$ rpki-client -vvvf krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft File: 321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft (raw, json) Hash identifier: ftL6xwQHzjiyKpigt2YS+DK5PI2oL5TIINUUJGVonrs= Subject key identifier: 7A:8F:D8:C2:AE:8C:9F:F4:ED:0F:84:0C:2B:62:26:06:C8:D2:C5:F4 Authority key identifier: 32:1F:BF:E5:FB:20:42:FF:2B:B2:EE:8F:5E:32:5D:96:3C:17:C9:97 Certificate issuer: /CN=321FBFE5FB2042FF2BB2EE8F5E325D963C17C997 Certificate serial: 71573BB258174528BDFEB55EC1F27114DB017B5A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft Manifest number: 81 Signing time: Thu 03 Sep 2026 00:18:17 +0000 Manifest this update: Thu 03 Sep 2026 00:13:17 +0000 Manifest next update: Fri 04 Sep 2026 03:29:17 +0000 Files and hashes: 1: 326130663a316363353a323431313a3a2f34382d3438203d3e20323036303639.roa (hash: +AYzvxTOdmaj71wPUnYNAWebe4QXVmX6EA2aQO2VSuQ=) 2: 321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl (hash: sSzzMOhzhdJ2kloIpX98WNA5Ll16oFTEkQYfCTRNcfw=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 04 Sep 2026 03:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:57:3b:b2:58:17:45:28:bd:fe:b5:5e:c1:f2:71:14:db:01:7b:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=321FBFE5FB2042FF2BB2EE8F5E325D963C17C997 Validity Not Before: Sep 3 00:13:17 2026 GMT Not After : Sep 4 03:29:17 2026 GMT Subject: CN=7A8FD8C2AE8C9FF4ED0F840C2B622606C8D2C5F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:49:7a:d2:21:f2:3f:72:16:dd:be:ea:dd:fb: b8:6e:92:3a:0c:f5:3f:6f:19:d6:e1:0c:85:a8:70: 60:4d:c5:13:ea:df:ca:10:4d:2b:65:cf:49:74:36: 09:80:df:28:f9:90:83:e6:16:5d:12:26:9b:62:7f: 66:e7:82:fa:03:b5:39:c2:51:16:ab:05:57:72:63: 0e:f8:de:ab:dc:97:1f:9c:f3:97:a3:fc:ba:f1:a6: 95:d5:c2:91:24:74:72:c3:78:a2:ef:18:25:21:85: 04:9a:bc:7a:c7:12:9c:e4:0f:14:aa:d4:cd:0c:a0: 6f:dc:6f:e0:ec:94:36:a1:49:36:3b:9f:15:e6:be: 73:5c:39:7f:c9:10:d8:99:a5:d1:74:a3:5b:dc:4d: 04:0e:36:26:e1:3d:1a:e2:e9:0e:45:ac:36:d1:cd: 61:ce:f5:bb:b4:8a:bb:37:14:62:ef:bb:f9:49:6b: 89:c4:f4:f4:0d:3e:ca:de:f5:0b:7c:c2:00:1f:ce: fe:8b:33:4e:c8:d1:0e:f6:0d:0a:0a:9e:8f:98:0e: 17:3f:f1:36:48:87:56:44:0a:e2:9b:c4:aa:3d:39: 66:b9:89:6d:99:69:59:68:2d:79:9d:2f:d5:78:3a: b4:e5:5e:49:e6:06:c3:84:01:eb:98:bf:84:e2:06: 19:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8F:D8:C2:AE:8C:9F:F4:ED:0F:84:0C:2B:62:26:06:C8:D2:C5:F4 X509v3 Authority Key Identifier: keyid:32:1F:BF:E5:FB:20:42:FF:2B:B2:EE:8F:5E:32:5D:96:3C:17:C9:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:54:88:37:6d:4c:09:85:92:c2:28:47:7e:b9:e8:78:2a:fc: d0:f4:d3:01:1d:ec:f5:95:b8:a3:06:78:e8:4b:cd:ae:a6:97: 06:49:51:58:04:b0:5b:90:46:c6:87:b7:45:62:82:88:01:35: 0d:45:1b:a8:52:56:d4:cb:63:42:c4:e9:23:e4:c3:8b:31:34: 7b:4f:ce:a2:aa:bc:b5:e0:c0:87:d7:18:84:21:ed:40:d3:60: a0:b9:80:eb:43:6e:1f:11:e0:4a:85:81:be:8f:d1:ef:63:04: ab:11:c1:f5:8d:4c:56:fd:6a:6e:60:3c:a4:cb:90:68:ae:83: b6:5f:5e:8b:48:5b:02:33:0e:d2:d4:a5:7b:b6:a9:a7:7b:72: 74:d1:b7:44:94:c1:3f:e6:32:83:93:7a:33:ff:61:89:70:0d: 12:2c:e8:17:71:7a:74:7e:2e:08:7e:74:61:85:2b:e2:3f:e8: 03:19:66:c1:fe:c6:23:c6:e2:9a:1f:8c:47:d1:a9:55:d5:75: 00:a6:39:62:38:c3:9c:bd:fd:dd:43:88:54:37:77:6e:b8:86: 42:b8:5b:49:3f:c6:ac:05:89:14:53:d7:b7:d5:a2:d4:42:e1: 3f:73:56:84:d2:7e:e9:02:21:73:a0:ce:29:0c:65:41:b2:ea: 48:42:ee:d7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUcVc7slgXRSi9/rVewfJxFNsBe1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIxRkJGRTVGQjIwNDJGRjJCQjJFRThGNUUzMjVEOTYz QzE3Qzk5NzAeFw0yNjA5MDMwMDEzMTdaFw0yNjA5MDQwMzI5MTdaMDMxMTAvBgNV BAMTKDdBOEZEOEMyQUU4QzlGRjRFRDBGODQwQzJCNjIyNjA2QzhEMkM1RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9SXrSIfI/chbdvurd+7hukjoM 9T9vGdbhDIWocGBNxRPq38oQTStlz0l0NgmA3yj5kIPmFl0SJptif2bngvoDtTnC URarBVdyYw743qvclx+c85ej/LrxppXVwpEkdHLDeKLvGCUhhQSavHrHEpzkDxSq 1M0MoG/cb+DslDahSTY7nxXmvnNcOX/JENiZpdF0o1vcTQQONibhPRri6Q5FrDbR zWHO9bu0irs3FGLvu/lJa4nE9PQNPsre9Qt8wgAfzv6LM07I0Q72DQoKno+YDhc/ 8TZIh1ZECuKbxKo9OWa5iW2ZaVloLXmdL9V4OrTlXknmBsOEAeuYv4TiBhn9AgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUeo/Ywq6Mn/TtD4QMK2ImBsjSxfQwHwYDVR0j BBgwFoAUMh+/5fsgQv8rsu6PXjJdljwXyZcwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvNC8z MjFGQkZFNUZCMjA0MkZGMkJCMkVFOEY1RTMyNUQ5NjNDMTdDOTk3LmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8wLzMyMUZCRkU1RkIyMDQyRkYyQkIyRUU4RjVFMzI1RDk2 M0MxN0M5OTcuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS80LzMyMUZCRkU1RkIyMDQyRkYyQkIy RUU4RjVFMzI1RDk2M0MxN0M5OTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2VIg3bUwJhZLCKEd+ueh4 KvzQ9NMBHez1lbijBnjoS82uppcGSVFYBLBbkEbGh7dFYoKIATUNRRuoUlbUy2NC xOkj5MOLMTR7T86iqry14MCH1xiEIe1A02CguYDrQ24fEeBKhYG+j9HvYwSrEcH1 jUxW/WpuYDyky5BoroO2X16LSFsCMw7S1KV7tqmne3J00bdElME/5jKDk3oz/2GJ cA0SLOgXcXp0fi4IfnRhhSviP+gDGWbB/sYjxuKaH4xH0alV1XUApjliOMOcvf3d Q4hUN3duuIZCuFtJP8asBYkUU9e31aLUQuE/c1aE0n7pAiFzoM4pDGVBsupIQu7X -----END CERTIFICATE-----Generated at Thu Sep 3 19:19:29 2026 by rpki-client