$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json) Hash identifier: hQ0+CeBQl9ZbRo/ffFIhXlebzsdiG78YcnKMAyNJgsw= Subject key identifier: 61:8E:9D:49:24:0D:B3:2D:FF:34:3A:6C:55:0D:32:91:0A:11:F2:86 Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Certificate serial: 08FF85E8F9D829D06680CC5D1DF8B0988CF013C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft Manifest number: 024A Signing time: Thu 26 Feb 2026 21:29:37 +0000 Manifest this update: Thu 26 Feb 2026 21:24:37 +0000 Manifest next update: Fri 27 Feb 2026 22:20:37 +0000 Files and hashes: 1: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: QiJOQ83qVa2DblVN+PxM0LuWPWMlGlj9JvbeKq96geA=) 2: AS61961.asa (hash: xoYWRt7Yfgkek/49PuKEQpeMKqIf/RQI0l8/r1JbKyA=) 3: 3134322e3234382e39302e302f32332d3234203d3e203631393631.roa (hash: SEfJJW0oCHWn/xdi75zWLDupC/cjkqW/OUbAiUPdXMo=) 4: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (hash: ipFemzkztsboDmqpCJAhUhmIJUiu758VxunW+cYOxO0=) 5: 323630323a666461643a3a2f34302d3438203d3e203631393631.roa (hash: pLWuN2bUHqMXgcevJT1AmoYm7sc9azuOkUaBTt9vVNg=) 6: 323630323a663735323a3a2f33362d3336203d3e203631393631.roa (hash: CqNp7ek3u5kbCBWfN53/CnZ4zIsOoWuXEyXMjQabM7w=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 22:20:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ff:85:e8:f9:d8:29:d0:66:80:cc:5d:1d:f8:b0:98:8c:f0:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Validity Not Before: Feb 26 21:24:37 2026 GMT Not After : Feb 27 22:20:37 2026 GMT Subject: CN=618E9D49240DB32DFF343A6C550D32910A11F286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:40:d7:d8:39:8d:15:ff:83:12:18:b7:72:db: 4d:1e:5e:7d:44:7e:79:b0:77:12:87:4f:85:73:19: 91:79:e7:4e:f9:c8:f7:8c:7c:37:30:2d:e2:98:2e: 3e:c0:9a:85:42:5a:5e:6c:3a:e9:98:57:86:61:e2: 64:9a:d3:1a:89:f0:80:09:39:28:87:c7:95:23:7d: e5:3c:0e:a2:95:20:c7:12:58:85:f9:40:20:43:13: 71:80:cd:8d:99:f2:27:fe:28:c3:b9:fd:6d:34:13: f6:4f:d9:36:f3:b4:10:8a:20:51:bb:74:fa:1b:6f: a9:6e:b6:ff:5e:0f:37:6c:df:2e:9e:61:5e:d1:78: d0:7f:61:a1:8a:1c:d2:84:e7:fb:a9:5c:1b:76:7d: a3:66:97:e4:06:5f:ad:47:08:c9:a5:cd:cc:a9:10: 94:fa:c6:90:67:c6:63:2b:55:46:9a:c7:c5:8e:ab: 65:03:4e:7b:75:85:70:92:83:8f:4e:8d:05:35:84: 08:ba:c0:9b:32:4a:76:a3:4d:94:94:02:32:e4:f7: ee:26:0c:17:0f:1e:7c:bd:29:0d:15:6d:87:4e:0e: ed:00:10:d3:92:8b:dd:ed:74:8c:ba:d5:53:41:2a: b1:c2:3b:c7:5e:c6:cf:d2:6f:d0:7f:c5:8d:69:6a: a4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8E:9D:49:24:0D:B3:2D:FF:34:3A:6C:55:0D:32:91:0A:11:F2:86 X509v3 Authority Key Identifier: keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:0f:81:2e:43:c7:e1:77:2b:ac:8c:8e:04:75:a1:4e:67:d7: 9e:18:a4:1d:e9:bd:45:b2:bf:72:c0:8e:78:f5:c2:18:1a:c8: 58:79:af:3e:dd:df:f8:aa:5e:6c:95:fc:8b:ed:c5:d9:1f:fc: 7d:37:50:d2:5b:61:8a:bf:2a:35:90:6b:79:31:a4:6a:a6:97: f0:fb:91:f5:e7:9a:e9:47:ca:32:e6:ed:dd:5a:ec:dd:7a:3a: f3:d2:e8:e5:a6:94:37:38:cf:63:08:07:32:b2:a0:91:7b:ae: b3:b6:9e:4f:e1:87:91:ba:36:52:98:b1:ab:d2:cc:12:ef:4d: 7d:e4:ac:ef:a9:ac:31:da:88:24:44:1a:3a:6f:d2:46:ea:89: fc:10:52:80:cf:88:8c:80:cc:51:cd:db:43:06:59:34:b8:35: e8:75:f0:54:ea:7b:bd:7a:ed:33:29:f6:7d:3d:85:71:f0:e9: eb:fe:09:86:5e:1b:73:76:a6:3a:66:c7:fb:22:fe:12:b6:0d: a3:6e:63:0f:8c:aa:68:b4:b2:a5:c8:6a:05:5a:f5:c5:14:2c: 7f:b8:68:5e:0d:1b:2d:54:ce:3b:03:12:8b:62:3a:fb:f7:75: 80:3d:cf:ae:0b:21:65:87:12:4a:bf:fb:e9:b2:7b:57:86:36: a3:80:7f:dc -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUCP+F6PnYKdBmgMxdHfiwmIzwE8AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjYwMjI2MjEyNDM3WhcNMjYwMjI3MjIyMDM3 WjAzMTEwLwYDVQQDEyg2MThFOUQ0OTI0MERCMzJERkYzNDNBNkM1NTBEMzI5MTBB MTFGMjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykDX2DmNFf+D Ehi3cttNHl59RH55sHcSh0+FcxmReedO+cj3jHw3MC3imC4+wJqFQlpebDrpmFeG YeJkmtMaifCACTkoh8eVI33lPA6ilSDHEliF+UAgQxNxgM2NmfIn/ijDuf1tNBP2 T9k287QQiiBRu3T6G2+pbrb/Xg83bN8unmFe0XjQf2GhihzShOf7qVwbdn2jZpfk Bl+tRwjJpc3MqRCU+saQZ8ZjK1VGmsfFjqtlA057dYVwkoOPTo0FNYQIusCbMkp2 o02UlAIy5PfuJgwXDx58vSkNFW2HTg7tABDTkovd7XSMutVTQSqxwjvHXsbP0m/Q f8WNaWqkDwIDAQABo4ICezCCAncwHQYDVR0OBBYEFGGOnUkkDbMt/zQ6bFUNMpEK EfKGMB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5 OWIxOWNiY2NlNjg2M2EzLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8yLzIwQzIy OTdCQzY3RDIxQzMyNTQzODREM0JEODg2NTA2QTA2RTMwQTIubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/ D4EuQ8fhdyusjI4EdaFOZ9eeGKQd6b1Fsr9ywI549cIYGshYea8+3d/4ql5slfyL 7cXZH/x9N1DSW2GKvyo1kGt5MaRqppfw+5H155rpR8oy5u3dWuzdejrz0ujlppQ3 OM9jCAcysqCRe66ztp5P4YeRujZSmLGr0swS70195Kzvqawx2ogkRBo6b9JG6on8 EFKAz4iMgMxRzdtDBlk0uDXodfBU6nu9eu0zKfZ9PYVx8Onr/gmGXhtzdqY6Zsf7 Iv4Stg2jbmMPjKpotLKlyGoFWvXFFCx/uGheDRstVM47AxKLYjr793WAPc+uCyFl hxJKv/vpsntXhjajgH/c -----END CERTIFICATE-----Generated at Fri Feb 27 06:19:12 2026 by rpki-client