$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json) Hash identifier: b1G0+cXjCw6+b5mMCbrHndAiyrL/kosrxAL9C8qxRkk= Subject key identifier: B7:17:C1:D4:EA:B0:16:9A:B7:38:EB:51:0D:9D:B8:CF:69:A2:22:BC Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Certificate serial: 3257B22AAC003D62AF5E2C53836D96FE38B04240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft Manifest number: 028F Signing time: Sun 19 Apr 2026 01:56:46 +0000 Manifest this update: Sun 19 Apr 2026 01:51:46 +0000 Manifest next update: Mon 20 Apr 2026 05:12:46 +0000 Files and hashes: 1: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: EKGJaPh3B6UGJiFSAgnnfz0CWxL7C6aCA3jRk7tcW9Y=) 2: 323630323a666461643a3a2f34302d3438203d3e203631393631.roa (hash: pLWuN2bUHqMXgcevJT1AmoYm7sc9azuOkUaBTt9vVNg=) 3: 323630323a663735323a3a2f33362d3336203d3e203631393631.roa (hash: CqNp7ek3u5kbCBWfN53/CnZ4zIsOoWuXEyXMjQabM7w=) 4: 3134322e3234382e39302e302f32332d3234203d3e203631393631.roa (hash: SEfJJW0oCHWn/xdi75zWLDupC/cjkqW/OUbAiUPdXMo=) 5: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (hash: ipFemzkztsboDmqpCJAhUhmIJUiu758VxunW+cYOxO0=) 6: AS61961.asa (hash: aMi2fj1hvthZj703MbB4vMhuiuBedyHCZv/0aQPajLg=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 05:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:57:b2:2a:ac:00:3d:62:af:5e:2c:53:83:6d:96:fe:38:b0:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Validity Not Before: Apr 19 01:51:46 2026 GMT Not After : Apr 20 05:12:46 2026 GMT Subject: CN=B717C1D4EAB0169AB738EB510D9DB8CF69A222BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:74:31:69:8b:92:43:8c:80:6e:cf:a9:10: cd:a6:3d:ff:d4:cc:18:4f:84:90:b6:67:38:48:9e: d1:27:3a:45:a9:43:17:eb:66:40:2c:bf:76:61:cf: 8a:75:27:85:24:a4:b5:dd:40:fa:ab:61:17:50:f2: a9:f3:f5:2b:e3:e1:9f:e6:48:a8:0d:f8:11:de:6f: f8:06:14:b6:00:93:7e:0b:72:ad:a2:91:1f:0c:95: fc:c7:50:f6:e8:43:b3:8b:ab:a9:61:7a:b6:de:25: a8:40:ac:43:15:4e:97:84:0a:6b:80:d1:d3:85:44: b0:8e:86:cd:be:72:3c:68:68:2d:f2:15:d1:69:da: 38:9e:f3:74:4c:6f:3d:a1:e5:90:25:65:0e:76:9e: 9a:26:68:95:50:35:a4:68:1e:77:c3:9c:4a:58:1e: f2:a1:2a:7d:66:00:4d:4f:23:f7:9c:77:c8:b8:28: f9:e1:d6:86:93:2d:4d:7d:aa:52:2c:79:38:37:18: 91:56:ff:46:8c:b6:0c:fb:93:a5:b5:d6:a9:9c:78: 01:c9:da:a3:9f:dc:2a:78:4f:9a:bd:14:27:27:d8: cc:99:17:df:19:9b:6d:9b:82:12:03:b2:a2:4b:af: e2:ac:63:58:3c:32:be:7c:54:fe:32:61:3f:cc:36: c1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:17:C1:D4:EA:B0:16:9A:B7:38:EB:51:0D:9D:B8:CF:69:A2:22:BC X509v3 Authority Key Identifier: keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:21:c5:84:56:d6:e5:63:18:83:55:7a:9d:4e:09:00:ed:40: d0:ed:23:67:e2:ca:a3:d0:dc:66:a2:85:89:6d:91:c3:ba:d5: 6e:2b:53:6e:a4:91:f1:b8:f1:90:97:b8:a3:41:9f:e9:d3:21: 3d:75:96:2e:0c:af:d9:c7:54:2f:5c:bf:df:12:d3:bb:44:c6: ad:10:0b:0b:e2:fa:56:fc:2f:a3:fa:ec:07:71:93:c1:8b:c3: 81:e8:aa:e9:38:c6:e1:e0:8c:96:46:b7:ae:a9:07:09:0e:23: 67:24:fa:1e:5c:98:fb:bd:90:e9:27:89:ca:b1:41:1c:6c:b7: c7:f3:8b:02:10:e0:4b:68:28:2b:e9:63:c8:d4:f3:96:e5:9d: 7d:1a:6e:7b:34:37:44:a0:6e:75:1e:2b:e7:4b:00:db:e6:5b: 24:49:dc:e7:2e:3d:d5:66:80:d5:3a:22:40:1f:fa:e9:88:46: 4d:ef:d9:2d:91:49:d3:a2:1e:7b:1e:b2:a4:39:94:9c:8c:b8: d0:47:83:5a:d9:29:2c:f1:3c:ea:a8:ad:cb:50:fe:0e:0a:66: 00:35:ba:95:cb:12:1b:a8:d7:1c:a1:73:91:d3:bd:61:b1:84: 14:b1:99:e4:70:e6:79:cb:25:3c:73:0d:92:06:3e:b1:ee:f3: 39:60:7b:c5 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUMleyKqwAPWKvXixTg22W/jiwQkAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjYwNDE5MDE1MTQ2WhcNMjYwNDIwMDUxMjQ2 WjAzMTEwLwYDVQQDEyhCNzE3QzFENEVBQjAxNjlBQjczOEVCNTEwRDlEQjhDRjY5 QTIyMkJDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJl0MWmLkkOM gG7PqRDNpj3/1MwYT4SQtmc4SJ7RJzpFqUMX62ZALL92Yc+KdSeFJKS13UD6q2EX UPKp8/Ur4+Gf5kioDfgR3m/4BhS2AJN+C3KtopEfDJX8x1D26EOzi6upYXq23iWo QKxDFU6XhAprgNHThUSwjobNvnI8aGgt8hXRado4nvN0TG89oeWQJWUOdp6aJmiV UDWkaB53w5xKWB7yoSp9ZgBNTyP3nHfIuCj54daGky1NfapSLHk4NxiRVv9GjLYM +5OltdapnHgBydqjn9wqeE+avRQnJ9jMmRffGZttm4ISA7KiS6/irGNYPDK+fFT+ MmE/zDbBWwIDAQABo4ICezCCAncwHQYDVR0OBBYEFLcXwdTqsBaatzjrUQ2duM9p oiK8MB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5 OWIxOWNiY2NlNjg2M2EzLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8yLzIwQzIy OTdCQzY3RDIxQzMyNTQzODREM0JEODg2NTA2QTA2RTMwQTIubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCH IcWEVtblYxiDVXqdTgkA7UDQ7SNn4sqj0NxmooWJbZHDutVuK1NupJHxuPGQl7ij QZ/p0yE9dZYuDK/Zx1QvXL/fEtO7RMatEAsL4vpW/C+j+uwHcZPBi8OB6KrpOMbh 4IyWRreuqQcJDiNnJPoeXJj7vZDpJ4nKsUEcbLfH84sCEOBLaCgr6WPI1POW5Z19 Gm57NDdEoG51HivnSwDb5lskSdznLj3VZoDVOiJAH/rpiEZN79ktkUnToh57HrKk OZScjLjQR4Na2Sks8TzqqK3LUP4OCmYANbqVyxIbqNccoXOR071hsYQUsZnkcOZ5 yyU8cw2SBj6x7vM5YHvF -----END CERTIFICATE-----Generated at Sun Apr 19 11:03:01 2026 by rpki-client