$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json) Hash identifier: p6yCozXbydGTCMs8fVQBfyPTHrAoMkn8iN4UsTCSOIQ= Subject key identifier: 23:79:8F:07:98:DB:90:AB:F2:DA:A7:68:42:B4:B1:BF:40:B6:34:09 Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Certificate serial: 218A249D94BFC619AEC7A5F73CC50E7BE37F89E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft Manifest number: 0325 Signing time: Thu 23 Jul 2026 12:14:26 +0000 Manifest this update: Thu 23 Jul 2026 12:09:26 +0000 Manifest next update: Fri 24 Jul 2026 12:24:26 +0000 Files and hashes: 1: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: n20o9WhLL+OeyvOGqF0Yg2eWHIZ4bgk3w0WJOM+dSwg=) 2: AS61961.asa (hash: xB62lymjtKQrG3onCUo1WoI7naRlPCnglhV9lM7+Szk=) 3: AS7010.asa (hash: wa5XbHFVF02KH90WbF7953Ua1Lvt36cAkwJWHWrxQUw=) 4: 3134322e3234382e39302e302f32332d3234203d3e2037303130.roa (hash: O118kJRdNa9b7+9Ot+5gabMWZDtqCtw626haiWVy0Ic=) 5: 323630323a663735323a3a2f33362d3336203d3e2037303130.roa (hash: PFy4ASG9ftcLCEhqn8MWfo4EYAQx79cKa9+rn7sjOUo=) 6: 323630323a666461643a3a2f34302d3438203d3e2037303130.roa (hash: RVBdGUMed0yeJwGesBxpnUhuP70xtA9w4HInEAe7IKI=) 7: 32332e3133312e3137322e302f32342d3234203d3e2037303130.roa (hash: UWBzeUy93auDQISImQKJQMZx9haEsPMqLl/oJpkUV5k=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 12:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:8a:24:9d:94:bf:c6:19:ae:c7:a5:f7:3c:c5:0e:7b:e3:7f:89:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Validity Not Before: Jul 23 12:09:26 2026 GMT Not After : Jul 24 12:24:26 2026 GMT Subject: CN=23798F0798DB90ABF2DAA76842B4B1BF40B63409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:21:89:ff:24:3e:1c:a4:82:9d:12:03:5b:ba: 81:e7:c5:37:d1:b7:32:2e:91:91:ba:66:4f:48:16: fe:f6:0c:85:af:b1:56:a0:64:74:41:35:c0:4f:ca: 80:f8:46:fb:53:ed:6b:18:1f:57:55:3b:ae:79:93: a7:9d:c1:8c:a8:f3:3d:0e:93:20:6e:01:01:98:70: 4c:17:4d:da:b5:cd:6b:a3:10:5d:35:ff:31:f9:ce: 38:b0:d9:08:21:91:75:fc:58:fa:3f:bc:cb:dc:af: a1:90:f0:75:29:e1:a9:5f:63:d5:37:77:e8:aa:ee: 63:b0:94:60:54:cf:3f:32:b7:c2:fb:27:bf:71:44: 74:13:58:a2:e2:c0:d4:e5:b4:5f:a5:4f:93:31:86: 84:d6:88:1b:e6:19:44:89:f0:78:80:b2:45:0e:74: b0:c4:63:2a:fb:8a:3a:1d:d5:8a:42:f0:e0:fd:64: 43:4a:bd:8f:48:e4:d1:73:83:f5:17:ec:da:dc:4d: c0:5b:8d:89:40:9c:78:9c:cb:5e:2d:09:bb:0f:1c: 95:67:56:ac:9f:71:c8:1e:99:67:e6:a9:72:22:4a: a5:54:40:ca:19:91:ec:e2:82:32:3c:0f:ea:fe:0f: 62:ee:6b:83:00:66:3f:0f:bf:d6:2b:7d:70:f6:fe: 41:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:79:8F:07:98:DB:90:AB:F2:DA:A7:68:42:B4:B1:BF:40:B6:34:09 X509v3 Authority Key Identifier: keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:69:90:81:85:e7:7f:d5:b5:0c:4d:fe:51:f0:9d:f4:ea:97: 85:cc:cd:8f:ec:19:ea:c7:b5:2e:7b:30:e2:ac:40:01:a9:78: 43:c8:04:83:1e:21:53:e4:ec:e7:08:28:06:53:3e:c2:86:e2: 8c:a4:03:88:1d:6e:18:21:de:bb:33:c8:fb:aa:aa:4f:9b:42: b1:5b:00:e4:d4:15:d4:e8:4a:fa:8c:9d:2e:3c:e8:c0:37:c0: 57:c8:a5:5a:16:20:3d:84:b3:b7:4f:bd:77:44:be:4b:0c:2a: 42:7f:b2:14:a0:5d:44:63:b8:38:c9:fa:d3:84:97:c3:71:f5: 85:1d:7e:99:b2:d1:95:c4:7e:d1:40:8f:fb:67:36:3f:1d:c4: 15:31:d3:81:a5:25:12:d6:08:1a:ae:e1:48:fc:fa:e9:b8:7d: 28:41:45:05:c1:21:c6:a3:bb:1a:f7:d9:b7:51:1f:bb:89:a9: a9:86:32:e0:0f:e6:db:c6:bc:58:20:ad:40:df:94:10:5f:2e: 57:63:8e:3f:97:0e:23:ca:e3:fe:7b:11:d7:f8:26:00:c8:77: 48:f4:04:17:87:6b:6d:89:a2:cf:55:32:e1:02:c2:82:4b:f8: bb:0e:23:c2:02:85:ad:d9:1d:ce:62:b0:f3:19:33:62:b2:36: 77:af:82:ad -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUIYoknZS/xhmux6X3PMUOe+N/ieMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjYwNzIzMTIwOTI2WhcNMjYwNzI0MTIyNDI2 WjAzMTEwLwYDVQQDEygyMzc5OEYwNzk4REI5MEFCRjJEQUE3Njg0MkI0QjFCRjQw QjYzNDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CGJ/yQ+HKSC nRIDW7qB58U30bcyLpGRumZPSBb+9gyFr7FWoGR0QTXAT8qA+Eb7U+1rGB9XVTuu eZOnncGMqPM9DpMgbgEBmHBMF03atc1roxBdNf8x+c44sNkIIZF1/Fj6P7zL3K+h kPB1KeGpX2PVN3foqu5jsJRgVM8/MrfC+ye/cUR0E1ii4sDU5bRfpU+TMYaE1ogb 5hlEifB4gLJFDnSwxGMq+4o6HdWKQvDg/WRDSr2PSOTRc4P1F+za3E3AW42JQJx4 nMteLQm7DxyVZ1asn3HIHpln5qlyIkqlVEDKGZHs4oIyPA/q/g9i7muDAGY/D7/W K31w9v5BSwIDAQABo4ICezCCAncwHQYDVR0OBBYEFCN5jweY25Cr8tqnaEK0sb9A tjQJMB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5 OWIxOWNiY2NlNjg2M2EzLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8yLzIwQzIy OTdCQzY3RDIxQzMyNTQzODREM0JEODg2NTA2QTA2RTMwQTIubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBX aZCBhed/1bUMTf5R8J306peFzM2P7Bnqx7UuezDirEABqXhDyASDHiFT5OznCCgG Uz7ChuKMpAOIHW4YId67M8j7qqpPm0KxWwDk1BXU6Er6jJ0uPOjAN8BXyKVaFiA9 hLO3T713RL5LDCpCf7IUoF1EY7g4yfrThJfDcfWFHX6ZstGVxH7RQI/7ZzY/HcQV MdOBpSUS1ggaruFI/PrpuH0oQUUFwSHGo7sa99m3UR+7iamphjLgD+bbxrxYIK1A 35QQXy5XY44/lw4jyuP+exHX+CYAyHdI9AQXh2ttiaLPVTLhAsKCS/i7DiPCAoWt 2R3OYrDzGTNisjZ3r4Kt -----END CERTIFICATE-----Generated at Thu Jul 23 19:02:56 2026 by rpki-client