$ rpki-client -vvvf krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft File: 321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft (raw, json) Hash identifier: vtUJhn2jpWWC8KwmZI+hicZUIQI/3aVak2lsBi2TvAo= Subject key identifier: 58:5F:6A:A8:2A:0C:72:3B:4D:95:58:DE:2A:D7:5B:25:5D:DC:B4:2F Authority key identifier: 32:1F:BF:E5:FB:20:42:FF:2B:B2:EE:8F:5E:32:5D:96:3C:17:C9:97 Certificate issuer: /CN=321FBFE5FB2042FF2BB2EE8F5E325D963C17C997 Certificate serial: 319818E097289965FFB24DE09ED62828CBA12B07 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft Manifest number: BC Signing time: Tue 20 Oct 2026 17:55:09 +0000 Manifest this update: Tue 20 Oct 2026 17:50:09 +0000 Manifest next update: Wed 21 Oct 2026 18:47:09 +0000 Files and hashes: 1: 326130663a316363353a323431313a3a2f34382d3438203d3e20323036303639.roa (hash: +AYzvxTOdmaj71wPUnYNAWebe4QXVmX6EA2aQO2VSuQ=) 2: 321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl (hash: OCXlGrYYCuOp6hy/sDQSX9FEgaykIBQKUrw37Ps+axI=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Oct 2026 17:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:98:18:e0:97:28:99:65:ff:b2:4d:e0:9e:d6:28:28:cb:a1:2b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=321FBFE5FB2042FF2BB2EE8F5E325D963C17C997 Validity Not Before: Oct 20 17:50:09 2026 GMT Not After : Oct 21 18:47:09 2026 GMT Subject: CN=585F6AA82A0C723B4D9558DE2AD75B255DDCB42F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:26:67:05:ab:71:69:5d:9d:4d:eb:34:a3:2c: 18:a4:ba:55:58:50:ea:c7:20:c7:e4:2b:3c:f3:e8: 29:bb:05:27:16:a0:89:87:36:05:57:89:07:e6:39: 4d:21:15:94:fd:cb:0f:2a:02:11:f7:36:f3:33:c0: 96:b7:6b:a6:70:ed:f1:95:fb:aa:bd:b9:ab:40:2b: 13:76:37:98:69:03:ec:7d:28:94:ca:0e:5f:ae:a8: fd:c2:02:b3:84:20:aa:fc:05:fa:49:16:21:43:50: d1:bd:98:6c:b0:e2:b9:2c:d4:f2:03:af:49:99:1a: 5e:28:d4:8a:91:d7:02:fa:58:1b:04:3f:ac:86:0b: 48:31:07:0f:94:a7:b8:00:4c:a4:36:ac:47:2c:0d: ef:b4:fc:86:bc:be:e8:cf:b7:51:44:63:28:94:ec: dc:a5:b5:6d:f0:a9:48:0b:7c:04:35:f1:04:73:bb: 17:fc:59:bd:16:40:87:ff:87:4f:f6:5c:35:6c:91: 69:28:88:6c:bc:76:e8:75:6a:d0:88:4d:18:e0:78: a2:79:08:cc:23:31:b5:50:d3:88:78:e7:c6:a1:2f: fb:25:23:84:7b:cc:3b:4f:f3:56:81:36:de:49:f9: 43:b4:f2:85:25:c9:d7:91:7d:10:85:a4:ae:6b:bd: 3c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5F:6A:A8:2A:0C:72:3B:4D:95:58:DE:2A:D7:5B:25:5D:DC:B4:2F X509v3 Authority Key Identifier: keyid:32:1F:BF:E5:FB:20:42:FF:2B:B2:EE:8F:5E:32:5D:96:3C:17:C9:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:31:a3:a3:32:16:9a:99:2d:d6:72:4d:b1:40:a8:78:f5:35: ef:4e:2b:60:c8:30:69:35:ed:1d:a6:41:95:05:79:03:cb:80: e7:72:36:31:50:84:a8:ff:dc:56:7b:92:92:42:14:12:70:87: 02:b8:44:6d:10:2c:78:4b:c8:41:a8:61:66:ba:7e:da:e7:35: 86:34:38:46:34:92:2f:d9:ea:ca:f9:a6:6e:f5:13:f4:6c:47: f8:c3:26:46:11:db:52:e0:de:cb:b3:e7:2f:4f:ac:60:f6:8e: 10:46:66:2b:54:0a:27:b9:1f:60:2c:f9:ba:f9:da:99:ad:2d: 2d:dc:65:b4:e4:b1:c7:60:e3:7f:b3:60:31:d7:ff:c3:d3:45: 20:d9:ce:e9:3d:a0:ee:24:bc:60:31:aa:9d:c0:4f:c1:61:38: 6b:c6:3d:cb:93:a2:5f:60:8d:b4:bb:26:42:54:1c:dd:b4:e3: 52:0c:a1:4d:d2:1d:ef:0a:5c:84:f8:41:f8:1d:34:ad:6c:32: 7e:cb:84:9d:34:d5:72:a4:67:0b:73:11:7a:05:e4:08:e0:0e: 54:ec:23:d4:cf:31:c3:e6:76:fd:5c:36:36:8c:33:7c:db:31: 68:cf:5b:71:49:2d:6f:25:fa:ce:3a:42:b9:cb:7e:e9:e1:78: 7a:5a:77:92 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUMZgY4JcomWX/sk3gntYoKMuhKwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIxRkJGRTVGQjIwNDJGRjJCQjJFRThGNUUzMjVEOTYz QzE3Qzk5NzAeFw0yNjEwMjAxNzUwMDlaFw0yNjEwMjExODQ3MDlaMDMxMTAvBgNV BAMTKDU4NUY2QUE4MkEwQzcyM0I0RDk1NThERTJBRDc1QjI1NUREQ0I0MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjJmcFq3FpXZ1N6zSjLBikulVY UOrHIMfkKzzz6Cm7BScWoImHNgVXiQfmOU0hFZT9yw8qAhH3NvMzwJa3a6Zw7fGV +6q9uatAKxN2N5hpA+x9KJTKDl+uqP3CArOEIKr8BfpJFiFDUNG9mGyw4rks1PID r0mZGl4o1IqR1wL6WBsEP6yGC0gxBw+Up7gATKQ2rEcsDe+0/Ia8vujPt1FEYyiU 7NyltW3wqUgLfAQ18QRzuxf8Wb0WQIf/h0/2XDVskWkoiGy8duh1atCITRjgeKJ5 CMwjMbVQ04h458ahL/slI4R7zDtP81aBNt5J+UO08oUlydeRfRCFpK5rvTzNAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUWF9qqCoMcjtNlVjeKtdbJV3ctC8wHwYDVR0j BBgwFoAUMh+/5fsgQv8rsu6PXjJdljwXyZcwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvNC8z MjFGQkZFNUZCMjA0MkZGMkJCMkVFOEY1RTMyNUQ5NjNDMTdDOTk3LmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8wLzMyMUZCRkU1RkIyMDQyRkYyQkIyRUU4RjVFMzI1RDk2 M0MxN0M5OTcuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS80LzMyMUZCRkU1RkIyMDQyRkYyQkIy RUU4RjVFMzI1RDk2M0MxN0M5OTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvMaOjMhaamS3Wck2xQKh4 9TXvTitgyDBpNe0dpkGVBXkDy4DncjYxUISo/9xWe5KSQhQScIcCuERtECx4S8hB qGFmun7a5zWGNDhGNJIv2erK+aZu9RP0bEf4wyZGEdtS4N7Ls+cvT6xg9o4QRmYr VAonuR9gLPm6+dqZrS0t3GW05LHHYON/s2Ax1//D00Ug2c7pPaDuJLxgMaqdwE/B YThrxj3Lk6JfYI20uyZCVBzdtONSDKFN0h3vClyE+EH4HTStbDJ+y4SdNNVypGcL cxF6BeQI4A5U7CPUzzHD5nb9XDY2jDN82zFoz1txSS1vJfrOOkK5y37p4Xh6WneS -----END CERTIFICATE-----Generated at Wed Oct 21 03:34:15 2026 by rpki-client