$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: DPQ5p5FiibdtdTA1kABvOCsm3OPoq/F2DWpu0h8OisU= Subject key identifier: 91:1D:77:EE:47:E3:38:34:86:4D:E7:75:A6:64:4B:F4:FE:04:F6:7A Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 4B19582CC708D2314B7AC77DFE3A9C00269C74A2 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: 023B Signing time: Wed 25 Mar 2026 16:21:06 +0000 Manifest this update: Wed 25 Mar 2026 16:16:06 +0000 Manifest next update: Thu 26 Mar 2026 19:35:06 +0000 Files and hashes: 1: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: byvWj3Jnwix/LWxEnfJyLh7n2aVxvsxinhy9eHDXzzI=) 2: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: piR0xY2W/Fg7dFVRqqqeApVksNlAZNhoOxCqAZQ09I0=) 3: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: 9ieyP3BjwnrGT7jHWN0miv3BwxPneURkOZZD4j2C8Tw=) 4: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: +6IGfj4KE5Fon357Mz4hY46Lj0lkrQVIhXV3Upqg2+Y=) 5: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: JX8MZMidVpDvMl1kvP+85ppT/iMcv1vVMBW6voLjwXs=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 26 Mar 2026 11:15:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:19:58:2c:c7:08:d2:31:4b:7a:c7:7d:fe:3a:9c:00:26:9c:74:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: Mar 25 16:16:06 2026 GMT Not After : Mar 26 19:35:06 2026 GMT Subject: CN=911D77EE47E33834864DE775A6644BF4FE04F67A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ee:08:07:b5:33:0e:27:a3:88:cd:c1:2f:52: 57:3a:22:ee:e8:b5:ee:fc:aa:04:af:80:5b:36:06: 25:92:45:b6:3e:bf:85:5a:09:93:0a:1a:7d:d2:c9: e5:13:62:bb:70:c7:00:a4:40:39:cc:78:d8:b3:7a: cf:e7:3d:c0:cc:e5:ab:d2:50:a9:40:94:58:45:d0: a7:8a:ed:0c:12:39:d4:fe:99:04:e9:66:69:dd:4d: 80:83:87:b4:3d:9d:b6:0b:33:65:c3:df:94:3d:45: fc:e9:af:f5:12:ce:ea:ed:e4:3b:e6:23:27:38:d7: 0f:dd:74:df:c2:95:12:b6:3a:d5:56:24:e4:61:66: 7d:43:a1:e5:8d:c0:63:f6:e8:9d:10:f9:6c:05:ac: 58:cd:a7:43:25:32:6a:bb:e2:d3:07:ee:59:47:0a: 89:ae:2a:3d:a7:07:fa:c8:b3:94:fb:89:04:92:54: 89:88:a0:57:fe:88:bb:c3:d5:ba:a2:63:33:8e:18: 15:a2:8f:f1:ef:a9:4a:8d:6a:c7:56:23:23:16:cf: e0:9a:d2:bb:6f:54:91:57:fa:b8:46:30:e1:01:d8: 52:60:c7:ca:f0:f8:e7:56:eb:91:e1:86:55:9e:34: 78:b9:4d:59:36:e5:19:92:28:10:1c:48:3d:85:df: 0e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1D:77:EE:47:E3:38:34:86:4D:E7:75:A6:64:4B:F4:FE:04:F6:7A X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:c3:0a:11:f0:f2:51:1d:8e:8e:4b:04:27:71:0e:a6:d5:13: 90:d9:5c:48:c5:81:b9:79:65:77:02:f9:24:65:d0:37:ca:2d: 20:b1:af:1f:62:4c:83:30:19:4e:3f:bc:90:c8:23:07:f4:91: 9d:97:5d:50:ae:5a:2d:40:31:d5:bc:a0:6a:5d:53:08:63:ac: 6a:22:d8:0b:c8:06:01:89:3b:1e:95:da:fe:16:09:d8:9e:1a: e5:5c:f5:82:b8:9c:18:c0:ca:f4:db:7f:15:38:8c:30:a3:95: c5:3d:ab:6e:ae:d1:f7:b5:6d:71:e7:f3:3b:0b:51:c2:a2:0a: 42:41:ab:0e:44:42:96:4b:e9:64:62:fb:36:23:e9:bf:79:6e: ce:b8:e6:0c:f5:dc:4b:1a:f6:62:4f:32:69:8b:4c:22:81:94: 51:23:21:e4:63:ef:b4:51:4e:b7:fb:97:d0:83:6c:9b:27:64: a3:96:7d:90:bd:2d:9d:0e:9c:de:57:b4:3e:ee:31:ac:8d:77: 34:b4:fa:86:db:c9:08:41:5f:82:1a:ec:08:14:e1:cf:dd:56: f9:36:47:f8:2d:6c:e0:01:73:ca:4f:34:53:e9:65:cb:c6:eb: e1:8a:5e:8a:1e:9e:33:fc:4b:e7:9d:67:51:bb:1c:a2:21:8e: dd:9a:3b:43 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUSxlYLMcI0jFLesd9/jqcACacdKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNjAzMjUxNjE2MDZaFw0yNjAzMjYxOTM1MDZaMDMxMTAvBgNV BAMTKDkxMUQ3N0VFNDdFMzM4MzQ4NjRERTc3NUE2NjQ0QkY0RkUwNEY2N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu7ggHtTMOJ6OIzcEvUlc6Iu7o te78qgSvgFs2BiWSRbY+v4VaCZMKGn3SyeUTYrtwxwCkQDnMeNizes/nPcDM5avS UKlAlFhF0KeK7QwSOdT+mQTpZmndTYCDh7Q9nbYLM2XD35Q9Rfzpr/USzurt5Dvm Iyc41w/ddN/ClRK2OtVWJORhZn1DoeWNwGP26J0Q+WwFrFjNp0MlMmq74tMH7llH ComuKj2nB/rIs5T7iQSSVImIoFf+iLvD1bqiYzOOGBWij/HvqUqNasdWIyMWz+Ca 0rtvVJFX+rhGMOEB2FJgx8rw+OdW65HhhlWeNHi5TVk25RmSKBAcSD2F3w5VAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUkR137kfjODSGTed1pmRL9P4E9nowHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASwwoR8PJRHY6OSwQncQ6m 1ROQ2VxIxYG5eWV3AvkkZdA3yi0gsa8fYkyDMBlOP7yQyCMH9JGdl11QrlotQDHV vKBqXVMIY6xqItgLyAYBiTseldr+FgnYnhrlXPWCuJwYwMr0238VOIwwo5XFPatu rtH3tW1x5/M7C1HCogpCQasOREKWS+lkYvs2I+m/eW7OuOYM9dxLGvZiTzJpi0wi gZRRIyHkY++0UU63+5fQg2ybJ2Sjln2QvS2dDpzeV7Q+7jGsjXc0tPqG28kIQV+C GuwIFOHP3Vb5Nkf4LWzgAXPKTzRT6WXLxuvhil6KHp4z/EvnnWdRuxyiIY7dmjtD -----END CERTIFICATE-----Generated at Thu Mar 26 08:20:15 2026 by rpki-client