$ rpki-client -vvf krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft File: 9868B8A018D41E9D418D93B52C0A31174F40F11E.mft (raw, json) Hash identifier: DkWC1Tq9tpij3CginD2NsLRTDoAWqmWmjvrdva6TI24= Subject key identifier: D0:F1:B1:B1:B1:A7:79:05:15:FF:0F:F3:3D:3B:D0:10:D6:CD:3C:3C Authority key identifier: 98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E Certificate issuer: /CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Certificate serial: 73F13FE15F8C3DCDCEBD0D8FBA64E9C84A58D569 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft Manifest number: 09 Signing time: Fri 05 Jun 2026 22:20:06 +0000 Manifest this update: Fri 05 Jun 2026 22:15:06 +0000 Manifest next update: Sat 06 Jun 2026 22:52:06 +0000 Files and hashes: 1: 9868B8A018D41E9D418D93B52C0A31174F40F11E.crl (hash: WyMMaXmETOV5CKKALZeWzyDNzT95VoKPsSHHVfBVobg=) 2: 326131343a373538363a363030303a3a2f34302d3438203d3e20313531363733.roa (hash: nAQJIz3m4DL0ffcnjUVRZFFoDNAbg8/PAwJ2tYnoprw=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.crl rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Jun 2026 21:32:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:f1:3f:e1:5f:8c:3d:cd:ce:bd:0d:8f:ba:64:e9:c8:4a:58:d5:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Validity Not Before: Jun 5 22:15:06 2026 GMT Not After : Jun 6 22:52:06 2026 GMT Subject: CN=D0F1B1B1B1A7790515FF0FF33D3BD010D6CD3C3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:35:70:46:dc:12:b0:20:d9:ba:98:1d:43:40: 11:b7:19:92:60:af:8e:78:eb:32:d5:47:cf:06:20: 4d:85:c1:eb:f6:ad:12:50:64:f5:48:a6:c5:c0:10: 59:f6:10:bc:9d:54:b1:6b:a5:c4:a5:41:f9:9d:4e: b9:92:1a:02:b1:ea:5f:85:be:da:e4:32:13:35:87: d4:c3:ce:6e:e2:3a:d4:b5:fc:8e:27:d9:2f:57:f3: 22:d4:fa:25:ca:ea:d9:19:dd:ac:bc:a7:82:e7:ac: d6:d4:ab:ec:2d:81:7c:83:15:da:4a:5c:b3:42:36: d8:70:76:ed:9b:a8:36:0c:9c:05:c8:4f:b6:1d:d3: ec:2e:6d:53:55:af:1c:70:f5:11:ee:bb:66:7e:4c: 3d:34:90:38:dd:56:14:ed:ff:f4:cd:a4:59:32:84: 13:2c:39:65:25:ec:f4:dc:66:ff:2d:fd:ce:6b:33: 2f:40:bf:a7:6f:a5:d7:54:24:84:11:f5:a4:26:21: 88:ea:31:d2:af:58:d7:0e:dc:b4:9f:75:af:a9:ba: 2f:c6:16:3d:ab:23:39:5a:62:75:b3:ab:67:15:9c: cd:64:7d:b6:68:ed:a3:85:7e:3c:25:13:22:e4:99: 2b:b0:61:16:d6:c7:8b:70:35:c7:2d:48:dc:f4:82: d6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F1:B1:B1:B1:A7:79:05:15:FF:0F:F3:3D:3B:D0:10:D6:CD:3C:3C X509v3 Authority Key Identifier: keyid:98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:78:32:0a:22:4a:1b:a1:60:fe:db:e3:83:ba:d3:fe:ae:0a: 35:d6:53:38:26:4a:73:05:d7:f4:02:ad:fd:c3:f0:38:21:b1: 5c:6f:4b:d6:05:fc:ad:8a:c7:83:91:c5:07:30:5a:0a:0b:83: 40:ad:6e:35:6d:4a:ab:46:72:99:07:63:d2:eb:fa:9e:7c:e1: 98:12:01:75:28:22:72:4b:ba:62:d7:34:c1:d9:e3:5e:9a:16: 09:45:08:e9:7b:be:19:e1:91:c0:ec:6b:a3:6c:6f:6a:d9:68: 33:be:23:05:1d:40:36:df:61:53:6f:04:ea:da:cc:dd:0d:85: 08:8c:49:ba:4f:5f:17:6c:c2:83:5d:e6:bb:cd:d0:88:bd:cb: d9:a4:fa:80:c4:0f:96:75:d5:21:9a:e6:74:12:1d:f1:dc:34: 7e:a9:04:81:df:bb:50:88:5b:7d:4c:ff:3a:77:43:d5:70:a4: de:8a:cf:39:0c:79:f7:b3:7d:80:a0:a7:a6:eb:dd:39:78:2d: 70:87:89:14:9a:ca:ba:e2:1a:92:25:31:35:e6:da:a2:3b:a0: 3b:3e:59:4e:3a:a3:00:c5:6f:f0:e8:03:27:55:9b:02:e6:dd: 63:35:c8:9d:d4:fd:14:1b:a4:c4:d7:b2:2a:00:9c:73:62:4b: 7e:d3:92:89 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUc/E/4V+MPc3OvQ2PumTpyEpY1WkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2OEI4QTAxOEQ0MUU5RDQxOEQ5M0I1MkMwQTMxMTc0 RjQwRjExRTAeFw0yNjA2MDUyMjE1MDZaFw0yNjA2MDYyMjUyMDZaMDMxMTAvBgNV BAMTKEQwRjFCMUIxQjFBNzc5MDUxNUZGMEZGMzNEM0JEMDEwRDZDRDNDM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsNXBG3BKwINm6mB1DQBG3GZJg r4546zLVR88GIE2Fwev2rRJQZPVIpsXAEFn2ELydVLFrpcSlQfmdTrmSGgKx6l+F vtrkMhM1h9TDzm7iOtS1/I4n2S9X8yLU+iXK6tkZ3ay8p4LnrNbUq+wtgXyDFdpK XLNCNthwdu2bqDYMnAXIT7Yd0+wubVNVrxxw9RHuu2Z+TD00kDjdVhTt//TNpFky hBMsOWUl7PTcZv8t/c5rMy9Av6dvpddUJIQR9aQmIYjqMdKvWNcO3LSfda+pui/G Fj2rIzlaYnWzq2cVnM1kfbZo7aOFfjwlEyLkmSuwYRbWx4twNcctSNz0gtbLAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQU0PGxsbGneQUV/w/zPTvQENbNPDwwHwYDVR0j BBgwFoAUmGi4oBjUHp1BjZO1LAoxF09A8R4wDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvMi85 ODY4QjhBMDE4RDQxRTlENDE4RDkzQjUyQzBBMzExNzRGNDBGMTFFLmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y1MzJiOWViLTJmYWUtNDhhOC05Nzkz LTMzZWVjMDY3Y2UzOS8zLzk4NjhCOEEwMThENDFFOUQ0MThEOTNCNTJDMEEzMTE3 NEY0MEYxMUUuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS8yLzk4NjhCOEEwMThENDFFOUQ0MThE OTNCNTJDMEEzMTE3NEY0MEYxMUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqeDIKIkoboWD+2+ODutP+ rgo11lM4JkpzBdf0Aq39w/A4IbFcb0vWBfytiseDkcUHMFoKC4NArW41bUqrRnKZ B2PS6/qefOGYEgF1KCJyS7pi1zTB2eNemhYJRQjpe74Z4ZHA7GujbG9q2WgzviMF HUA232FTbwTq2szdDYUIjEm6T18XbMKDXea7zdCIvcvZpPqAxA+WddUhmuZ0Eh3x 3DR+qQSB37tQiFt9TP86d0PVcKTeis85DHn3s32AoKem6905eC1wh4kUmsq64hqS JTE15tqiO6A7PllOOqMAxW/w6AMnVZsC5t1jNcid1P0UG6TE17IqAJxzYkt+05KJ -----END CERTIFICATE-----Generated at Sat Jun 6 06:55:58 2026 by rpki-client