$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json) Hash identifier: 0PyFPeaAlsxlMdjQrG27ZLCFFSPDQ3j7hCT1fBsjlKE= Subject key identifier: 03:DF:12:14:83:99:79:FC:DE:5D:71:0B:80:A4:82:05:79:C9:6C:9A Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Certificate serial: 3CFC1273833FD9F6381080E9E8C9694C922AEF76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft Manifest number: 012E Signing time: Fri 08 Aug 2025 08:47:18 +0000 Manifest this update: Fri 08 Aug 2025 08:42:18 +0000 Manifest next update: Sat 09 Aug 2025 10:17:18 +0000 Files and hashes: 1: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (hash: sX4clBllsnOe26N+axHOkcAsIye3vArF/kg1Z4Off60=) 2: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: 7R7A57+dnfzBceeE+MDQfPK5einVRmElZB4KyQ6GIRk=) 3: 323630323a663735323a3a2f33362d3336203d3e203631393631.roa (hash: LJae5qX98q1IoVhcF3MovFKodtof25tEPl+Vd+qKFHU=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 10:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:fc:12:73:83:3f:d9:f6:38:10:80:e9:e8:c9:69:4c:92:2a:ef:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Validity Not Before: Aug 8 08:42:18 2025 GMT Not After : Aug 9 10:17:18 2025 GMT Subject: CN=03DF1214839979FCDE5D710B80A4820579C96C9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:e5:de:62:ab:d2:c2:e3:58:8f:04:63:bd: a4:14:d8:cf:ea:0b:ee:bb:72:6d:6e:3f:bc:b5:e4: 46:08:93:d4:54:24:30:07:a6:09:21:25:60:5b:be: 9c:07:bd:a3:05:d0:5c:38:38:e8:2c:bc:7f:7c:5b: be:63:b7:45:ce:bb:f8:af:0a:42:b7:4f:de:f6:09: ef:be:50:88:42:74:f3:c4:bd:02:4a:0b:7d:c2:7d: 82:3c:7b:28:c8:ed:7f:ee:80:49:03:a8:36:bf:39: ff:06:c9:57:74:ba:ef:4d:f7:39:82:39:f6:d2:9e: e7:fd:6d:e8:96:e8:74:6d:da:43:bb:0a:31:41:43: 74:16:29:74:a7:5a:27:1e:76:24:ff:57:1b:3f:9f: 73:99:49:b0:8d:f1:79:0e:19:d1:93:a4:7b:74:18: 0c:d7:49:99:35:c1:af:f7:65:1c:7a:08:98:df:95: 71:d8:13:8b:1b:e8:a9:60:5c:82:ef:77:b0:57:41: 45:6a:81:7e:63:5f:69:bf:55:ef:81:c8:c4:b0:b5: 3f:2e:17:d6:eb:26:57:19:1e:f6:b3:7f:77:73:28: 17:38:df:18:43:fa:94:e3:05:14:ae:d2:23:fa:54: 61:b0:c4:70:78:ac:f5:47:58:9c:05:3d:b6:6f:f7: 70:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DF:12:14:83:99:79:FC:DE:5D:71:0B:80:A4:82:05:79:C9:6C:9A X509v3 Authority Key Identifier: keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:1f:8c:74:4a:28:55:eb:d4:f7:70:6d:88:db:06:a2:e9:b4: 48:e0:2c:13:20:1a:d0:43:a4:c2:bf:60:0c:6e:51:b6:86:9e: 9f:44:82:4f:95:d7:d1:41:7e:69:6c:88:64:f8:e0:22:95:b2: 04:d0:34:70:50:b8:b6:a1:fd:d6:5d:34:cd:c9:f6:71:9f:9e: fe:32:1e:2a:92:45:9b:50:32:dd:d5:e7:2d:fe:b1:19:16:5a: 78:5d:ca:5e:85:f8:0e:e5:c7:67:7b:06:b7:17:11:d6:f1:f6: de:9b:de:e3:dc:8d:7b:d2:d2:2d:61:aa:69:6a:24:6f:c6:1c: 78:74:bf:cf:a2:a6:ec:87:2e:07:9a:d5:76:57:fa:8a:d6:8c: b3:64:e0:e6:c1:14:37:1c:25:46:4f:a4:a9:8e:a7:cb:ee:23: 61:ae:72:31:26:af:86:6a:eb:93:47:a1:fc:0c:8e:b2:f2:1a: 53:26:f1:e3:40:e0:2c:94:c0:1a:9a:b3:de:b0:be:1e:7b:88: 8a:aa:a2:2d:ac:fa:1d:2d:43:5f:54:77:70:7b:1d:06:c4:5a: 6f:13:34:b5:91:72:2b:0d:93:6f:e4:d6:47:0e:f0:8e:17:4f: 8d:4b:5a:c6:61:91:68:98:29:0f:ab:78:26:bb:69:72:7e:cb: 83:1d:7a:fa -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUPPwSc4M/2fY4EIDp6MlpTJIq73YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjUwODA4MDg0MjE4WhcNMjUwODA5MTAxNzE4 WjAzMTEwLwYDVQQDEygwM0RGMTIxNDgzOTk3OUZDREU1RDcxMEI4MEE0ODIwNTc5 Qzk2QzlBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh3l3mKr0sLj WI8EY72kFNjP6gvuu3Jtbj+8teRGCJPUVCQwB6YJISVgW76cB72jBdBcODjoLLx/ fFu+Y7dFzrv4rwpCt0/e9gnvvlCIQnTzxL0CSgt9wn2CPHsoyO1/7oBJA6g2vzn/ BslXdLrvTfc5gjn20p7n/W3oluh0bdpDuwoxQUN0Fil0p1onHnYk/1cbP59zmUmw jfF5DhnRk6R7dBgM10mZNcGv92UcegiY35Vx2BOLG+ipYFyC73ewV0FFaoF+Y19p v1XvgcjEsLU/LhfW6yZXGR72s393cygXON8YQ/qU4wUUrtIj+lRhsMRweKz1R1ic BT22b/dwyQIDAQABo4ICezCCAncwHQYDVR0OBBYEFAPfEhSDmXn83l1xC4CkggV5 yWyaMB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5 OWIxOWNiY2NlNjg2M2EzLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8yLzIwQzIy OTdCQzY3RDIxQzMyNTQzODREM0JEODg2NTA2QTA2RTMwQTIubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBx H4x0SihV69T3cG2I2wai6bRI4CwTIBrQQ6TCv2AMblG2hp6fRIJPldfRQX5pbIhk +OAilbIE0DRwULi2of3WXTTNyfZxn57+Mh4qkkWbUDLd1ect/rEZFlp4XcpehfgO 5cdnewa3FxHW8fbem97j3I170tItYappaiRvxhx4dL/Poqbshy4HmtV2V/qK1oyz ZODmwRQ3HCVGT6SpjqfL7iNhrnIxJq+GauuTR6H8DI6y8hpTJvHjQOAslMAamrPe sL4ee4iKqqItrPodLUNfVHdwex0GxFpvEzS1kXIrDZNv5NZHDvCOF0+NS1rGYZFo mCkPq3gmu2lyfsuDHXr6 -----END CERTIFICATE-----Generated at Fri Aug 8 19:27:17 2025 by rpki-client