$ rpki-client -vvvf krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft File: 5B9C459FED5E28921D6D57A342A855A1BA969897.mft (raw, json) Hash identifier: C/RZW+473J6syp4tBpUxrEWVqk0AvCMEIXziGPYYAfI= Subject key identifier: 6A:D9:4F:62:A6:0B:2B:91:76:C5:F9:8C:8A:1D:15:C6:38:F3:7B:CA Authority key identifier: 5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97 Certificate issuer: /CN=5B9C459FED5E28921D6D57A342A855A1BA969897 Certificate serial: 34541135D8A1A296F700C277CC7D0ACA4690A2E3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft Manifest number: BC Signing time: Tue 20 Oct 2026 16:30:09 +0000 Manifest this update: Tue 20 Oct 2026 16:25:09 +0000 Manifest next update: Wed 21 Oct 2026 18:29:09 +0000 Files and hashes: 1: 326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa (hash: /ary5zP9OQDMFHRngTCodTLCsHVfTXFD9vmLwzXrQjo=) 2: 5B9C459FED5E28921D6D57A342A855A1BA969897.crl (hash: qsnf/P+oHEp8+p1PRJ67yQ7PIvkK+rDN7JpnYLoFFF8=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Oct 2026 18:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:54:11:35:d8:a1:a2:96:f7:00:c2:77:cc:7d:0a:ca:46:90:a2:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B9C459FED5E28921D6D57A342A855A1BA969897 Validity Not Before: Oct 20 16:25:09 2026 GMT Not After : Oct 21 18:29:09 2026 GMT Subject: CN=6AD94F62A60B2B9176C5F98C8A1D15C638F37BCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6e:8e:81:92:3d:23:be:d3:89:2d:21:9e:98: 49:52:4a:fe:d7:3c:7f:d8:37:25:5a:74:3f:01:53: 43:b4:51:1f:17:44:0d:25:6d:19:08:ba:bb:61:e1: af:3e:50:27:89:e9:03:f2:5a:f6:90:49:6f:87:6b: 36:bc:0b:11:c4:4a:0d:a5:9e:59:a9:6f:0c:2a:b0: 76:70:ef:aa:08:a3:59:b2:ca:87:6f:bd:e3:69:e8: 8d:be:60:4e:28:62:ba:c8:1f:33:99:20:73:f4:89: 6d:47:4a:56:2d:0e:6b:98:7b:b0:21:89:51:4f:fe: af:f9:fc:af:be:83:ea:ac:0c:76:aa:53:a6:5b:25: f3:0d:5d:eb:05:63:7f:10:5e:33:f2:88:70:36:37: c0:16:a0:53:ab:1e:94:be:27:00:10:e4:b1:ce:8c: 7d:e2:87:9f:8e:7b:9b:37:e8:ac:1c:28:cd:e4:f6: 97:bf:e3:10:17:8e:a6:ff:fa:4b:df:03:32:7d:87: d2:63:11:ad:f4:4a:f2:88:b5:84:97:c2:47:06:5b: 8c:53:00:69:1b:25:bf:68:2f:c8:bb:61:9e:8f:06: 06:59:db:b1:e3:95:2d:d0:b7:1e:3b:7f:07:5e:2f: a5:96:1f:e7:2c:ab:6b:93:17:bc:c4:7b:3b:01:3e: 82:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D9:4F:62:A6:0B:2B:91:76:C5:F9:8C:8A:1D:15:C6:38:F3:7B:CA X509v3 Authority Key Identifier: keyid:5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:0b:24:f3:1a:6c:41:35:bd:a3:f0:39:1e:f8:a0:20:4c:6c: 73:4c:13:35:1c:d8:d3:07:d1:39:51:bb:bc:fa:43:25:27:67: 8c:3a:57:b9:81:7c:0a:54:0b:a6:e5:5f:ac:cf:20:18:6a:36: 0f:b9:cc:46:86:fe:65:7c:ed:d9:80:ee:2b:ce:94:cc:5f:7a: 4c:30:a4:d2:b2:54:56:a5:73:47:96:3d:08:2a:a3:cf:20:e2: f9:85:9c:7f:11:f9:b1:0e:7e:44:6f:70:91:10:eb:ed:e1:97: 96:f2:6a:00:59:db:a6:d0:1c:92:66:bd:58:5e:4e:56:67:3f: 22:68:ba:23:5c:3c:e9:6f:7d:c2:c8:f3:57:ab:6b:a6:0b:b7: bf:bf:07:33:e0:5b:b3:c1:bf:9d:53:d7:93:98:df:e1:fc:6e: 53:93:ae:1c:fa:1a:87:08:93:27:0f:f8:d0:2d:a3:3f:32:17: 77:e5:92:3b:2a:c7:b3:03:e8:a6:98:e0:a4:98:d1:0d:cf:4a: 45:7f:96:d8:6e:41:ff:ca:63:76:0d:44:88:0e:58:9c:9b:1d: c8:8a:b8:25:32:6c:11:31:c7:ed:a8:96:c3:17:c0:de:6a:51: ba:dc:c6:5c:46:1e:29:eb:9e:fa:e9:75:07:d7:1d:71:1b:e2: 4e:4a:bc:a5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUNFQRNdihopb3AMJ3zH0KykaQouMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI5QzQ1OUZFRDVFMjg5MjFENkQ1N0EzNDJBODU1QTFC QTk2OTg5NzAeFw0yNjEwMjAxNjI1MDlaFw0yNjEwMjExODI5MDlaMDMxMTAvBgNV BAMTKDZBRDk0RjYyQTYwQjJCOTE3NkM1Rjk4QzhBMUQxNUM2MzhGMzdCQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvbo6Bkj0jvtOJLSGemElSSv7X PH/YNyVadD8BU0O0UR8XRA0lbRkIurth4a8+UCeJ6QPyWvaQSW+Haza8CxHESg2l nlmpbwwqsHZw76oIo1myyodvveNp6I2+YE4oYrrIHzOZIHP0iW1HSlYtDmuYe7Ah iVFP/q/5/K++g+qsDHaqU6ZbJfMNXesFY38QXjPyiHA2N8AWoFOrHpS+JwAQ5LHO jH3ih5+Oe5s36KwcKM3k9pe/4xAXjqb/+kvfAzJ9h9JjEa30SvKItYSXwkcGW4xT AGkbJb9oL8i7YZ6PBgZZ27HjlS3Qtx47fwdeL6WWH+csq2uTF7zEezsBPoK7AgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUatlPYqYLK5F2xfmMih0Vxjjze8owHwYDVR0j BBgwFoAUW5xFn+1eKJIdbVejQqhVobqWmJcwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvMC81 QjlDNDU5RkVENUUyODkyMUQ2RDU3QTM0MkE4NTVBMUJBOTY5ODk3LmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8wLzVCOUM0NTlGRUQ1RTI4OTIxRDZENTdBMzQyQTg1NUEx QkE5Njk4OTcuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS8wLzVCOUM0NTlGRUQ1RTI4OTIxRDZE NTdBMzQyQTg1NUExQkE5Njk4OTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBACyTzGmxBNb2j8Dke+KAg TGxzTBM1HNjTB9E5Ubu8+kMlJ2eMOle5gXwKVAum5V+szyAYajYPucxGhv5lfO3Z gO4rzpTMX3pMMKTSslRWpXNHlj0IKqPPIOL5hZx/EfmxDn5Eb3CREOvt4ZeW8moA Wdum0BySZr1YXk5WZz8iaLojXDzpb33CyPNXq2umC7e/vwcz4Fuzwb+dU9eTmN/h /G5Tk64c+hqHCJMnD/jQLaM/Mhd35ZI7KsezA+immOCkmNENz0pFf5bYbkH/ymN2 DUSIDlicmx3IirglMmwRMcftqJbDF8DealG63MZcRh4p65766XUH1x1xG+JOSryl -----END CERTIFICATE-----Generated at Wed Oct 21 08:23:04 2026 by rpki-client