$ rpki-client -vvvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json) Hash identifier: HLbRgjBXts407HXWqZoRV9tgrqJpU+JISnGKbttSmAU= Subject key identifier: A5:8D:95:23:9E:B0:DA:50:59:19:7C:C3:48:CE:1A:E2:60:51:A8:C1 Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Certificate serial: 20197AEF8CBE4D5DD5F751CFC485AB0066272F48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft Manifest number: 036E Signing time: Tue 15 Sep 2026 12:27:27 +0000 Manifest this update: Tue 15 Sep 2026 12:22:27 +0000 Manifest next update: Wed 16 Sep 2026 15:11:27 +0000 Files and hashes: 1: AS61961.asa (hash: xB62lymjtKQrG3onCUo1WoI7naRlPCnglhV9lM7+Szk=) 2: AS7010.asa (hash: wa5XbHFVF02KH90WbF7953Ua1Lvt36cAkwJWHWrxQUw=) 3: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: VToKnKUivGKE1bsSaQogeUFQ7xkPZW/2Sxd33nQPBHs=) 4: 323630323a663735323a3a2f33362d3336203d3e2037303130.roa (hash: PFy4ASG9ftcLCEhqn8MWfo4EYAQx79cKa9+rn7sjOUo=) 5: 3134322e3234382e39302e302f32332d3234203d3e2037303130.roa (hash: O118kJRdNa9b7+9Ot+5gabMWZDtqCtw626haiWVy0Ic=) 6: 323630323a666461643a3a2f34302d3438203d3e2037303130.roa (hash: RVBdGUMed0yeJwGesBxpnUhuP70xtA9w4HInEAe7IKI=) 7: 32332e3133312e3137322e302f32342d3234203d3e2037303130.roa (hash: UWBzeUy93auDQISImQKJQMZx9haEsPMqLl/oJpkUV5k=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 15:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:19:7a:ef:8c:be:4d:5d:d5:f7:51:cf:c4:85:ab:00:66:27:2f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Validity Not Before: Sep 15 12:22:27 2026 GMT Not After : Sep 16 15:11:27 2026 GMT Subject: CN=A58D95239EB0DA5059197CC348CE1AE26051A8C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2a:79:cd:fa:d3:3d:7a:8c:34:46:43:b8:1c: fb:95:b5:8e:22:f0:ca:15:42:e1:d5:f2:6b:7c:d1: 3f:49:a2:23:c4:6c:fc:81:d7:83:85:8d:49:07:30: 28:f2:2b:24:fd:60:ee:bf:80:bb:32:e0:d5:36:9b: 97:8a:ab:4f:9b:cd:0a:c0:dc:9d:19:76:47:69:9e: 22:41:d8:80:af:65:31:ca:60:9d:08:7f:ee:b6:69: 47:99:30:14:e1:ec:f2:e4:3f:45:f3:d7:a3:e1:5e: 86:e8:0c:4e:26:d1:37:58:62:47:3a:f5:f1:f5:7a: 7f:bf:e0:e7:c8:5c:5b:43:c8:83:2c:89:a9:5d:e9: 0f:1a:1a:22:07:1c:ad:c1:24:e8:b9:fb:4e:1c:1b: 75:4f:36:07:f7:5f:93:c6:3c:7d:aa:39:53:eb:4b: 48:6f:7b:28:a9:22:51:c7:35:79:d8:28:23:36:a2: 10:f6:81:ba:23:f9:82:c4:69:be:47:93:83:1c:33: 24:0f:64:3d:53:05:2b:62:99:ac:43:ea:9b:14:ce: ae:54:e1:a4:c0:31:ae:88:4b:11:72:87:2f:31:65: e4:59:49:e4:df:45:b4:cc:ba:d0:ea:f2:1b:ad:7e: e2:1f:d6:1d:f7:87:7d:61:a2:9d:fe:86:96:af:f5: 3f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8D:95:23:9E:B0:DA:50:59:19:7C:C3:48:CE:1A:E2:60:51:A8:C1 X509v3 Authority Key Identifier: keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:dd:c4:af:7d:0c:7b:19:65:76:36:35:68:64:c4:8b:d9:a5: 1f:17:06:64:f6:1a:dc:1b:8a:3f:7b:40:45:10:15:ef:f7:8b: c6:bc:0e:35:39:21:72:d9:97:af:ac:5f:80:df:59:2a:9e:07: e2:ea:be:98:4f:71:4c:89:1e:2c:d3:54:90:35:0c:99:58:0c: 21:1e:38:87:e5:2f:4a:71:35:66:c7:2b:a7:5f:18:55:5e:f3: 28:51:59:cc:d7:c1:e3:d3:eb:74:77:6d:07:25:0a:1c:8e:ca: d5:c2:ab:0d:00:8d:33:35:d9:c5:80:5d:de:6d:a3:16:89:3b: 43:1a:b3:ae:47:31:cb:96:c6:3b:13:02:47:29:0c:8f:50:4f: 1e:af:c9:2d:33:d0:99:8f:aa:b5:c3:fe:a2:c9:8b:55:ef:1e: f7:37:21:74:d4:eb:a6:87:d1:0c:37:ef:20:09:82:45:66:3e: 6f:94:05:0c:c2:73:b4:37:69:97:5b:c8:bf:30:a8:23:39:97: 4a:62:7f:ab:7c:75:3e:3d:ed:e4:f8:e9:13:0a:44:9b:89:54: 49:12:90:d1:c1:2c:c6:a4:08:55:ab:de:31:db:85:b3:08:ab: 95:30:7b:8d:0a:e0:08:af:db:34:86:7e:85:27:30:d1:fd:73: f4:21:f3:a7 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUIBl674y+TV3V91HPxIWrAGYnL0gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjYwOTE1MTIyMjI3WhcNMjYwOTE2MTUxMTI3 WjAzMTEwLwYDVQQDEyhBNThEOTUyMzlFQjBEQTUwNTkxOTdDQzM0OENFMUFFMjYw NTFBOEMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCp5zfrTPXqM NEZDuBz7lbWOIvDKFULh1fJrfNE/SaIjxGz8gdeDhY1JBzAo8isk/WDuv4C7MuDV NpuXiqtPm80KwNydGXZHaZ4iQdiAr2UxymCdCH/utmlHmTAU4ezy5D9F89ej4V6G 6AxOJtE3WGJHOvXx9Xp/v+DnyFxbQ8iDLImpXekPGhoiBxytwSTouftOHBt1TzYH 91+Txjx9qjlT60tIb3soqSJRxzV52CgjNqIQ9oG6I/mCxGm+R5ODHDMkD2Q9UwUr YpmsQ+qbFM6uVOGkwDGuiEsRcocvMWXkWUnk30W0zLrQ6vIbrX7iH9Yd94d9YaKd /oaWr/U/hwIDAQABo4ICezCCAncwHQYDVR0OBBYEFKWNlSOesNpQWRl8w0jOGuJg UajBMB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5 OWIxOWNiY2NlNjg2M2EzLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8yLzIwQzIy OTdCQzY3RDIxQzMyNTQzODREM0JEODg2NTA2QTA2RTMwQTIubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAH 3cSvfQx7GWV2NjVoZMSL2aUfFwZk9hrcG4o/e0BFEBXv94vGvA41OSFy2ZevrF+A 31kqngfi6r6YT3FMiR4s01SQNQyZWAwhHjiH5S9KcTVmxyunXxhVXvMoUVnM18Hj 0+t0d20HJQocjsrVwqsNAI0zNdnFgF3ebaMWiTtDGrOuRzHLlsY7EwJHKQyPUE8e r8ktM9CZj6q1w/6iyYtV7x73NyF01Oumh9EMN+8gCYJFZj5vlAUMwnO0N2mXW8i/ MKgjOZdKYn+rfHU+Pe3k+OkTCkSbiVRJEpDRwSzGpAhVq94x24WzCKuVMHuNCuAI r9s0hn6FJzDR/XP0IfOn -----END CERTIFICATE-----Generated at Wed Sep 16 06:14:53 2026 by rpki-client