$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: a0qLO+y93ofjLQ5cnNFM+7RqCIICJGjw7uC3jDMXHco= Subject key identifier: 03:22:53:78:B6:6C:21:2F:FB:46:64:BB:59:DA:4E:E6:38:D6:14:C8 Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 64C03C3A585980D85F2DE355AD64B45F4EF882C1 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: 0113 Signing time: Mon 02 Jun 2025 05:46:38 +0000 Manifest this update: Mon 02 Jun 2025 05:41:38 +0000 Manifest next update: Tue 03 Jun 2025 07:21:38 +0000 Files and hashes: 1: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: VtH6E5X9bla/lP/1oDgzLC/IGBeO4Y+MgLQlG/MHRAA=) 2: 34352e3133322e3139312e302f32342d3234203d3e2030.roa (hash: eOQL6KtS/fp/gIl2Pd8Tq6HVnPxMLD1miARzzAEJtqE=) 3: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: InllrUkC+i/L8Vq1qSaFZSxY2gcH0Pb1ZOihADOfZw0=) 4: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: IvJNMSLoGUgbUWXHSmfEbsXHAapI+F/ocfyN6ufm/nY=) 5: 34352e3133322e3139302e302f32342d3234203d3e2033393730.roa (hash: ZvFIRI5Y2rVZcFk84QTgqRybDF5ljbI4FjwVY0yfJVE=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Jun 2025 20:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c0:3c:3a:58:59:80:d8:5f:2d:e3:55:ad:64:b4:5f:4e:f8:82:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: Jun 2 05:41:38 2025 GMT Not After : Jun 3 07:21:38 2025 GMT Subject: CN=03225378B66C212FFB4664BB59DA4EE638D614C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:82:0b:a6:b4:3c:62:7c:26:27:19:cf:74:45: fc:f7:85:62:a5:06:71:4a:e3:f3:8c:9a:ed:3e:bf: e8:18:63:ac:8d:39:c5:7e:07:95:70:46:c6:26:c7: 7e:ac:c3:28:f6:1c:1d:64:49:9c:70:4a:86:42:b0: 4e:f0:ae:f7:07:ab:ad:f4:02:08:73:d0:fc:d4:c4: df:18:e3:81:cd:05:bf:3f:6d:e6:4c:a3:d8:48:86: 6b:d9:4c:ba:00:6a:01:0a:94:f9:dc:a9:81:a0:24: 50:9f:ef:73:5a:32:8f:d1:fb:6b:2e:67:ec:67:b4: 31:bd:3a:ff:a0:02:99:90:59:b1:79:ed:cc:0a:a0: 9c:d7:fd:7d:7f:bd:0c:50:1d:ce:3a:57:4c:80:41: b0:7a:bf:af:61:6a:a4:8e:7d:d0:cc:21:cc:dd:62: 9f:8e:05:71:18:d6:20:f6:86:7e:52:e4:5f:93:42: 54:6b:9a:3a:32:3d:d3:25:20:f7:fc:8b:57:8c:74: 59:42:97:80:f6:85:4f:69:0c:6d:30:ca:27:96:bd: 02:07:42:29:f2:8c:c4:ed:e6:4b:c8:c7:72:59:e4: ec:ac:b5:bf:2b:ef:39:49:27:c7:14:d6:5a:0e:bb: 60:16:3c:3d:19:f5:67:f0:69:28:2f:0e:d5:53:60: f3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:22:53:78:B6:6C:21:2F:FB:46:64:BB:59:DA:4E:E6:38:D6:14:C8 X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:5a:bc:0c:77:5a:4e:55:9d:c2:f2:1f:e2:77:8e:65:bd:2e: 06:44:df:81:c6:6d:5c:97:76:f9:13:10:87:17:85:f1:b1:9b: fd:6c:00:11:8b:05:88:99:eb:0c:82:09:be:ac:09:69:a0:38: 70:77:90:83:18:f5:30:f0:0f:a3:f7:70:00:42:8e:bf:52:43: 83:a1:94:a4:cd:39:ea:9c:7a:8c:00:10:db:07:52:91:81:06: 9e:6f:9b:f2:03:b7:29:bb:55:77:79:c2:bf:be:ca:61:e8:c4: 6d:59:7c:61:34:03:52:4b:fe:66:a0:d9:f2:d3:81:35:37:cd: da:d2:fd:57:e4:b2:6b:12:bc:7c:82:15:5d:5a:11:77:2f:44: e7:a7:df:9b:fa:b8:01:6a:4f:fd:7e:2f:d3:42:24:b4:a3:ad: 36:18:e4:19:b0:ef:98:33:20:8f:b3:50:8a:07:84:94:90:3c: b4:d7:4c:79:51:6b:f2:2b:b5:0a:2f:7d:85:15:08:61:5a:0b: d3:da:aa:86:97:7a:2b:ce:69:f4:41:6a:bf:23:c4:57:88:61: 22:e8:4b:f6:b6:6a:6e:cf:f2:02:88:2c:b0:1a:95:f9:3a:9b: 38:5e:59:e9:1f:2d:57:c6:d0:91:17:a4:62:59:ea:1e:f0:12: 21:4a:f0:b5 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUZMA8OlhZgNhfLeNVrWS0X074gsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNTA2MDIwNTQxMzhaFw0yNTA2MDMwNzIxMzhaMDMxMTAvBgNV BAMTKDAzMjI1Mzc4QjY2QzIxMkZGQjQ2NjRCQjU5REE0RUU2MzhENjE0QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxggumtDxifCYnGc90Rfz3hWKl BnFK4/OMmu0+v+gYY6yNOcV+B5VwRsYmx36swyj2HB1kSZxwSoZCsE7wrvcHq630 Aghz0PzUxN8Y44HNBb8/beZMo9hIhmvZTLoAagEKlPncqYGgJFCf73NaMo/R+2su Z+xntDG9Ov+gApmQWbF57cwKoJzX/X1/vQxQHc46V0yAQbB6v69haqSOfdDMIczd Yp+OBXEY1iD2hn5S5F+TQlRrmjoyPdMlIPf8i1eMdFlCl4D2hU9pDG0wyieWvQIH QinyjMTt5kvIx3JZ5Oystb8r7zlJJ8cU1loOu2AWPD0Z9WfwaSgvDtVTYPMFAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUAyJTeLZsIS/7RmS7WdpO5jjWFMgwHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFWrwMd1pOVZ3C8h/id45l vS4GRN+Bxm1cl3b5ExCHF4XxsZv9bAARiwWImesMggm+rAlpoDhwd5CDGPUw8A+j 93AAQo6/UkODoZSkzTnqnHqMABDbB1KRgQaeb5vyA7cpu1V3ecK/vsph6MRtWXxh NANSS/5moNny04E1N83a0v1X5LJrErx8ghVdWhF3L0Tnp9+b+rgBak/9fi/TQiS0 o602GOQZsO+YMyCPs1CKB4SUkDy010x5UWvyK7UKL32FFQhhWgvT2qqGl3orzmn0 QWq/I8RXiGEi6Ev2tmpuz/ICiCywGpX5Ops4XlnpHy1XxtCRF6RiWeoe8BIhSvC1 -----END CERTIFICATE-----Generated at Mon Jun 2 17:13:51 2025 by rpki-client