
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json)
Hash identifier: VhW8xA68p/sXDvQ183lOR5HKPxq2DZlz5GkefbzOUWw=
Subject key identifier: 7D:9B:F6:35:AF:29:D7:21:FD:99:9A:76:88:D0:4D:F0:D6:34:40:7F
Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Certificate serial: 24BDC818AB972D814A27D8C97A8C3457110964E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
Manifest number: 01A5
Signing time: Wed 05 Nov 2025 11:41:10 +0000
Manifest this update: Wed 05 Nov 2025 11:36:10 +0000
Manifest next update: Thu 06 Nov 2025 13:17:10 +0000
Files and hashes: 1: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (hash: sX4clBllsnOe26N+axHOkcAsIye3vArF/kg1Z4Off60=)
2: 3134322e3234382e39302e302f32332d3234203d3e203631393631.roa (hash: SEfJJW0oCHWn/xdi75zWLDupC/cjkqW/OUbAiUPdXMo=)
3: 323630323a663735323a3a2f33362d3336203d3e203631393631.roa (hash: LJae5qX98q1IoVhcF3MovFKodtof25tEPl+Vd+qKFHU=)
4: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: OqFuESES7w4rHmtcLpo633BNDwV5OPGlIfIavsA/jbE=)
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 13:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:bd:c8:18:ab:97:2d:81:4a:27:d8:c9:7a:8c:34:57:11:09:64:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3
Validity
Not Before: Nov 5 11:36:10 2025 GMT
Not After : Nov 6 13:17:10 2025 GMT
Subject: CN=7D9BF635AF29D721FD999A7688D04DF0D634407F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bd:99:12:8b:6c:40:cd:ec:b9:24:92:60:b1:
c2:54:2a:e3:98:5f:40:bf:8c:bc:99:93:af:6a:de:
0a:60:06:79:97:c2:70:3b:78:17:58:ef:85:0e:a8:
ff:9f:88:0f:65:78:6f:32:15:bf:34:41:a7:ec:d3:
e9:40:84:db:e3:3c:52:2d:d5:67:80:06:97:e1:2f:
73:ed:ae:94:f9:2e:e0:1d:31:dc:10:3e:7d:70:e7:
83:d1:58:f9:01:94:0d:34:68:70:31:ed:ce:93:4b:
28:0e:c7:89:fa:de:dc:44:17:4f:33:f3:25:f7:1c:
5f:eb:8b:81:67:8f:8f:3f:4e:cc:a0:0f:ae:1d:ef:
ef:e7:36:b2:af:b1:8a:8a:76:d4:00:8a:ef:57:81:
da:79:ae:f5:46:9b:b8:b6:27:ad:87:89:eb:f4:56:
2f:5b:34:56:64:1d:b9:23:08:17:00:39:ee:c7:15:
0d:d0:1a:c5:6d:a1:65:98:44:07:4f:30:d2:77:be:
e6:db:5e:e0:95:0f:e9:22:ed:2b:dc:48:22:08:45:
5a:f0:c6:4a:f5:21:80:6d:0e:6b:ae:d3:ab:a9:8e:
e4:10:c0:55:2b:7d:a0:c7:3f:f7:7a:e8:b2:54:36:
41:b9:1d:bb:bd:e9:54:39:8d:47:f1:0f:fe:d7:06:
ca:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:9B:F6:35:AF:29:D7:21:FD:99:9A:76:88:D0:4D:F0:D6:34:40:7F
X509v3 Authority Key Identifier:
keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:75:cc:47:53:3d:55:ce:12:67:85:cb:31:c6:a6:71:75:5e:
a6:fa:a2:8e:b7:59:b8:ed:b1:94:03:73:6c:7c:68:09:b2:7b:
0e:d3:ee:30:7b:d7:8c:d7:ad:da:37:fb:7a:64:ae:aa:2b:6c:
25:dc:cd:24:d4:3f:76:da:e3:29:ed:eb:43:92:42:cc:7f:1e:
3e:71:e8:90:9c:a7:c7:f6:c5:4d:e7:63:c5:8b:f4:54:d7:4a:
38:3a:3c:a5:c5:40:5a:55:58:96:c0:28:d9:0b:9a:dd:09:5e:
15:ea:05:34:9a:ed:e1:13:6e:6c:4a:36:5a:25:12:8c:21:e9:
01:2e:1b:24:d8:85:6f:2c:54:24:26:aa:c2:f7:7b:6d:a8:8c:
9c:18:37:43:28:3c:1f:b0:f0:28:c2:15:19:2b:4c:56:45:f3:
1e:32:0d:ea:87:e4:ea:dc:54:3c:4b:f0:75:9e:aa:2d:42:d7:
70:c6:aa:10:e6:a9:3c:23:3c:13:ce:71:d2:63:b9:db:f2:4a:
e6:0c:55:3f:8a:a5:87:cd:04:c7:e9:d9:c7:5e:67:30:a2:11:
19:3d:aa:42:58:ba:d2:3b:2d:23:20:cb:d7:f1:46:32:33:6b:
be:d9:ae:5d:5b:9f:5f:13:80:7c:f2:1b:ab:f7:18:87:23:26:
b3:de:6f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:45:18 2025 by rpki-client