$ rpki-client -vvvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: zEfJPSZv17+uT5bUisEMJwiuH5E51IPcAZlCJKekLfM= Subject key identifier: DB:43:B9:49:F6:CF:76:BB:0E:68:B1:E7:B9:50:4F:C6:84:9D:AF:9A Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 7D2C3320017268D7A0F91616F0E62E2C239B8627 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: 0376 Signing time: Sun 15 Nov 2026 11:59:13 +0000 Manifest this update: Sun 15 Nov 2026 11:54:13 +0000 Manifest next update: Mon 16 Nov 2026 15:34:13 +0000 Files and hashes: 1: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: +6IGfj4KE5Fon357Mz4hY46Lj0lkrQVIhXV3Upqg2+Y=) 2: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: Oy1mSyisXYrn3vcoOGy6axMtnSIX1xCofVEIpBbtceA=) 3: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: t+kxIU+XGodluE1yVJrEzMu1N4X0rEuBZ+KoyyeNqDs=) 4: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: BZJT8EbwRaDxjL7KKjabnaQJK3brt6+TkqqK548Wl2g=) 5: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: JX8MZMidVpDvMl1kvP+85ppT/iMcv1vVMBW6voLjwXs=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 20:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:2c:33:20:01:72:68:d7:a0:f9:16:16:f0:e6:2e:2c:23:9b:86:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: Nov 15 11:54:13 2026 GMT Not After : Nov 16 15:34:13 2026 GMT Subject: CN=DB43B949F6CF76BB0E68B1E7B9504FC6849DAF9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:60:a2:74:b9:8b:0f:f9:88:eb:65:af:cb:5b: 27:cd:20:b6:ea:2a:0d:ff:62:1a:d2:37:14:ad:3e: 3b:64:06:43:64:fe:11:96:66:7e:95:59:13:d9:4e: 15:d4:e1:eb:77:47:00:30:66:f9:9c:70:99:f5:5d: 0d:73:09:81:56:59:cd:79:ad:fc:63:b2:f0:c4:33: c6:18:1c:ae:6d:16:52:79:b2:56:7e:8b:29:89:a4: ab:b1:32:8b:0b:cb:55:db:aa:12:c3:7a:4b:77:61: 24:c5:12:ee:71:d7:36:17:d5:a9:80:f5:d9:89:81: b8:9a:88:4d:83:d6:fd:ca:af:d1:8f:55:5d:ee:02: 94:e5:a4:3b:e5:10:fd:41:ae:6e:4d:59:51:bb:38: 38:42:f9:e9:6f:5b:da:7e:52:b6:ef:05:fe:5e:c6: 05:a5:3f:22:d9:b5:69:db:82:76:58:54:ad:81:0a: c6:b1:39:e5:e2:59:84:e4:19:e0:4d:06:82:8c:77: 0c:3c:d1:00:bd:bb:d7:d1:81:47:be:47:54:58:d4: 13:63:e7:b9:90:fd:41:18:36:a2:5c:e0:56:1a:7d: 44:5d:38:0e:aa:13:52:68:37:91:84:a1:43:4e:24: a2:4d:4e:45:ee:86:34:41:c1:94:e4:ae:f5:70:46: 7e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:43:B9:49:F6:CF:76:BB:0E:68:B1:E7:B9:50:4F:C6:84:9D:AF:9A X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:cb:c7:a9:0c:1a:be:26:dd:60:a1:36:a5:79:40:fe:3e:56: fd:05:48:e4:3a:35:ec:30:52:2c:42:36:6d:f2:88:73:e6:2b: 49:33:d0:bd:53:59:75:3f:3a:60:06:cb:38:4b:0d:94:5c:86: 03:ce:69:c8:fc:9f:5f:70:ab:1d:38:e3:79:77:c2:dd:0c:be: 14:88:1e:fe:5c:18:35:15:44:11:ab:94:56:72:c0:2d:c9:55: 48:1d:ed:5a:97:18:a5:8c:5b:a8:df:ef:a7:15:67:bb:2f:3b: 12:bf:13:eb:38:af:84:66:ee:8c:2b:5d:39:5b:3e:c3:c8:7a: d5:b3:39:57:93:73:e3:17:8a:df:43:e1:63:d7:3e:25:eb:5d: 30:85:a7:c8:62:f9:92:64:87:b3:00:6d:54:ca:f6:d5:35:5e: 2e:b5:04:dc:a1:d8:5c:84:06:0e:81:58:2e:dc:b3:91:7b:99: c8:2c:49:14:be:b5:32:9b:47:5f:44:58:b4:8a:aa:64:41:9d: 5e:a3:a2:01:30:f3:59:4f:27:be:36:b2:3a:b0:c0:c6:6e:95: ba:d2:75:19:51:b2:6e:56:ad:96:24:a1:92:83:68:20:52:60: c3:c0:f5:33:90:df:d1:6f:ad:5a:7b:b1:05:dc:fc:fe:d9:a1: f2:c6:32:a7 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUfSwzIAFyaNeg+RYW8OYuLCObhicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNjExMTUxMTU0MTNaFw0yNjExMTYxNTM0MTNaMDMxMTAvBgNV BAMTKERCNDNCOTQ5RjZDRjc2QkIwRTY4QjFFN0I5NTA0RkM2ODQ5REFGOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuYKJ0uYsP+YjrZa/LWyfNILbq Kg3/YhrSNxStPjtkBkNk/hGWZn6VWRPZThXU4et3RwAwZvmccJn1XQ1zCYFWWc15 rfxjsvDEM8YYHK5tFlJ5slZ+iymJpKuxMosLy1XbqhLDekt3YSTFEu5x1zYX1amA 9dmJgbiaiE2D1v3Kr9GPVV3uApTlpDvlEP1Brm5NWVG7ODhC+elvW9p+UrbvBf5e xgWlPyLZtWnbgnZYVK2BCsaxOeXiWYTkGeBNBoKMdww80QC9u9fRgUe+R1RY1BNj 57mQ/UEYNqJc4FYafURdOA6qE1JoN5GEoUNOJKJNTkXuhjRBwZTkrvVwRn59AgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQU20O5SfbPdrsOaLHnuVBPxoSdr5owHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/y8epDBq+Jt1goTaleUD+ Plb9BUjkOjXsMFIsQjZt8ohz5itJM9C9U1l1PzpgBss4Sw2UXIYDzmnI/J9fcKsd OON5d8LdDL4UiB7+XBg1FUQRq5RWcsAtyVVIHe1alxiljFuo3++nFWe7LzsSvxPr OK+EZu6MK105Wz7DyHrVszlXk3PjF4rfQ+Fj1z4l610whafIYvmSZIezAG1UyvbV NV4utQTcodhchAYOgVgu3LORe5nILEkUvrUym0dfRFi0iqpkQZ1eo6IBMPNZTye+ NrI6sMDGbpW60nUZUbJuVq2WJKGSg2ggUmDDwPUzkN/Rb61ae7EF3Pz+2aHyxjKn -----END CERTIFICATE-----Generated at Sun Nov 15 16:30:44 2026 by rpki-client