$ rpki-client -vvvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: cNGKS8VGbQeS43W4gVtR2DyT0ARNm+mfMUzHCL88YnM= Subject key identifier: 5D:D5:94:30:AD:73:82:BE:7E:A2:FE:3E:6A:E0:36:49:38:C9:F0:76 Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 084E5C2FA4B2C57A2265896E5203FC9D38B3B551 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: 0340 Signing time: Mon 05 Oct 2026 21:19:35 +0000 Manifest this update: Mon 05 Oct 2026 21:14:35 +0000 Manifest next update: Tue 06 Oct 2026 22:48:35 +0000 Files and hashes: 1: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: JX8MZMidVpDvMl1kvP+85ppT/iMcv1vVMBW6voLjwXs=) 2: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: Oy1mSyisXYrn3vcoOGy6axMtnSIX1xCofVEIpBbtceA=) 3: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: +6IGfj4KE5Fon357Mz4hY46Lj0lkrQVIhXV3Upqg2+Y=) 4: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: BZJT8EbwRaDxjL7KKjabnaQJK3brt6+TkqqK548Wl2g=) 5: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: 7hagovo1iFaHE4esDMCJUQ0eAxzVMFMeFW66CPp8uXI=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Oct 2026 18:30:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:4e:5c:2f:a4:b2:c5:7a:22:65:89:6e:52:03:fc:9d:38:b3:b5:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: Oct 5 21:14:35 2026 GMT Not After : Oct 6 22:48:35 2026 GMT Subject: CN=5DD59430AD7382BE7EA2FE3E6AE0364938C9F076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:03:0c:dc:97:4e:3c:22:f0:4d:a6:82:69:95: 48:a1:75:ba:59:16:7e:1e:6e:8e:aa:22:6e:9b:4b: ec:78:20:98:2f:4d:7b:da:f1:ab:6f:60:6d:23:c8: 05:8b:bc:1d:c8:ec:dc:7d:e0:7e:56:72:1d:ee:50: d1:7e:d9:3d:8b:55:fe:64:1d:65:e2:c9:e6:25:2f: f6:60:f7:0d:97:b4:27:c5:ee:8f:ea:a7:6e:3b:9b: 2e:aa:49:98:3a:59:84:31:28:a3:75:f8:99:d8:1b: 34:ba:e7:12:88:8c:1d:d4:90:b1:4b:8b:7c:0a:eb: 3f:7e:f6:67:3c:fe:ea:6f:92:b7:29:11:28:50:3c: 38:e8:2d:5a:5c:15:b4:0d:d7:b9:05:18:bf:a9:b6: 51:76:d3:63:a7:a0:4f:bc:7f:2b:d8:39:64:5b:9a: 82:29:3e:99:bf:5f:bb:b9:10:9f:f6:e6:2e:96:93: 7e:d9:6a:05:68:0f:08:b8:94:6a:3e:b8:2d:72:0a: 82:37:2f:59:a6:24:8b:b1:94:8c:74:fd:91:b6:93: ba:be:f8:63:46:5c:15:11:5f:95:ba:d7:25:53:bd: 52:d5:57:ab:56:51:df:50:7a:c1:ca:39:0b:27:d9: f9:56:c9:e2:d0:f0:ba:55:fa:84:78:fc:f9:a1:75: ba:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D5:94:30:AD:73:82:BE:7E:A2:FE:3E:6A:E0:36:49:38:C9:F0:76 X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:ba:42:aa:5e:59:a3:5a:01:0f:83:09:e3:c4:88:f7:e6:30: e0:c2:55:38:3b:99:cf:00:c2:78:d0:08:9a:78:fa:74:d5:f5: 69:20:3c:46:9a:b6:13:17:ce:33:3a:32:bd:0b:c1:4b:5f:79: 33:2a:54:a2:b8:75:73:c7:e7:22:22:ce:a7:fd:e3:9a:40:c0: d5:e6:b8:3f:87:b5:3d:d1:40:2b:95:55:82:4c:ea:1b:ed:a8: 99:be:74:d4:23:e8:03:cb:65:8f:f9:2c:11:52:4c:2e:ac:6d: 44:93:de:e1:96:0b:9d:04:f3:71:0b:5d:60:f5:23:95:d0:ce: 98:94:f4:c1:b6:7b:5c:5c:21:9b:3e:0b:12:60:c0:82:09:d3: e0:9f:94:39:29:b3:27:06:b9:55:55:44:3c:3e:f2:e6:07:86: af:c7:2e:1a:6c:2f:cb:55:4b:36:91:a8:79:1b:33:90:52:9a: 1f:c9:b1:b8:f2:71:e6:1d:0e:6c:05:da:b1:3b:96:e1:72:98: 64:00:e7:af:86:31:98:42:e3:52:11:ae:66:ff:e2:b2:55:b5: 91:f4:65:92:95:2c:43:5a:84:d2:68:02:7c:2d:8d:35:6c:f1: 80:2d:6b:0c:f7:e1:bf:72:42:b1:4e:ea:98:89:70:46:39:3d: c5:87:24:ff -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUCE5cL6SyxXoiZYluUgP8nTiztVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNjEwMDUyMTE0MzVaFw0yNjEwMDYyMjQ4MzVaMDMxMTAvBgNV BAMTKDVERDU5NDMwQUQ3MzgyQkU3RUEyRkUzRTZBRTAzNjQ5MzhDOUYwNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJAwzcl048IvBNpoJplUihdbpZ Fn4ebo6qIm6bS+x4IJgvTXva8atvYG0jyAWLvB3I7Nx94H5Wch3uUNF+2T2LVf5k HWXiyeYlL/Zg9w2XtCfF7o/qp247my6qSZg6WYQxKKN1+JnYGzS65xKIjB3UkLFL i3wK6z9+9mc8/upvkrcpEShQPDjoLVpcFbQN17kFGL+ptlF202OnoE+8fyvYOWRb moIpPpm/X7u5EJ/25i6Wk37ZagVoDwi4lGo+uC1yCoI3L1mmJIuxlIx0/ZG2k7q+ +GNGXBURX5W61yVTvVLVV6tWUd9QesHKOQsn2flWyeLQ8LpV+oR4/PmhdbpBAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUXdWUMK1zgr5+ov4+auA2STjJ8HYwHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQChukKqXlmjWgEPgwnjxIj3 5jDgwlU4O5nPAMJ40AiaePp01fVpIDxGmrYTF84zOjK9C8FLX3kzKlSiuHVzx+ci Is6n/eOaQMDV5rg/h7U90UArlVWCTOob7aiZvnTUI+gDy2WP+SwRUkwurG1Ek97h lgudBPNxC11g9SOV0M6YlPTBtntcXCGbPgsSYMCCCdPgn5Q5KbMnBrlVVUQ8PvLm B4avxy4abC/LVUs2kah5GzOQUpofybG48nHmHQ5sBdqxO5bhcphkAOevhjGYQuNS Ea5m/+KyVbWR9GWSlSxDWoTSaAJ8LY01bPGALWsM9+G/ckKxTuqYiXBGOT3FhyT/ -----END CERTIFICATE-----Generated at Tue Oct 6 15:14:36 2026 by rpki-client