$ rpki-client -vvvf krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft File: 9868B8A018D41E9D418D93B52C0A31174F40F11E.mft (raw, json) Hash identifier: 0XF423nOhYIvgaS/hCs6PBccklx0qORviUlkBcnx8kE= Subject key identifier: 53:0A:A3:B5:FE:DF:BA:FE:F9:7A:23:1B:57:9E:73:04:BF:09:DE:20 Authority key identifier: 98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E Certificate issuer: /CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Certificate serial: 0212A03B26EDDE295E63B6424FCEB52DC1143C18 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft Manifest number: C8 Signing time: Sun 01 Nov 2026 04:26:02 +0000 Manifest this update: Sun 01 Nov 2026 04:21:02 +0000 Manifest next update: Mon 02 Nov 2026 04:36:02 +0000 Files and hashes: 1: 9868B8A018D41E9D418D93B52C0A31174F40F11E.crl (hash: ofuFZ5zC4sZzXsx5zpIDDAqQFfUjMqOyhjh/t9/Bw0o=) 2: 326131343a373538363a363030303a3a2f34302d3438203d3e20313531363733.roa (hash: nAQJIz3m4DL0ffcnjUVRZFFoDNAbg8/PAwJ2tYnoprw=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.crl rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Nov 2026 04:36:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:12:a0:3b:26:ed:de:29:5e:63:b6:42:4f:ce:b5:2d:c1:14:3c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Validity Not Before: Nov 1 04:21:02 2026 GMT Not After : Nov 2 04:36:02 2026 GMT Subject: CN=530AA3B5FEDFBAFEF97A231B579E7304BF09DE20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e4:e8:ad:15:92:c2:d6:0c:1e:1f:67:a7:d4: 39:e2:e5:e0:8e:31:bc:86:8c:05:72:d8:56:3a:fc: 2a:95:0a:e7:c2:e5:59:b3:82:f9:00:ae:e0:a5:b6: 09:33:62:46:06:98:f8:6d:c7:0e:b2:91:b9:09:86: 03:31:55:d3:c7:5e:4b:77:67:74:c5:42:09:19:2b: 37:ac:b2:7b:1c:0f:00:17:a3:7d:8b:c6:b9:ab:a4: 7b:50:75:ee:30:48:1c:8f:37:e2:66:b4:19:b6:2d: d9:4c:ad:c1:ac:58:05:dc:bc:f6:54:7f:4a:75:9d: 45:b3:da:9b:ed:c5:76:ac:2f:b2:65:b0:b9:18:36: 52:50:c5:77:25:27:ba:1c:d6:c8:b2:85:31:8c:17: f2:5e:70:54:78:88:04:3a:8c:93:18:a3:bb:c8:1c: 45:79:7b:44:80:af:01:38:10:50:03:a8:0b:b0:7d: fd:ac:0d:4b:25:b7:8a:8e:35:5b:59:fd:ec:93:36: ef:86:68:c9:b4:b9:0e:61:1e:ac:5d:1b:ea:37:a0: 38:45:b5:c9:33:53:39:c4:1d:b7:5b:ba:68:42:b1: 6b:b1:73:d2:9e:2b:61:7f:cb:21:87:27:fd:ac:4b: 54:4f:4f:e0:50:34:15:b5:3e:26:25:99:ff:c5:d6: 8b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0A:A3:B5:FE:DF:BA:FE:F9:7A:23:1B:57:9E:73:04:BF:09:DE:20 X509v3 Authority Key Identifier: keyid:98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:d8:2d:18:ec:e1:d8:01:fb:f6:74:93:a4:66:a6:5f:fc:7e: b8:37:83:37:c6:f3:51:97:26:49:38:d4:46:8e:73:ed:58:5c: 8a:ce:fc:e8:65:de:a9:2f:9e:22:71:5b:db:4b:bf:0c:1e:ef: f3:29:16:8b:00:73:31:ce:7e:78:a6:e6:26:5c:f1:54:79:e5: dc:26:a8:98:38:ba:37:99:b6:e2:9d:53:b5:e1:8d:c8:b5:4d: fd:f6:9a:e5:c1:47:c6:98:31:c2:67:de:36:0a:6c:0c:f0:11: b6:10:ea:bf:77:78:cb:cb:3a:02:e4:db:df:af:10:6b:53:d9: 49:a2:8e:e4:dd:9b:d0:35:dc:2b:fb:5e:c0:e3:d4:38:0b:36: 51:96:cc:0d:20:02:63:f9:25:6e:a2:bd:93:3a:72:eb:ab:e5: 33:bb:75:c3:d1:08:1c:fd:b3:65:73:b0:ab:92:42:65:67:4a: d6:25:d1:e7:2c:a6:69:08:b6:b7:89:f1:da:8d:be:0a:ec:eb: f4:57:0a:4e:98:07:d2:df:91:01:86:eb:e2:a3:31:34:88:74: 9a:a2:67:29:ab:89:6c:c9:76:38:d1:46:14:44:bb:86:11:0a: 42:71:55:48:c7:89:5f:81:d3:e6:e5:ae:e5:35:87:be:b7:43: 4b:87:97:14 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUAhKgOybt3ileY7ZCT861LcEUPBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2OEI4QTAxOEQ0MUU5RDQxOEQ5M0I1MkMwQTMxMTc0 RjQwRjExRTAeFw0yNjExMDEwNDIxMDJaFw0yNjExMDIwNDM2MDJaMDMxMTAvBgNV BAMTKDUzMEFBM0I1RkVERkJBRkVGOTdBMjMxQjU3OUU3MzA0QkYwOURFMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV5OitFZLC1gweH2en1Dni5eCO MbyGjAVy2FY6/CqVCufC5VmzgvkAruCltgkzYkYGmPhtxw6ykbkJhgMxVdPHXkt3 Z3TFQgkZKzessnscDwAXo32LxrmrpHtQde4wSByPN+JmtBm2LdlMrcGsWAXcvPZU f0p1nUWz2pvtxXasL7JlsLkYNlJQxXclJ7oc1siyhTGMF/JecFR4iAQ6jJMYo7vI HEV5e0SArwE4EFADqAuwff2sDUslt4qONVtZ/eyTNu+GaMm0uQ5hHqxdG+o3oDhF tckzUznEHbdbumhCsWuxc9KeK2F/yyGHJ/2sS1RPT+BQNBW1PiYlmf/F1osJAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUUwqjtf7fuv75eiMbV55zBL8J3iAwHwYDVR0j BBgwFoAUmGi4oBjUHp1BjZO1LAoxF09A8R4wDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvMi85 ODY4QjhBMDE4RDQxRTlENDE4RDkzQjUyQzBBMzExNzRGNDBGMTFFLmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2U4MDVlYTVjLWQ3YTMtNDg0OC04Mzdi LTQ2OTdjY2RkNmVmZS8zLzk4NjhCOEEwMThENDFFOUQ0MThEOTNCNTJDMEEzMTE3 NEY0MEYxMUUuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS8yLzk4NjhCOEEwMThENDFFOUQ0MThE OTNCNTJDMEEzMTE3NEY0MEYxMUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCj2C0Y7OHYAfv2dJOkZqZf /H64N4M3xvNRlyZJONRGjnPtWFyKzvzoZd6pL54icVvbS78MHu/zKRaLAHMxzn54 puYmXPFUeeXcJqiYOLo3mbbinVO14Y3ItU399prlwUfGmDHCZ942CmwM8BG2EOq/ d3jLyzoC5NvfrxBrU9lJoo7k3ZvQNdwr+17A49Q4CzZRlswNIAJj+SVuor2TOnLr q+Uzu3XD0Qgc/bNlc7CrkkJlZ0rWJdHnLKZpCLa3ifHajb4K7Ov0VwpOmAfS35EB huviozE0iHSaomcpq4lsyXY40UYURLuGEQpCcVVIx4lfgdPm5a7lNYe+t0NLh5cU -----END CERTIFICATE-----Generated at Sun Nov 1 13:03:10 2026 by rpki-client