$ rpki-client -vvvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json) Hash identifier: Bw0Opapn3z77WoGIClVq/xe1DJt42C5KiwOJw9sDfko= Subject key identifier: D8:A3:ED:AE:16:F3:9B:65:6C:6E:C4:68:74:F8:EB:F4:A4:3D:AB:E1 Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Certificate serial: 179ABFCE8F2B77B00C6367C832710F83EBFCFC17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft Manifest number: 03B2 Signing time: Thu 05 Nov 2026 02:08:34 +0000 Manifest this update: Thu 05 Nov 2026 02:03:34 +0000 Manifest next update: Fri 06 Nov 2026 03:40:34 +0000 Files and hashes: 1: 3139382e33352e3131342e302f32332d3234203d3e2037303130.roa (hash: qNC7LT1trc1J6KfOUwZMD3nuacImtS32d76rfF1xzqg=) 2: AS7010.asa (hash: wa5XbHFVF02KH90WbF7953Ua1Lvt36cAkwJWHWrxQUw=) 3: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: TDUVQMTAx5EwprdpKTB/a6KB8CsERaZmMNzshlVMHcg=) 4: 323630323a663735323a3a2f33362d3336203d3e2037303130.roa (hash: PFy4ASG9ftcLCEhqn8MWfo4EYAQx79cKa9+rn7sjOUo=) 5: 323630323a666461643a3a2f34302d3438203d3e2037303130.roa (hash: RVBdGUMed0yeJwGesBxpnUhuP70xtA9w4HInEAe7IKI=) 6: 3134322e3234382e39302e302f32332d3234203d3e2037303130.roa (hash: O118kJRdNa9b7+9Ot+5gabMWZDtqCtw626haiWVy0Ic=) 7: AS61961.asa (hash: xB62lymjtKQrG3onCUo1WoI7naRlPCnglhV9lM7+Szk=) 8: 32332e3133312e3137322e302f32342d3234203d3e2037303130.roa (hash: UWBzeUy93auDQISImQKJQMZx9haEsPMqLl/oJpkUV5k=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 03:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:9a:bf:ce:8f:2b:77:b0:0c:63:67:c8:32:71:0f:83:eb:fc:fc:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Validity Not Before: Nov 5 02:03:34 2026 GMT Not After : Nov 6 03:40:34 2026 GMT Subject: CN=D8A3EDAE16F39B656C6EC46874F8EBF4A43DABE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f0:01:3b:2b:72:4a:c6:4f:d5:c7:96:fc:91: 68:74:7d:e7:db:c2:3f:28:3c:55:c3:9e:62:52:a3: 6e:51:1e:b9:6d:1f:6c:9c:59:88:86:28:9a:52:e5: fe:70:b9:f6:5a:78:17:af:fd:ae:12:8a:ee:2a:33: b3:67:c2:a9:e9:c1:6c:f6:ca:cc:f4:c8:90:de:d2: 59:09:7e:99:d0:79:96:b6:b0:ff:81:b0:35:d4:2c: 24:e5:c6:c0:f7:bc:b9:5b:97:ce:ab:38:0e:be:04: 76:e6:50:ad:ce:19:82:b4:44:ff:ee:9d:92:84:87: c6:04:3e:eb:ca:ee:ef:21:69:6d:ce:41:06:23:19: 13:db:24:ef:a4:e2:6e:14:c1:e0:3b:c6:bf:a0:86: 6b:98:05:70:3a:cb:77:d3:bf:27:cf:3f:60:4c:ec: 78:ad:f6:01:96:b1:1d:9c:7c:29:65:49:45:2d:11: e6:9b:ba:f3:af:c2:6e:4a:b3:51:f7:37:62:45:1d: cc:a5:b1:fd:15:f0:61:7a:f2:20:05:3f:d4:dd:3c: 79:c2:b8:e8:dd:20:e2:42:63:39:c4:ba:f2:98:23: c7:44:f5:f9:8a:d4:52:ff:0c:2e:a1:bf:53:ab:7d: ff:e3:44:64:d2:46:c3:48:87:fb:45:7b:4d:84:0a: 22:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A3:ED:AE:16:F3:9B:65:6C:6E:C4:68:74:F8:EB:F4:A4:3D:AB:E1 X509v3 Authority Key Identifier: keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:3b:3e:c4:93:f7:3f:ec:34:81:94:3f:4f:cd:7a:85:4f:df: f2:80:66:b3:b3:52:92:44:26:2e:25:8d:4e:4e:d9:74:31:c0: 64:4f:93:52:36:1e:26:d6:f8:09:81:01:be:cd:f8:c5:f2:72: ba:25:7d:6f:50:e8:36:11:b1:9c:a2:1e:56:cd:f3:ba:43:03: 54:77:fb:72:5e:bd:cb:85:ad:80:7d:69:a7:c2:b7:ca:75:94: 9f:0c:fb:a4:72:51:7b:bd:46:96:4d:f5:22:3b:ad:3c:94:41: f6:ca:68:80:90:76:69:ea:c8:d3:17:51:4e:03:4f:3f:ae:cc: 1c:7d:56:ac:63:87:8a:d6:d5:5f:34:cc:12:81:c9:63:90:41: 9e:ce:93:9b:a7:cd:82:41:31:c6:17:d3:b9:a3:63:4f:60:a6: 5b:12:89:74:a7:e7:32:08:13:ca:60:70:dc:9c:d7:6a:34:2f: 69:4d:54:83:54:b6:e6:2d:0c:43:88:4a:19:6f:28:26:bd:b3: 26:a9:43:ae:5f:f0:66:64:d6:53:c6:ca:d0:f8:a3:13:2b:21: fa:09:71:18:21:cd:b4:af:5f:7a:10:0f:0a:7b:19:8b:09:7a: 47:99:47:c8:12:32:92:3a:65:fe:cc:07:d9:8f:86:94:21:a4: 69:73:6c:c5 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUF5q/zo8rd7AMY2fIMnEPg+v8/BcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjYxMTA1MDIwMzM0WhcNMjYxMTA2MDM0MDM0 WjAzMTEwLwYDVQQDEyhEOEEzRURBRTE2RjM5QjY1NkM2RUM0Njg3NEY4RUJGNEE0 M0RBQkUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/ABOytySsZP 1ceW/JFodH3n28I/KDxVw55iUqNuUR65bR9snFmIhiiaUuX+cLn2WngXr/2uEoru KjOzZ8Kp6cFs9srM9MiQ3tJZCX6Z0HmWtrD/gbA11Cwk5cbA97y5W5fOqzgOvgR2 5lCtzhmCtET/7p2ShIfGBD7ryu7vIWltzkEGIxkT2yTvpOJuFMHgO8a/oIZrmAVw Ost3078nzz9gTOx4rfYBlrEdnHwpZUlFLRHmm7rzr8JuSrNR9zdiRR3MpbH9FfBh evIgBT/U3Tx5wrjo3SDiQmM5xLrymCPHRPX5itRS/wwuob9Tq33/40Rk0kbDSIf7 RXtNhAoinQIDAQABo4ICezCCAncwHQYDVR0OBBYEFNij7a4W85tlbG7EaHT46/Sk PavhMB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5 OWIxOWNiY2NlNjg2M2EzLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8yLzIwQzIy OTdCQzY3RDIxQzMyNTQzODREM0JEODg2NTA2QTA2RTMwQTIubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBs Oz7Ek/c/7DSBlD9PzXqFT9/ygGazs1KSRCYuJY1OTtl0McBkT5NSNh4m1vgJgQG+ zfjF8nK6JX1vUOg2EbGcoh5WzfO6QwNUd/tyXr3Lha2AfWmnwrfKdZSfDPukclF7 vUaWTfUiO608lEH2ymiAkHZp6sjTF1FOA08/rswcfVasY4eK1tVfNMwSgcljkEGe zpObp82CQTHGF9O5o2NPYKZbEol0p+cyCBPKYHDcnNdqNC9pTVSDVLbmLQxDiEoZ bygmvbMmqUOuX/BmZNZTxsrQ+KMTKyH6CXEYIc20r196EA8KexmLCXpHmUfIEjKS OmX+zAfZj4aUIaRpc2zF -----END CERTIFICATE-----Generated at Thu Nov 5 14:31:36 2026 by rpki-client