$ rpki-client -vvvf krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft File: 9868B8A018D41E9D418D93B52C0A31174F40F11E.mft (raw, json) Hash identifier: 5Bq2MbcETOHrjKMB+m8uEl9TBlihzHLqgRnewIJr9hM= Subject key identifier: 8C:1E:68:35:96:84:BB:9A:40:A5:8D:FE:E7:8F:DD:2E:D8:16:DF:10 Authority key identifier: 98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E Certificate issuer: /CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Certificate serial: 32615D0C7C62023CE435769E6B778301FC51781C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft Manifest number: 8B Signing time: Wed 09 Sep 2026 21:08:17 +0000 Manifest this update: Wed 09 Sep 2026 21:03:17 +0000 Manifest next update: Thu 10 Sep 2026 23:07:17 +0000 Files and hashes: 1: 9868B8A018D41E9D418D93B52C0A31174F40F11E.crl (hash: cSaZWesheC6EssFgRnGe7Yt6zyebfSiAoT1oqyHshCs=) 2: 326131343a373538363a363030303a3a2f34302d3438203d3e20313531363733.roa (hash: nAQJIz3m4DL0ffcnjUVRZFFoDNAbg8/PAwJ2tYnoprw=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.crl rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 23:07:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:61:5d:0c:7c:62:02:3c:e4:35:76:9e:6b:77:83:01:fc:51:78:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Validity Not Before: Sep 9 21:03:17 2026 GMT Not After : Sep 10 23:07:17 2026 GMT Subject: CN=8C1E68359684BB9A40A58DFEE78FDD2ED816DF10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:be:1d:e6:87:77:ad:b9:95:db:18:8c:8a:c3: 65:be:29:9f:ad:fb:56:7a:3a:13:db:9a:dd:a5:bf: 76:9b:f8:75:dc:75:93:71:14:6e:40:a1:73:8a:bc: 6f:2c:61:2f:02:73:0d:20:38:f4:52:30:6f:b3:fc: 29:a5:0d:72:50:5f:89:5b:9d:10:ee:b4:61:63:1b: 64:62:0f:02:e2:52:a8:49:18:bb:35:5b:ee:bd:cd: 47:31:be:0b:45:01:bb:8e:44:2c:de:af:e6:98:8c: 59:37:e4:ea:9f:b7:4a:f1:42:2f:24:e8:b0:06:fe: 66:ec:4e:e7:04:da:b4:c7:06:88:8e:26:6e:b9:72: 57:36:d9:00:b0:c6:f9:a8:7d:24:9a:1f:14:e3:77: 37:21:67:bf:ba:a3:b2:3c:44:08:9f:82:97:02:3b: 64:9b:58:81:a8:b0:62:87:47:3a:b6:1a:a8:1a:5a: e1:44:7e:74:03:66:1c:00:49:11:00:a3:f6:bc:92: 66:55:34:76:61:76:8d:6a:2d:ba:ef:1e:a1:06:ee: 49:1f:f6:a7:ea:7d:52:74:0b:25:e1:e6:99:c2:f3: ed:61:cf:a9:4b:11:7a:20:e3:ad:23:83:c3:45:32: b2:88:12:1a:e9:d2:b5:61:63:48:04:c5:33:6c:0c: 49:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:1E:68:35:96:84:BB:9A:40:A5:8D:FE:E7:8F:DD:2E:D8:16:DF:10 X509v3 Authority Key Identifier: keyid:98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:f3:4e:84:44:08:66:c3:23:7c:a4:82:2b:2a:8c:0f:dd:20: 47:af:b3:9e:f9:9c:a7:1c:ed:11:b5:c7:b6:6f:71:27:7c:ef: d4:27:41:c6:eb:7b:7d:c0:c6:68:f5:02:be:9e:d2:33:a5:3f: 24:7d:fc:63:30:85:52:46:f9:e9:b8:5f:c7:2a:ba:bf:46:1a: 2e:98:ac:6f:0f:b8:d3:89:43:8b:84:8b:e8:cc:5a:4f:8a:72: 23:dc:9e:fe:4f:c2:c3:a7:90:10:e2:91:f9:d3:a3:da:f7:5e: a1:68:34:14:64:48:e4:87:e9:3b:6f:3c:98:22:b7:f5:a8:bd: 20:78:10:87:ce:ee:70:0c:da:fc:11:19:50:bd:c7:eb:e3:6a: a3:24:19:0d:c9:b5:d1:21:32:e8:9f:da:36:f5:dc:d6:51:ed: 17:58:77:45:24:1d:06:2b:92:81:70:ca:64:02:5f:d2:3e:8d: a6:70:0c:09:a2:44:ae:df:c2:5e:f8:63:d5:4a:6c:0f:77:9b: d0:6f:a6:30:58:b5:0d:d5:ab:84:87:21:ab:ca:e3:ca:d9:1c: 2a:42:04:70:5c:20:44:5d:16:f1:d6:39:58:17:21:7c:e3:9a: d4:d6:5a:ff:c2:30:23:75:b9:56:c1:93:f1:04:b8:75:38:08: db:e0:1f:75 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUMmFdDHxiAjzkNXaea3eDAfxReBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2OEI4QTAxOEQ0MUU5RDQxOEQ5M0I1MkMwQTMxMTc0 RjQwRjExRTAeFw0yNjA5MDkyMTAzMTdaFw0yNjA5MTAyMzA3MTdaMDMxMTAvBgNV BAMTKDhDMUU2ODM1OTY4NEJCOUE0MEE1OERGRUU3OEZERDJFRDgxNkRGMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrvh3mh3etuZXbGIyKw2W+KZ+t +1Z6OhPbmt2lv3ab+HXcdZNxFG5AoXOKvG8sYS8Ccw0gOPRSMG+z/CmlDXJQX4lb nRDutGFjG2RiDwLiUqhJGLs1W+69zUcxvgtFAbuORCzer+aYjFk35Oqft0rxQi8k 6LAG/mbsTucE2rTHBoiOJm65clc22QCwxvmofSSaHxTjdzchZ7+6o7I8RAifgpcC O2SbWIGosGKHRzq2GqgaWuFEfnQDZhwASREAo/a8kmZVNHZhdo1qLbrvHqEG7kkf 9qfqfVJ0CyXh5pnC8+1hz6lLEXog460jg8NFMrKIEhrp0rVhY0gExTNsDEkHAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUjB5oNZaEu5pApY3+54/dLtgW3xAwHwYDVR0j BBgwFoAUmGi4oBjUHp1BjZO1LAoxF09A8R4wDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvMi85 ODY4QjhBMDE4RDQxRTlENDE4RDkzQjUyQzBBMzExNzRGNDBGMTFFLmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2U4MDVlYTVjLWQ3YTMtNDg0OC04Mzdi LTQ2OTdjY2RkNmVmZS8zLzk4NjhCOEEwMThENDFFOUQ0MThEOTNCNTJDMEEzMTE3 NEY0MEYxMUUuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS8yLzk4NjhCOEEwMThENDFFOUQ0MThE OTNCNTJDMEEzMTE3NEY0MEYxMUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBR806ERAhmwyN8pIIrKowP 3SBHr7Oe+ZynHO0Rtce2b3EnfO/UJ0HG63t9wMZo9QK+ntIzpT8kffxjMIVSRvnp uF/HKrq/RhoumKxvD7jTiUOLhIvozFpPinIj3J7+T8LDp5AQ4pH506Pa916haDQU ZEjkh+k7bzyYIrf1qL0geBCHzu5wDNr8ERlQvcfr42qjJBkNybXRITLon9o29dzW Ue0XWHdFJB0GK5KBcMpkAl/SPo2mcAwJokSu38Je+GPVSmwPd5vQb6YwWLUN1auE hyGryuPK2RwqQgRwXCBEXRbx1jlYFyF845rU1lr/wjAjdblWwZPxBLh1OAjb4B91 -----END CERTIFICATE-----Generated at Thu Sep 10 11:50:35 2026 by rpki-client