18:0c:61: 4e:aa:35:1d:3e:5a:76:f1:c2:15:cb:a8:15:20:86: 47:2a:60:f6:42:39:c9:2d:ca:68:1a:c1:81:ea:f0: 3e:64:c3:e2:f8:f2:85:98:49:09:12:49:0a:93:be: 8d:0f:bd:0a:6a:8e:77:de:cc:cb:13:95:99:3f:43: 17:30:74:61:70:d0:b9:06:e8:58:14:81:26:eb:32: ec:47:09:f9:ae:19:1f:86:3b:a1:b4:be:64:6d:ea: 69:59:49:5f:ff:ff:c3:03:ab:de:47:fa:e1:75:4f: d8:76:a3:9c:c0:f2:2d:b9:12:3c:6d:c7:7f:34:c4: 08:41:0c:91:f3:16:ba:a9:4e:de:1f:a5:c3:74:18: 6c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:EA:D6:19:B7:04:D5:0D:D3:EB:8C:16:C1:CC:40:5C:26:EA:A2:C8 X509v3 Authority Key Identifier: keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:92:99:c7:1b:5b:b1:27:fd:79:64:b1:6c:d8:0b:b6:71:78: dd:ab:43:8d:65:d8:43:aa:6f:30:2b:8d:47:5c:43:ae:f7:74: f1:76:ab:c0:d1:1e:94:68:00:33:0b:a4:0d:71:7c:a9:d7:f7: d2:37:4f:46:b8:3c:7f:06:9d:08:3c:43:53:96:05:84:ab:4a: 28:ef:46:bd:cd:55:4d:b5:21:ba:e3:80:18:55:00:24:d1:4e: 8b:02:7c:81:8f:99:08:1b:81:76:67:c0:d5:90:7a:54:8a:aa: 07:ca:8b:76:89:35:cf:d3:0b:6c:b4:53:84:c3:90:82:e7:3a: ee:7b:e8:ff:e7:29:67:a0:3c:a7:ed:91:15:e0:f8:02:9d:a9: 8f:ad:e2:7c:7f:4c:60:3b:1d:dd:34:f6:b6:45:26:90:09:11: 05:63:87:9d:c8:f9:9f:ab:eb:13:62:50:98:fe:52:c2:71:a0: b3:32:48:0f:df:c1:a3:d2:8b:34:45:df:5c:4f:bd:c1:47:ba: fd:44:45:e7:98:64:16:cd:15:a2:e9:e4:37:4c:24:b2:d0:06: 5f:26:82:b0:2c:6b:7e:ee:7c:c7:8e:52:3d:f1:31:ba:fa:cd: 7b:b3:f7:cf:ad:5c:1c:82:6e:c6:09:ae:b2:0c:de:ed:96:35: 10:30:b2:ba -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUB20dqhJNIWycolPQZWPUwAywhHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx N2JkZTlhODAeFw0yNTExMDMyMzQ2MTBaFw0yNTExMDUwMjQwMTBaMDMxMTAvBgNV BAMTKDk4RUFENjE5QjcwNEQ1MEREM0VCOEMxNkMxQ0M0MDVDMjZFQUEyQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2IWUodqP4iCD+lncNAoBXoe54 unY6hyoeAfyr8BSJ+3GcM8jHh+FGvJN8TMy9vTRrqni+4VUdYIK7yrqWqT1yoU9E DvOZ0Z83jYr2BIGa4C0+Qoz6TrrcOUii8I21ddlj9rjJJ5jS5KUjfYofCL7PjnEb cRgMYU6qNR0+WnbxwhXLqBUghkcqYPZCOcktymgawYHq8D5kw+L48oWYSQkSSQqT vo0PvQpqjnfezMsTlZk/QxcwdGFw0LkG6FgUgSbrMuxHCfmuGR+GO6G0vmRt6mlZ SV///8MDq95H+uF1T9h2o5zA8i25Ejxtx380xAhBDJHzFrqpTt4fpcN0GGzDAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQUmOrWGbcE1Q3T64wWwcxAXCbqosgwHwYDVR0j BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC ZTk2YWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9y cGtpLm5lbGxpY3VzLm5ldC9yZXBvL25lbGxpY3VzLzEvNEU5QTZDMThGMzQ5QjM5 NUMzMUMzM0JCN0Y5QjlGNTgxN0JERTlBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJqSmccbW7En/Xlk sWzYC7ZxeN2rQ41l2EOqbzArjUdcQ673dPF2q8DRHpRoADMLpA1xfKnX99I3T0a4 PH8GnQg8Q1OWBYSrSijvRr3NVU21IbrjgBhVACTRTosCfIGPmQgbgXZnwNWQelSK qgfKi3aJNc/TC2y0U4TDkILnOu576P/nKWegPKftkRXg+AKdqY+t4nx/TGA7Hd00 9rZFJpAJEQVjh53I+Z+r6xNiUJj+UsJxoLMySA/fwaPSizRF31xPvcFHuv1EReeY ZBbNFaLp5DdMJLLQBl8mgrAsa37ufMeOUj3xMbr6zXuz98+tXByCbsYJrrIM3u2W NRAwsro= -----END CERTIFICATE-----Generated at Tue Nov 4 10:52:31 2025 by rpki-client