$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft File: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft (raw, json) Hash identifier: L8ezLMke3KvAbUz7nSdRRk5LGp3ivxRBT1t88AJi0rk= Subject key identifier: BE:8B:68:F5:72:82:52:F7:F2:FC:05:B2:37:DA:D2:36:A3:C5:43:69 Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C Certificate issuer: /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d Certificate serial: 32C46A1C06848A57EC1A257796C99563F779184F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft Manifest number: 0127 Signing time: Sun 12 Jul 2026 18:03:56 +0000 Manifest this update: Sun 12 Jul 2026 17:58:56 +0000 Manifest next update: Mon 13 Jul 2026 19:46:56 +0000 Files and hashes: 1: 32332e3135312e3133322e302f32342d3234203d3e2037303130.roa (hash: tctQKM2NsEf1NWEg9XqqGOTDGObWKmiIUoceijkBKhI=) 2: 323630323a663438623a3a2f33362d3438203d3e203631393631.roa (hash: tF1TO5OePBirSA2MxPH7uXQfaSSl0HRibFaeUgy/1P4=) 3: 323630323a663438623a3a2f33362d3438203d3e2037303130.roa (hash: Xb+aPiHNR5Ln915Gz5HbUVinqXFh6cSM0aLUbQZXqZY=) 4: 3139382e3230322e3139352e302f32342d3234203d3e203631393631.roa (hash: gagiEWsp2Z5p/dVjbM/z1Jpnx2GW7F4HQLjP6oOEJu8=) 5: 32332e3135312e3133322e302f32342d3234203d3e203631393631.roa (hash: v8No20hTrarlcWsm3WcVuQdnMeOU9NeFzlFcrLYahz4=) 6: DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl (hash: 8oGFimRKiZtUw5tioZyHfBlt8uVvy1z3+Xdn5JEKsKU=) 7: 3139382e3230322e3139352e302f32342d3234203d3e2037303130.roa (hash: ijdjhUA/W8GrEHjWCkpsTOyiMWFsOJ2kKaXbr1wTlms=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jul 2026 19:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c4:6a:1c:06:84:8a:57:ec:1a:25:77:96:c9:95:63:f7:79:18:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d Validity Not Before: Jul 12 17:58:56 2026 GMT Not After : Jul 13 19:46:56 2026 GMT Subject: CN=BE8B68F5728252F7F2FC05B237DAD236A3C54369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:77:ca:da:5b:36:72:cb:32:79:8a:e3:b3:ea: 9f:c9:fd:2c:22:06:20:b0:fb:df:a7:33:0e:c6:25: 4a:35:d7:7f:51:8e:d0:6c:6c:43:8a:1d:be:aa:55: b3:47:c2:50:b7:7d:c8:2b:c9:f0:da:7f:a3:f2:e3: 1e:b2:02:f4:3d:ee:9f:87:7a:af:ac:41:8f:a1:d2: fa:c1:75:5a:2c:14:ad:e8:86:f0:fb:28:90:a1:f5: 31:4f:d5:2d:ce:fa:56:9e:ab:a7:50:98:36:47:b8: 07:ef:55:49:18:5d:ce:42:ad:41:d4:76:a1:b8:11: e1:43:eb:d1:15:94:60:82:95:98:d5:9d:18:a3:a4: 42:91:57:e5:2f:1a:a0:76:a7:d6:08:fc:5c:f1:3b: 69:70:b3:31:26:0a:9d:6e:ed:77:d6:09:60:63:cd: dc:2b:da:1e:70:52:dd:41:09:1d:3c:cb:4e:e7:a4: 57:2f:c6:68:2f:32:a5:3a:8e:08:67:58:cf:6d:84: 04:10:44:88:b5:46:f4:cb:c0:aa:16:74:64:fe:77: fd:28:91:40:a1:5d:56:05:dc:ce:e5:e8:0c:5e:98: b3:c0:1b:6a:5d:f0:6b:b6:7d:cf:50:27:fe:c2:5d: b8:de:8b:26:23:96:28:01:20:b0:4f:30:4d:b9:b2: a7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8B:68:F5:72:82:52:F7:F2:FC:05:B2:37:DA:D2:36:A3:C5:43:69 X509v3 Authority Key Identifier: keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:5f:2c:e5:67:eb:3b:ba:fd:54:95:fc:5f:9c:5b:a8:07:01: 0f:5e:6d:6a:38:73:1a:c4:77:37:ad:92:64:51:64:18:2b:a8: 76:f5:8c:86:31:d7:44:ca:0f:a6:71:86:d1:e6:a9:9b:0e:70: ac:ba:9e:1a:44:d3:06:33:38:e7:04:93:80:83:0f:2c:82:a3: d9:66:fc:71:b8:67:c4:a5:db:78:5e:ca:e6:59:0d:79:05:a1: 1d:7b:f1:57:05:03:3a:3a:5c:f7:5c:92:04:bb:bd:cd:87:3d: 68:fe:7f:2b:64:f0:3d:4d:1b:85:b1:a6:ae:af:76:24:a3:9d: c5:08:3b:6c:a2:c8:60:69:84:d9:d5:17:d4:a7:9f:94:63:0a: b6:e7:20:8d:87:75:d5:1f:41:00:37:ba:da:0b:aa:9b:6d:48: fa:7a:ca:7c:60:83:f8:3e:9f:cd:86:a7:e0:0d:66:56:dd:09: d9:e0:50:2d:80:7d:76:4d:e1:b6:63:18:b7:57:98:70:70:37: 1f:95:14:67:a2:48:29:8f:40:d2:85:11:26:3f:ba:87:23:4f: 0f:d6:2d:ac:8a:0c:2b:c7:34:b4:a5:0b:07:ba:3f:e7:67:b0: 52:f7:31:2a:e5:1c:7e:5d:7e:42:42:a9:49:9f:f6:04:8c:79: 5e:3a:90:56 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgIUMsRqHAaEilfsGiV3lsmVY/d5GE8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyN2Y5YzA1NDIwYjU1YzNlZGU3MDM1MjFkMTRkODEzNzU4 ODk4MDQyMjYwZjA3OGIyNGQwHhcNMjYwNzEyMTc1ODU2WhcNMjYwNzEzMTk0NjU2 WjAzMTEwLwYDVQQDEyhCRThCNjhGNTcyODI1MkY3RjJGQzA1QjIzN0RBRDIzNkEz QzU0MzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnfK2ls2cssy eYrjs+qfyf0sIgYgsPvfpzMOxiVKNdd/UY7QbGxDih2+qlWzR8JQt33IK8nw2n+j 8uMesgL0Pe6fh3qvrEGPodL6wXVaLBSt6Ibw+yiQofUxT9UtzvpWnqunUJg2R7gH 71VJGF3OQq1B1HahuBHhQ+vRFZRggpWY1Z0Yo6RCkVflLxqgdqfWCPxc8TtpcLMx Jgqdbu131glgY83cK9oecFLdQQkdPMtO56RXL8ZoLzKlOo4IZ1jPbYQEEESItUb0 y8CqFnRk/nf9KJFAoV1WBdzO5egMXpizwBtqXfBrtn3PUCf+wl243osmI5YoASCw TzBNubKntwIDAQABo4ICezCCAncwHQYDVR0OBBYEFL6LaPVyglL38vwFsjfa0jaj xUNpMB8GA1UdIwQYMBaAFN0XW9T7fx3CNtsTzStCpkWQr+xcMA4GA1UdDwEB/wQE AwIHgDBnBgNVHR8EYDBeMFygWqBYhlZyc3luYzovL3Jwa2kubmVsbGljdXMubmV0 L3JlcG8vbmVsbGljdXMvMy9ERDE3NUJENEZCN0YxREMyMzZEQjEzQ0QyQjQyQTY0 NTkwQUZFQzVDLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHT cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0zN2E3 LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjBlM2UzMzItMmUxMy00N2I3LWJlM2Mt YmQyZjQwZGI2ODY0LzdmOWMwNTQyMGI1NWMzZWRlNzAzNTIxZDE0ZDgxMzc1ODg5 ODA0MjI2MGYwNzhiMjRkLmNlcjByBggrBgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuG VnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxsaWN1cy8zL0REMTc1 QkQ0RkI3RjFEQzIzNkRCMTNDRDJCNDJBNjQ1OTBBRkVDNUMubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAK XyzlZ+s7uv1UlfxfnFuoBwEPXm1qOHMaxHc3rZJkUWQYK6h29YyGMddEyg+mcYbR 5qmbDnCsup4aRNMGMzjnBJOAgw8sgqPZZvxxuGfEpdt4XsrmWQ15BaEde/FXBQM6 Olz3XJIEu73Nhz1o/n8rZPA9TRuFsaaur3Yko53FCDtsoshgaYTZ1RfUp5+UYwq2 5yCNh3XVH0EAN7raC6qbbUj6esp8YIP4Pp/NhqfgDWZW3QnZ4FAtgH12TeG2Yxi3 V5hwcDcflRRnokgpj0DShREmP7qHI08P1i2sigwrxzS0pQsHuj/nZ7BS9zEq5Rx+ XX5CQqlJn/YEjHleOpBW -----END CERTIFICATE-----Generated at Mon Jul 13 01:17:10 2026 by rpki-client