$ rpki-client -vvf krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft File: 9868B8A018D41E9D418D93B52C0A31174F40F11E.mft (raw, json) Hash identifier: ZWzjgysrO3/ucnBO5Ap2ks+GtPPExuG9xBWtubp/+1E= Subject key identifier: 61:58:74:CE:21:D5:87:86:C3:6F:B1:5D:FF:42:65:6D:10:95:C9:54 Authority key identifier: 98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E Certificate issuer: /CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Certificate serial: 235493524CE74B9120600FC16645097221B13086 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft Manifest number: 46 Signing time: Tue 21 Jul 2026 10:58:10 +0000 Manifest this update: Tue 21 Jul 2026 10:53:10 +0000 Manifest next update: Wed 22 Jul 2026 13:26:10 +0000 Files and hashes: 1: 326131343a373538363a363030303a3a2f34302d3438203d3e20313531363733.roa (hash: nAQJIz3m4DL0ffcnjUVRZFFoDNAbg8/PAwJ2tYnoprw=) 2: 9868B8A018D41E9D418D93B52C0A31174F40F11E.crl (hash: tFiNLiaaAZw+22vl/5bX2IS9Hon0w4/rDp0oSwxMRgg=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.crl rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 06:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:54:93:52:4c:e7:4b:91:20:60:0f:c1:66:45:09:72:21:b1:30:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Validity Not Before: Jul 21 10:53:10 2026 GMT Not After : Jul 22 13:26:10 2026 GMT Subject: CN=615874CE21D58786C36FB15DFF42656D1095C954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ed:88:1b:f9:d1:ad:68:57:6f:38:ed:5f:2c: 5b:b2:bf:f9:19:93:7e:71:67:36:9f:e5:ab:f3:7b: e7:f2:62:9d:93:fb:2d:5e:e0:76:63:e7:bd:be:c0: ee:91:41:05:fd:51:9e:83:62:11:06:6c:f9:d8:96: d8:88:38:88:74:01:26:9b:b3:36:ee:01:e5:39:b7: e2:16:56:e3:ad:b7:63:c2:8d:86:7f:9c:9d:2d:8b: 00:8a:08:5e:8c:f1:42:f6:9b:a2:5a:81:9c:1d:2f: 08:7f:55:fb:5a:c4:e2:6f:fd:41:fe:7d:d4:1d:f0: 58:8e:22:8c:cf:6c:08:43:a1:ed:f6:3e:ca:a3:96: 18:3d:80:64:32:c8:c3:73:d6:7c:9d:cc:6c:9d:44: 10:b4:4b:e2:40:7a:63:f0:a5:1a:d0:12:00:a5:41: fd:b3:99:5b:60:c5:ed:9f:ff:f0:6e:c9:a0:5b:c3: df:71:ed:ac:aa:3b:6f:2b:91:fb:c6:ce:8b:06:a3: 90:88:38:d7:8f:cc:2a:de:57:85:89:8a:56:d1:e2: 41:d6:a4:3c:10:56:3d:87:e8:b1:24:65:14:e0:ad: ba:6b:5e:f6:71:d0:db:c7:e5:90:2f:04:1f:a5:09: 3d:ec:68:74:ad:60:50:c4:c6:44:e4:93:05:99:c4: 88:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:58:74:CE:21:D5:87:86:C3:6F:B1:5D:FF:42:65:6D:10:95:C9:54 X509v3 Authority Key Identifier: keyid:98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:df:2b:08:09:20:0d:23:62:80:34:66:71:6c:06:d4:bf:0e: 56:57:0a:5b:d0:a0:0a:84:de:5d:bd:11:11:22:54:2f:ee:90: bc:0f:f0:fe:82:22:d8:36:db:ce:c3:d0:8f:2f:14:66:8e:66: b4:b7:e3:77:eb:8c:63:c4:66:25:ff:42:0f:f6:e6:81:df:db: e3:44:7c:2e:6d:fe:68:7e:d1:d0:ae:c6:8f:18:4c:1a:50:3b: 10:82:60:b3:7b:56:07:54:b9:73:e4:41:00:d9:4d:86:6a:ba: 41:e3:01:73:c2:77:47:3d:b9:5d:99:46:53:a4:2a:ad:51:65: 60:85:85:c7:e4:c7:74:ad:57:f8:54:e7:29:fe:a6:92:97:73: 16:e0:cb:4d:b0:ae:35:2e:bc:e2:b8:8d:a2:b7:e6:7e:b7:6f: 6f:73:ea:44:f5:fb:e2:45:87:19:32:cd:74:65:b6:4f:8b:e3: dd:47:75:f9:8b:b0:a0:56:45:c7:4e:ce:90:e3:29:33:5f:05: a8:14:8e:d6:b5:63:7b:38:e4:02:2a:3d:69:90:76:70:8c:07: 2c:1a:c7:b9:b9:87:7f:c5:57:16:7b:32:bc:cf:91:2c:bd:ab: a9:1a:28:3a:8f:7f:09:7f:25:36:4f:73:38:2e:c5:f7:ae:89: c4:16:b3:3f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUI1STUkznS5EgYA/BZkUJciGxMIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2OEI4QTAxOEQ0MUU5RDQxOEQ5M0I1MkMwQTMxMTc0 RjQwRjExRTAeFw0yNjA3MjExMDUzMTBaFw0yNjA3MjIxMzI2MTBaMDMxMTAvBgNV BAMTKDYxNTg3NENFMjFENTg3ODZDMzZGQjE1REZGNDI2NTZEMTA5NUM5NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs7Ygb+dGtaFdvOO1fLFuyv/kZ k35xZzaf5avze+fyYp2T+y1e4HZj572+wO6RQQX9UZ6DYhEGbPnYltiIOIh0ASab szbuAeU5t+IWVuOtt2PCjYZ/nJ0tiwCKCF6M8UL2m6JagZwdLwh/VftaxOJv/UH+ fdQd8FiOIozPbAhDoe32Psqjlhg9gGQyyMNz1nydzGydRBC0S+JAemPwpRrQEgCl Qf2zmVtgxe2f//BuyaBbw99x7ayqO28rkfvGzosGo5CIONePzCreV4WJilbR4kHW pDwQVj2H6LEkZRTgrbprXvZx0NvH5ZAvBB+lCT3saHStYFDExkTkkwWZxIipAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUYVh0ziHVh4bDb7Fd/0JlbRCVyVQwHwYDVR0j BBgwFoAUmGi4oBjUHp1BjZO1LAoxF09A8R4wDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvMi85 ODY4QjhBMDE4RDQxRTlENDE4RDkzQjUyQzBBMzExNzRGNDBGMTFFLmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y1MzJiOWViLTJmYWUtNDhhOC05Nzkz LTMzZWVjMDY3Y2UzOS8zLzk4NjhCOEEwMThENDFFOUQ0MThEOTNCNTJDMEEzMTE3 NEY0MEYxMUUuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS8yLzk4NjhCOEEwMThENDFFOUQ0MThE OTNCNTJDMEEzMTE3NEY0MEYxMUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCk3ysICSANI2KANGZxbAbU vw5WVwpb0KAKhN5dvRERIlQv7pC8D/D+giLYNtvOw9CPLxRmjma0t+N364xjxGYl /0IP9uaB39vjRHwubf5oftHQrsaPGEwaUDsQgmCze1YHVLlz5EEA2U2GarpB4wFz wndHPbldmUZTpCqtUWVghYXH5Md0rVf4VOcp/qaSl3MW4MtNsK41LrziuI2it+Z+ t29vc+pE9fviRYcZMs10ZbZPi+PdR3X5i7CgVkXHTs6Q4ykzXwWoFI7WtWN7OOQC Kj1pkHZwjAcsGse5uYd/xVcWezK8z5EsvaupGig6j38JfyU2T3M4LsX3ronEFrM/ -----END CERTIFICATE-----Generated at Tue Jul 21 21:43:31 2026 by rpki-client