
$ rpki-client -vvvf krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft
File: 5B9C459FED5E28921D6D57A342A855A1BA969897.mft (raw, json)
Hash identifier: NNaFb1nCfQV1mKXhCIAKhRwIcfPomKjULe7squYxIoU=
Subject key identifier: 61:A4:B0:BC:3B:63:19:3E:37:5B:23:1E:20:B5:0E:4D:83:04:1E:0B
Authority key identifier: 5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97
Certificate issuer: /CN=5B9C459FED5E28921D6D57A342A855A1BA969897
Certificate serial: 6BBED2B4C9D7C6620598BAA66165DD3AE269A9
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer
Subject info access: rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft
Manifest number: 84
Signing time: Fri 04 Sep 2026 06:43:17 +0000
Manifest this update: Fri 04 Sep 2026 06:38:17 +0000
Manifest next update: Sat 05 Sep 2026 07:20:17 +0000
Files and hashes: 1: 5B9C459FED5E28921D6D57A342A855A1BA969897.crl (hash: y0xCEsuzMsSWirSbSZ71doxAbhLf0lL15oeF3HTxobs=)
2: 326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa (hash: /ary5zP9OQDMFHRngTCodTLCsHVfTXFD9vmLwzXrQjo=)
Validation: OK
Signature path: rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl
rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:be:d2:b4:c9:d7:c6:62:05:98:ba:a6:61:65:dd:3a:e2:69:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B9C459FED5E28921D6D57A342A855A1BA969897
Validity
Not Before: Sep 4 06:38:17 2026 GMT
Not After : Sep 5 07:20:17 2026 GMT
Subject: CN=61A4B0BC3B63193E375B231E20B50E4D83041E0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:fb:16:b4:48:0f:cc:62:c0:c4:62:df:74:
dc:9d:83:e9:7e:df:d1:39:7b:97:03:49:5c:ef:2f:
1f:ab:98:ea:cd:7f:f9:2e:48:a4:d2:a8:7c:07:63:
45:c8:38:e8:fb:ad:b5:02:89:9f:76:56:af:e1:76:
25:f8:70:11:7a:dd:58:01:1d:44:1b:82:9a:0e:0e:
a1:9f:f4:64:df:96:13:d5:e1:ee:91:e0:3b:54:31:
53:34:8b:51:54:ce:7c:19:83:2d:dc:58:e0:72:64:
da:d3:b3:b7:b2:31:9e:01:25:c3:60:d5:a4:45:ed:
5d:22:85:f3:d7:e2:02:aa:7e:14:c5:9c:52:1a:f8:
45:78:70:22:3e:2f:6e:14:c5:59:09:85:b7:0b:35:
10:73:37:92:b4:e0:d3:bd:dc:0f:3d:a2:b7:e6:bb:
a7:e1:ec:81:54:81:10:76:d1:91:b6:bd:ea:ea:1a:
d8:55:82:7b:d2:5f:22:25:00:1f:80:b5:fc:5e:67:
94:be:e6:89:9d:25:04:cc:be:36:70:a6:2a:55:8a:
65:4b:9a:e6:fe:aa:a0:0e:07:61:19:e2:22:ac:98:
db:36:88:49:ae:15:6c:00:f5:b7:de:2d:fa:b7:54:
5b:56:16:3e:46:44:88:ca:ff:c3:54:d0:98:c1:6c:
d0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A4:B0:BC:3B:63:19:3E:37:5B:23:1E:20:B5:0E:4D:83:04:1E:0B
X509v3 Authority Key Identifier:
keyid:5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer
Subject Information Access:
Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:25:16:1c:ac:f5:d5:c3:b6:1b:aa:5c:48:c7:33:22:04:09:
b3:9b:ef:ce:6d:45:ea:eb:a3:ed:d0:4e:35:2c:61:9d:00:e4:
b8:b2:6c:14:73:78:2e:81:08:28:15:8b:28:65:b5:46:ae:f5:
db:fb:c5:d7:18:0b:04:0f:c8:bb:8d:bf:9a:d0:9c:ae:ca:ea:
b5:81:40:55:d3:f4:73:67:0b:40:fb:11:8b:7a:bf:d2:81:99:
ab:ee:e9:4f:9c:4b:25:9b:52:43:b9:94:24:24:38:58:cc:92:
ac:90:e3:ee:9d:e9:32:dd:b2:94:9d:05:14:e8:66:a7:48:c0:
71:31:ef:4a:89:51:e2:35:a8:00:d9:ce:63:54:e0:44:84:2f:
bc:c4:f2:36:9e:bd:d2:98:45:6e:93:46:a1:85:15:c5:cf:95:
e8:6a:7c:ab:9c:fc:21:43:da:a1:ad:43:6d:0c:e1:87:c6:6c:
fb:60:ef:16:3d:fe:46:a8:6d:0f:62:e0:75:58:8d:3a:1d:94:
cf:c3:30:ad:5a:36:82:c4:6f:65:94:f6:42:08:40:12:26:0b:
03:25:52:97:63:25:f5:32:cc:6a:bb:0f:d4:37:9a:c0:c6:34:
12:0f:38:b3:f1:1e:f4:ce:c2:f7:2f:6b:9b:d6:71:47:73:b5:
96:03:71:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:26:08 2026 by rpki-client