$ rpki-client -vvf krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft File: 5B9C459FED5E28921D6D57A342A855A1BA969897.mft (raw, json) Hash identifier: /ZBz8Q84u6M4DsgGtNp5CG5LxKqjQRkaAadHO8rjKlk= Subject key identifier: D3:E7:33:44:F0:91:D3:06:BC:40:FB:36:E9:09:39:6F:B0:38:5A:A9 Authority key identifier: 5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97 Certificate issuer: /CN=5B9C459FED5E28921D6D57A342A855A1BA969897 Certificate serial: 39145848B99DF3F6F7D1FB39FFAA3E4691ABDAA2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft Manifest number: 09 Signing time: Sat 06 Jun 2026 00:48:11 +0000 Manifest this update: Sat 06 Jun 2026 00:43:03 +0000 Manifest next update: Sun 07 Jun 2026 03:01:02 +0000 Files and hashes: 1: 5B9C459FED5E28921D6D57A342A855A1BA969897.crl (hash: NAYG5TQNc3OBxpvMC03Fs+Yto7Y1otjA3lNfC972yT0=) 2: 326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa (hash: /ary5zP9OQDMFHRngTCodTLCsHVfTXFD9vmLwzXrQjo=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Jun 2026 02:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:14:58:48:b9:9d:f3:f6:f7:d1:fb:39:ff:aa:3e:46:91:ab:da:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B9C459FED5E28921D6D57A342A855A1BA969897 Validity Not Before: Jun 6 00:43:03 2026 GMT Not After : Jun 7 03:01:02 2026 GMT Subject: CN=D3E73344F091D306BC40FB36E909396FB0385AA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:68:ab:37:f0:d3:20:01:8b:8c:f0:ad:96:d6: 54:0f:cc:5f:52:d9:be:75:c2:07:7a:ac:98:6a:a3: 31:fb:ac:5b:9a:35:33:c0:5a:fb:cd:b3:de:63:8f: 61:95:64:de:21:79:1c:41:92:48:90:bd:77:c1:6d: 24:46:ed:4e:d4:07:02:62:f2:df:ae:af:6f:31:ec: d0:73:64:ab:71:f9:95:bd:00:1e:51:fa:d5:96:b5: 8a:8a:5e:31:b7:ef:35:11:20:8f:37:a6:ac:7f:b3: 86:66:b8:d4:aa:72:9e:e0:56:64:8f:32:7d:2e:16: fc:fb:1c:db:b4:27:d0:fa:77:e7:17:70:41:f7:78: 53:df:56:e8:f4:39:c9:65:71:5f:ae:94:a5:cb:52: 5c:63:de:99:de:01:e0:3e:c9:c7:b5:3f:28:7b:b8: 2a:df:ee:75:48:08:ef:db:56:8c:c5:e7:8a:a4:a0: 20:cf:b8:9a:16:54:8f:eb:8b:78:cf:93:16:59:09: 7c:89:76:33:a7:1b:91:b9:b9:7b:c5:d3:c7:87:a3: 63:d6:fb:83:48:2a:c0:aa:7f:7e:78:e1:44:fb:f7: b6:68:2d:1c:45:c8:65:c4:49:2a:2c:46:ce:9c:20: ae:7e:18:5e:bf:c6:47:06:ce:79:2e:01:2e:25:93: fc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E7:33:44:F0:91:D3:06:BC:40:FB:36:E9:09:39:6F:B0:38:5A:A9 X509v3 Authority Key Identifier: keyid:5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ae:b9:d8:1f:f0:47:48:07:56:36:be:52:1b:d9:3a:4a:11: 65:6b:df:54:94:56:21:82:77:7b:cd:cb:4f:52:a1:0e:a3:1d: 62:e6:26:17:1e:07:c8:b3:e5:25:15:5c:c6:bb:cc:f1:27:0a: ab:32:2c:84:52:f7:53:a3:a7:30:91:57:2f:fb:f4:1c:61:b5: 2f:04:b9:2a:b5:fc:77:54:35:75:0f:e4:6a:73:bc:af:ec:39: 8f:f0:42:11:4f:ee:1f:aa:5e:eb:5e:1f:51:4f:55:d2:cc:3d: 80:0f:7d:61:ef:f2:1e:f0:13:71:f7:3f:9b:26:40:29:4c:13: d6:52:09:bb:05:92:34:78:3c:92:9a:c8:a2:e7:30:d2:4a:10: 26:57:4c:19:c0:42:21:b1:6e:02:f6:e8:50:b7:dd:b9:a2:00: 46:ad:17:2b:35:65:a7:31:82:50:dd:85:75:a1:7b:c7:78:3b: be:39:22:c3:73:31:9d:01:dc:63:fc:4a:b8:7b:76:f2:a5:ed: 73:b5:13:0e:d1:d4:5d:44:a9:de:d5:4e:f9:c6:63:d8:2d:a7: 04:ce:03:96:a3:a8:0a:53:33:51:56:a4:08:77:6f:09:aa:1b: d8:69:a2:92:06:ef:3c:85:72:54:8a:45:4f:f4:9b:9e:35:7a: d8:4e:b4:34 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUORRYSLmd8/b30fs5/6o+RpGr2qIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI5QzQ1OUZFRDVFMjg5MjFENkQ1N0EzNDJBODU1QTFC QTk2OTg5NzAeFw0yNjA2MDYwMDQzMDNaFw0yNjA2MDcwMzAxMDJaMDMxMTAvBgNV BAMTKEQzRTczMzQ0RjA5MUQzMDZCQzQwRkIzNkU5MDkzOTZGQjAzODVBQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPaKs38NMgAYuM8K2W1lQPzF9S 2b51wgd6rJhqozH7rFuaNTPAWvvNs95jj2GVZN4heRxBkkiQvXfBbSRG7U7UBwJi 8t+ur28x7NBzZKtx+ZW9AB5R+tWWtYqKXjG37zURII83pqx/s4ZmuNSqcp7gVmSP Mn0uFvz7HNu0J9D6d+cXcEH3eFPfVuj0OcllcV+ulKXLUlxj3pneAeA+yce1Pyh7 uCrf7nVICO/bVozF54qkoCDPuJoWVI/ri3jPkxZZCXyJdjOnG5G5uXvF08eHo2PW +4NIKsCqf3544UT797ZoLRxFyGXESSosRs6cIK5+GF6/xkcGznkuAS4lk/xdAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQU0+czRPCR0wa8QPs26Qk5b7A4WqkwHwYDVR0j BBgwFoAUW5xFn+1eKJIdbVejQqhVobqWmJcwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvMC81 QjlDNDU5RkVENUUyODkyMUQ2RDU3QTM0MkE4NTVBMUJBOTY5ODk3LmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8wLzVCOUM0NTlGRUQ1RTI4OTIxRDZENTdBMzQyQTg1NUEx QkE5Njk4OTcuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS8wLzVCOUM0NTlGRUQ1RTI4OTIxRDZE NTdBMzQyQTg1NUExQkE5Njk4OTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANrrnYH/BHSAdWNr5SG9k6 ShFla99UlFYhgnd7zctPUqEOox1i5iYXHgfIs+UlFVzGu8zxJwqrMiyEUvdTo6cw kVcv+/QcYbUvBLkqtfx3VDV1D+Rqc7yv7DmP8EIRT+4fql7rXh9RT1XSzD2AD31h 7/Ie8BNx9z+bJkApTBPWUgm7BZI0eDySmsii5zDSShAmV0wZwEIhsW4C9uhQt925 ogBGrRcrNWWnMYJQ3YV1oXvHeDu+OSLDczGdAdxj/Eq4e3bype1ztRMO0dRdRKne 1U75xmPYLacEzgOWo6gKUzNRVqQId28JqhvYaaKSBu88hXJUikVP9JueNXrYTrQ0 -----END CERTIFICATE-----Generated at Sat Jun 6 11:46:18 2026 by rpki-client