$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: Q3ZbgtgogZv2+Ao8hKYM2CLPurdFQZ2pxK0xzhQzcZ0= Subject key identifier: DD:8F:BC:D3:7C:E5:5A:50:6A:E0:C2:D1:EC:83:0C:BA:B0:30:44:EF Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 6A95C6AF6F69526DFB9777B78A5A068F836C53F4 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: 016C Signing time: Fri 22 Aug 2025 16:52:56 +0000 Manifest this update: Fri 22 Aug 2025 16:47:56 +0000 Manifest next update: Sat 23 Aug 2025 18:33:56 +0000 Files and hashes: 1: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: piR0xY2W/Fg7dFVRqqqeApVksNlAZNhoOxCqAZQ09I0=) 2: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: VqPOUDR6AqZQhxKgQSdc+eMYvMPIWoCYYbDYWklyky0=) 3: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: InllrUkC+i/L8Vq1qSaFZSxY2gcH0Pb1ZOihADOfZw0=) 4: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: 9ieyP3BjwnrGT7jHWN0miv3BwxPneURkOZZD4j2C8Tw=) 5: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: VtH6E5X9bla/lP/1oDgzLC/IGBeO4Y+MgLQlG/MHRAA=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Aug 2025 15:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:95:c6:af:6f:69:52:6d:fb:97:77:b7:8a:5a:06:8f:83:6c:53:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: Aug 22 16:47:56 2025 GMT Not After : Aug 23 18:33:56 2025 GMT Subject: CN=DD8FBCD37CE55A506AE0C2D1EC830CBAB03044EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:be:91:83:63:71:7c:fe:a0:1a:b6:90:6a:2d: 15:53:86:e0:dc:b8:e5:99:a2:37:d1:0b:cf:a2:65: 64:6f:ce:3b:8f:ad:3a:e4:25:97:2c:0e:30:4b:12: 24:36:d6:e1:e1:cd:c5:36:46:37:29:f2:05:e5:0d: f4:44:2a:52:18:43:ac:96:f7:f8:dc:2b:69:31:40: ac:5a:36:c2:68:b4:13:f4:54:21:40:a0:84:42:61: a4:40:da:d0:b3:92:22:8b:88:35:12:50:eb:fa:5d: 8e:e3:62:f0:9e:b3:56:81:11:40:28:f1:9a:ea:00: 21:98:0a:0f:2c:f2:96:51:2f:93:d1:09:52:b6:67: 9d:b4:4c:00:c9:f4:29:37:f4:4d:e7:ea:02:f1:de: 46:1c:8d:7f:0e:61:92:2d:ba:81:51:2d:0e:fc:cc: 3a:58:fb:78:06:21:99:b1:c6:3b:0b:84:76:58:fe: cc:e2:a8:e2:8b:df:b5:7b:9b:08:92:af:dd:82:05: cb:37:51:bc:2a:84:c6:f9:fd:b1:59:c3:dd:43:f1: 04:76:22:f9:f6:45:2e:cb:48:a3:5a:25:b6:e5:63: b3:6c:d7:8a:31:2e:cb:ba:2e:3b:03:a6:83:23:04: 0d:92:bd:4e:0c:01:f7:43:73:22:d3:31:4e:f7:f4: c8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8F:BC:D3:7C:E5:5A:50:6A:E0:C2:D1:EC:83:0C:BA:B0:30:44:EF X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e5:ce:dd:68:64:f3:bc:af:ae:79:1a:5c:37:7f:11:d7:51: 2d:3d:93:13:90:51:a1:71:57:a7:24:9b:54:b9:b7:a7:ab:0b: 83:03:03:46:9d:f1:5f:dd:88:a3:93:bc:c7:6c:36:e4:b8:a4: 52:4a:44:12:f7:7a:bc:30:05:f6:67:61:ee:ab:18:ff:37:cc: be:8f:d0:be:1e:e4:03:42:87:02:ea:89:6c:de:bb:d3:44:56: 71:4c:ce:99:46:36:ae:d8:b5:d3:b4:54:30:d3:8f:77:0c:e1: a1:96:34:78:2a:66:6e:b7:5e:80:b7:c8:bf:8d:22:db:b9:aa: 64:db:42:a0:91:04:6a:c5:a2:ee:ba:a7:0a:b0:8c:44:4c:a2: 10:66:0e:91:be:e9:1e:09:1e:55:43:02:c3:e2:29:1b:92:fb: 9c:92:85:02:29:83:37:1e:ad:00:51:19:f9:6e:13:03:06:eb: c5:c5:37:8c:1d:7c:79:42:83:37:df:7b:31:ed:0b:ae:45:ad: 18:86:ee:cb:25:c8:76:41:29:93:97:40:e4:20:5e:07:47:ea: 6b:c4:72:23:f3:f2:3d:39:86:e9:71:84:db:6e:8e:3d:3b:f8: 7d:d3:38:5c:47:46:cf:a6:3c:03:22:07:c0:33:cf:7a:30:f3: 1b:c3:3c:d7 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUapXGr29pUm37l3e3iloGj4NsU/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNTA4MjIxNjQ3NTZaFw0yNTA4MjMxODMzNTZaMDMxMTAvBgNV BAMTKEREOEZCQ0QzN0NFNTVBNTA2QUUwQzJEMUVDODMwQ0JBQjAzMDQ0RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHvpGDY3F8/qAatpBqLRVThuDc uOWZojfRC8+iZWRvzjuPrTrkJZcsDjBLEiQ21uHhzcU2Rjcp8gXlDfREKlIYQ6yW 9/jcK2kxQKxaNsJotBP0VCFAoIRCYaRA2tCzkiKLiDUSUOv6XY7jYvCes1aBEUAo 8ZrqACGYCg8s8pZRL5PRCVK2Z520TADJ9Ck39E3n6gLx3kYcjX8OYZItuoFRLQ78 zDpY+3gGIZmxxjsLhHZY/sziqOKL37V7mwiSr92CBcs3UbwqhMb5/bFZw91D8QR2 Ivn2RS7LSKNaJbblY7Ns14oxLsu6LjsDpoMjBA2SvU4MAfdDcyLTMU739Mj5AgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQU3Y+803zlWlBq4MLR7IMMurAwRO8wHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAL5c7daGTzvK+ueRpcN38R 11EtPZMTkFGhcVenJJtUubenqwuDAwNGnfFf3Yijk7zHbDbkuKRSSkQS93q8MAX2 Z2Huqxj/N8y+j9C+HuQDQocC6ols3rvTRFZxTM6ZRjau2LXTtFQw0493DOGhljR4 KmZut16At8i/jSLbuapk20KgkQRqxaLuuqcKsIxETKIQZg6RvukeCR5VQwLD4ikb kvuckoUCKYM3Hq0AURn5bhMDBuvFxTeMHXx5QoM333sx7QuuRa0Yhu7LJch2QSmT l0DkIF4HR+prxHIj8/I9OYbpcYTbbo49O/h90zhcR0bPpjwDIgfAM896MPMbwzzX -----END CERTIFICATE-----Generated at Sat Aug 23 10:46:51 2025 by rpki-client