$ rpki-client -vvvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json) Hash identifier: 18JiVvKMoPrGmcK6exc54nwS7iiJ1F2EPUzo9H6XMx8= Subject key identifier: 1E:CC:8F:7E:D6:AB:B9:E1:27:A2:64:72:0F:AA:9B:9A:1B:E0:3A:2F Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Certificate serial: 4A760859D2D50AFD70DB38815242882ABF7131B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft Manifest number: 0379 Signing time: Wed 23 Sep 2026 18:33:02 +0000 Manifest this update: Wed 23 Sep 2026 18:28:02 +0000 Manifest next update: Thu 24 Sep 2026 20:04:02 +0000 Files and hashes: 1: 323630323a663735323a3a2f33362d3336203d3e2037303130.roa (hash: PFy4ASG9ftcLCEhqn8MWfo4EYAQx79cKa9+rn7sjOUo=) 2: AS61961.asa (hash: xB62lymjtKQrG3onCUo1WoI7naRlPCnglhV9lM7+Szk=) 3: AS7010.asa (hash: wa5XbHFVF02KH90WbF7953Ua1Lvt36cAkwJWHWrxQUw=) 4: 32332e3133312e3137322e302f32342d3234203d3e2037303130.roa (hash: UWBzeUy93auDQISImQKJQMZx9haEsPMqLl/oJpkUV5k=) 5: 323630323a666461643a3a2f34302d3438203d3e2037303130.roa (hash: RVBdGUMed0yeJwGesBxpnUhuP70xtA9w4HInEAe7IKI=) 6: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: ijbHjwCq+oXaBHLcbqUDsnAIvi3SIE2nn2Fz4EsrXrU=) 7: 3134322e3234382e39302e302f32332d3234203d3e2037303130.roa (hash: O118kJRdNa9b7+9Ot+5gabMWZDtqCtw626haiWVy0Ic=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 20:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:76:08:59:d2:d5:0a:fd:70:db:38:81:52:42:88:2a:bf:71:31:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Validity Not Before: Sep 23 18:28:02 2026 GMT Not After : Sep 24 20:04:02 2026 GMT Subject: CN=1ECC8F7ED6ABB9E127A264720FAA9B9A1BE03A2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fd:08:03:eb:bf:74:a3:e6:f8:01:b3:3d:5a: 34:e9:ba:03:2e:5f:78:f6:5f:2e:16:33:f5:a8:3c: e5:c6:e8:61:f5:95:84:5a:45:91:6f:ff:71:2c:04: 5e:4a:0e:9f:7b:5a:c0:36:eb:22:44:c7:58:f0:f1: 00:48:51:19:18:f0:ec:7c:6b:92:a7:09:9b:78:03: c6:81:34:69:11:0c:76:8f:72:51:76:72:ed:c8:9f: 93:2f:72:07:4b:19:dc:40:86:10:5a:c0:c3:d3:1a: 33:4e:22:1a:ec:5f:7f:ec:fc:6c:76:dd:6e:74:67: 19:98:5e:e4:26:cb:7b:70:5a:23:2a:5e:88:dd:b6: 62:d5:68:36:16:6f:e8:6b:8f:0f:15:11:ec:83:2a: c4:71:7c:86:dc:35:92:54:9d:00:e6:51:a4:73:59: 7e:7d:31:75:64:73:34:b5:cd:cf:68:c1:76:29:18: c7:0c:10:96:7c:07:21:5f:5f:10:70:0f:1c:c3:2c: 68:21:cf:e5:35:21:51:2d:5b:db:df:df:f2:97:3d: ae:ca:17:45:cf:e0:1c:19:14:eb:c5:fd:4a:e5:1b: 01:c1:7e:34:39:b3:59:11:bf:06:69:e8:b4:61:93: 12:4b:38:07:90:dc:6a:48:10:11:98:e0:a6:3b:03: 51:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CC:8F:7E:D6:AB:B9:E1:27:A2:64:72:0F:AA:9B:9A:1B:E0:3A:2F X509v3 Authority Key Identifier: keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:76:f2:c0:ee:a6:9f:41:b9:3f:8b:d4:1f:ee:f4:fd:47:c9: 46:53:34:6f:64:a3:d3:06:85:b5:48:f2:7f:c2:16:26:f9:d8: a9:2d:70:04:5b:b5:73:45:76:b3:d5:50:1b:24:82:f7:0a:6a: bf:5b:79:e6:bc:03:d1:d7:7f:be:e2:b9:d6:f8:8c:dd:a8:f7: 08:fa:6a:f6:6b:6e:73:6a:95:97:56:d2:b4:3d:43:cb:c9:48: 69:07:35:70:c1:9d:bb:f0:27:f5:c4:f2:8c:16:52:95:db:86: 6a:b9:54:b0:00:98:dd:f6:23:88:5d:66:c5:62:af:d6:b6:a9: 7f:fe:35:7b:e5:e3:43:98:57:ab:85:77:38:ac:54:ef:2b:40: 3f:36:ae:b2:a4:df:55:92:8a:ea:6f:c8:95:b4:bf:dc:b6:df: 45:54:32:cb:e2:ca:18:d5:ec:6b:72:f5:af:04:73:f8:7b:e9: 8d:cc:c3:7e:07:d0:21:fb:96:66:33:a1:55:bf:cb:a3:af:59: 11:ea:cc:fe:0e:d2:35:1a:a9:0c:52:11:86:0a:b4:a2:b0:dc: f0:38:7d:1c:e5:e8:b3:b9:c9:f1:9c:aa:5f:36:1f:f7:68:e2: 3c:2c:9f:52:18:37:30:7c:10:f7:2d:93:e5:67:a9:54:4c:ef: 1d:6e:4b:4c -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUSnYIWdLVCv1w2ziBUkKIKr9xMbkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjYwOTIzMTgyODAyWhcNMjYwOTI0MjAwNDAy WjAzMTEwLwYDVQQDEygxRUNDOEY3RUQ2QUJCOUUxMjdBMjY0NzIwRkFBOUI5QTFC RTAzQTJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf0IA+u/dKPm +AGzPVo06boDLl949l8uFjP1qDzlxuhh9ZWEWkWRb/9xLAReSg6fe1rANusiRMdY 8PEASFEZGPDsfGuSpwmbeAPGgTRpEQx2j3JRdnLtyJ+TL3IHSxncQIYQWsDD0xoz TiIa7F9/7Pxsdt1udGcZmF7kJst7cFojKl6I3bZi1Wg2Fm/oa48PFRHsgyrEcXyG 3DWSVJ0A5lGkc1l+fTF1ZHM0tc3PaMF2KRjHDBCWfAchX18QcA8cwyxoIc/lNSFR LVvb39/ylz2uyhdFz+AcGRTrxf1K5RsBwX40ObNZEb8Gaei0YZMSSzgHkNxqSBAR mOCmOwNRwwIDAQABo4ICezCCAncwHQYDVR0OBBYEFB7Mj37Wq7nhJ6Jkcg+qm5ob 4DovMB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5 OWIxOWNiY2NlNjg2M2EzLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8yLzIwQzIy OTdCQzY3RDIxQzMyNTQzODREM0JEODg2NTA2QTA2RTMwQTIubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAh dvLA7qafQbk/i9Qf7vT9R8lGUzRvZKPTBoW1SPJ/whYm+dipLXAEW7VzRXaz1VAb JIL3Cmq/W3nmvAPR13++4rnW+IzdqPcI+mr2a25zapWXVtK0PUPLyUhpBzVwwZ27 8Cf1xPKMFlKV24ZquVSwAJjd9iOIXWbFYq/Wtql//jV75eNDmFerhXc4rFTvK0A/ Nq6ypN9Vkorqb8iVtL/ctt9FVDLL4soY1exrcvWvBHP4e+mNzMN+B9Ah+5ZmM6FV v8ujr1kR6sz+DtI1GqkMUhGGCrSisNzwOH0c5eizucnxnKpfNh/3aOI8LJ9SGDcw fBD3LZPlZ6lUTO8dbktM -----END CERTIFICATE-----Generated at Thu Sep 24 00:30:32 2026 by rpki-client