$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json) Hash identifier: Vw8vRirTBVwCJXv2/aWach3vdaX6hMPG4DAkMz43zPI= Subject key identifier: 49:CD:E7:92:94:6F:78:86:74:5C:42:A9:AB:6F:62:20:39:4B:73:FE Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Certificate serial: 5B80BCC523EFADD964AA7BF1D71F8A2BCAD1EF3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft Manifest number: 0143 Signing time: Sat 23 Aug 2025 23:42:55 +0000 Manifest this update: Sat 23 Aug 2025 23:37:55 +0000 Manifest next update: Mon 25 Aug 2025 00:10:55 +0000 Files and hashes: 1: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (hash: sX4clBllsnOe26N+axHOkcAsIye3vArF/kg1Z4Off60=) 2: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: GWrRsobhzkpJhTVAp/Oa9aYb9xzmBfCoUgcTUmz5Lig=) 3: 323630323a663735323a3a2f33362d3336203d3e203631393631.roa (hash: LJae5qX98q1IoVhcF3MovFKodtof25tEPl+Vd+qKFHU=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 00:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:80:bc:c5:23:ef:ad:d9:64:aa:7b:f1:d7:1f:8a:2b:ca:d1:ef:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Validity Not Before: Aug 23 23:37:55 2025 GMT Not After : Aug 25 00:10:55 2025 GMT Subject: CN=49CDE792946F7886745C42A9AB6F6220394B73FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5e:12:a2:2f:54:64:56:26:18:4e:be:3e:d5: 21:5a:72:a0:a3:29:6a:0c:e8:ea:03:50:64:a6:e7: 3e:6b:af:3e:d1:4e:45:7d:43:d0:e5:29:4f:aa:5b: fe:e4:6f:ac:f7:3f:0b:69:9b:ab:97:ab:b3:e3:3b: 0b:6f:07:bc:b8:98:0d:a6:ff:29:68:eb:0f:7c:3a: 50:6d:70:0f:06:fb:35:40:76:de:03:f1:4f:95:e8: 02:63:0c:06:88:30:89:f9:e2:1f:f0:96:2f:32:ed: 57:54:22:61:ef:a6:98:de:14:60:60:3b:a2:3f:74: cc:41:5c:1e:64:8c:62:7e:58:fa:23:11:7d:66:b9: 3a:af:60:f0:9b:24:96:e2:a7:98:81:99:78:84:10: 94:37:ff:97:fa:a5:85:2b:b8:0a:61:71:77:0d:c1: aa:be:2e:7d:bb:c7:8c:21:6b:55:dd:ce:e0:c5:f8: fe:00:ff:af:34:13:7a:68:f4:9a:71:29:e9:e1:97: e2:fa:c9:c5:0f:b7:75:dc:90:a5:47:9a:5f:ec:89: 22:51:ff:48:26:bb:c1:8c:55:90:0e:2c:d5:55:ff: 61:b2:07:1b:c3:4b:91:5d:d1:20:fd:fa:6f:6a:02: fd:38:75:1e:f1:14:35:18:0b:91:ec:c7:38:13:2f: 1a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CD:E7:92:94:6F:78:86:74:5C:42:A9:AB:6F:62:20:39:4B:73:FE X509v3 Authority Key Identifier: keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:03:76:65:6a:5c:9a:d7:5d:c3:d5:47:4a:8e:bc:cb:18:9d: 3f:0c:a3:41:de:a9:91:64:8d:1b:a6:8e:92:88:33:45:2c:00: fb:04:9d:b2:34:f8:b7:70:ea:fc:15:a6:f6:37:f2:98:52:79: f3:d2:f6:97:60:44:6f:76:a5:5b:57:42:37:d0:91:87:82:f7: d6:3d:f8:02:73:93:da:3c:f8:06:59:bc:8b:39:28:fc:7a:e0: c5:08:28:86:f8:70:49:e8:15:bb:6f:ef:96:ec:0b:ab:4d:1e: da:5a:c0:db:4a:e5:57:16:7c:37:94:ab:80:70:d7:a3:d1:45: b7:91:a8:72:17:5e:30:4a:1d:d9:50:22:09:f7:30:08:b8:86: e1:61:db:44:dc:8f:4e:8a:c6:a7:64:3f:6a:31:63:07:c3:98: 1a:df:68:d2:88:1d:b8:b0:49:34:7d:a6:91:dd:c0:54:c9:e9: a1:e4:4c:df:87:3b:cc:03:a9:1b:45:7b:58:f7:bf:06:24:0b: 44:02:2a:46:e3:d5:e2:87:b2:4c:4a:e4:30:2f:a0:ab:34:bc: 06:a9:70:72:3a:6e:5e:8a:9b:b3:b2:cb:e7:bd:4a:47:91:7a: 47:d3:bf:af:77:c4:23:09:09:1b:d8:ab:d3:d1:08:21:46:f3: 9e:54:1e:db -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUW4C8xSPvrdlkqnvx1x+KK8rR7zswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjUwODIzMjMzNzU1WhcNMjUwODI1MDAxMDU1 WjAzMTEwLwYDVQQDEyg0OUNERTc5Mjk0NkY3ODg2NzQ1QzQyQTlBQjZGNjIyMDM5 NEI3M0ZFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF4Soi9UZFYm GE6+PtUhWnKgoylqDOjqA1Bkpuc+a68+0U5FfUPQ5SlPqlv+5G+s9z8LaZurl6uz 4zsLbwe8uJgNpv8paOsPfDpQbXAPBvs1QHbeA/FPlegCYwwGiDCJ+eIf8JYvMu1X VCJh76aY3hRgYDuiP3TMQVweZIxiflj6IxF9Zrk6r2DwmySW4qeYgZl4hBCUN/+X +qWFK7gKYXF3DcGqvi59u8eMIWtV3c7gxfj+AP+vNBN6aPSacSnp4Zfi+snFD7d1 3JClR5pf7IkiUf9IJrvBjFWQDizVVf9hsgcbw0uRXdEg/fpvagL9OHUe8RQ1GAuR 7Mc4Ey8apwIDAQABo4ICezCCAncwHQYDVR0OBBYEFEnN55KUb3iGdFxCqatvYiA5 S3P+MB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5 OWIxOWNiY2NlNjg2M2EzLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8yLzIwQzIy OTdCQzY3RDIxQzMyNTQzODREM0JEODg2NTA2QTA2RTMwQTIubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAT A3Zlalya113D1UdKjrzLGJ0/DKNB3qmRZI0bpo6SiDNFLAD7BJ2yNPi3cOr8Fab2 N/KYUnnz0vaXYERvdqVbV0I30JGHgvfWPfgCc5PaPPgGWbyLOSj8euDFCCiG+HBJ 6BW7b++W7AurTR7aWsDbSuVXFnw3lKuAcNej0UW3kahyF14wSh3ZUCIJ9zAIuIbh YdtE3I9OisanZD9qMWMHw5ga32jSiB24sEk0faaR3cBUyemh5EzfhzvMA6kbRXtY 978GJAtEAipG49Xih7JMSuQwL6CrNLwGqXByOm5eipuzssvnvUpHkXpH07+vd8Qj CQkb2KvT0QghRvOeVB7b -----END CERTIFICATE-----Generated at Sun Aug 24 09:38:15 2025 by rpki-client