
$ rpki-client -vvvf rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
File: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft (raw, json)
Hash identifier: vozCsRX34HnTt9H6hR0FHsfyr8wCDDInx2vApLd/XZ8=
Subject key identifier: 97:FB:4E:40:36:27:6A:AE:1E:13:BE:F8:66:69:EA:4D:D4:91:66:11
Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
Certificate issuer: /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Certificate serial: 049B12ABFDF3BC59168F37E92016A403FD711EA3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
Manifest number: 0191
Signing time: Sun 20 Sep 2026 06:32:49 +0000
Manifest this update: Sun 20 Sep 2026 06:27:49 +0000
Manifest next update: Mon 21 Sep 2026 07:47:49 +0000
Files and hashes: 1: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl (hash: yOLL8EvDKtPSGnkIQoAIgPyEc+Z97I2OOt15w9/G3JQ=)
2: 3139382e3230322e3139352e302f32342d3234203d3e2037303130.roa (hash: ijdjhUA/W8GrEHjWCkpsTOyiMWFsOJ2kKaXbr1wTlms=)
3: 32332e3135312e3133322e302f32342d3234203d3e2037303130.roa (hash: tctQKM2NsEf1NWEg9XqqGOTDGObWKmiIUoceijkBKhI=)
4: 323630323a663438623a3a2f33362d3438203d3e2037303130.roa (hash: Xb+aPiHNR5Ln915Gz5HbUVinqXFh6cSM0aLUbQZXqZY=)
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 07:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:9b:12:ab:fd:f3:bc:59:16:8f:37:e9:20:16:a4:03:fd:71:1e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Validity
Not Before: Sep 20 06:27:49 2026 GMT
Not After : Sep 21 07:47:49 2026 GMT
Subject: CN=97FB4E4036276AAE1E13BEF86669EA4DD4916611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8f:e4:d5:71:8b:d1:c6:53:42:43:82:92:b6:
6c:15:d5:34:99:29:7c:21:84:b8:0c:e4:0e:94:d7:
a0:ab:bc:0c:39:a8:96:78:29:bf:09:89:7f:c5:9a:
ad:37:cf:04:5c:51:f1:2a:97:e4:2d:dc:54:81:a7:
d6:1e:6a:7d:58:49:20:be:b9:93:08:9d:d3:48:a7:
f9:aa:9f:e9:05:3c:a9:6c:57:d7:38:9d:af:e9:e2:
92:5f:d2:0a:4e:e8:a1:51:21:51:cf:79:83:ad:5e:
b8:97:4f:48:3e:d1:55:79:0c:ae:6b:d7:60:5f:bf:
c8:d8:89:98:af:ba:0f:44:f0:d6:9e:e5:a1:39:05:
f0:73:bd:f7:9c:0e:fc:b5:7d:db:4c:da:68:ad:c7:
fd:c2:cf:40:1b:6c:b8:a4:4b:a0:1c:67:57:d7:e6:
67:41:e2:c0:45:55:13:b7:ad:9e:d3:91:f1:74:d1:
03:c1:b2:c2:89:95:79:83:c0:e7:1f:bf:d5:45:3a:
5b:27:cc:0c:44:18:57:4d:67:ed:20:71:ac:fb:8d:
7c:4c:c2:b4:f3:d9:c3:f2:e2:22:9f:c2:6a:37:6a:
7d:bf:54:f1:23:39:a2:9c:5b:ec:d7:9d:38:b7:dd:
87:e8:da:50:e7:7b:9e:92:fb:e2:d9:d0:39:98:6c:
64:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FB:4E:40:36:27:6A:AE:1E:13:BE:F8:66:69:EA:4D:D4:91:66:11
X509v3 Authority Key Identifier:
keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fc:ed:72:b6:07:b3:a1:07:ad:28:2f:95:20:0f:c5:3a:ec:
40:cb:bd:30:3d:5d:22:46:d2:00:4f:01:72:b0:00:b9:f3:d8:
25:13:1b:88:95:b2:fe:e0:5e:8d:c0:f6:69:dc:cf:ff:81:d4:
c8:2e:14:47:82:6c:e1:63:f0:5e:64:c5:92:42:34:6c:39:c9:
9f:3f:dd:80:00:72:9a:5b:33:4f:b1:8c:9a:dc:3c:8d:7d:79:
d4:36:a6:ff:da:72:5b:00:04:e5:eb:b0:80:3c:ea:68:39:83:
32:7e:5e:72:ce:22:4d:6b:12:21:1c:68:76:5e:25:81:92:d5:
62:6a:75:46:3c:f7:a7:f5:e6:49:88:f3:e9:70:81:4c:62:f8:
a9:80:82:be:26:15:57:90:4f:63:0e:81:21:b4:f7:e5:09:50:
0a:ce:94:d8:a5:a6:8f:5e:8a:b2:0b:d8:65:24:e0:9e:39:5f:
17:47:f4:60:d4:b8:38:67:7d:d6:ba:a2:48:c3:db:90:67:4f:
ab:72:e7:47:1f:91:e9:95:7f:b2:fb:7e:e4:41:65:dd:27:b7:
2b:99:13:24:2f:0f:95:b5:13:16:5e:22:cf:df:59:dc:4f:bd:
07:4e:a0:93:d7:47:da:ab:15:a2:2f:f6:51:c6:57:48:10:e5:
13:48:85:2e
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUBJsSq/3zvFkWjzfpIBakA/1xHqMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2Y5YzA1NDIwYjU1YzNlZGU3MDM1MjFkMTRkODEzNzU4
ODk4MDQyMjYwZjA3OGIyNGQwHhcNMjYwOTIwMDYyNzQ5WhcNMjYwOTIxMDc0NzQ5
WjAzMTEwLwYDVQQDEyg5N0ZCNEU0MDM2Mjc2QUFFMUUxM0JFRjg2NjY5RUE0REQ0
OTE2NjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Y/k1XGL0cZT
QkOCkrZsFdU0mSl8IYS4DOQOlNegq7wMOaiWeCm/CYl/xZqtN88EXFHxKpfkLdxU
gafWHmp9WEkgvrmTCJ3TSKf5qp/pBTypbFfXOJ2v6eKSX9IKTuihUSFRz3mDrV64
l09IPtFVeQyua9dgX7/I2ImYr7oPRPDWnuWhOQXwc733nA78tX3bTNporcf9ws9A
G2y4pEugHGdX1+ZnQeLARVUTt62e05HxdNEDwbLCiZV5g8DnH7/VRTpbJ8wMRBhX
TWftIHGs+418TMK089nD8uIin8JqN2p9v1TxIzminFvs1504t92H6NpQ53uekvvi
2dA5mGxkxwIDAQABo4ICezCCAncwHQYDVR0OBBYEFJf7TkA2J2quHhO++GZp6k3U
kWYRMB8GA1UdIwQYMBaAFN0XW9T7fx3CNtsTzStCpkWQr+xcMA4GA1UdDwEB/wQE
AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0
L3JlcG8vbmVsbGljdXMvMy9ERDE3NUJENEZCN0YxREMyMzZEQjEzQ0QyQjQyQTY0
NTkwQUZFQzVDLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT
cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl
NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0zN2E3
LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjBlM2UzMzItMmUxMy00N2I3LWJlM2Mt
YmQyZjQwZGI2ODY0LzdmOWMwNTQyMGI1NWMzZWRlNzAzNTIxZDE0ZDgxMzc1ODg5
ODA0MjI2MGYwNzhiMjRkLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG
VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8zL0REMTc1
QkQ0RkI3RjFEQzIzNkRCMTNDRDJCNDJBNjQ1OTBBRkVDNUMubWZ0MBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC
AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBY
/O1ytgezoQetKC+VIA/FOuxAy70wPV0iRtIATwFysAC589glExuIlbL+4F6NwPZp
3M//gdTILhRHgmzhY/BeZMWSQjRsOcmfP92AAHKaWzNPsYya3DyNfXnUNqb/2nJb
AATl67CAPOpoOYMyfl5yziJNaxIhHGh2XiWBktVianVGPPen9eZJiPPpcIFMYvip
gIK+JhVXkE9jDoEhtPflCVAKzpTYpaaPXoqyC9hlJOCeOV8XR/Rg1Lg4Z33WuqJI
w9uQZ0+rcudHH5HplX+y+37kQWXdJ7crmRMkLw+VtRMWXiLP31ncT70HTqCT10fa
qxWiL/ZRxldIEOUTSIUu
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:34:25 2026 by rpki-client