$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json) Hash identifier: /ApXVdFz6TjrKQPJUEGF5rIrRcKVIYYBTP8Hg5utyvw= Subject key identifier: 50:EE:79:04:91:5C:FB:F9:B8:50:C6:E4:10:43:C3:3E:87:A9:97:DE Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Certificate serial: 3C422F8AA37C2D5233FD4F8CDB35491E2476F680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft Manifest number: B6 Signing time: Sun 11 May 2025 06:50:04 +0000 Manifest this update: Sun 11 May 2025 06:45:04 +0000 Manifest next update: Mon 12 May 2025 09:52:04 +0000 Files and hashes: 1: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: GGRuwo6YjYfBgaybKN3BvllLfbpVfm0QXnQu+Mz0fMM=) 2: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (hash: sX4clBllsnOe26N+axHOkcAsIye3vArF/kg1Z4Off60=) 3: 323630323a663735323a3a2f33362d3336203d3e203631393631.roa (hash: LJae5qX98q1IoVhcF3MovFKodtof25tEPl+Vd+qKFHU=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 09:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:42:2f:8a:a3:7c:2d:52:33:fd:4f:8c:db:35:49:1e:24:76:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Validity Not Before: May 11 06:45:04 2025 GMT Not After : May 12 09:52:04 2025 GMT Subject: CN=50EE7904915CFBF9B850C6E41043C33E87A997DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:79:60:0c:22:48:92:d2:57:68:24:0b:56:92: 0d:f3:52:04:70:d6:05:de:b9:cd:70:65:ea:e8:6b: 4c:b5:90:d8:91:af:d0:20:c6:79:59:93:48:08:92: 9b:55:d8:b0:57:ec:83:62:5e:fd:bc:53:0a:d0:38: e0:82:51:89:69:77:50:27:92:d9:a3:9e:70:9a:06: 90:9a:b7:af:1e:8c:32:2e:86:7c:c2:25:24:4c:53: 00:4a:ab:b0:c2:68:25:b1:d8:12:eb:1b:30:99:a3: d6:2e:ea:61:d9:fe:e8:4e:f7:08:03:37:38:2d:b7: 45:59:d4:ea:1f:01:56:d6:3a:57:d0:0d:b1:51:0e: 3f:9c:82:dc:ea:af:4b:57:a9:54:80:1e:00:02:7b: 24:33:f7:74:6e:a1:c7:72:c6:77:f1:96:a1:e6:61: c9:c2:50:3b:bd:6e:fd:3c:b6:b0:42:7e:a1:8e:d0: 08:14:7a:b8:da:b7:26:93:62:e5:75:b7:fb:b1:a1: e5:cd:80:f7:02:db:0b:13:29:59:48:55:6d:6e:35: 20:43:a8:a2:30:a7:09:66:c0:0e:70:cb:58:3f:46: c7:6f:e2:8d:18:2c:bd:79:c5:c3:d2:b4:e9:d7:ed: 5e:bb:d4:18:ae:d2:b6:a7:6b:e3:e6:f8:69:16:3f: 1c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EE:79:04:91:5C:FB:F9:B8:50:C6:E4:10:43:C3:3E:87:A9:97:DE X509v3 Authority Key Identifier: keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:19:f1:55:04:4c:d5:60:a8:cf:76:0f:ae:79:9f:e7:d8:d4: ad:2c:cf:aa:0e:54:ed:9f:71:52:fa:eb:7b:7e:25:2d:a1:cc: 24:76:b2:e8:62:58:20:0c:ae:f9:64:14:1c:1b:cd:d8:92:d6: 07:b8:aa:d0:f5:31:04:6b:19:c0:2e:70:68:0f:05:cd:be:76: 93:31:06:27:3b:d0:ba:40:5e:3b:96:b6:c2:34:89:65:1d:0a: 72:4e:d8:b9:69:4f:09:5a:74:18:b2:a0:64:a2:44:9b:a1:d5: b8:97:75:fe:31:31:ca:20:c4:35:ac:81:9f:9a:b4:90:62:b2: b6:93:7c:5d:bb:3f:ae:cd:33:c9:43:56:78:02:c7:b7:da:d3: 1a:42:5f:51:36:d1:59:74:90:38:a8:cb:53:60:7b:b9:be:71: c0:8a:c8:16:c4:d7:be:59:c5:9c:59:f2:f5:4a:db:93:db:63: c2:d5:d4:b1:85:67:e4:a1:a1:f2:20:2f:a8:92:55:4d:cb:94: 07:95:62:37:2f:30:63:4e:0c:47:e8:6a:94:71:a6:0b:c7:28: 6a:b0:fe:88:ba:00:db:40:b2:db:8c:be:d8:24:a4:b4:16:5a: a8:ff:8f:47:dd:8a:ec:05:68:17:e7:04:5f:a8:7e:c4:9f:4c: 92:b2:49:dd -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUPEIviqN8LVIz/U+M2zVJHiR29oAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjUwNTExMDY0NTA0WhcNMjUwNTEyMDk1MjA0 WjAzMTEwLwYDVQQDEyg1MEVFNzkwNDkxNUNGQkY5Qjg1MEM2RTQxMDQzQzMzRTg3 QTk5N0RFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HlgDCJIktJX aCQLVpIN81IEcNYF3rnNcGXq6GtMtZDYka/QIMZ5WZNICJKbVdiwV+yDYl79vFMK 0DjgglGJaXdQJ5LZo55wmgaQmrevHowyLoZ8wiUkTFMASquwwmglsdgS6xswmaPW Luph2f7oTvcIAzc4LbdFWdTqHwFW1jpX0A2xUQ4/nILc6q9LV6lUgB4AAnskM/d0 bqHHcsZ38Zah5mHJwlA7vW79PLawQn6hjtAIFHq42rcmk2Lldbf7saHlzYD3AtsL EylZSFVtbjUgQ6iiMKcJZsAOcMtYP0bHb+KNGCy9ecXD0rTp1+1eu9QYrtK2p2vj 5vhpFj8cYQIDAQABo4ICezCCAncwHQYDVR0OBBYEFFDueQSRXPv5uFDG5BBDwz6H qZfeMB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5 OWIxOWNiY2NlNjg2M2EzLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8yLzIwQzIy OTdCQzY3RDIxQzMyNTQzODREM0JEODg2NTA2QTA2RTMwQTIubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBc GfFVBEzVYKjPdg+ueZ/n2NStLM+qDlTtn3FS+ut7fiUtocwkdrLoYlggDK75ZBQc G83YktYHuKrQ9TEEaxnALnBoDwXNvnaTMQYnO9C6QF47lrbCNIllHQpyTti5aU8J WnQYsqBkokSbodW4l3X+MTHKIMQ1rIGfmrSQYrK2k3xduz+uzTPJQ1Z4Ase32tMa Ql9RNtFZdJA4qMtTYHu5vnHAisgWxNe+WcWcWfL1StuT22PC1dSxhWfkoaHyIC+o klVNy5QHlWI3LzBjTgxH6GqUcaYLxyhqsP6IugDbQLLbjL7YJKS0Flqo/49H3Yrs BWgX5wRfqH7En0ySsknd -----END CERTIFICATE-----Generated at Sun May 11 10:43:02 2025 by rpki-client