$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json) Hash identifier: M7uHZTyZOnS3Y+AbWXuj0dHF7Ti1dPrTt4S8bgyFYHw= Subject key identifier: C0:9C:2B:5D:BE:EC:62:19:C2:35:D7:C6:0C:5B:1C:AF:0A:B8:74:58 Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Certificate serial: 2F0C29ACF26B5D195E603E9014B74B47AE824DA2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft Manifest number: 0340 Signing time: Wed 12 Aug 2026 18:49:00 +0000 Manifest this update: Wed 12 Aug 2026 18:44:00 +0000 Manifest next update: Thu 13 Aug 2026 22:25:00 +0000 Files and hashes: 1: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: 2LQFnTRVcIFMXSBeg9G3wXhWwutLBOHNit/8OoOl7IU=) 2: AS7010.asa (hash: wa5XbHFVF02KH90WbF7953Ua1Lvt36cAkwJWHWrxQUw=) 3: 323630323a663735323a3a2f33362d3336203d3e2037303130.roa (hash: PFy4ASG9ftcLCEhqn8MWfo4EYAQx79cKa9+rn7sjOUo=) 4: 32332e3133312e3137322e302f32342d3234203d3e2037303130.roa (hash: UWBzeUy93auDQISImQKJQMZx9haEsPMqLl/oJpkUV5k=) 5: AS61961.asa (hash: xB62lymjtKQrG3onCUo1WoI7naRlPCnglhV9lM7+Szk=) 6: 3134322e3234382e39302e302f32332d3234203d3e2037303130.roa (hash: O118kJRdNa9b7+9Ot+5gabMWZDtqCtw626haiWVy0Ic=) 7: 323630323a666461643a3a2f34302d3438203d3e2037303130.roa (hash: RVBdGUMed0yeJwGesBxpnUhuP70xtA9w4HInEAe7IKI=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 13 Aug 2026 22:25:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:0c:29:ac:f2:6b:5d:19:5e:60:3e:90:14:b7:4b:47:ae:82:4d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Validity Not Before: Aug 12 18:44:00 2026 GMT Not After : Aug 13 22:25:00 2026 GMT Subject: CN=C09C2B5DBEEC6219C235D7C60C5B1CAF0AB87458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d6:7f:9f:8b:6c:88:fc:6e:51:ad:3b:8c:ef: d8:e9:76:3c:4a:20:8d:17:b4:83:6d:a8:14:55:cf: 00:7c:46:d6:60:d4:24:65:d4:b8:53:e3:5d:d2:53: cf:5c:2d:df:b6:c8:6d:12:61:4d:ff:3d:50:9d:7a: 42:df:f6:2a:4c:34:7a:ca:d9:1e:83:6b:d1:a1:a2: 13:62:41:81:e6:09:54:9d:62:38:cd:4c:22:97:5e: 0d:9c:81:7f:d7:f5:52:1d:a9:3d:b1:31:43:32:11: 48:7b:37:39:c5:91:76:49:6c:73:f2:4a:fd:bf:13: 30:bb:ad:3b:fc:2c:36:55:5c:f0:6f:26:72:11:02: 78:1b:ec:47:85:77:97:7b:e2:71:fe:0b:3c:63:d0: e6:55:e2:4a:fd:0c:51:80:f9:60:8f:8b:84:08:9b: 0c:b1:05:ca:8c:c3:73:d5:59:0d:10:d8:00:2f:6e: f9:5b:6d:33:0e:8b:39:f7:05:d6:95:09:bb:15:61: 1b:49:c6:11:1b:aa:8c:2b:5c:38:c4:53:05:c8:e8: 19:cc:29:c0:bd:83:59:66:1c:05:13:28:ed:3a:84: 0a:62:03:d7:b8:7c:70:fc:ca:83:6d:40:d0:ff:82: 4e:00:3f:87:1e:fe:74:df:9d:90:dd:3b:fc:a7:40: 39:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9C:2B:5D:BE:EC:62:19:C2:35:D7:C6:0C:5B:1C:AF:0A:B8:74:58 X509v3 Authority Key Identifier: keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:5d:4b:62:3d:1c:c2:e6:94:bf:28:5f:a7:cc:c3:da:a0:51: 45:30:fd:0b:b1:75:ac:5f:11:6d:87:c7:d0:02:11:eb:bd:ec: 7e:8e:45:9e:ac:1a:58:5c:d6:61:05:2c:46:ea:8b:f9:fb:bc: f6:a9:d4:9a:b8:da:26:0b:c6:a5:64:5f:a5:c1:a3:10:89:79: d1:f2:f3:fa:94:55:d3:05:c6:4b:bd:93:99:d5:19:a1:9f:9b: a5:1a:7c:a6:7e:57:bc:23:a4:c0:07:42:36:a9:6a:0d:da:95: b1:72:da:9a:29:96:a5:94:9f:b4:85:55:a7:35:9b:2c:01:cd: 8a:ac:45:82:b1:d0:71:e9:ba:a1:f2:a9:3a:37:0b:c3:27:9f: 0b:76:44:20:9e:2a:10:d9:a4:0c:58:a7:21:34:b6:2e:2a:86: 5c:c4:15:91:e4:e4:b4:26:1d:ad:33:50:6a:3b:17:ee:9a:d8: c0:78:78:c9:13:61:6e:58:78:77:a7:fe:a9:90:51:fd:ef:96: 3e:36:7c:bc:83:53:c5:8b:f9:c0:1e:f8:37:a4:ab:7a:22:ae: 7f:25:21:a6:7c:1e:86:52:61:09:12:4c:b4:3d:fe:03:d6:5d: af:89:c3:3e:a5:09:fd:01:98:14:21:fe:bb:a4:0e:8f:d5:04: 10:51:69:14 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIULwwprPJrXRleYD6QFLdLR66CTaIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjYwODEyMTg0NDAwWhcNMjYwODEzMjIyNTAw WjAzMTEwLwYDVQQDEyhDMDlDMkI1REJFRUM2MjE5QzIzNUQ3QzYwQzVCMUNBRjBB Qjg3NDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59Z/n4tsiPxu Ua07jO/Y6XY8SiCNF7SDbagUVc8AfEbWYNQkZdS4U+Nd0lPPXC3ftshtEmFN/z1Q nXpC3/YqTDR6ytkeg2vRoaITYkGB5glUnWI4zUwil14NnIF/1/VSHak9sTFDMhFI ezc5xZF2SWxz8kr9vxMwu607/Cw2VVzwbyZyEQJ4G+xHhXeXe+Jx/gs8Y9DmVeJK /QxRgPlgj4uECJsMsQXKjMNz1VkNENgAL275W20zDos59wXWlQm7FWEbScYRG6qM K1w4xFMFyOgZzCnAvYNZZhwFEyjtOoQKYgPXuHxw/MqDbUDQ/4JOAD+HHv50352Q 3Tv8p0A5/QIDAQABo4ICezCCAncwHQYDVR0OBBYEFMCcK12+7GIZwjXXxgxbHK8K uHRYMB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5 OWIxOWNiY2NlNjg2M2EzLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8yLzIwQzIy OTdCQzY3RDIxQzMyNTQzODREM0JEODg2NTA2QTA2RTMwQTIubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBV XUtiPRzC5pS/KF+nzMPaoFFFMP0LsXWsXxFth8fQAhHrvex+jkWerBpYXNZhBSxG 6ov5+7z2qdSauNomC8alZF+lwaMQiXnR8vP6lFXTBcZLvZOZ1Rmhn5ulGnymfle8 I6TAB0I2qWoN2pWxctqaKZallJ+0hVWnNZssAc2KrEWCsdBx6bqh8qk6NwvDJ58L dkQgnioQ2aQMWKchNLYuKoZcxBWR5OS0Jh2tM1BqOxfumtjAeHjJE2FuWHh3p/6p kFH975Y+Nny8g1PFi/nAHvg3pKt6Iq5/JSGmfB6GUmEJEky0Pf4D1l2vicM+pQn9 AZgUIf67pA6P1QQQUWkU -----END CERTIFICATE-----Generated at Thu Aug 13 07:49:31 2026 by rpki-client