$ rpki-client -vvvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: G58VVzNZ5xhK3+duqk3xkOT5+SXHIa5Z6UUeBNUo3VM= Subject key identifier: 8A:43:18:F9:46:23:B5:18:36:BE:7B:33:67:19:1F:0D:43:2F:88:32 Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 345171E14348B6F2192DD84CB419EDA0FC2DFDB9 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: 0375 Signing time: Sat 14 Nov 2026 16:24:13 +0000 Manifest this update: Sat 14 Nov 2026 16:19:13 +0000 Manifest next update: Sun 15 Nov 2026 19:59:13 +0000 Files and hashes: 1: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: Luw0kpBNoMeO6KiUpGjre/AK5djZnqorfHjwg/Wlp8U=) 2: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: JX8MZMidVpDvMl1kvP+85ppT/iMcv1vVMBW6voLjwXs=) 3: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: +6IGfj4KE5Fon357Mz4hY46Lj0lkrQVIhXV3Upqg2+Y=) 4: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: Oy1mSyisXYrn3vcoOGy6axMtnSIX1xCofVEIpBbtceA=) 5: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: BZJT8EbwRaDxjL7KKjabnaQJK3brt6+TkqqK548Wl2g=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 02:44:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:51:71:e1:43:48:b6:f2:19:2d:d8:4c:b4:19:ed:a0:fc:2d:fd:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: Nov 14 16:19:13 2026 GMT Not After : Nov 15 19:59:13 2026 GMT Subject: CN=8A4318F94623B51836BE7B3367191F0D432F8832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9d:09:36:ea:71:91:f0:fa:8b:0a:12:c9:6a: 43:75:55:d4:7c:03:cb:1f:05:b5:a7:5e:4e:79:d2: 33:79:e6:04:0f:f0:61:36:06:af:13:f3:61:fc:9c: dc:99:fb:a7:48:8b:b7:95:48:ad:8c:67:4d:45:0e: a7:d6:2f:74:da:49:70:4a:0a:e4:63:bb:00:42:cf: 2c:3d:18:dc:f0:70:ec:34:ce:58:9d:58:f5:31:df: c6:79:32:da:16:d1:2d:c1:aa:77:ec:8b:26:ca:8a: f5:bb:74:ec:50:58:99:f4:c9:bc:20:ed:ee:31:69: 03:5f:2c:87:89:b5:a9:49:34:ce:35:37:cf:dc:f5: 79:cb:35:7f:c6:36:53:1c:9d:fd:5a:03:cc:72:cd: 5a:05:c6:39:63:0e:49:a2:b7:aa:07:95:91:0a:17: e5:3c:f2:35:0c:7b:61:48:bc:24:86:77:cc:ac:ee: b7:5f:48:91:b1:35:f9:08:8b:fe:d9:72:fa:0f:c0: 41:83:87:95:c9:e8:e3:81:0c:fd:32:3d:f9:20:75: fa:c5:cb:30:f7:d3:30:52:97:a3:c0:fa:cb:46:f7: 4b:9e:3f:5f:8c:0c:00:11:c0:7d:92:2e:f0:b5:fb: 14:bf:fa:0b:08:08:54:5b:65:65:12:eb:2e:40:63: 89:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:43:18:F9:46:23:B5:18:36:BE:7B:33:67:19:1F:0D:43:2F:88:32 X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:2b:96:68:81:d0:29:df:ef:e3:05:65:ee:eb:e3:64:cb:15: eb:ec:55:5e:a6:d2:4c:de:ad:f0:f9:33:87:1b:9f:c0:e2:f3: 48:6e:69:2d:25:d0:58:d2:ba:c8:f5:93:24:31:75:c8:e0:d5: 47:62:87:63:00:67:7d:6e:93:ef:26:d8:74:24:f5:15:1b:15: 69:da:b7:81:8c:b7:70:cf:ac:eb:b7:05:a5:43:2d:c1:65:d8: 6d:89:4d:5d:c8:18:e0:c3:95:5d:4a:0a:1a:b9:35:83:b0:8a: 54:e8:55:ca:cc:ad:60:02:dc:91:7f:64:2b:a1:79:c4:57:56: 5b:82:59:b9:5d:c0:b1:9a:1a:f3:fa:46:0c:ee:97:39:7d:7a: 64:68:27:6a:7d:06:60:f9:b5:fa:39:ba:52:1b:a6:b3:0a:78: 0e:bb:75:fd:ea:cb:83:86:b9:c9:1c:d2:37:51:42:be:f6:97: 23:e0:71:77:33:b6:c8:ca:80:0c:88:65:0c:c0:4f:95:60:d5: 52:b2:dd:98:ed:67:c2:0b:79:fd:d8:f9:9b:00:d5:4c:d3:5c: 9f:1b:48:bb:e9:68:50:ba:f6:8d:8a:78:ba:be:f5:e9:7b:8a: 87:18:2a:44:b8:7a:9b:10:44:22:9a:8d:ad:2c:b5:81:65:6d: 51:52:b3:ac -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUNFFx4UNItvIZLdhMtBntoPwt/bkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNjExMTQxNjE5MTNaFw0yNjExMTUxOTU5MTNaMDMxMTAvBgNV BAMTKDhBNDMxOEY5NDYyM0I1MTgzNkJFN0IzMzY3MTkxRjBENDMyRjg4MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4nQk26nGR8PqLChLJakN1VdR8 A8sfBbWnXk550jN55gQP8GE2Bq8T82H8nNyZ+6dIi7eVSK2MZ01FDqfWL3TaSXBK CuRjuwBCzyw9GNzwcOw0zlidWPUx38Z5MtoW0S3BqnfsiybKivW7dOxQWJn0ybwg 7e4xaQNfLIeJtalJNM41N8/c9XnLNX/GNlMcnf1aA8xyzVoFxjljDkmit6oHlZEK F+U88jUMe2FIvCSGd8ys7rdfSJGxNfkIi/7ZcvoPwEGDh5XJ6OOBDP0yPfkgdfrF yzD30zBSl6PA+stG90ueP1+MDAARwH2SLvC1+xS/+gsICFRbZWUS6y5AY4mBAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUikMY+UYjtRg2vnszZxkfDUMviDIwHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC6K5ZogdAp3+/jBWXu6+Nk yxXr7FVeptJM3q3w+TOHG5/A4vNIbmktJdBY0rrI9ZMkMXXI4NVHYodjAGd9bpPv Jth0JPUVGxVp2reBjLdwz6zrtwWlQy3BZdhtiU1dyBjgw5VdSgoauTWDsIpU6FXK zK1gAtyRf2QroXnEV1Zbglm5XcCxmhrz+kYM7pc5fXpkaCdqfQZg+bX6ObpSG6az CngOu3X96suDhrnJHNI3UUK+9pcj4HF3M7bIyoAMiGUMwE+VYNVSst2Y7WfCC3n9 2PmbANVM01yfG0i76WhQuvaNini6vvXpe4qHGCpEuHqbEEQimo2tLLWBZW1RUrOs -----END CERTIFICATE-----Generated at Sat Nov 14 22:21:10 2026 by rpki-client