$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json) Hash identifier: mk9WGA98Xczw8rOfLdE24noMFanuV7NMMvUXuXlznbQ= Subject key identifier: 66:AB:B3:FC:5A:7B:DD:D7:C0:F3:5A:DC:29:7A:AF:CE:ED:73:BF:71 Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Certificate serial: 595AC4ADED87BDD6DD35A2A562DDD36C33F7991A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft Manifest number: 64 Signing time: Mon 10 Mar 2025 12:11:38 +0000 Manifest this update: Mon 10 Mar 2025 12:06:38 +0000 Manifest next update: Tue 11 Mar 2025 15:13:38 +0000 Files and hashes: 1: 323630323a663735323a3a2f33362d3336203d3e203631393631.roa (hash: LJae5qX98q1IoVhcF3MovFKodtof25tEPl+Vd+qKFHU=) 2: 32332e3133312e3137322e302f32342d3234203d3e203631393631.roa (hash: sX4clBllsnOe26N+axHOkcAsIye3vArF/kg1Z4Off60=) 3: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: Ms/Jefk5wKMDB83VCjn5wd7LPwrG9iEYWsXgOcqADy0=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Mar 2025 15:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5a:c4:ad:ed:87:bd:d6:dd:35:a2:a5:62:dd:d3:6c:33:f7:99:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Validity Not Before: Mar 10 12:06:38 2025 GMT Not After : Mar 11 15:13:38 2025 GMT Subject: CN=66ABB3FC5A7BDDD7C0F35ADC297AAFCEED73BF71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:1e:b2:71:d7:41:b3:7c:54:76:2b:9c:23: d7:ec:ab:aa:8f:fb:d6:c6:f6:e6:d7:d9:32:76:2d: 38:6c:dd:e6:5d:8f:a3:37:e3:90:c9:a9:9c:76:8f: 89:c0:70:6b:39:04:3e:df:66:6c:6b:5c:c1:15:8a: 6a:e7:f7:84:ea:f5:c0:07:83:da:80:0c:1c:78:08: 0b:e1:10:a7:fc:d6:bb:b0:3f:61:7f:6d:1d:80:6c: c4:5a:b2:d8:64:3b:fa:9a:cb:8d:5b:39:cb:5b:47: 9a:52:84:ba:2a:51:30:7d:26:83:21:16:52:75:c9: 1b:56:a2:de:e3:1a:ef:ef:56:6c:4d:0a:03:69:a6: de:a8:68:f1:4e:2e:4d:ee:2b:d5:fb:9c:d6:74:a8: 85:f4:de:d4:af:c2:71:93:0a:be:c9:44:4a:92:77: 1b:29:50:d3:96:db:66:d2:87:63:5a:2f:bd:df:24: af:58:9c:12:31:dd:f7:fe:85:ba:9e:47:98:f2:fa: 51:5f:50:b0:00:b2:6c:54:d2:27:06:ef:ce:03:e8: 65:b9:58:07:fb:45:34:2c:80:4d:55:c8:97:73:0c: 02:63:5d:75:4a:5b:9d:81:26:3f:04:09:f8:43:d4: 08:ad:4c:1c:e1:bb:ff:2b:4c:c1:6d:26:43:ec:ce: eb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AB:B3:FC:5A:7B:DD:D7:C0:F3:5A:DC:29:7A:AF:CE:ED:73:BF:71 X509v3 Authority Key Identifier: keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:ea:18:03:3d:86:d5:f3:33:b9:f6:fe:71:4c:8d:52:cf:60: 0e:72:bf:7f:fa:b0:07:da:2b:11:08:f9:53:37:75:6f:4e:44: 35:3a:4c:07:ef:e0:a8:73:f3:16:f8:93:e2:b6:d8:e3:e0:9d: 06:7d:0b:a8:7b:92:78:e3:0b:ae:48:29:d4:4c:8b:54:b3:b2: 3b:0a:d3:d0:d8:92:d6:fd:44:fa:c4:6a:c7:99:c2:e3:12:61: 5b:1d:2c:57:9f:02:d7:f6:13:14:19:26:15:a4:7b:43:3b:2d: c7:6c:24:b3:7a:d9:ec:ae:04:86:8c:cc:e0:30:0c:8a:a3:f1: 50:29:81:74:b8:5b:11:8e:51:74:60:cb:66:6c:99:52:37:35: 03:6f:7e:7b:f2:68:73:43:2c:a1:50:ba:ee:cd:bc:72:e1:50: fe:2b:4f:6c:6f:3c:1f:97:bc:2b:21:0a:90:56:17:7d:a5:7a: 17:45:8e:15:ba:37:ef:38:fd:c4:0d:58:d7:e0:d8:83:3d:c9: 09:42:39:3b:0b:d0:33:f4:3d:2d:14:9e:d6:34:59:97:74:b4: 32:35:03:10:26:91:c4:ab:67:82:06:e4:8e:e7:e5:30:ca:25: b9:d6:26:cf:a7:6b:3c:52:03:88:80:85:de:28:d6:fc:38:d6: ba:b4:f1:a5 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUWVrEre2HvdbdNaKlYt3TbDP3mRowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjUwMzEwMTIwNjM4WhcNMjUwMzExMTUxMzM4 WjAzMTEwLwYDVQQDEyg2NkFCQjNGQzVBN0JEREQ3QzBGMzVBREMyOTdBQUZDRUVE NzNCRjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbgesnHXQbN8 VHYrnCPX7Kuqj/vWxvbm19kydi04bN3mXY+jN+OQyamcdo+JwHBrOQQ+32Zsa1zB FYpq5/eE6vXAB4PagAwceAgL4RCn/Na7sD9hf20dgGzEWrLYZDv6msuNWznLW0ea UoS6KlEwfSaDIRZSdckbVqLe4xrv71ZsTQoDaabeqGjxTi5N7ivV+5zWdKiF9N7U r8Jxkwq+yURKkncbKVDTlttm0odjWi+93ySvWJwSMd33/oW6nkeY8vpRX1CwALJs VNInBu/OA+hluVgH+0U0LIBNVciXcwwCY111SludgSY/BAn4Q9QIrUwc4bv/K0zB bSZD7M7rNQIDAQABo4ICezCCAncwHQYDVR0OBBYEFGars/xae93XwPNa3Cl6r87t c79xMB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5 OWIxOWNiY2NlNjg2M2EzLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8yLzIwQzIy OTdCQzY3RDIxQzMyNTQzODREM0JEODg2NTA2QTA2RTMwQTIubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBn 6hgDPYbV8zO59v5xTI1Sz2AOcr9/+rAH2isRCPlTN3VvTkQ1OkwH7+Coc/MW+JPi ttjj4J0GfQuoe5J44wuuSCnUTItUs7I7CtPQ2JLW/UT6xGrHmcLjEmFbHSxXnwLX 9hMUGSYVpHtDOy3HbCSzetnsrgSGjMzgMAyKo/FQKYF0uFsRjlF0YMtmbJlSNzUD b3578mhzQyyhULruzbxy4VD+K09sbzwfl7wrIQqQVhd9pXoXRY4VujfvOP3EDVjX 4NiDPckJQjk7C9Az9D0tFJ7WNFmXdLQyNQMQJpHEq2eCBuSO5+UwyiW51ibPp2s8 UgOIgIXeKNb8ONa6tPGl -----END CERTIFICATE-----Generated at Mon Mar 10 16:15:40 2025 by rpki-client