$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: Pj2A9N0uub4rBXHqVgqAKcM3W6NXfS6yP9scAxn29z4= Subject key identifier: 2B:7B:7C:21:E9:88:93:C2:C7:96:5E:A2:2C:03:3B:A3:BA:9F:58:6B Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 37CFD9A818B9BF56EEAF6EB8DBD681C7693E1AB2 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: 01C4 Signing time: Tue 28 Oct 2025 06:02:09 +0000 Manifest this update: Tue 28 Oct 2025 05:57:09 +0000 Manifest next update: Wed 29 Oct 2025 08:40:09 +0000 Files and hashes: 1: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: E0PPrxT25DR2asaVrKuoThbt2GlfdFzpif5m00byoEA=) 2: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: piR0xY2W/Fg7dFVRqqqeApVksNlAZNhoOxCqAZQ09I0=) 3: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: InllrUkC+i/L8Vq1qSaFZSxY2gcH0Pb1ZOihADOfZw0=) 4: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: 9ieyP3BjwnrGT7jHWN0miv3BwxPneURkOZZD4j2C8Tw=) 5: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: VtH6E5X9bla/lP/1oDgzLC/IGBeO4Y+MgLQlG/MHRAA=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Oct 2025 18:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:cf:d9:a8:18:b9:bf:56:ee:af:6e:b8:db:d6:81:c7:69:3e:1a:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: Oct 28 05:57:09 2025 GMT Not After : Oct 29 08:40:09 2025 GMT Subject: CN=2B7B7C21E98893C2C7965EA22C033BA3BA9F586B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:88:fd:5b:53:9b:1f:45:3c:af:22:20:97:e2: 9e:02:23:0f:1c:b8:e9:3c:69:e6:a7:aa:12:64:af: 78:a4:a1:d3:4b:64:75:b5:5c:b8:bc:f2:a6:b2:76: fb:b7:ef:09:a6:0a:a7:ce:cd:18:64:9e:52:78:78: 85:7f:a7:2a:56:98:e9:b4:0c:a1:c3:a4:75:d3:05: e9:6d:7a:73:d7:39:ef:5c:fc:37:3e:10:a4:42:ab: 42:c5:01:b8:24:5e:76:b5:10:e2:69:e6:b1:ef:01: 32:57:17:fe:d9:5a:b9:2a:e7:b7:09:b7:e0:9e:e7: 2e:34:dd:a9:de:6d:5b:ba:3b:6f:91:27:8a:bb:b6: 0c:05:db:f2:ae:e8:43:ff:a2:72:fa:78:68:3f:41: 65:e2:27:d3:37:fe:de:af:86:b9:8c:f2:42:fc:9d: 09:32:22:04:a3:24:0c:c5:da:db:f2:f7:5b:cd:4f: b8:76:c9:c2:6b:cb:3a:df:9d:db:67:e6:0e:59:3e: 69:87:fe:50:d6:64:0f:06:7a:c0:62:78:28:7a:bb: 13:2b:40:c2:90:b3:24:f5:93:7f:d7:57:a5:3f:84: fd:5a:4c:8e:8a:3c:e7:91:e5:92:3d:ef:25:57:c8: d5:11:a6:8a:c3:17:17:79:41:9e:0c:7d:26:a1:1a: 67:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7B:7C:21:E9:88:93:C2:C7:96:5E:A2:2C:03:3B:A3:BA:9F:58:6B X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:1b:22:f0:27:ab:4e:ec:4f:a6:d6:e5:81:ca:93:7d:b3:36: e7:76:6c:10:0f:e9:d3:dc:23:28:f7:de:b7:4b:07:a7:e6:d8: 42:ea:8d:33:53:0d:f2:20:ca:0f:f3:92:ab:f8:1d:c0:8f:de: 81:ea:af:e1:96:47:f2:22:6c:b8:a1:9b:a6:66:68:b3:62:76: 23:9b:ce:75:d4:57:22:73:6e:ee:0d:ad:f2:80:63:18:22:80: 73:08:ca:91:54:f0:ad:06:fc:2c:ca:13:63:de:c8:7a:13:71: f0:22:a0:f1:02:ab:2c:b6:0a:a9:16:b1:ca:51:39:17:3c:7b: 6b:21:c1:5e:75:30:2f:7e:0f:20:c7:7f:dc:1d:28:99:b9:4c: 75:15:de:4a:26:ab:2d:d3:7e:20:36:64:f2:0c:aa:d2:1e:f7: c7:d3:0d:5a:d6:6f:b8:5c:d2:0e:f4:9a:35:4b:bd:0e:00:1a: 31:78:98:2d:91:a2:85:c1:66:1a:d1:6a:fd:eb:89:39:e0:9b: fa:a9:0e:3d:43:a1:e7:5b:77:c1:fc:22:88:7f:d7:0b:cd:04: a0:02:ef:57:e3:c2:78:83:1f:6e:21:be:92:6a:85:6e:0c:8c: 93:0b:02:6e:9b:39:ac:69:f6:54:b5:c9:29:3a:4e:36:d9:6d: eb:21:d7:2e -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUN8/ZqBi5v1bur26429aBx2k+GrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNTEwMjgwNTU3MDlaFw0yNTEwMjkwODQwMDlaMDMxMTAvBgNV BAMTKDJCN0I3QzIxRTk4ODkzQzJDNzk2NUVBMjJDMDMzQkEzQkE5RjU4NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfiP1bU5sfRTyvIiCX4p4CIw8c uOk8aeanqhJkr3ikodNLZHW1XLi88qaydvu37wmmCqfOzRhknlJ4eIV/pypWmOm0 DKHDpHXTBeltenPXOe9c/Dc+EKRCq0LFAbgkXna1EOJp5rHvATJXF/7ZWrkq57cJ t+Ce5y403anebVu6O2+RJ4q7tgwF2/Ku6EP/onL6eGg/QWXiJ9M3/t6vhrmM8kL8 nQkyIgSjJAzF2tvy91vNT7h2ycJryzrfndtn5g5ZPmmH/lDWZA8GesBieCh6uxMr QMKQsyT1k3/XV6U/hP1aTI6KPOeR5ZI97yVXyNURporDFxd5QZ4MfSahGmeFAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUK3t8IemIk8LHll6iLAM7o7qfWGswHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALGyLwJ6tO7E+m1uWBypN9 szbndmwQD+nT3CMo9963Swen5thC6o0zUw3yIMoP85Kr+B3Aj96B6q/hlkfyImy4 oZumZmizYnYjm8511Fcic27uDa3ygGMYIoBzCMqRVPCtBvwsyhNj3sh6E3HwIqDx AqsstgqpFrHKUTkXPHtrIcFedTAvfg8gx3/cHSiZuUx1Fd5KJqst034gNmTyDKrS HvfH0w1a1m+4XNIO9Jo1S70OABoxeJgtkaKFwWYa0Wr964k54Jv6qQ49Q6HnW3fB /CKIf9cLzQSgAu9X48J4gx9uIb6SaoVuDIyTCwJumzmsafZUtckpOk422W3rIdcu -----END CERTIFICATE-----Generated at Tue Oct 28 13:36:00 2025 by rpki-client