$ rpki-client -vvf krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft File: 5B9C459FED5E28921D6D57A342A855A1BA969897.mft (raw, json) Hash identifier: FmHbzQyIcbpXy++K7XCkZ3qO7O6s7/dQYAN3uTJVheA= Subject key identifier: 5C:E1:D4:BA:6E:27:78:14:13:A2:88:38:DB:E7:05:D8:14:56:C7:B8 Authority key identifier: 5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97 Certificate issuer: /CN=5B9C459FED5E28921D6D57A342A855A1BA969897 Certificate serial: 07E716601138F20E9250E0F2C0406693D3C732D2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft Manifest number: 46 Signing time: Tue 21 Jul 2026 11:28:10 +0000 Manifest this update: Tue 21 Jul 2026 11:23:10 +0000 Manifest next update: Wed 22 Jul 2026 14:55:10 +0000 Files and hashes: 1: 5B9C459FED5E28921D6D57A342A855A1BA969897.crl (hash: 8G+JYZCrVs04chHGDaYS5DtN/ncqfNY7TQ6VtANLybA=) 2: 326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa (hash: /ary5zP9OQDMFHRngTCodTLCsHVfTXFD9vmLwzXrQjo=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:e7:16:60:11:38:f2:0e:92:50:e0:f2:c0:40:66:93:d3:c7:32:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B9C459FED5E28921D6D57A342A855A1BA969897 Validity Not Before: Jul 21 11:23:10 2026 GMT Not After : Jul 22 14:55:10 2026 GMT Subject: CN=5CE1D4BA6E27781413A28838DBE705D81456C7B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:35:d0:4c:63:a8:9c:ef:14:19:a0:ef:f3:9b: d1:f3:3b:0f:8a:1b:50:fd:bb:a0:b1:f9:63:b6:97: 06:d6:f6:70:07:dc:16:18:a4:7f:d4:6e:fa:54:60: 6e:db:b3:2c:08:fd:8d:8d:90:4d:07:3d:42:66:8e: 00:c5:d6:7c:4a:30:f5:a5:da:41:fa:bb:34:86:9e: 08:3d:18:3b:43:75:6d:ce:9b:ec:87:f8:28:98:16: 80:2e:88:fb:a0:41:ee:16:d9:84:81:ba:59:32:83: 20:2a:ce:9c:4e:bf:cc:b2:be:cc:e0:7d:f2:de:50: b6:d1:9c:eb:fc:10:f1:26:60:89:cf:98:f7:f4:e7: 25:b3:a1:69:aa:78:0f:7a:d3:dc:5d:42:72:e0:d8: 99:05:9a:bf:6d:64:d6:f0:39:e8:e9:cc:b7:2c:84: 6b:a4:15:c0:79:31:09:ba:ee:67:ea:b9:f5:1c:53: 1c:48:e3:93:7e:34:52:8e:91:d5:fb:b4:15:41:02: 6d:2f:96:d0:2a:77:29:05:de:67:4d:a0:3a:2e:44: 7c:f5:94:6a:10:f6:9d:8e:a7:a2:b3:bd:d5:50:40: 1a:0d:3f:04:bf:f7:91:f6:c9:0a:16:7a:fc:1a:ee: 96:14:6e:94:a5:1f:d2:2d:ee:d5:c8:ba:f0:72:71: 8b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E1:D4:BA:6E:27:78:14:13:A2:88:38:DB:E7:05:D8:14:56:C7:B8 X509v3 Authority Key Identifier: keyid:5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:b8:f0:41:21:cf:0c:89:58:de:1a:b0:02:1b:7d:5e:4b:3a: 0f:7e:c2:4f:37:63:8a:1a:ae:34:e6:f6:6c:8b:a9:3b:be:2d: b5:aa:57:d9:75:9d:db:18:44:28:3b:f8:fe:46:1b:2c:e2:e4: 3a:bb:3e:93:2f:01:31:cf:3c:f3:b1:55:a0:1b:2c:39:c9:a8: 5a:ab:bf:d5:ef:e4:a0:c3:6d:4e:17:89:7d:0c:57:6f:0f:c4: 0b:d7:a0:a8:9d:b2:8e:1f:8a:09:15:9f:02:9d:8a:70:4f:37: a0:b6:ca:c3:0a:9d:16:c1:73:14:10:c8:24:5c:bd:34:ca:ce: b0:76:5f:d6:f6:ca:17:e0:3c:df:42:e0:85:62:21:e7:ea:ab: f6:1c:b8:61:4b:08:1e:84:04:d3:b1:42:7f:4c:02:0f:cb:05: 68:5e:10:26:6d:85:60:ef:1c:b1:fe:d2:dd:4a:44:f0:f9:78: af:fe:6c:d5:d9:f5:6e:90:1d:84:e3:cf:2d:01:47:1d:75:ea: 0c:18:7b:61:86:95:fa:22:f8:ec:be:fb:ac:ad:38:48:96:83: a9:f9:5e:e2:0c:75:67:56:48:0c:81:1e:a8:1e:09:f9:31:b1: 1c:ed:a8:09:21:44:07:f3:39:c9:26:9c:75:d3:c0:ce:bf:53: 49:27:1b:a9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUB+cWYBE48g6SUODywEBmk9PHMtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI5QzQ1OUZFRDVFMjg5MjFENkQ1N0EzNDJBODU1QTFC QTk2OTg5NzAeFw0yNjA3MjExMTIzMTBaFw0yNjA3MjIxNDU1MTBaMDMxMTAvBgNV BAMTKDVDRTFENEJBNkUyNzc4MTQxM0EyODgzOERCRTcwNUQ4MTQ1NkM3QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJNdBMY6ic7xQZoO/zm9HzOw+K G1D9u6Cx+WO2lwbW9nAH3BYYpH/UbvpUYG7bsywI/Y2NkE0HPUJmjgDF1nxKMPWl 2kH6uzSGngg9GDtDdW3Om+yH+CiYFoAuiPugQe4W2YSBulkygyAqzpxOv8yyvszg ffLeULbRnOv8EPEmYInPmPf05yWzoWmqeA9609xdQnLg2JkFmr9tZNbwOejpzLcs hGukFcB5MQm67mfqufUcUxxI45N+NFKOkdX7tBVBAm0vltAqdykF3mdNoDouRHz1 lGoQ9p2Op6KzvdVQQBoNPwS/95H2yQoWevwa7pYUbpSlH9It7tXIuvBycYvhAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUXOHUum4neBQToog42+cF2BRWx7gwHwYDVR0j BBgwFoAUW5xFn+1eKJIdbVejQqhVobqWmJcwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvMC81 QjlDNDU5RkVENUUyODkyMUQ2RDU3QTM0MkE4NTVBMUJBOTY5ODk3LmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8wLzVCOUM0NTlGRUQ1RTI4OTIxRDZENTdBMzQyQTg1NUEx QkE5Njk4OTcuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS8wLzVCOUM0NTlGRUQ1RTI4OTIxRDZE NTdBMzQyQTg1NUExQkE5Njk4OTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCpuPBBIc8MiVjeGrACG31e SzoPfsJPN2OKGq405vZsi6k7vi21qlfZdZ3bGEQoO/j+Rhss4uQ6uz6TLwExzzzz sVWgGyw5yahaq7/V7+Sgw21OF4l9DFdvD8QL16ConbKOH4oJFZ8CnYpwTzegtsrD Cp0WwXMUEMgkXL00ys6wdl/W9soX4DzfQuCFYiHn6qv2HLhhSwgehATTsUJ/TAIP ywVoXhAmbYVg7xyx/tLdSkTw+Xiv/mzV2fVukB2E488tAUcddeoMGHthhpX6Ivjs vvusrThIloOp+V7iDHVnVkgMgR6oHgn5MbEc7agJIUQH8znJJpx108DOv1NJJxup -----END CERTIFICATE-----Generated at Tue Jul 21 22:15:34 2026 by rpki-client