$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: Fae3O2VJGr2sf5xWOLZhF2VIn9D2t78Yx3bZXClNyls= Subject key identifier: EC:55:89:AE:81:F4:02:43:B6:1B:1D:55:05:69:E6:FB:CD:EF:35:0D Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 71D4A56B6F03D9AA460F2C8FC3BA046A7F0B287C Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: 0183 Signing time: Mon 08 Sep 2025 22:04:24 +0000 Manifest this update: Mon 08 Sep 2025 21:59:24 +0000 Manifest next update: Wed 10 Sep 2025 01:12:24 +0000 Files and hashes: 1: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: InllrUkC+i/L8Vq1qSaFZSxY2gcH0Pb1ZOihADOfZw0=) 2: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: VtH6E5X9bla/lP/1oDgzLC/IGBeO4Y+MgLQlG/MHRAA=) 3: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: piR0xY2W/Fg7dFVRqqqeApVksNlAZNhoOxCqAZQ09I0=) 4: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: 9ieyP3BjwnrGT7jHWN0miv3BwxPneURkOZZD4j2C8Tw=) 5: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: zFT7jBMygK/EShVRZq8UKee2yEvXqaseod8CWoI1JD8=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Sep 2025 13:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:d4:a5:6b:6f:03:d9:aa:46:0f:2c:8f:c3:ba:04:6a:7f:0b:28:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: Sep 8 21:59:24 2025 GMT Not After : Sep 10 01:12:24 2025 GMT Subject: CN=EC5589AE81F40243B61B1D550569E6FBCDEF350D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:16:be:7e:fc:51:7d:80:31:48:e3:e3:a5: 50:14:e9:f5:e6:75:c3:ee:cc:6d:69:e9:a3:12:06: 68:63:3d:50:d5:35:f8:91:f4:6c:8a:47:37:01:15: 72:08:e9:3e:7f:fd:29:a8:3f:4e:16:da:be:f6:c6: 67:d7:b0:72:24:09:60:f7:a9:32:0a:55:fa:df:3a: 39:87:07:ce:d3:8b:30:2a:16:9b:12:81:8f:7a:f4: 08:c0:dc:e5:31:67:ec:9b:2a:64:65:9d:3b:ee:23: 3d:50:42:d8:18:3a:f8:33:a2:20:dc:be:0d:fc:7a: 5b:1b:01:f2:53:a8:24:5c:19:3a:11:b6:53:90:c6: 76:f9:3d:ac:50:74:e3:bd:49:ce:3e:ae:a2:5b:a5: c4:0e:8c:95:38:24:e1:08:66:c5:cd:bb:e0:92:cd: a4:3c:4c:d3:cd:2f:2a:a4:79:8f:c9:75:0f:7e:1b: a6:30:38:a5:4e:ba:c7:32:7c:df:f1:06:63:2d:89: 45:52:b9:e9:ac:22:dd:86:90:2b:f2:32:0a:07:18: 32:19:2f:56:ac:53:cd:de:2f:7d:b3:c3:0a:26:83: 86:85:ca:f8:80:20:65:5f:d2:4d:a9:d8:86:64:30: da:79:19:4c:db:d6:ae:20:b8:6c:08:35:0e:38:92: 8c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:55:89:AE:81:F4:02:43:B6:1B:1D:55:05:69:E6:FB:CD:EF:35:0D X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:8a:78:1e:6c:87:b9:5f:bf:92:9a:1a:09:e0:b6:5d:f1:68: a0:96:23:2b:c0:65:ce:13:ca:f2:25:13:5e:a5:29:3b:b5:e2: 2f:74:5a:ef:d7:8d:02:6f:f1:65:9d:7c:54:2a:47:a7:60:01: a1:8e:e0:fc:1e:ba:e7:86:01:08:a2:4d:ac:49:04:00:a6:51: ae:b1:4d:f0:16:f9:d7:bc:74:73:23:91:ef:6e:0c:21:0d:b0: 15:e4:70:d2:30:b7:ba:52:57:a0:67:15:65:dd:74:6e:44:c4: fd:d6:ef:91:f7:e6:17:c6:ec:07:d0:b2:bc:1b:cc:88:75:e8: 53:81:7f:1b:cb:2f:7b:5a:85:8c:c1:25:10:73:9b:be:89:36: 14:ba:c0:0a:9d:99:fa:b0:b0:17:ab:19:75:de:1b:92:cb:f7: ff:8e:ff:9d:78:74:07:35:e9:90:54:d8:3b:13:23:58:37:80: 8d:28:82:c4:ab:fc:41:23:d3:d9:33:b1:49:e4:01:91:1c:63: a7:81:bf:00:24:8d:a2:16:d3:cf:9c:7c:ad:36:52:ae:78:1e: 12:81:5d:6a:65:89:35:76:a0:ec:bd:dc:92:d2:63:cb:e5:a0: ad:bd:32:8d:12:14:cd:aa:ae:2b:ff:5a:f5:25:2f:c9:52:17: 01:00:af:ec -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUcdSla28D2apGDyyPw7oEan8LKHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNTA5MDgyMTU5MjRaFw0yNTA5MTAwMTEyMjRaMDMxMTAvBgNV BAMTKEVDNTU4OUFFODFGNDAyNDNCNjFCMUQ1NTA1NjlFNkZCQ0RFRjM1MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5xa+fvxRfYAxSOPjpVAU6fXm dcPuzG1p6aMSBmhjPVDVNfiR9GyKRzcBFXII6T5//SmoP04W2r72xmfXsHIkCWD3 qTIKVfrfOjmHB87TizAqFpsSgY969AjA3OUxZ+ybKmRlnTvuIz1QQtgYOvgzoiDc vg38elsbAfJTqCRcGToRtlOQxnb5PaxQdOO9Sc4+rqJbpcQOjJU4JOEIZsXNu+CS zaQ8TNPNLyqkeY/JdQ9+G6YwOKVOuscyfN/xBmMtiUVSuemsIt2GkCvyMgoHGDIZ L1asU83eL32zwwomg4aFyviAIGVf0k2p2IZkMNp5GUzb1q4guGwINQ44koyZAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQU7FWJroH0AkO2Gx1VBWnm+83vNQ0wHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAningebIe5X7+SmhoJ4LZd 8WigliMrwGXOE8ryJRNepSk7teIvdFrv140Cb/FlnXxUKkenYAGhjuD8HrrnhgEI ok2sSQQAplGusU3wFvnXvHRzI5HvbgwhDbAV5HDSMLe6UlegZxVl3XRuRMT91u+R 9+YXxuwH0LK8G8yIdehTgX8byy97WoWMwSUQc5u+iTYUusAKnZn6sLAXqxl13huS y/f/jv+deHQHNemQVNg7EyNYN4CNKILEq/xBI9PZM7FJ5AGRHGOngb8AJI2iFtPP nHytNlKueB4SgV1qZYk1dqDsvdyS0mPL5aCtvTKNEhTNqq4r/1r1JS/JUhcBAK/s -----END CERTIFICATE-----Generated at Tue Sep 9 08:50:12 2025 by rpki-client