
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
File: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft (raw, json)
Hash identifier: Do1mMOplcCi7cVTa2YxPayD54LlsCsF5g1KV0SmRmGA=
Subject key identifier: 3A:6B:AB:1C:BE:DC:26:34:EC:27:63:FC:FC:62:07:7D:A9:FB:1E:6F
Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
Certificate issuer: /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Certificate serial: 20A3EBFDCE82C88E0EFD415145B760A37468FA7F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
Manifest number: AC
Signing time: Sat 18 Apr 2026 16:46:38 +0000
Manifest this update: Sat 18 Apr 2026 16:41:38 +0000
Manifest next update: Sun 19 Apr 2026 18:18:38 +0000
Files and hashes: 1: 323630323a663438623a3a2f33362d3438203d3e203631393631.roa (hash: tF1TO5OePBirSA2MxPH7uXQfaSSl0HRibFaeUgy/1P4=)
2: 32332e3135312e3133322e302f32342d3234203d3e203631393631.roa (hash: v8No20hTrarlcWsm3WcVuQdnMeOU9NeFzlFcrLYahz4=)
3: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl (hash: 4nj57NnMxeVzvN8wGhw218JjRd1+Rssg5q6JAbunR84=)
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 18:18:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:a3:eb:fd:ce:82:c8:8e:0e:fd:41:51:45:b7:60:a3:74:68:fa:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Validity
Not Before: Apr 18 16:41:38 2026 GMT
Not After : Apr 19 18:18:38 2026 GMT
Subject: CN=3A6BAB1CBEDC2634EC2763FCFC62077DA9FB1E6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:99:74:31:65:a9:66:2e:2b:02:05:f4:5e:93:
07:2f:88:56:99:85:f8:4e:e8:55:66:e2:c2:0e:cb:
0f:f0:cf:d0:f4:bf:41:68:4e:dd:b0:1b:ae:7a:c7:
6e:a6:bd:b7:9a:78:aa:7f:20:1d:23:26:d9:e8:33:
36:eb:f7:80:66:90:7c:0f:a7:94:b7:b1:7b:b0:fb:
63:f7:fd:18:6c:f2:97:36:4d:f2:75:18:12:96:2d:
b5:8d:be:94:bc:3f:fe:d1:06:8d:06:9c:c7:77:c9:
18:15:6f:36:af:05:4f:1d:c7:b5:f8:de:95:8a:19:
b6:0b:bb:64:18:e2:34:ca:65:bc:7f:85:cb:c5:80:
ea:93:6f:c9:3c:d8:48:70:45:fe:c4:2b:fb:81:4e:
ab:ec:13:c4:eb:24:15:58:c9:11:b8:2b:e8:9c:be:
ff:3d:7f:62:b4:b5:38:a3:0b:91:9b:b1:f4:29:b9:
0b:30:60:a1:2c:5c:3b:f1:7c:89:c4:a1:f0:f4:72:
24:5c:5a:b3:4f:79:c6:f3:84:d5:3c:44:cf:5d:30:
d2:92:24:3c:56:dc:5d:a5:69:3e:01:f0:f4:94:b0:
8b:f4:66:37:3b:e8:3f:89:c6:85:ef:4e:40:bc:02:
f9:b0:dc:48:d6:a1:c7:ce:92:8e:4a:93:aa:61:37:
1f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6B:AB:1C:BE:DC:26:34:EC:27:63:FC:FC:62:07:7D:A9:FB:1E:6F
X509v3 Authority Key Identifier:
keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:de:26:ed:2d:e3:03:de:51:c3:20:c6:83:14:ff:c7:e6:31:
6a:01:4d:de:82:51:b6:f5:b1:e8:f7:1a:fa:51:b5:80:5e:d8:
e2:d0:0f:52:cf:74:c4:db:30:4c:74:b5:d0:d5:2f:3e:30:46:
dc:03:2d:fa:36:cf:39:1b:76:dc:40:75:73:dc:06:48:01:f6:
32:19:2b:26:73:cb:ed:26:22:19:69:77:af:64:b1:a0:e9:1d:
ab:ad:c1:ab:1a:63:1e:2b:59:20:56:4e:c0:e7:2e:ed:d0:49:
91:89:2e:4d:1a:eb:3d:4d:a1:bf:0d:ab:1c:c6:21:76:e2:a8:
ad:e1:67:f1:4d:95:57:84:8a:c4:ea:c4:c3:0e:c5:08:b1:27:
c7:e6:61:19:80:8a:eb:60:46:32:05:8b:e1:61:9b:36:f8:75:
fd:49:f0:4f:58:93:fa:8b:a7:3f:13:8b:ae:04:e2:e3:e1:88:
e9:fc:bd:ec:04:4c:01:06:b4:62:05:6e:3d:7b:0c:a7:28:fc:
30:f3:b3:e9:f6:ac:77:84:34:52:ea:f6:8b:29:01:20:a6:51:
02:64:65:f2:72:b5:fe:fd:f7:b1:ec:b4:1d:29:fc:a5:97:52:
f4:53:fa:72:90:b3:53:a6:50:0e:3f:ec:32:3b:26:f5:97:1b:
05:5f:82:09
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUIKPr/c6CyI4O/UFRRbdgo3Ro+n8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2Y5YzA1NDIwYjU1YzNlZGU3MDM1MjFkMTRkODEzNzU4
ODk4MDQyMjYwZjA3OGIyNGQwHhcNMjYwNDE4MTY0MTM4WhcNMjYwNDE5MTgxODM4
WjAzMTEwLwYDVQQDEygzQTZCQUIxQ0JFREMyNjM0RUMyNzYzRkNGQzYyMDc3REE5
RkIxRTZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZl0MWWpZi4r
AgX0XpMHL4hWmYX4TuhVZuLCDssP8M/Q9L9BaE7dsBuuesdupr23mniqfyAdIybZ
6DM26/eAZpB8D6eUt7F7sPtj9/0YbPKXNk3ydRgSli21jb6UvD/+0QaNBpzHd8kY
FW82rwVPHce1+N6Vihm2C7tkGOI0ymW8f4XLxYDqk2/JPNhIcEX+xCv7gU6r7BPE
6yQVWMkRuCvonL7/PX9itLU4owuRm7H0KbkLMGChLFw78XyJxKHw9HIkXFqzT3nG
84TVPETPXTDSkiQ8VtxdpWk+AfD0lLCL9GY3O+g/icaF705AvAL5sNxI1qHHzpKO
SpOqYTcfXQIDAQABo4ICezCCAncwHQYDVR0OBBYEFDprqxy+3CY07Cdj/PxiB32p
+x5vMB8GA1UdIwQYMBaAFN0XW9T7fx3CNtsTzStCpkWQr+xcMA4GA1UdDwEB/wQE
AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0
L3JlcG8vbmVsbGljdXMvMy9ERDE3NUJENEZCN0YxREMyMzZEQjEzQ0QyQjQyQTY0
NTkwQUZFQzVDLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT
cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl
NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0zN2E3
LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjBlM2UzMzItMmUxMy00N2I3LWJlM2Mt
YmQyZjQwZGI2ODY0LzdmOWMwNTQyMGI1NWMzZWRlNzAzNTIxZDE0ZDgxMzc1ODg5
ODA0MjI2MGYwNzhiMjRkLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG
VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8zL0REMTc1
QkQ0RkI3RjFEQzIzNkRCMTNDRDJCNDJBNjQ1OTBBRkVDNUMubWZ0MBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC
AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBj
3ibtLeMD3lHDIMaDFP/H5jFqAU3eglG29bHo9xr6UbWAXtji0A9Sz3TE2zBMdLXQ
1S8+MEbcAy36Ns85G3bcQHVz3AZIAfYyGSsmc8vtJiIZaXevZLGg6R2rrcGrGmMe
K1kgVk7A5y7t0EmRiS5NGus9TaG/DascxiF24qit4WfxTZVXhIrE6sTDDsUIsSfH
5mEZgIrrYEYyBYvhYZs2+HX9SfBPWJP6i6c/E4uuBOLj4Yjp/L3sBEwBBrRiBW49
ewynKPww87Pp9qx3hDRS6vaLKQEgplECZGXycrX+/fex7LQdKfyll1L0U/pykLNT
plAOP+wyOyb1lxsFX4IJ
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:18:02 2026 by rpki-client