$ rpki-client -vvvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json) Hash identifier: Fjutb4t6W8OBqjv5d8O7xKI52LxzpmeevzZHklC+btE= Subject key identifier: 59:D5:A4:9C:A6:65:D0:ED:90:DB:4E:0A:2B:3C:65:90:F1:E0:09:0F Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Certificate serial: 49D163BAB5526A7144A3FD64DEB5A0168883ECBD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft Manifest number: 0374 Signing time: Sun 20 Sep 2026 01:42:49 +0000 Manifest this update: Sun 20 Sep 2026 01:37:49 +0000 Manifest next update: Mon 21 Sep 2026 04:38:49 +0000 Files and hashes: 1: 323630323a663735323a3a2f33362d3336203d3e2037303130.roa (hash: PFy4ASG9ftcLCEhqn8MWfo4EYAQx79cKa9+rn7sjOUo=) 2: AS7010.asa (hash: wa5XbHFVF02KH90WbF7953Ua1Lvt36cAkwJWHWrxQUw=) 3: AS61961.asa (hash: xB62lymjtKQrG3onCUo1WoI7naRlPCnglhV9lM7+Szk=) 4: 323630323a666461643a3a2f34302d3438203d3e2037303130.roa (hash: RVBdGUMed0yeJwGesBxpnUhuP70xtA9w4HInEAe7IKI=) 5: 32332e3133312e3137322e302f32342d3234203d3e2037303130.roa (hash: UWBzeUy93auDQISImQKJQMZx9haEsPMqLl/oJpkUV5k=) 6: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: aKkA3cvGXIcxMv+GNZ/6bRWPXr5aMzXkEqMzZaeY3X8=) 7: 3134322e3234382e39302e302f32332d3234203d3e2037303130.roa (hash: O118kJRdNa9b7+9Ot+5gabMWZDtqCtw626haiWVy0Ic=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 04:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d1:63:ba:b5:52:6a:71:44:a3:fd:64:de:b5:a0:16:88:83:ec:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Validity Not Before: Sep 20 01:37:49 2026 GMT Not After : Sep 21 04:38:49 2026 GMT Subject: CN=59D5A49CA665D0ED90DB4E0A2B3C6590F1E0090F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:78:f2:ca:ee:bc:6c:84:35:de:58:85:c2:68: 6b:23:5f:68:b6:09:85:63:57:f9:9d:b3:60:2a:7f: e5:d0:05:da:0b:eb:8e:87:f3:ad:44:e5:27:ad:8c: e1:8e:f7:54:8f:1f:b7:d5:8e:19:ca:26:d9:8a:2f: 4c:42:b6:de:02:8b:d0:75:bb:ce:f3:dc:28:29:bb: 7c:45:33:e6:ce:31:ac:b1:02:5c:10:c2:7b:7f:19: 03:e9:74:ba:4b:29:c1:7a:8c:2f:ab:df:58:b3:9b: 91:8a:83:11:37:67:06:19:61:4c:fd:a8:41:4c:bc: e8:be:42:aa:c1:cb:2f:6e:89:34:90:51:7e:6b:d6: de:54:dd:45:32:f7:72:c9:56:28:f1:7e:56:e1:02: b7:76:d1:06:5d:61:4a:e9:0a:f7:af:da:a9:25:2c: bc:58:9b:bf:0b:12:09:ce:e2:2e:34:0d:eb:92:c2: 44:ff:63:e3:ee:50:fb:be:9a:c0:d0:8b:7c:53:95: 8c:5a:ee:67:b3:d1:02:62:2d:63:5e:1c:39:07:26: 42:62:84:38:67:2c:0c:77:ea:4a:4e:18:dc:ab:14: 56:76:96:2e:02:20:08:cb:a0:c3:f3:02:67:64:0d: 92:28:7a:69:4c:30:6e:88:ed:84:fa:f8:34:38:31: 58:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D5:A4:9C:A6:65:D0:ED:90:DB:4E:0A:2B:3C:65:90:F1:E0:09:0F X509v3 Authority Key Identifier: keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:18:89:2a:ae:43:a9:62:65:51:28:a8:77:68:43:75:02:20: 3d:3c:81:5d:2f:ff:f2:e9:cb:88:57:2b:df:7d:8c:79:2c:06: c5:80:da:0c:f8:2f:69:79:a2:c5:6a:3d:ef:4d:0b:04:48:57: fc:b5:02:1b:a2:8f:54:19:55:9b:5d:83:a8:0e:3f:5c:d9:2f: 6b:7c:39:42:e4:4a:4b:67:e9:ff:9e:3a:1d:e2:53:da:d3:b6: 40:de:40:4b:c9:71:c3:70:3c:83:27:22:41:85:3c:0d:05:44: fe:f0:d5:49:68:7c:18:8a:43:4d:68:a0:46:2c:67:95:96:5b: 1b:46:5b:e2:5b:94:27:8d:2c:23:07:17:e8:85:2b:0c:5d:07: 7e:8f:32:12:a9:c2:39:18:f8:11:22:d6:81:07:31:f8:5f:60: b9:f6:4b:43:1f:94:b0:75:06:60:5c:05:20:fa:56:c4:22:f0: f4:5b:99:81:56:a1:ee:ba:0f:cb:79:cc:5b:05:8d:39:29:81: 1d:5a:02:ad:83:0f:c4:a0:7a:5d:43:3a:a4:8d:75:33:7b:0f: 59:5b:6b:09:2e:f4:f9:a5:52:54:b7:99:5c:45:b8:5d:f1:39: e5:d7:30:fa:a6:d3:26:02:cd:5e:ad:b7:32:1f:9d:18:b0:ac: 4b:7b:b0:cf -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUSdFjurVSanFEo/1k3rWgFoiD7L0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjYwOTIwMDEzNzQ5WhcNMjYwOTIxMDQzODQ5 WjAzMTEwLwYDVQQDEyg1OUQ1QTQ5Q0E2NjVEMEVEOTBEQjRFMEEyQjNDNjU5MEYx RTAwOTBGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3jyyu68bIQ1 3liFwmhrI19otgmFY1f5nbNgKn/l0AXaC+uOh/OtROUnrYzhjvdUjx+31Y4ZyibZ ii9MQrbeAovQdbvO89woKbt8RTPmzjGssQJcEMJ7fxkD6XS6SynBeowvq99Ys5uR ioMRN2cGGWFM/ahBTLzovkKqwcsvbok0kFF+a9beVN1FMvdyyVYo8X5W4QK3dtEG XWFK6Qr3r9qpJSy8WJu/CxIJzuIuNA3rksJE/2Pj7lD7vprA0It8U5WMWu5ns9EC Yi1jXhw5ByZCYoQ4ZywMd+pKThjcqxRWdpYuAiAIy6DD8wJnZA2SKHppTDBuiO2E +vg0ODFYtwIDAQABo4ICezCCAncwHQYDVR0OBBYEFFnVpJymZdDtkNtOCis8ZZDx 4AkPMB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5 OWIxOWNiY2NlNjg2M2EzLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8yLzIwQzIy OTdCQzY3RDIxQzMyNTQzODREM0JEODg2NTA2QTA2RTMwQTIubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAN GIkqrkOpYmVRKKh3aEN1AiA9PIFdL//y6cuIVyvffYx5LAbFgNoM+C9peaLFaj3v TQsESFf8tQIboo9UGVWbXYOoDj9c2S9rfDlC5EpLZ+n/njod4lPa07ZA3kBLyXHD cDyDJyJBhTwNBUT+8NVJaHwYikNNaKBGLGeVllsbRlviW5QnjSwjBxfohSsMXQd+ jzISqcI5GPgRItaBBzH4X2C59ktDH5SwdQZgXAUg+lbEIvD0W5mBVqHuug/Lecxb BY05KYEdWgKtgw/EoHpdQzqkjXUzew9ZW2sJLvT5pVJUt5lcRbhd8Tnl1zD6ptMm As1erbcyH50YsKxLe7DP -----END CERTIFICATE-----Generated at Sun Sep 20 12:43:08 2026 by rpki-client