$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json) Hash identifier: 63F2MVB2YOPMqd29bu6MfXqqSdWG4T+sH0fo9KCPY90= Subject key identifier: 25:46:5D:53:98:7C:54:92:06:65:43:03:45:AC:35:4E:6C:FF:65:18 Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Certificate serial: 562BF14BEAE28793F040C27F987159A5C029877C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft Manifest number: 02AE Signing time: Tue 12 May 2026 10:07:39 +0000 Manifest this update: Tue 12 May 2026 10:02:39 +0000 Manifest next update: Wed 13 May 2026 11:02:39 +0000 Files and hashes: 1: 323630323a663735323a3a2f33362d3336203d3e203631393631.roa (hash: CqNp7ek3u5kbCBWfN53/CnZ4zIsOoWuXEyXMjQabM7w=) 2: 3134322e3234382e39302e302f32332d3234203d3e203631393631.roa (hash: SEfJJW0oCHWn/xdi75zWLDupC/cjkqW/OUbAiUPdXMo=) 3: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (hash: ipFemzkztsboDmqpCJAhUhmIJUiu758VxunW+cYOxO0=) 4: 323630323a666461643a3a2f34302d3438203d3e203631393631.roa (hash: pLWuN2bUHqMXgcevJT1AmoYm7sc9azuOkUaBTt9vVNg=) 5: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: mfeGoF/lvwNwnqyvRrpKkosIvW0QxyLexQ1E9z2tVkY=) 6: AS61961.asa (hash: xB62lymjtKQrG3onCUo1WoI7naRlPCnglhV9lM7+Szk=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 11:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:2b:f1:4b:ea:e2:87:93:f0:40:c2:7f:98:71:59:a5:c0:29:87:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Validity Not Before: May 12 10:02:39 2026 GMT Not After : May 13 11:02:39 2026 GMT Subject: CN=25465D53987C54920665430345AC354E6CFF6518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f8:48:ab:94:cc:de:e9:39:b1:20:9c:e5:23: a0:d8:e4:ad:d3:c8:00:15:95:8c:05:cf:c7:85:cb: 1d:75:47:fb:85:b7:ce:38:9b:58:8b:41:a6:1a:42: a0:52:81:9d:d8:e8:78:27:02:59:88:77:a8:cd:e0: fa:e8:93:eb:26:21:92:de:d6:c6:31:43:c9:e4:74: 80:7d:3c:01:0c:27:c2:58:32:3f:5f:ec:90:d1:64: c4:ef:4c:d5:df:19:36:7b:b9:8c:60:63:11:2a:b4: f0:2b:7a:96:4a:5f:df:29:c3:78:73:b9:a7:2d:e6: e7:4a:fa:0b:02:c6:0d:db:aa:1f:2a:d3:cf:a4:89: 20:00:d1:e7:d6:9c:c3:4e:83:21:ea:a8:71:bf:dd: ef:38:29:0b:a1:62:5a:d6:36:c2:00:55:5e:8c:67: 88:7e:85:a5:9b:3e:c4:39:a2:55:73:a6:d8:7e:6d: b1:e8:c4:6d:6d:0b:51:27:57:ba:9b:71:17:e1:52: a1:17:48:bf:48:8f:2f:b7:cf:44:c1:23:e1:08:20: 6e:f1:13:04:31:a2:71:0c:3c:0f:4b:b6:78:f2:bd: d3:c7:e2:f0:ae:0b:33:82:6e:d2:33:04:b4:b5:34: c0:e2:2a:6e:5f:27:9a:02:ea:1e:2d:80:d4:8d:6f: b6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:46:5D:53:98:7C:54:92:06:65:43:03:45:AC:35:4E:6C:FF:65:18 X509v3 Authority Key Identifier: keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:5a:50:b6:ce:6d:c0:a4:94:ba:f8:ec:e8:61:29:24:dc:1b: 88:ca:4b:0f:ba:5a:e1:71:01:69:04:72:55:1f:b3:d1:ff:55: 12:9a:41:a3:5c:bc:f0:37:66:55:ad:e9:23:18:fa:60:a0:23: c3:77:6f:92:b6:b0:4b:e1:07:8c:7c:88:48:71:d2:75:60:6d: 53:b6:cd:40:b9:c9:c8:ee:a7:bf:11:7f:56:bb:ad:ba:89:b1: fc:ff:b1:37:bd:00:e6:9f:7f:18:8b:a5:90:9f:1e:bb:dc:15: 9a:cf:4c:0a:71:16:98:6f:c1:1f:6e:8c:82:a9:25:f7:50:ef: 46:5d:16:af:70:17:f9:67:d6:78:11:14:79:08:6e:91:5a:ed: 9f:30:7e:db:25:0d:0f:90:96:d4:b1:a5:78:ee:0d:d1:a2:3f: e5:95:5f:fa:b9:4b:b5:b6:43:0b:1a:f3:d9:af:6f:a1:be:4d: 87:fb:a6:e7:26:98:18:25:89:05:1f:89:c0:0c:d3:ea:49:33: dc:31:66:62:ee:09:bb:34:66:e3:1f:9b:7d:da:74:49:f6:c3: 80:32:91:a1:51:0b:04:0b:f6:23:64:d6:cb:48:7d:dd:5a:0b: 8a:f9:32:fe:e5:39:ed:ef:36:6b:9d:c8:d9:41:ab:4e:99:c1: e8:a0:a2:5e -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUVivxS+rih5PwQMJ/mHFZpcAph3wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjYwNTEyMTAwMjM5WhcNMjYwNTEzMTEwMjM5 WjAzMTEwLwYDVQQDEygyNTQ2NUQ1Mzk4N0M1NDkyMDY2NTQzMDM0NUFDMzU0RTZD RkY2NTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPhIq5TM3uk5 sSCc5SOg2OSt08gAFZWMBc/HhcsddUf7hbfOOJtYi0GmGkKgUoGd2Oh4JwJZiHeo zeD66JPrJiGS3tbGMUPJ5HSAfTwBDCfCWDI/X+yQ0WTE70zV3xk2e7mMYGMRKrTw K3qWSl/fKcN4c7mnLebnSvoLAsYN26ofKtPPpIkgANHn1pzDToMh6qhxv93vOCkL oWJa1jbCAFVejGeIfoWlmz7EOaJVc6bYfm2x6MRtbQtRJ1e6m3EX4VKhF0i/SI8v t89EwSPhCCBu8RMEMaJxDDwPS7Z48r3Tx+Lwrgszgm7SMwS0tTTA4ipuXyeaAuoe LYDUjW+2cwIDAQABo4ICezCCAncwHQYDVR0OBBYEFCVGXVOYfFSSBmVDA0WsNU5s /2UYMB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5 OWIxOWNiY2NlNjg2M2EzLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8yLzIwQzIy OTdCQzY3RDIxQzMyNTQzODREM0JEODg2NTA2QTA2RTMwQTIubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBD WlC2zm3ApJS6+OzoYSkk3BuIyksPulrhcQFpBHJVH7PR/1USmkGjXLzwN2ZVrekj GPpgoCPDd2+StrBL4QeMfIhIcdJ1YG1Tts1AucnI7qe/EX9Wu626ibH8/7E3vQDm n38Yi6WQnx673BWaz0wKcRaYb8EfboyCqSX3UO9GXRavcBf5Z9Z4ERR5CG6RWu2f MH7bJQ0PkJbUsaV47g3Roj/llV/6uUu1tkMLGvPZr2+hvk2H+6bnJpgYJYkFH4nA DNPqSTPcMWZi7gm7NGbjH5t92nRJ9sOAMpGhUQsEC/YjZNbLSH3dWguK+TL+5Tnt 7zZrncjZQatOmcHooKJe -----END CERTIFICATE-----Generated at Wed May 13 02:31:10 2026 by rpki-client