$ rpki-client -vvvf rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft File: 20C2297BC67D21C3254384D3BD886506A06E30A2.mft (raw, json) Hash identifier: KtqMVUGlg+zFwzL44Z9VxoZUhMkx5/Jp3hXSUH1p7NM= Subject key identifier: F6:9C:10:C0:7B:12:65:E7:8D:DA:10:E6:7E:51:0C:45:7A:9B:51:4A Authority key identifier: 20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 Certificate issuer: /CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Certificate serial: 3075D46B43DF19965CD447BFA38331AD52800BBE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft Manifest number: 0382 Signing time: Wed 30 Sep 2026 11:18:27 +0000 Manifest this update: Wed 30 Sep 2026 11:13:27 +0000 Manifest next update: Thu 01 Oct 2026 12:06:27 +0000 Files and hashes: 1: 32332e3133312e3137322e302f32342d3234203d3e2037303130.roa (hash: UWBzeUy93auDQISImQKJQMZx9haEsPMqLl/oJpkUV5k=) 2: 323630323a663735323a3a2f33362d3336203d3e2037303130.roa (hash: PFy4ASG9ftcLCEhqn8MWfo4EYAQx79cKa9+rn7sjOUo=) 3: 20C2297BC67D21C3254384D3BD886506A06E30A2.crl (hash: yOnppW5gPlPlQ3CTswYurxEOMaMw89uHWR5/T5/jasw=) 4: 3134322e3234382e39302e302f32332d3234203d3e2037303130.roa (hash: O118kJRdNa9b7+9Ot+5gabMWZDtqCtw626haiWVy0Ic=) 5: AS7010.asa (hash: wa5XbHFVF02KH90WbF7953Ua1Lvt36cAkwJWHWrxQUw=) 6: AS61961.asa (hash: xB62lymjtKQrG3onCUo1WoI7naRlPCnglhV9lM7+Szk=) 7: 323630323a666461643a3a2f34302d3438203d3e2037303130.roa (hash: RVBdGUMed0yeJwGesBxpnUhuP70xtA9w4HInEAe7IKI=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/0a080168-c146-41c6-9367-391cd429b856.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 12:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:75:d4:6b:43:df:19:96:5c:d4:47:bf:a3:83:31:ad:52:80:0b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3 Validity Not Before: Sep 30 11:13:27 2026 GMT Not After : Oct 1 12:06:27 2026 GMT Subject: CN=F69C10C07B1265E78DDA10E67E510C457A9B514A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:94:9d:ba:d0:de:75:b9:5c:68:bb:15:97:78: 83:7f:bf:39:c0:ba:56:ea:9b:25:60:ff:d9:25:2a: 90:cc:1d:0d:fd:92:c8:22:2d:30:f1:fc:50:0b:7f: 82:18:f4:83:e0:d2:bb:b2:88:57:94:8c:41:cd:65: cf:c9:a5:fc:bd:f6:99:29:31:63:a2:8d:3b:20:e7: 1d:42:b5:f2:81:21:e6:01:85:78:7d:23:0d:c9:c3: da:d2:c6:bd:b3:64:ae:30:d1:16:84:b7:ea:6a:74: 4b:c8:6e:64:b7:2c:af:9c:a6:a0:8b:54:20:57:2c: f7:ef:a6:93:20:7b:0e:46:b3:0c:bd:67:d1:dd:d4: aa:d8:f3:ae:76:35:9b:ae:5d:e3:bb:cd:7b:1e:b4: c7:6b:c4:ca:37:c6:fb:6b:1c:15:ac:98:2e:58:2d: 5d:52:52:82:dd:98:ff:92:00:c8:52:f0:b9:a7:e7: 55:fb:c7:96:38:35:1f:10:2b:00:ba:2f:b2:ca:06: 26:63:a8:bf:7a:f5:d6:17:d7:42:6e:02:da:ae:78: b3:45:27:9e:e4:76:38:64:3d:e0:01:7f:67:f7:fb: b6:eb:08:dc:d4:83:a3:79:e3:d7:9b:20:7f:6e:27: 95:23:ee:86:12:61:f3:36:2f:ad:16:e1:2f:f0:10: 38:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9C:10:C0:7B:12:65:E7:8D:DA:10:E6:7E:51:0C:45:7A:9B:51:4A X509v3 Authority Key Identifier: keyid:20:C2:29:7B:C6:7D:21:C3:25:43:84:D3:BD:88:65:06:A0:6E:30:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0a080168-c146-41c6-9367-391cd429b856/63da54625fd85e52395c44b712efc2a7d399b19cbcce6863a3.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/2/20C2297BC67D21C3254384D3BD886506A06E30A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d0:d6:cd:5f:3a:ff:e0:fc:12:fa:28:92:c7:84:89:23:b6: 0a:3e:f2:91:b2:f1:48:0c:a9:2a:77:6f:cd:b6:4d:97:67:a4: d9:53:d6:03:8e:fa:39:ff:35:35:28:7c:86:b7:f9:1a:3f:fb: f6:0b:01:5f:64:2d:9a:96:ab:eb:46:be:f6:ac:a1:45:14:cc: 38:15:87:98:d3:56:3e:7b:88:84:14:85:47:d7:c3:7d:24:6b: d4:3f:3b:77:ad:31:03:fb:bf:ec:f5:48:29:f1:75:75:ac:20: 31:9f:97:10:6c:f7:19:d9:56:a5:1a:b2:83:d0:40:92:c1:f1: 9a:b6:de:59:12:8f:5c:8e:b5:19:02:95:ad:a1:a0:1a:e5:f6: 5b:b0:78:b1:69:27:71:2f:78:9a:09:73:69:7c:d9:3e:be:69: d3:4b:cc:2c:fc:bc:7e:d3:c4:78:bd:c0:e2:91:cc:99:7e:9c: f2:33:04:c9:1a:c3:e1:d3:97:9d:c7:60:5d:df:f9:0d:ee:68: e4:bc:e4:a2:98:7e:21:b9:14:00:69:64:c1:2c:7d:ad:e7:2b: 85:f9:69:3f:e0:2b:b8:93:c9:15:9f:b6:52:34:a6:63:7c:d5: 89:32:65:b2:da:52:28:61:d9:f3:66:93:7f:d3:b8:3a:61:b8: ad:5d:0c:fd -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUMHXUa0PfGZZc1Ee/o4MxrVKAC74wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNjNkYTU0NjI1ZmQ4NWU1MjM5NWM0NGI3MTJlZmMyYTdk Mzk5YjE5Y2JjY2U2ODYzYTMwHhcNMjYwOTMwMTExMzI3WhcNMjYxMDAxMTIwNjI3 WjAzMTEwLwYDVQQDEyhGNjlDMTBDMDdCMTI2NUU3OEREQTEwRTY3RTUxMEM0NTdB OUI1MTRBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZSdutDedblc aLsVl3iDf785wLpW6pslYP/ZJSqQzB0N/ZLIIi0w8fxQC3+CGPSD4NK7sohXlIxB zWXPyaX8vfaZKTFjoo07IOcdQrXygSHmAYV4fSMNycPa0sa9s2SuMNEWhLfqanRL yG5ktyyvnKagi1QgVyz376aTIHsORrMMvWfR3dSq2POudjWbrl3ju817HrTHa8TK N8b7axwVrJguWC1dUlKC3Zj/kgDIUvC5p+dV+8eWODUfECsAui+yygYmY6i/evXW F9dCbgLarnizRSee5HY4ZD3gAX9n9/u26wjc1IOjeePXmyB/bieVI+6GEmHzNi+t FuEv8BA4AwIDAQABo4ICezCCAncwHQYDVR0OBBYEFPacEMB7EmXnjdoQ5n5RDEV6 m1FKMB8GA1UdIwQYMBaAFCDCKXvGfSHDJUOE072IZQagbjCiMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMi8yMEMyMjk3QkM2N0QyMUMzMjU0Mzg0RDNCRDg4NjUw NkEwNkUzMEEyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02Y2Ji LTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGEwODAxNjgtYzE0Ni00MWM2LTkzNjct MzkxY2Q0MjliODU2LzYzZGE1NDYyNWZkODVlNTIzOTVjNDRiNzEyZWZjMmE3ZDM5 OWIxOWNiY2NlNjg2M2EzLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8yLzIwQzIy OTdCQzY3RDIxQzMyNTQzODREM0JEODg2NTA2QTA2RTMwQTIubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBt 0NbNXzr/4PwS+iiSx4SJI7YKPvKRsvFIDKkqd2/Ntk2XZ6TZU9YDjvo5/zU1KHyG t/kaP/v2CwFfZC2alqvrRr72rKFFFMw4FYeY01Y+e4iEFIVH18N9JGvUPzt3rTED +7/s9Ugp8XV1rCAxn5cQbPcZ2ValGrKD0ECSwfGatt5ZEo9cjrUZApWtoaAa5fZb sHixaSdxL3iaCXNpfNk+vmnTS8ws/Lx+08R4vcDikcyZfpzyMwTJGsPh05edx2Bd 3/kN7mjkvOSimH4huRQAaWTBLH2t5yuF+Wk/4Cu4k8kVn7ZSNKZjfNWJMmWy2lIo YdnzZpN/07g6YbitXQz9 -----END CERTIFICATE-----Generated at Thu Oct 1 07:46:31 2026 by rpki-client