
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
File: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft (raw, json)
Hash identifier: 8gpjgRorHdeBR1GGuuxlI5t8lZNKbb9z6kPgGuzzKfI=
Subject key identifier: A1:6C:D0:4D:AC:8F:3B:05:9A:18:1C:A6:A3:21:3A:FB:BB:E0:BD:4D
Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
Certificate issuer: /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Certificate serial: 54E4EB8AAD0328A044CCD326572FA611CAC80010
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
Manifest number: A5
Signing time: Mon 13 Apr 2026 06:21:14 +0000
Manifest this update: Mon 13 Apr 2026 06:16:14 +0000
Manifest next update: Tue 14 Apr 2026 06:57:14 +0000
Files and hashes: 1: 323630323a663438623a3a2f33362d3438203d3e203631393631.roa (hash: tF1TO5OePBirSA2MxPH7uXQfaSSl0HRibFaeUgy/1P4=)
2: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl (hash: 4nXQW3JMRDXpmahgkzxhzZmoHbQVZXAsAEMLGe1xrFw=)
3: 32332e3135312e3133322e302f32342d3234203d3e203631393631.roa (hash: v8No20hTrarlcWsm3WcVuQdnMeOU9NeFzlFcrLYahz4=)
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 06:57:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:e4:eb:8a:ad:03:28:a0:44:cc:d3:26:57:2f:a6:11:ca:c8:00:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Validity
Not Before: Apr 13 06:16:14 2026 GMT
Not After : Apr 14 06:57:14 2026 GMT
Subject: CN=A16CD04DAC8F3B059A181CA6A3213AFBBBE0BD4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:39:27:2f:5e:80:a0:6a:9a:1c:0d:f4:88:e3:
4c:4b:02:8f:32:06:54:2f:6f:38:7b:be:50:b2:c5:
0d:17:a7:73:03:18:dd:95:7d:1d:32:e9:a7:8e:8d:
e9:34:3a:f8:0f:18:6d:30:ef:82:b0:af:2c:d2:f6:
22:d2:c4:c7:cc:6f:e2:83:3f:59:e9:05:e7:e5:7c:
4b:a9:17:f1:cf:4c:2f:68:f0:11:9d:2f:26:2a:f2:
42:25:21:aa:06:22:9e:07:d5:e3:6f:f1:4c:2c:0f:
bd:5d:69:13:da:67:eb:bd:cb:1d:da:6e:33:67:da:
9f:b5:2b:aa:fc:fc:10:fa:2b:af:b1:58:07:3f:2d:
1e:b3:55:01:05:7c:ae:ef:01:2a:0b:49:19:3e:aa:
34:60:0c:f0:50:bb:38:9b:e6:2f:c9:84:ac:ba:ef:
f1:24:da:13:e6:2a:66:f3:ea:b5:35:0b:77:12:54:
90:ec:c6:fc:6c:5a:14:55:c6:b1:8b:42:f6:78:13:
8c:a0:0d:c1:80:0b:aa:79:c1:c9:e0:b9:58:cf:a8:
c0:3e:49:26:ec:96:ed:f1:1f:6c:c4:12:47:7e:e5:
78:b4:d9:48:69:58:bf:09:87:d3:f7:63:a2:d4:24:
10:58:fb:09:45:fc:47:d2:48:3d:98:d2:30:11:56:
33:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6C:D0:4D:AC:8F:3B:05:9A:18:1C:A6:A3:21:3A:FB:BB:E0:BD:4D
X509v3 Authority Key Identifier:
keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:63:e1:35:d6:2a:42:1f:a8:05:85:5e:e7:48:54:bc:c8:17:
84:42:cf:9b:f9:88:c6:97:89:be:07:6f:a2:49:d4:ae:b2:c7:
61:a7:fe:4b:97:dc:62:86:94:d0:ee:62:d7:96:55:25:ab:a1:
c5:d3:ca:c8:e3:89:33:52:63:90:2b:b7:a4:49:bb:3c:e8:42:
01:a7:0c:2a:62:ba:6a:43:99:04:b4:c2:2a:54:2e:7a:f3:15:
14:83:74:a6:f1:d5:25:e2:56:bb:61:87:ae:6c:87:2b:79:76:
52:2c:85:30:17:8c:9d:1c:63:19:f9:6a:52:31:78:54:f5:0c:
a7:4d:6a:58:3b:45:25:1b:86:7c:6d:8a:74:4c:49:6e:f3:5b:
78:ec:55:b4:65:14:66:2c:ef:b5:a5:f5:0f:74:46:a6:a4:27:
4f:01:5b:e7:bc:96:f6:59:6d:a6:04:5f:61:6b:29:ac:42:d2:
8f:cd:79:20:83:aa:4c:db:83:c7:f6:1d:3a:ca:f2:02:2d:65:
09:03:da:36:11:2f:b7:6e:0f:39:00:5a:23:e6:42:a9:ed:37:
59:ed:4b:78:59:1a:50:a8:c1:33:4a:66:b6:a7:68:74:6d:a5:
c0:c2:15:9b:96:58:95:5e:a9:d1:23:06:f1:95:8d:62:0f:43:
c0:6b:00:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:26:36 2026 by rpki-client