
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json)
Hash identifier: rzBVgxhY1Ew8KG8LQ9gT2FLVyxalAaTunwM0ME6VTmI=
Subject key identifier: 3F:64:52:58:B7:15:F9:F3:C7:39:4B:87:35:83:AB:D6:D6:A7:B6:96
Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Certificate serial: 4DDB9B1A5B04FC7D29B327B0CC688ADB8A9E25D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
Manifest number: 032B
Signing time: Tue 28 Jul 2026 00:29:31 +0000
Manifest this update: Tue 28 Jul 2026 00:24:31 +0000
Manifest next update: Wed 29 Jul 2026 03:24:31 +0000
Files and hashes: 1: 323630323a663735323a3a2f33362d3336203d3e2037303130.roa (hash: PFy4ASG9ftcLCEhqn8MWfo4EYAQx79cKa9+rn7sjOUo=)
2: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: vVB7MA35Wx7+zNjQ53/s1SmONpo5NbOE6fDm45J7EwI=)
3: AS61961.asa (hash: xB62lymjtKQrG3onCUo1WoI7naRlPCnglhV9lM7+Szk=)
4: 323630323a666461643a3a2f34302d3438203d3e2037303130.roa (hash: RVBdGUMed0yeJwGesBxpnUhuP70xtA9w4HInEAe7IKI=)
5: 32332e3133312e3137322e302f32342d3234203d3e2037303130.roa (hash: UWBzeUy93auDQISImQKJQMZx9haEsPMqLl/oJpkUV5k=)
6: 3134322e3234382e39302e302f32332d3234203d3e2037303130.roa (hash: O118kJRdNa9b7+9Ot+5gabMWZDtqCtw626haiWVy0Ic=)
7: AS7010.asa (hash: wa5XbHFVF02KH90WbF7953Ua1Lvt36cAkwJWHWrxQUw=)
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 03:24:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:db:9b:1a:5b:04:fc:7d:29:b3:27:b0:cc:68:8a:db:8a:9e:25:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Validity
Not Before: Jul 28 00:24:31 2026 GMT
Not After : Jul 29 03:24:31 2026 GMT
Subject: CN=3F645258B715F9F3C7394B873583ABD6D6A7B696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:92:fd:b3:6e:74:c0:ad:85:18:78:3a:e2:
bb:72:43:8f:02:8f:43:aa:d8:7b:86:4e:e6:fa:21:
76:d2:41:03:76:e8:55:0a:e6:92:2f:ae:3f:65:70:
47:e4:26:19:6e:58:65:25:e8:9d:a6:cd:5e:37:23:
ed:21:14:58:61:ca:13:6c:de:8d:27:61:c4:5d:3e:
55:69:86:75:2f:d9:0c:e4:e2:e8:54:19:6e:d2:65:
fd:26:6d:77:fd:5c:02:9c:c9:0f:c2:19:01:ac:b9:
5a:b2:ac:f7:cb:95:47:f5:6a:3d:d0:39:b1:5c:47:
d1:30:6f:73:25:5f:08:d1:f8:5b:4b:87:1b:f7:3a:
b3:6e:5d:0e:0f:ea:88:2d:37:01:d2:69:4e:10:6c:
f9:5c:5f:a5:4b:9e:2e:08:fa:48:2b:a1:e7:88:79:
f9:f5:a5:23:b3:04:19:66:87:1e:e7:96:8a:7b:c7:
66:b4:5d:c3:34:28:fb:b3:93:b6:81:c4:7d:64:25:
07:9b:43:14:62:a1:c1:68:9a:cb:d1:7a:65:1d:51:
08:db:4d:cd:e4:5e:41:73:c1:76:6b:de:77:de:7c:
7f:e4:c9:2b:d1:6e:a2:8e:5e:0c:bb:9b:60:21:66:
ee:9e:60:eb:9a:03:73:a9:d9:8c:5c:49:0b:62:64:
ce:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:64:52:58:B7:15:F9:F3:C7:39:4B:87:35:83:AB:D6:D6:A7:B6:96
X509v3 Authority Key Identifier:
keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:6e:98:20:b0:0d:99:d4:dc:96:a9:75:a9:98:7a:38:2d:04:
b9:79:ed:a5:89:e9:e6:ee:12:75:85:12:6d:68:43:d8:24:8c:
6a:a1:80:48:77:c6:66:22:2e:2b:f5:37:cc:47:de:aa:54:40:
38:69:4d:bb:b1:e2:35:14:dd:40:59:f5:24:0f:c2:39:a2:2b:
67:d4:bf:09:ff:68:75:64:17:c8:fc:c0:a6:a2:92:84:ed:6b:
01:cb:4c:b9:8f:e4:51:cc:21:44:a4:b9:57:b2:63:44:2b:1b:
22:0c:36:62:c3:9e:25:76:8c:3e:df:2d:ff:18:ca:ef:e9:c1:
d8:4a:de:cd:2b:01:9d:ba:c8:67:a7:55:96:62:ee:ac:98:d2:
3b:c0:14:a3:24:05:18:2d:1b:e5:30:8b:d4:31:cf:36:9a:e4:
15:91:31:ce:59:86:6b:f9:6e:2c:e8:b0:2c:1b:1d:ab:e4:e4:
42:0a:f4:0a:fc:74:88:59:dc:b0:c9:f3:d6:aa:74:d0:81:af:
40:97:62:fb:1b:80:72:22:b1:4d:88:01:d7:51:56:81:35:e0:
93:02:52:3b:ca:3d:9d:f3:ee:9b:a6:cc:02:07:f4:7c:7a:b5:
dd:9b:2d:1d:e3:3a:88:f7:d6:13:fd:a8:81:50:9f:ad:6f:e0:
63:12:02:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:37:35 2026 by rpki-client