$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: ReWedok4cx81qWs+8pr3Ho12Skn4cKlluVMu3IAMm2c= Subject key identifier: 5C:18:02:0A:6E:64:C3:0B:64:C1:89:DE:07:E5:2E:99:1E:FB:CB:47 Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 3FE3DCAA7946AA9E9F622B08D482852F490BCEDA Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: 01BA Signing time: Mon 20 Oct 2025 15:27:09 +0000 Manifest this update: Mon 20 Oct 2025 15:22:09 +0000 Manifest next update: Tue 21 Oct 2025 18:03:09 +0000 Files and hashes: 1: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: VtH6E5X9bla/lP/1oDgzLC/IGBeO4Y+MgLQlG/MHRAA=) 2: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: InllrUkC+i/L8Vq1qSaFZSxY2gcH0Pb1ZOihADOfZw0=) 3: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: piR0xY2W/Fg7dFVRqqqeApVksNlAZNhoOxCqAZQ09I0=) 4: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: atta8yWAKy1O2goFxGytEqfs9eGoT1nZF+z/gfZMydE=) 5: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: 9ieyP3BjwnrGT7jHWN0miv3BwxPneURkOZZD4j2C8Tw=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 23:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e3:dc:aa:79:46:aa:9e:9f:62:2b:08:d4:82:85:2f:49:0b:ce:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: Oct 20 15:22:09 2025 GMT Not After : Oct 21 18:03:09 2025 GMT Subject: CN=5C18020A6E64C30B64C189DE07E52E991EFBCB47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9e:b6:40:1d:6d:37:f0:c0:1c:6c:28:fd:f8: 1f:e4:ae:06:28:cc:b6:29:24:95:b7:f7:bf:b9:f6: 9c:79:69:eb:be:d1:20:5d:de:71:4c:23:12:65:d5: 44:20:e5:8f:72:a2:ac:32:46:32:28:fa:60:25:1a: 2a:27:70:22:ed:25:26:bd:6f:3a:80:8b:7e:f7:5b: e9:12:6e:50:f4:4a:05:81:83:d5:67:50:ce:4b:ae: 68:15:13:4b:73:22:c8:6a:84:7a:c8:b0:5f:cd:ed: 8d:c9:2a:f5:fa:e6:e2:5c:8c:3d:ab:19:5f:64:6e: ed:dd:0f:84:f1:92:d8:b5:d6:2a:90:6b:13:0e:fb: 7c:58:66:36:97:1b:e8:03:d7:53:bd:6f:ac:bb:79: 30:ac:c7:81:a7:bf:ff:0a:10:d0:91:e1:ac:9c:dc: af:50:b2:b3:e0:82:bb:92:33:d2:85:10:15:4f:34: 46:b4:11:cd:b0:8b:13:53:82:86:af:09:74:91:6c: 77:c1:a5:56:2b:a1:cc:8f:5b:c9:66:58:b3:a8:fe: bb:cb:9c:d3:85:8c:2e:ad:09:ca:18:12:35:9c:8d: f7:f6:a7:44:65:54:ce:70:ca:16:8d:ad:15:70:90: 20:10:54:2a:b9:4f:e0:62:6e:d2:86:9d:26:b1:b7: 34:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:18:02:0A:6E:64:C3:0B:64:C1:89:DE:07:E5:2E:99:1E:FB:CB:47 X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:73:6f:43:8a:02:13:78:97:69:93:4c:8e:92:78:37:1a:b8: 5d:55:a2:76:78:c4:7b:74:4c:56:af:c4:9b:5a:3b:84:09:10: d6:93:d9:9e:52:6e:16:44:da:39:46:86:10:bc:4d:bc:8d:4b: c8:81:66:c4:57:6c:99:74:a6:c2:c9:0f:07:8f:98:04:e5:c4: 05:04:ca:c4:02:28:26:81:b5:1d:ca:4b:f3:0d:7d:82:88:28: 06:7e:b6:68:66:0a:05:b7:ee:fa:6d:66:0b:8f:09:ca:a1:5a: db:9b:c5:ed:57:90:1c:84:96:21:25:c8:71:fd:d8:29:a6:1e: 14:80:cb:7f:bc:04:03:29:0e:7c:68:7b:0a:e2:a7:b9:d6:35: fc:86:a9:e1:f3:c9:aa:ea:7d:41:11:8f:92:67:08:ef:c4:cc: 5a:ad:15:73:57:e8:75:cc:16:7c:16:5e:e6:c6:7b:21:c1:37: 2b:9b:16:dd:8b:77:b5:69:6d:c3:58:55:85:fb:06:2f:3d:b0: ba:39:4a:86:a6:8d:61:b6:31:01:0c:61:e6:58:0c:2e:2b:06: 1e:e2:fe:fb:78:c0:e0:d8:de:9c:89:c3:93:de:4a:5a:99:f6: 7b:1e:fa:ea:d4:a1:c2:bf:af:df:6c:d8:46:0c:ee:08:93:74: 38:d2:15:36 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUP+PcqnlGqp6fYisI1IKFL0kLztowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNTEwMjAxNTIyMDlaFw0yNTEwMjExODAzMDlaMDMxMTAvBgNV BAMTKDVDMTgwMjBBNkU2NEMzMEI2NEMxODlERTA3RTUyRTk5MUVGQkNCNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcnrZAHW038MAcbCj9+B/krgYo zLYpJJW397+59px5aeu+0SBd3nFMIxJl1UQg5Y9yoqwyRjIo+mAlGioncCLtJSa9 bzqAi373W+kSblD0SgWBg9VnUM5LrmgVE0tzIshqhHrIsF/N7Y3JKvX65uJcjD2r GV9kbu3dD4Txkti11iqQaxMO+3xYZjaXG+gD11O9b6y7eTCsx4Gnv/8KENCR4ayc 3K9QsrPggruSM9KFEBVPNEa0Ec2wixNTgoavCXSRbHfBpVYrocyPW8lmWLOo/rvL nNOFjC6tCcoYEjWcjff2p0RlVM5wyhaNrRVwkCAQVCq5T+BibtKGnSaxtzShAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUXBgCCm5kwwtkwYneB+UumR77y0cwHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkc29DigITeJdpk0yOkng3 GrhdVaJ2eMR7dExWr8SbWjuECRDWk9meUm4WRNo5RoYQvE28jUvIgWbEV2yZdKbC yQ8Hj5gE5cQFBMrEAigmgbUdykvzDX2CiCgGfrZoZgoFt+76bWYLjwnKoVrbm8Xt V5AchJYhJchx/dgpph4UgMt/vAQDKQ58aHsK4qe51jX8hqnh88mq6n1BEY+SZwjv xMxarRVzV+h1zBZ8Fl7mxnshwTcrmxbdi3e1aW3DWFWF+wYvPbC6OUqGpo1htjEB DGHmWAwuKwYe4v77eMDg2N6cicOT3kpamfZ7Hvrq1KHCv6/fbNhGDO4Ik3Q40hU2 -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:58 2025 by rpki-client