$ rpki-client -vvvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: 3LKaVfK7m1FQh3Kn6xi5VVRvMNdXSYXxrAB/DFj1Ha0= Subject key identifier: E4:64:D0:F3:25:FF:CA:E9:10:FA:24:C2:9F:F7:E6:2A:B1:2E:A5:74 Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 332B89C66E49427AC34C4EB9A16479FCF81764CB Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: 032C Signing time: Mon 21 Sep 2026 01:19:35 +0000 Manifest this update: Mon 21 Sep 2026 01:14:35 +0000 Manifest next update: Tue 22 Sep 2026 01:46:35 +0000 Files and hashes: 1: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: Oy1mSyisXYrn3vcoOGy6axMtnSIX1xCofVEIpBbtceA=) 2: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: BZJT8EbwRaDxjL7KKjabnaQJK3brt6+TkqqK548Wl2g=) 3: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: +6IGfj4KE5Fon357Mz4hY46Lj0lkrQVIhXV3Upqg2+Y=) 4: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: chuRsOM9TTTqN0OvYec8kGeaWeqD4fOgCIDsNArEnRI=) 5: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: JX8MZMidVpDvMl1kvP+85ppT/iMcv1vVMBW6voLjwXs=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 13:29:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:2b:89:c6:6e:49:42:7a:c3:4c:4e:b9:a1:64:79:fc:f8:17:64:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: Sep 21 01:14:35 2026 GMT Not After : Sep 22 01:46:35 2026 GMT Subject: CN=E464D0F325FFCAE910FA24C29FF7E62AB12EA574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:4c:eb:dc:12:86:f7:f5:97:a2:26:0a:f4: 77:cd:ab:ff:b0:fe:74:8e:26:43:5e:ae:e6:f7:cb: 6a:3a:8f:e6:ac:1d:da:ad:e3:a4:0d:79:63:41:49: 2e:68:c6:e8:62:f7:c9:1d:80:ff:c1:66:5d:70:1d: ae:cd:13:36:0c:d8:24:f7:5a:34:91:00:6e:09:89: 85:e0:97:bd:c6:4e:02:42:e5:b5:20:a5:60:f5:33: c8:4d:35:45:da:1b:17:c0:28:18:37:11:78:2f:d1: ec:3f:d2:ed:77:5e:b2:f0:c2:b4:6e:22:26:52:12: 86:6a:4e:a9:93:bb:a9:81:ca:9b:82:a9:7e:bf:99: 05:f2:8a:bf:7b:cc:33:71:31:70:ed:59:d8:53:08: 09:54:d0:cb:e8:43:c6:88:13:20:00:e0:6b:2b:69: 73:20:64:1f:96:ad:eb:a2:1e:07:8c:4d:b9:6c:a9: 91:eb:80:1a:85:63:6c:89:0b:32:40:59:f1:87:a5: ce:b3:65:18:16:72:53:a4:56:74:c7:48:de:f0:5f: 27:42:52:e3:7e:51:86:15:6c:49:2b:18:2e:76:65: 4f:a5:c3:cf:c7:7b:39:54:93:c4:02:d1:bc:30:df: a2:d7:34:92:5a:2a:4b:b3:3b:74:6b:23:a0:c8:df: 37:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:64:D0:F3:25:FF:CA:E9:10:FA:24:C2:9F:F7:E6:2A:B1:2E:A5:74 X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:38:e5:72:f7:1e:1f:c7:c6:23:62:9c:dc:35:e2:22:3c:84: 78:b4:c6:99:ee:47:88:a8:3a:87:7c:55:c2:f0:bb:05:de:68: fb:16:47:30:5f:7a:de:ec:35:ec:e5:ff:e0:df:a4:e6:d0:b2: 30:58:80:d1:6b:67:d6:5d:a3:97:71:97:8d:6f:3e:4c:29:e7: 37:d2:b0:64:1a:88:ac:ef:dc:8c:96:7f:ce:11:df:65:14:6a: eb:76:9f:bf:f6:71:41:a1:09:52:a8:43:16:c6:fc:38:bb:8e: 8d:53:15:cd:7f:1b:29:e9:07:30:ee:51:11:61:55:ee:91:ce: 6c:09:81:06:de:bd:34:f3:d0:72:eb:d3:84:74:97:0b:34:ae: 6a:3b:e6:2f:79:91:68:21:38:8b:07:f4:40:67:e5:0f:e1:6b: 3d:1c:1c:19:9a:c0:46:08:5e:93:07:a1:4d:d2:2c:b3:ec:54: 4f:c3:02:62:a2:40:cf:b6:b9:95:bc:c1:2d:19:31:57:de:53: 65:9f:1c:ae:cb:a7:65:46:97:b4:fb:dc:bc:51:9d:9b:2d:d8: 70:41:93:1d:c8:bb:ed:06:7b:fa:97:9c:c1:16:25:bd:c3:f1: 91:d6:d6:31:f1:0d:86:f5:57:d7:03:e1:c6:84:1f:6b:bf:96: ab:48:10:ce -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUMyuJxm5JQnrDTE65oWR5/PgXZMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNjA5MjEwMTE0MzVaFw0yNjA5MjIwMTQ2MzVaMDMxMTAvBgNV BAMTKEU0NjREMEYzMjVGRkNBRTkxMEZBMjRDMjlGRjdFNjJBQjEyRUE1NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCih0zr3BKG9/WXoiYK9HfNq/+w /nSOJkNerub3y2o6j+asHdqt46QNeWNBSS5oxuhi98kdgP/BZl1wHa7NEzYM2CT3 WjSRAG4JiYXgl73GTgJC5bUgpWD1M8hNNUXaGxfAKBg3EXgv0ew/0u13XrLwwrRu IiZSEoZqTqmTu6mBypuCqX6/mQXyir97zDNxMXDtWdhTCAlU0MvoQ8aIEyAA4Gsr aXMgZB+WreuiHgeMTblsqZHrgBqFY2yJCzJAWfGHpc6zZRgWclOkVnTHSN7wXydC UuN+UYYVbEkrGC52ZU+lw8/HezlUk8QC0bww36LXNJJaKkuzO3RrI6DI3zetAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQU5GTQ8yX/yukQ+iTCn/fmKrEupXQwHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDZOOVy9x4fx8YjYpzcNeIi PIR4tMaZ7keIqDqHfFXC8LsF3mj7FkcwX3re7DXs5f/g36Tm0LIwWIDRa2fWXaOX cZeNbz5MKec30rBkGois79yMln/OEd9lFGrrdp+/9nFBoQlSqEMWxvw4u46NUxXN fxsp6Qcw7lERYVXukc5sCYEG3r0089By69OEdJcLNK5qO+YveZFoITiLB/RAZ+UP 4Ws9HBwZmsBGCF6TB6FN0iyz7FRPwwJiokDPtrmVvMEtGTFX3lNlnxyuy6dlRpe0 +9y8UZ2bLdhwQZMdyLvtBnv6l5zBFiW9w/GR1tYx8Q2G9VfXA+HGhB9rv5arSBDO -----END CERTIFICATE-----Generated at Mon Sep 21 10:20:44 2026 by rpki-client