$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json) Hash identifier: nZ5VSdUCnVp7evf3m8jaQzclbEgnrJlwcQzdbv/AZ/E= Subject key identifier: 44:EC:E0:75:C1:5D:95:51:A8:DC:0D:6D:B8:4A:2D:C9:B2:4D:A7:70 Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Certificate serial: 202B4B6AE2EC6CF25BBD6CD8C3D5853170925148 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft Manifest number: FB Signing time: Tue 01 Jul 2025 05:27:16 +0000 Manifest this update: Tue 01 Jul 2025 05:22:16 +0000 Manifest next update: Wed 02 Jul 2025 05:53:16 +0000 Files and hashes: 1: 323630323a663735323a3a2f33362d3336203d3e203631393631.roa (hash: LJae5qX98q1IoVhcF3MovFKodtof25tEPl+Vd+qKFHU=) 2: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (hash: sX4clBllsnOe26N+axHOkcAsIye3vArF/kg1Z4Off60=) 3: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: 481yDYdBYktgHxDfuuLvVU0Yc/2/7pXQg+L6TQDgqx8=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 05:53:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:2b:4b:6a:e2:ec:6c:f2:5b:bd:6c:d8:c3:d5:85:31:70:92:51:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Validity Not Before: Jul 1 05:22:16 2025 GMT Not After : Jul 2 05:53:16 2025 GMT Subject: CN=44ECE075C15D9551A8DC0D6DB84A2DC9B24DA770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f9:14:35:e2:21:fb:bc:d9:54:a0:48:ec:b4: 1c:dd:00:81:a2:c8:81:94:c2:45:ce:c4:29:86:4b: 21:ee:c3:d4:d5:e5:2f:cb:ca:40:c3:4b:87:a7:8c: 7b:5f:83:2d:58:40:f0:1b:60:e5:00:13:32:7f:18: 95:27:e3:ae:36:1b:f4:5a:41:76:20:9f:dc:ba:05: 24:61:80:37:65:2c:e1:07:18:b3:7e:cb:69:9b:ff: 65:12:c8:fc:db:2e:fe:b3:98:ef:c5:96:dd:ee:58: c1:85:96:6f:25:c3:8b:71:ee:06:61:51:10:2c:df: d8:7d:1e:47:90:e6:df:b8:2a:85:ee:78:85:17:ac: ee:32:57:b0:bb:ad:36:86:75:bf:fb:e6:2b:9e:ff: ec:f5:de:aa:6b:db:22:60:75:5b:ca:10:13:a4:c1: ec:f6:02:a9:94:4a:a7:9f:c4:1f:70:8e:9b:b6:54: a2:00:1b:0a:92:8a:16:23:e5:bd:4c:7c:da:41:71: 5e:9c:48:7e:05:bf:1b:03:32:5d:4a:c5:4d:47:ff: c3:38:09:2c:05:41:08:ee:f0:bc:00:82:f1:d1:89: 9e:67:87:e4:68:ed:1a:67:16:18:2b:c0:ba:2f:4c: e2:a6:a9:d1:6a:c3:4b:dd:77:0e:83:44:a7:ed:1b: 94:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EC:E0:75:C1:5D:95:51:A8:DC:0D:6D:B8:4A:2D:C9:B2:4D:A7:70 X509v3 Authority Key Identifier: keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:64:55:03:01:97:fb:6e:a5:8e:51:25:8b:b1:d3:ac:76:70: c3:16:73:3b:54:d2:68:36:0e:a9:4e:8f:8b:92:d5:6d:23:16: 86:fb:e2:c4:ff:ef:57:6a:94:fc:0c:d2:df:19:e4:fb:87:06: 46:d5:a6:ec:f1:5c:60:18:30:ea:cb:22:34:0e:db:62:9c:7d: 60:08:c6:e2:77:5f:1c:81:d7:85:d2:02:1c:80:e5:93:bf:3e: 8e:02:af:36:9c:c4:6d:e7:d5:db:b5:9d:ea:a2:e0:8d:96:e0: 30:bf:c0:3f:be:e1:0f:6a:7c:93:87:60:67:25:72:75:06:ae: f0:a8:8b:b7:9d:dc:a2:e0:c4:b6:61:68:0c:f2:31:6f:e9:0a: 78:e3:36:9f:fc:e4:b9:f2:8c:62:f7:e1:c8:d7:33:1c:2a:cd: 1e:c9:1b:f8:dd:a3:b5:8b:41:cb:85:a3:f4:ff:35:9e:bd:c7: a3:87:6b:ef:f4:9d:b4:e8:bf:4d:4f:d7:1c:f3:1a:04:0f:2b: ee:49:02:cb:ca:10:aa:2b:e1:0d:07:fe:44:88:cb:e0:f6:1f: 06:4f:5e:ab:06:fc:20:70:4f:06:71:9c:69:fb:b7:40:30:7f: e0:90:a9:46:16:b3:42:fd:47:6b:5c:de:7c:2e:46:a9:39:48: 0e:3d:0d:f7 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUICtLauLsbPJbvWzYw9WFMXCSUUgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjUwNzAxMDUyMjE2WhcNMjUwNzAyMDU1MzE2 WjAzMTEwLwYDVQQDEyg0NEVDRTA3NUMxNUQ5NTUxQThEQzBENkRCODRBMkRDOUIy NERBNzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/kUNeIh+7zZ VKBI7LQc3QCBosiBlMJFzsQphksh7sPU1eUvy8pAw0uHp4x7X4MtWEDwG2DlABMy fxiVJ+OuNhv0WkF2IJ/cugUkYYA3ZSzhBxizfstpm/9lEsj82y7+s5jvxZbd7ljB hZZvJcOLce4GYVEQLN/YfR5HkObfuCqF7niFF6zuMlewu602hnW/++Yrnv/s9d6q a9siYHVbyhATpMHs9gKplEqnn8QfcI6btlSiABsKkooWI+W9THzaQXFenEh+Bb8b AzJdSsVNR//DOAksBUEI7vC8AILx0YmeZ4fkaO0aZxYYK8C6L0zipqnRasNL3XcO g0Sn7RuUiwIDAQABo4ICezCCAncwHQYDVR0OBBYEFETs4HXBXZVRqNwNbbhKLcmy TadwMB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5 OWIxOWNiY2NlNjg2M2EzLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8yLzIwQzIy OTdCQzY3RDIxQzMyNTQzODREM0JEODg2NTA2QTA2RTMwQTIubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCW ZFUDAZf7bqWOUSWLsdOsdnDDFnM7VNJoNg6pTo+LktVtIxaG++LE/+9XapT8DNLf GeT7hwZG1abs8VxgGDDqyyI0DttinH1gCMbid18cgdeF0gIcgOWTvz6OAq82nMRt 59XbtZ3qouCNluAwv8A/vuEPanyTh2BnJXJ1Bq7wqIu3ndyi4MS2YWgM8jFv6Qp4 4zaf/OS58oxi9+HI1zMcKs0eyRv43aO1i0HLhaP0/zWevcejh2vv9J206L9NT9cc 8xoEDyvuSQLLyhCqK+ENB/5EiMvg9h8GT16rBvwgcE8GcZxp+7dAMH/gkKlGFrNC /UdrXN58LkapOUgOPQ33 -----END CERTIFICATE-----Generated at Tue Jul 1 15:15:48 2025 by rpki-client