$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: pO546KPpyIwOmsdNHvtnsKb91vJlEci7lL3wCJPAUFk= Subject key identifier: A7:62:AA:1A:F1:D1:24:3C:F7:9E:90:7B:DB:D8:09:B0:18:2A:1E:5E Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 45DC97AFEBD6208950EEF5E514854B36EA198086 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: 023A Signing time: Tue 24 Mar 2026 22:26:06 +0000 Manifest this update: Tue 24 Mar 2026 22:21:06 +0000 Manifest next update: Thu 26 Mar 2026 00:17:06 +0000 Files and hashes: 1: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: bWiOr/PEO4vMJTWvUJPGqkB1XRngPZwXz9FAJ967xgY=) 2: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: +6IGfj4KE5Fon357Mz4hY46Lj0lkrQVIhXV3Upqg2+Y=) 3: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: 9ieyP3BjwnrGT7jHWN0miv3BwxPneURkOZZD4j2C8Tw=) 4: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: piR0xY2W/Fg7dFVRqqqeApVksNlAZNhoOxCqAZQ09I0=) 5: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: JX8MZMidVpDvMl1kvP+85ppT/iMcv1vVMBW6voLjwXs=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 25 Mar 2026 09:15:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:dc:97:af:eb:d6:20:89:50:ee:f5:e5:14:85:4b:36:ea:19:80:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: Mar 24 22:21:06 2026 GMT Not After : Mar 26 00:17:06 2026 GMT Subject: CN=A762AA1AF1D1243CF79E907BDBD809B0182A1E5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:86:cb:4a:5b:aa:49:38:91:f8:2a:7c:23:d3: a9:63:b5:39:cb:fc:27:35:33:d7:70:e5:35:6a:9f: 60:f6:88:39:e8:64:2e:82:62:de:07:3f:3d:7a:fd: 79:8d:4a:08:43:ef:16:9a:d3:63:20:c1:91:4b:3f: 8a:52:18:f8:a5:5e:8b:50:bc:fe:c5:c4:be:c1:04: db:68:f1:20:26:98:db:dd:63:22:18:0b:94:12:ae: 63:04:af:85:76:40:11:05:4a:76:e8:95:0b:c0:20: 57:f6:35:b4:21:81:8f:49:99:bb:90:c5:8a:c6:43: 8a:78:5a:39:9f:ff:87:3b:f5:ae:08:90:dd:29:cd: 97:c5:11:3e:6d:67:b4:20:08:db:2e:a9:bc:aa:d7: 45:57:df:04:c3:87:92:4e:84:fc:83:2d:05:85:90: e3:07:c2:34:a5:69:fd:06:62:9e:bc:45:c3:97:77: d9:da:3b:32:cc:2c:e2:0d:c8:8f:0d:62:7d:ca:83: 5f:c1:ec:7a:b0:1d:39:78:9b:29:dd:f0:9a:bf:41: da:30:d7:ce:50:21:4d:c6:53:41:f1:58:02:13:a7: 65:c9:5d:71:6b:85:01:54:7c:68:8c:33:b0:28:2d: 4e:ee:be:99:24:2b:69:e6:66:26:f8:73:38:ea:51: 8b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:62:AA:1A:F1:D1:24:3C:F7:9E:90:7B:DB:D8:09:B0:18:2A:1E:5E X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:8c:6b:74:0e:c1:e3:9d:f3:e0:86:5e:2a:48:98:7d:a9:e8: e5:ff:8c:b6:6f:a5:2b:b1:68:27:eb:5d:8d:e8:2b:c1:ed:41: 48:e8:98:89:a9:4d:4c:8e:e4:8b:ed:a0:d7:7e:64:b3:f7:32: 61:81:dc:9a:b7:6f:4c:08:e5:17:dd:c3:31:19:a8:2c:59:c3: c1:cd:cd:75:f8:e9:d7:e6:cd:83:2a:3c:5a:c9:4c:8a:07:3d: 83:8e:1e:b8:42:17:96:66:ed:d8:a2:81:a6:59:10:0b:e1:80: ba:8d:ff:af:07:79:72:cd:e2:de:1d:14:78:e6:c8:f5:ff:65: c3:ed:a1:87:50:44:95:3e:31:79:6c:e9:f4:69:88:72:29:73: ff:13:e7:df:04:7b:18:c7:3d:39:bf:1f:9a:4d:14:e7:d1:d5: f6:19:8c:6e:d3:af:6b:fb:e6:9e:63:52:97:22:d9:67:64:6b: 89:57:ac:e9:d5:c5:fd:98:6b:22:70:cb:f3:50:9a:f2:a8:11: 73:e1:01:82:d0:b2:37:46:a5:7f:cd:b5:5a:8e:d1:66:7e:a6: ac:c1:70:dd:f8:3c:e7:ce:56:eb:30:8b:46:80:36:6c:3d:cf: 25:4b:da:be:b1:86:1e:56:f4:e5:6d:f1:e4:e4:72:9c:9b:2b: 5a:5c:a3:68 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIURdyXr+vWIIlQ7vXlFIVLNuoZgIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNjAzMjQyMjIxMDZaFw0yNjAzMjYwMDE3MDZaMDMxMTAvBgNV BAMTKEE3NjJBQTFBRjFEMTI0M0NGNzlFOTA3QkRCRDgwOUIwMTgyQTFFNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFhstKW6pJOJH4Knwj06ljtTnL /Cc1M9dw5TVqn2D2iDnoZC6CYt4HPz16/XmNSghD7xaa02MgwZFLP4pSGPilXotQ vP7FxL7BBNto8SAmmNvdYyIYC5QSrmMEr4V2QBEFSnbolQvAIFf2NbQhgY9JmbuQ xYrGQ4p4Wjmf/4c79a4IkN0pzZfFET5tZ7QgCNsuqbyq10VX3wTDh5JOhPyDLQWF kOMHwjSlaf0GYp68RcOXd9naOzLMLOINyI8NYn3Kg1/B7HqwHTl4mynd8Jq/Qdow 185QIU3GU0HxWAITp2XJXXFrhQFUfGiMM7AoLU7uvpkkK2nmZib4czjqUYt9AgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUp2KqGvHRJDz3npB729gJsBgqHl4wHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0jGt0DsHjnfPghl4qSJh9 qejl/4y2b6UrsWgn612N6CvB7UFI6JiJqU1MjuSL7aDXfmSz9zJhgdyat29MCOUX 3cMxGagsWcPBzc11+OnX5s2DKjxayUyKBz2Djh64QheWZu3YooGmWRAL4YC6jf+v B3lyzeLeHRR45sj1/2XD7aGHUESVPjF5bOn0aYhyKXP/E+ffBHsYxz05vx+aTRTn 0dX2GYxu069r++aeY1KXItlnZGuJV6zp1cX9mGsicMvzUJryqBFz4QGC0LI3RqV/ zbVajtFmfqaswXDd+DznzlbrMItGgDZsPc8lS9q+sYYeVvTlbfHk5HKcmytaXKNo -----END CERTIFICATE-----Generated at Wed Mar 25 05:03:06 2026 by rpki-client