$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json) Hash identifier: GKTQsjn/+idZDifyVXFkpi/ZamRB6OfBCGdTMdWjUmE= Subject key identifier: FB:0A:90:B8:D2:BC:25:17:C2:35:BA:85:2E:98:DC:E8:87:1E:DA:7D Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Certificate serial: 1562526AF6AE07DC84C4F043CAD9A4B0D4554F3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft Manifest number: 028C Signing time: Thu 16 Apr 2026 19:51:36 +0000 Manifest this update: Thu 16 Apr 2026 19:46:36 +0000 Manifest next update: Fri 17 Apr 2026 20:14:36 +0000 Files and hashes: 1: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: xerf0VKMZUhzuRhjq1Tyb22DFNWJl8DH8cBD1NgNUdM=) 2: 323630323a663735323a3a2f33362d3336203d3e203631393631.roa (hash: CqNp7ek3u5kbCBWfN53/CnZ4zIsOoWuXEyXMjQabM7w=) 3: AS61961.asa (hash: aMi2fj1hvthZj703MbB4vMhuiuBedyHCZv/0aQPajLg=) 4: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (hash: ipFemzkztsboDmqpCJAhUhmIJUiu758VxunW+cYOxO0=) 5: 323630323a666461643a3a2f34302d3438203d3e203631393631.roa (hash: pLWuN2bUHqMXgcevJT1AmoYm7sc9azuOkUaBTt9vVNg=) 6: 3134322e3234382e39302e302f32332d3234203d3e203631393631.roa (hash: SEfJJW0oCHWn/xdi75zWLDupC/cjkqW/OUbAiUPdXMo=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 20:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:62:52:6a:f6:ae:07:dc:84:c4:f0:43:ca:d9:a4:b0:d4:55:4f:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Validity Not Before: Apr 16 19:46:36 2026 GMT Not After : Apr 17 20:14:36 2026 GMT Subject: CN=FB0A90B8D2BC2517C235BA852E98DCE8871EDA7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e0:4d:79:17:d5:4d:e8:90:78:e1:eb:b2:44: 45:74:06:d1:02:bc:8e:44:90:87:e3:ab:9c:93:ea: 87:1d:f3:a4:55:d0:8b:f2:97:d2:9d:63:63:b4:cf: 6f:7f:19:a8:61:54:78:eb:d1:cc:f1:fd:9e:3d:fe: b5:b4:bc:cb:79:79:04:b1:21:be:ea:e4:01:42:6f: 07:40:31:b7:ea:50:c3:b2:2e:9c:36:9e:3d:5e:74: 69:aa:d4:a7:77:53:a3:98:77:0d:c0:74:b3:ed:dd: cc:82:42:6a:ed:b0:62:40:b8:be:f7:4e:91:87:4f: f8:d3:0d:a0:44:8a:d1:2a:1a:70:da:be:3c:58:8d: d5:3f:18:1c:f0:58:bc:2d:14:85:9a:3f:65:8f:3e: 85:73:d9:a8:5a:83:b7:e1:f0:65:e6:89:7f:be:0f: d6:17:fa:cc:5e:79:6e:dc:86:12:d3:82:a7:5a:1f: a4:a1:0b:12:57:55:e2:67:f5:06:5d:82:f2:45:38: 52:2c:ba:0f:eb:bd:cd:6c:a6:f7:f3:0b:65:cf:b1: 1d:c1:84:d9:e0:8b:d6:3e:97:e9:27:59:97:51:93: 10:dc:9a:0f:65:d6:46:41:d8:06:32:d7:1d:3f:82: b2:62:a4:93:7f:cd:f7:fc:f3:3e:10:07:ab:f0:c1: 32:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0A:90:B8:D2:BC:25:17:C2:35:BA:85:2E:98:DC:E8:87:1E:DA:7D X509v3 Authority Key Identifier: keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:4d:6c:f9:31:fc:fb:16:dd:40:d2:61:97:37:25:23:d0:aa: 09:c4:cb:4c:92:d8:40:a4:d8:0a:94:de:66:d8:cd:a1:3b:6b: 76:c2:d1:72:90:88:f4:f0:7b:29:8c:87:e3:2d:9a:ad:2d:cc: 64:c2:1f:61:70:b3:53:fc:36:28:fa:cb:53:fb:57:9b:c1:16: 6b:c6:43:16:3e:12:94:d0:da:4b:cc:38:3b:5c:08:a9:c9:26: 01:10:99:09:9b:d2:e2:3f:26:bd:e9:ea:61:23:91:e3:8d:f0: 40:ff:cd:88:48:4e:f4:85:d2:18:9c:2f:06:87:e8:23:a0:88: 80:2e:b4:7d:cd:70:18:25:13:43:ff:1d:59:21:9d:77:c5:bc: 9d:16:69:08:13:ec:01:be:d4:9a:4a:3b:50:cc:77:df:0d:9b: d5:41:e3:2f:29:93:cb:dc:59:dc:b4:24:ee:1f:48:53:01:f1: cb:4b:69:39:95:82:a2:9b:0d:ca:39:7f:64:71:1d:72:e4:0f: f4:ef:2c:9a:ca:e0:65:24:10:3c:34:e0:db:22:7f:21:bf:b6: d9:81:65:e4:db:85:79:8a:3a:07:66:c5:ae:05:f1:57:33:9e: 77:c7:f9:cd:1e:49:77:fd:b5:1d:bf:91:16:d6:13:70:7a:f7: cb:c4:ea:0f -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUFWJSavauB9yExPBDytmksNRVTzowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjYwNDE2MTk0NjM2WhcNMjYwNDE3MjAxNDM2 WjAzMTEwLwYDVQQDEyhGQjBBOTBCOEQyQkMyNTE3QzIzNUJBODUyRTk4RENFODg3 MUVEQTdEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeBNeRfVTeiQ eOHrskRFdAbRAryORJCH46uck+qHHfOkVdCL8pfSnWNjtM9vfxmoYVR469HM8f2e Pf61tLzLeXkEsSG+6uQBQm8HQDG36lDDsi6cNp49XnRpqtSnd1OjmHcNwHSz7d3M gkJq7bBiQLi+906Rh0/40w2gRIrRKhpw2r48WI3VPxgc8Fi8LRSFmj9ljz6Fc9mo WoO34fBl5ol/vg/WF/rMXnlu3IYS04KnWh+koQsSV1XiZ/UGXYLyRThSLLoP673N bKb38wtlz7EdwYTZ4IvWPpfpJ1mXUZMQ3JoPZdZGQdgGMtcdP4KyYqSTf833/PM+ EAer8MEyEQIDAQABo4ICezCCAncwHQYDVR0OBBYEFPsKkLjSvCUXwjW6hS6Y3OiH Htp9MB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5 OWIxOWNiY2NlNjg2M2EzLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8yLzIwQzIy OTdCQzY3RDIxQzMyNTQzODREM0JEODg2NTA2QTA2RTMwQTIubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBi TWz5Mfz7Ft1A0mGXNyUj0KoJxMtMkthApNgKlN5m2M2hO2t2wtFykIj08HspjIfj LZqtLcxkwh9hcLNT/DYo+stT+1ebwRZrxkMWPhKU0NpLzDg7XAipySYBEJkJm9Li Pya96ephI5HjjfBA/82ISE70hdIYnC8Gh+gjoIiALrR9zXAYJRND/x1ZIZ13xbyd FmkIE+wBvtSaSjtQzHffDZvVQeMvKZPL3FnctCTuH0hTAfHLS2k5lYKimw3KOX9k cR1y5A/07yyayuBlJBA8NODbIn8hv7bZgWXk24V5ijoHZsWuBfFXM553x/nNHkl3 /bUdv5EW1hNwevfLxOoP -----END CERTIFICATE-----Generated at Fri Apr 17 09:34:48 2026 by rpki-client