$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft File: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft (raw, json) Hash identifier: OGeGOeNH97/BvH72/9+e3g6uV0fRnPbWhc6BASm+ZlA= Subject key identifier: 38:52:6E:9F:C4:5B:A0:2C:CC:A9:89:B0:17:71:65:4B:70:9B:4C:25 Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C Certificate issuer: /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d Certificate serial: 22060AF6ECD37A6D26DBD7DF9D1500C3D80B785D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft Manifest number: 90 Signing time: Sat 28 Mar 2026 05:09:45 +0000 Manifest this update: Sat 28 Mar 2026 05:04:45 +0000 Manifest next update: Sun 29 Mar 2026 07:46:45 +0000 Files and hashes: 1: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl (hash: o2bQ6mswWG4o1lBOLsOjVqXoC8KUKHfZBFjS9fy8S30=) 2: 323630323a663438623a3a2f33362d3438203d3e203631393631.roa (hash: tF1TO5OePBirSA2MxPH7uXQfaSSl0HRibFaeUgy/1P4=) 3: 32332e3135312e3133322e302f32342d3234203d3e203631393631.roa (hash: v8No20hTrarlcWsm3WcVuQdnMeOU9NeFzlFcrLYahz4=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 07:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:06:0a:f6:ec:d3:7a:6d:26:db:d7:df:9d:15:00:c3:d8:0b:78:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d Validity Not Before: Mar 28 05:04:45 2026 GMT Not After : Mar 29 07:46:45 2026 GMT Subject: CN=38526E9FC45BA02CCCA989B01771654B709B4C25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:ca:62:f1:82:cb:c3:f1:15:41:2b:c7:43: 41:bf:c4:f5:19:49:68:14:26:51:1a:c0:bc:ac:2c: 36:cd:73:9d:b0:97:a6:10:92:78:64:d7:61:64:c0: a0:1b:2c:f6:91:f5:a2:d4:a5:70:be:64:9d:3c:d3: d4:14:25:0c:7e:5f:c8:d6:a3:e7:b8:83:43:34:47: 31:3d:17:e8:96:fc:f4:4d:1e:d9:75:dd:06:39:9e: 94:01:e1:87:d1:93:31:16:ba:4c:e4:cf:44:36:9b: 68:59:dc:28:97:67:fd:13:1c:9d:e9:f8:90:03:03: ca:7d:5d:80:ee:4d:f1:b3:d8:ae:ad:07:10:e9:30: fc:a2:17:c2:6e:39:66:bf:ee:33:8d:00:ba:82:5d: 88:72:82:49:0f:72:83:c1:da:9a:9b:31:7e:60:9a: d2:49:6c:d3:f0:14:5d:e1:b6:28:53:44:32:db:21: 9d:1e:fc:b7:d1:13:11:48:b0:9b:1c:77:84:b6:39: ff:63:c6:ed:30:87:6b:85:d8:1e:60:34:8c:19:e4: 81:d4:90:db:1a:7d:0d:f9:e4:47:75:de:cf:3b:13: 68:32:e1:13:d7:2f:72:7f:09:3d:86:2e:36:65:07: 38:fa:d4:57:47:af:58:23:39:f0:82:c6:eb:44:5b: 50:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:52:6E:9F:C4:5B:A0:2C:CC:A9:89:B0:17:71:65:4B:70:9B:4C:25 X509v3 Authority Key Identifier: keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:13:55:00:25:ac:e9:10:dc:b9:02:e4:d9:85:73:c0:ac:c8: 8d:91:2d:62:1f:62:59:43:4d:69:d3:37:e1:cc:45:98:d2:b5: c6:66:b2:31:06:83:6d:43:33:f4:1c:24:4f:a8:dd:d2:59:44: 32:60:cc:ae:67:a3:ed:75:f0:59:af:91:47:65:f6:0d:7e:50: 43:d3:3f:50:23:40:b8:6d:3e:e8:b8:d0:72:b5:84:0f:21:cc: 23:68:0f:87:b4:5f:2b:fd:ef:75:af:a3:b4:57:0c:9d:ee:68: 8e:9a:5b:94:15:7a:15:fd:b9:fe:cc:63:64:57:86:9d:55:8a: 23:e7:61:11:91:87:68:4c:6b:f6:9d:60:49:03:f1:34:a8:e2: 2f:f3:10:54:e4:ba:ae:8c:b6:bd:47:b4:85:47:1d:46:ab:19: 71:c3:3e:e3:42:72:de:b4:77:c6:69:3d:06:b9:4b:35:4c:08: 54:3f:bf:43:19:e5:97:83:95:d6:9c:eb:59:9e:51:d0:85:e4: ad:e8:eb:ef:ee:c3:97:ee:21:ae:6e:81:41:6d:bf:ed:ce:d8: 11:e9:c5:24:c5:1e:3b:5a:25:0b:1b:d9:06:f0:69:bc:29:27: 97:14:6f:2a:fb:7e:53:f6:c2:6e:e6:57:0a:6d:ec:a8:4f:8f: ae:10:4d:bd -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUIgYK9uzTem0m29ffnRUAw9gLeF0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2Y5YzA1NDIwYjU1YzNlZGU3MDM1MjFkMTRkODEzNzU4 ODk4MDQyMjYwZjA3OGIyNGQwHhcNMjYwMzI4MDUwNDQ1WhcNMjYwMzI5MDc0NjQ1 WjAzMTEwLwYDVQQDEygzODUyNkU5RkM0NUJBMDJDQ0NBOTg5QjAxNzcxNjU0Qjcw OUI0QzI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtinKYvGCy8Px FUErx0NBv8T1GUloFCZRGsC8rCw2zXOdsJemEJJ4ZNdhZMCgGyz2kfWi1KVwvmSd PNPUFCUMfl/I1qPnuINDNEcxPRfolvz0TR7Zdd0GOZ6UAeGH0ZMxFrpM5M9ENpto Wdwol2f9Exyd6fiQAwPKfV2A7k3xs9iurQcQ6TD8ohfCbjlmv+4zjQC6gl2IcoJJ D3KDwdqamzF+YJrSSWzT8BRd4bYoU0Qy2yGdHvy30RMRSLCbHHeEtjn/Y8btMIdr hdgeYDSMGeSB1JDbGn0N+eRHdd7POxNoMuET1y9yfwk9hi42ZQc4+tRXR69YIznw gsbrRFtQIQIDAQABo4ICezCCAncwHQYDVR0OBBYEFDhSbp/EW6AszKmJsBdxZUtw m0wlMB8GA1UdIwQYMBaAFN0XW9T7fx3CNtsTzStCpkWQr+xcMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMy9ERDE3NUJENEZCN0YxREMyMzZEQjEzQ0QyQjQyQTY0 NTkwQUZFQzVDLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0zN2E3 LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjBlM2UzMzItMmUxMy00N2I3LWJlM2Mt YmQyZjQwZGI2ODY0LzdmOWMwNTQyMGI1NWMzZWRlNzAzNTIxZDE0ZDgxMzc1ODg5 ODA0MjI2MGYwNzhiMjRkLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8zL0REMTc1 QkQ0RkI3RjFEQzIzNkRCMTNDRDJCNDJBNjQ1OTBBRkVDNUMubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAA E1UAJazpENy5AuTZhXPArMiNkS1iH2JZQ01p0zfhzEWY0rXGZrIxBoNtQzP0HCRP qN3SWUQyYMyuZ6PtdfBZr5FHZfYNflBD0z9QI0C4bT7ouNBytYQPIcwjaA+HtF8r /e91r6O0Vwyd7miOmluUFXoV/bn+zGNkV4adVYoj52ERkYdoTGv2nWBJA/E0qOIv 8xBU5LqujLa9R7SFRx1Gqxlxwz7jQnLetHfGaT0GuUs1TAhUP79DGeWXg5XWnOtZ nlHQheSt6Ovv7sOX7iGuboFBbb/tztgR6cUkxR47WiULG9kG8Gm8KSeXFG8q+35T 9sJu5lcKbeyoT4+uEE29 -----END CERTIFICATE-----Generated at Sat Mar 28 10:13:22 2026 by rpki-client