
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
File: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft (raw, json)
Hash identifier: ddNuMHLAUX2KTHuXIOrxP2ZtW2bY5QwhX84gtcQH2Hc=
Subject key identifier: F7:72:7A:66:BC:52:36:C2:AC:2B:4D:50:88:C2:1F:47:84:8E:FD:FE
Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
Certificate issuer: /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Certificate serial: 18BF61140F1558C92EE29F7536E479C683710D7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
Manifest number: 68
Signing time: Thu 26 Feb 2026 11:09:37 +0000
Manifest this update: Thu 26 Feb 2026 11:04:37 +0000
Manifest next update: Fri 27 Feb 2026 13:06:37 +0000
Files and hashes: 1: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl (hash: o1jezfLVcbq6X0o5bELdsTfDKcs1cg+45ZSJENJ8zNo=)
2: 32332e3135312e3133322e302f32342d3234203d3e203631393631.roa (hash: v8No20hTrarlcWsm3WcVuQdnMeOU9NeFzlFcrLYahz4=)
3: 323630323a663438623a3a2f33362d3438203d3e203631393631.roa (hash: tF1TO5OePBirSA2MxPH7uXQfaSSl0HRibFaeUgy/1P4=)
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 13:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:bf:61:14:0f:15:58:c9:2e:e2:9f:75:36:e4:79:c6:83:71:0d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Validity
Not Before: Feb 26 11:04:37 2026 GMT
Not After : Feb 27 13:06:37 2026 GMT
Subject: CN=F7727A66BC5236C2AC2B4D5088C21F47848EFDFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:6f:1c:ef:17:71:1a:17:9b:e1:c4:59:86:
e2:93:bf:d4:fa:11:28:91:4e:f3:e7:6f:45:e5:20:
52:62:48:79:db:69:bd:c0:a2:51:04:94:a4:75:bf:
0b:5a:ee:71:47:a9:67:02:99:ac:7f:ad:76:a7:8b:
dd:95:f9:48:03:78:42:6e:83:87:8f:e9:c5:53:e2:
7e:e3:be:57:50:6a:76:a5:59:dd:e9:68:11:22:3e:
42:a9:ae:3d:55:7a:72:38:01:1b:fe:ee:ac:2d:06:
83:9d:5e:ac:35:5f:c6:3a:88:07:04:db:52:c6:2c:
4e:b4:89:25:81:ed:56:3b:08:bf:69:56:4c:fa:7c:
8f:8a:8b:b2:0f:e1:cc:1d:0d:db:ec:f6:55:89:8f:
ac:2a:ca:d7:3a:29:bf:a0:54:e5:4e:ce:a5:66:3b:
a5:45:dd:ab:75:8e:3c:98:ef:df:3d:6d:8d:9e:ee:
4c:58:ee:89:1c:b7:e1:d3:6d:e2:5c:fb:be:99:cb:
5a:7e:b6:d8:e2:8c:cd:fb:3f:48:f7:77:15:9f:00:
45:f3:ab:1b:08:51:0f:13:e3:b4:fc:25:97:16:c8:
b9:f6:9c:4d:1b:50:1d:44:82:77:1a:85:0d:1b:e3:
ad:86:90:e4:69:d5:a0:c7:e4:8f:f6:42:28:2b:93:
ce:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:72:7A:66:BC:52:36:C2:AC:2B:4D:50:88:C2:1F:47:84:8E:FD:FE
X509v3 Authority Key Identifier:
keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:30:b6:3c:b4:62:f1:94:f2:76:61:7c:e7:8b:c6:64:0f:93:
4d:01:a3:9a:88:e7:26:e8:99:e8:d1:4c:56:d5:92:bc:2a:ec:
da:2b:5a:8c:52:6b:ba:66:b5:7c:af:47:8c:0b:42:8f:9f:73:
bb:5b:95:d2:10:b0:cc:1f:31:8f:6d:1c:b5:20:9e:48:21:94:
df:c5:1e:e2:9f:99:35:b5:c4:55:77:11:2f:f3:a1:01:56:d4:
56:a4:06:2c:2a:07:f9:07:51:52:0f:a5:84:90:dc:9e:1d:66:
9a:6e:7d:5c:72:d6:ed:a2:6d:92:af:a5:f2:cf:72:71:4b:ab:
94:47:ac:e2:1f:ba:84:75:87:18:0c:e2:9a:be:2f:c6:12:f4:
b9:3f:7b:80:88:47:47:f0:8d:ae:64:55:ac:3e:c7:09:65:11:
b4:05:5c:7c:62:49:b1:99:04:27:e4:8e:ab:08:8f:58:5e:7e:
52:fd:1e:8f:ef:99:f4:75:a0:10:32:a2:ec:02:2b:cc:06:c5:
2d:8b:de:bc:61:e7:65:bb:8d:3a:10:d4:64:c2:6a:01:1b:5a:
15:f9:6d:ea:ff:52:f4:fc:90:f9:4a:a6:eb:d7:c0:75:78:5e:
d8:86:72:69:22:ec:0e:e8:89:b3:df:8b:f4:ef:a9:12:08:c4:
64:97:48:9f
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgIUGL9hFA8VWMku4p91NuR5xoNxDX0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2Y5YzA1NDIwYjU1YzNlZGU3MDM1MjFkMTRkODEzNzU4
ODk4MDQyMjYwZjA3OGIyNGQwHhcNMjYwMjI2MTEwNDM3WhcNMjYwMjI3MTMwNjM3
WjAzMTEwLwYDVQQDEyhGNzcyN0E2NkJDNTIzNkMyQUMyQjRENTA4OEMyMUY0Nzg0
OEVGREZFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYdvHO8XcRoX
m+HEWYbik7/U+hEokU7z529F5SBSYkh522m9wKJRBJSkdb8LWu5xR6lnApmsf612
p4vdlflIA3hCboOHj+nFU+J+475XUGp2pVnd6WgRIj5Cqa49VXpyOAEb/u6sLQaD
nV6sNV/GOogHBNtSxixOtIklge1WOwi/aVZM+nyPiouyD+HMHQ3b7PZViY+sKsrX
Oim/oFTlTs6lZjulRd2rdY48mO/fPW2Nnu5MWO6JHLfh023iXPu+mctafrbY4ozN
+z9I93cVnwBF86sbCFEPE+O0/CWXFsi59pxNG1AdRIJ3GoUNG+OthpDkadWgx+SP
9kIoK5PObQIDAQABo4ICezCCAncwHQYDVR0OBBYEFPdyema8UjbCrCtNUIjCH0eE
jv3+MB8GA1UdIwQYMBaAFN0XW9T7fx3CNtsTzStCpkWQr+xcMA4GA1UdDwEB/wQE
AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0
L3JlcG8vbmVsbGljdXMvMy9ERDE3NUJENEZCN0YxREMyMzZEQjEzQ0QyQjQyQTY0
NTkwQUZFQzVDLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT
cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl
NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0zN2E3
LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjBlM2UzMzItMmUxMy00N2I3LWJlM2Mt
YmQyZjQwZGI2ODY0LzdmOWMwNTQyMGI1NWMzZWRlNzAzNTIxZDE0ZDgxMzc1ODg5
ODA0MjI2MGYwNzhiMjRkLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG
VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8zL0REMTc1
QkQ0RkI3RjFEQzIzNkRCMTNDRDJCNDJBNjQ1OTBBRkVDNUMubWZ0MBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC
AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCd
MLY8tGLxlPJ2YXzni8ZkD5NNAaOaiOcm6Jno0UxW1ZK8KuzaK1qMUmu6ZrV8r0eM
C0KPn3O7W5XSELDMHzGPbRy1IJ5IIZTfxR7in5k1tcRVdxEv86EBVtRWpAYsKgf5
B1FSD6WEkNyeHWaabn1cctbtom2Sr6Xyz3JxS6uUR6ziH7qEdYcYDOKavi/GEvS5
P3uAiEdH8I2uZFWsPscJZRG0BVx8YkmxmQQn5I6rCI9YXn5S/R6P75n0daAQMqLs
AivMBsUti968Yedlu406ENRkwmoBG1oV+W3q/1L0/JD5Sqbr18B1eF7YhnJpIuwO
6Imz34v076kSCMRkl0if
-----END CERTIFICATE-----
Generated at Fri Feb 27 00:27:40 2026 by rpki-client