
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
File: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft (raw, json)
Hash identifier: 5oW9TDp8ULfFayBDqa0/k8RBfy0T84iZ7wyfQaHFZNI=
Subject key identifier: 44:EA:0C:68:61:8C:98:A4:6D:24:28:CE:C4:95:9B:1E:95:6D:C5:AE
Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
Certificate issuer: /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Certificate serial: 6E139C0FA05E88567724591C1CE2EA0AA1A9FDC6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
Manifest number: E1
Signing time: Thu 28 May 2026 08:11:13 +0000
Manifest this update: Thu 28 May 2026 08:06:13 +0000
Manifest next update: Fri 29 May 2026 08:55:13 +0000
Files and hashes: 1: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl (hash: uwb/EAH05xcBBqD424lnE53t3YHgQK5L2/mcRaRW7xA=)
2: 32332e3135312e3133322e302f32342d3234203d3e203631393631.roa (hash: v8No20hTrarlcWsm3WcVuQdnMeOU9NeFzlFcrLYahz4=)
3: 323630323a663438623a3a2f33362d3438203d3e203631393631.roa (hash: tF1TO5OePBirSA2MxPH7uXQfaSSl0HRibFaeUgy/1P4=)
Validation: OK
Signature path: rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 29 May 2026 08:55:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:13:9c:0f:a0:5e:88:56:77:24:59:1c:1c:e2:ea:0a:a1:a9:fd:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Validity
Not Before: May 28 08:06:13 2026 GMT
Not After : May 29 08:55:13 2026 GMT
Subject: CN=44EA0C68618C98A46D2428CEC4959B1E956DC5AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:06:39:8e:14:03:b7:ba:43:52:9f:16:b7:
1f:a3:cd:cb:54:71:49:5d:27:d0:a3:39:c2:d1:16:
dc:09:b7:c7:54:21:51:9c:b4:33:59:0e:7b:2b:3a:
be:a8:99:2c:6c:33:33:79:7c:1a:4b:99:90:f4:b8:
33:55:b7:14:01:56:4f:66:6f:46:c7:74:e8:fd:f7:
fe:29:61:00:aa:ca:7d:d1:72:ea:05:46:a6:65:fa:
9c:a7:fe:d3:9d:14:ad:49:18:71:ab:79:a9:31:2d:
c1:fa:61:55:ca:6b:62:57:61:e3:75:7d:37:99:26:
cd:ec:c2:73:de:db:08:16:4f:7a:35:85:ce:8c:65:
2c:54:67:a6:e5:0b:ca:af:cc:da:06:5f:80:83:be:
25:5d:80:52:16:11:4c:6e:e0:28:dc:e8:0c:00:ee:
bf:e4:3f:3b:10:37:c0:10:bc:d2:90:67:8e:4d:d2:
ec:e6:55:d4:5c:2c:ff:d3:06:6d:1c:06:10:4e:d6:
45:37:98:bd:e4:0a:98:4a:cc:96:85:06:50:07:92:
a9:8e:ee:46:54:1a:0d:39:e7:b5:dd:59:b1:05:5d:
ce:9b:8e:86:d8:31:56:0d:03:bf:7a:d5:f0:86:05:
35:29:93:a3:24:aa:ab:c5:64:a3:f6:9c:91:f7:94:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EA:0C:68:61:8C:98:A4:6D:24:28:CE:C4:95:9B:1E:95:6D:C5:AE
X509v3 Authority Key Identifier:
keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a0:80:00:60:19:4c:40:1d:1d:3d:46:3d:ac:94:bd:56:77:
2a:f2:ea:71:a2:d8:72:81:e6:cb:c6:28:95:72:63:a0:af:20:
81:41:40:aa:73:a2:88:56:af:07:50:56:ea:f6:5b:09:0f:b1:
e5:4e:d8:be:80:2d:73:67:98:70:be:7d:69:9a:a6:f3:bf:1e:
c5:be:0a:71:5c:84:c6:93:df:a8:af:e0:e6:c2:32:5f:33:e5:
9e:62:3d:34:8c:bc:76:04:10:f6:5c:f9:80:96:d9:ab:47:bb:
28:c9:9a:93:44:10:00:49:7a:9d:f1:df:06:f9:28:d2:92:d6:
dd:f0:68:89:85:35:4f:43:a8:c2:04:c3:e3:86:4f:a6:c4:34:
06:18:12:50:07:42:53:8d:e0:f5:a2:40:ee:d0:3e:0a:6b:8c:
e9:a4:1f:40:c8:2a:4f:47:75:52:ac:42:0a:7d:7c:aa:16:5e:
3a:c2:23:46:16:99:33:3d:28:f6:13:14:9c:db:46:1a:93:a0:
52:ff:60:94:8d:e8:13:38:36:fc:86:39:ae:e9:5c:ba:9e:dd:
7d:66:ed:57:fb:3c:57:32:d8:30:f0:b3:8f:1f:d1:eb:58:ff:
d2:e8:f2:11:c9:c4:63:c2:60:d4:f6:f9:9b:e8:bd:86:cf:0e:
4a:4e:2d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 14:23:49 2026 by rpki-client