$ rpki-client -vvf krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft File: 321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft (raw, json) Hash identifier: QAwRZSI9GNAIBTRmZvXSsTZnsnZ2zPg2ixknzglld9I= Subject key identifier: 7B:29:97:F0:25:57:F5:07:64:29:E9:C6:31:F5:05:BB:8B:1F:F6:F6 Authority key identifier: 32:1F:BF:E5:FB:20:42:FF:2B:B2:EE:8F:5E:32:5D:96:3C:17:C9:97 Certificate issuer: /CN=321FBFE5FB2042FF2BB2EE8F5E325D963C17C997 Certificate serial: 0C161134CD9125E03AB6F9FCD53A50FD3D803DB0 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft Manifest number: 04 Signing time: Tue 02 Jun 2026 06:39:57 +0000 Manifest this update: Tue 02 Jun 2026 06:34:57 +0000 Manifest next update: Wed 03 Jun 2026 08:45:57 +0000 Files and hashes: 1: 321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl (hash: h+ApHadbocONigX7kMklSQTrjVXm9VoU4mABWFe6DRI=) 2: 326130663a316363353a323431313a3a2f34382d3438203d3e20323036303639.roa (hash: +AYzvxTOdmaj71wPUnYNAWebe4QXVmX6EA2aQO2VSuQ=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Jun 2026 08:45:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:16:11:34:cd:91:25:e0:3a:b6:f9:fc:d5:3a:50:fd:3d:80:3d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=321FBFE5FB2042FF2BB2EE8F5E325D963C17C997 Validity Not Before: Jun 2 06:34:57 2026 GMT Not After : Jun 3 08:45:57 2026 GMT Subject: CN=7B2997F02557F5076429E9C631F505BB8B1FF6F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:18:4a:06:2a:0c:2a:71:ad:52:03:ad:60:32: ad:f1:77:05:48:3d:5f:aa:61:0e:81:c4:97:32:a2: a4:6a:87:5d:47:ab:3d:c1:4b:0e:71:92:e8:75:46: 6e:15:38:9f:b7:47:33:70:aa:eb:c3:8a:72:51:c5: 60:3c:cb:13:61:9d:e0:4f:f6:8b:39:5a:33:c2:93: 87:ea:b0:4d:73:c8:27:d4:00:d8:77:ac:fd:42:7e: 92:73:c6:8f:de:36:19:98:09:7c:0e:d1:79:60:31: 3d:4f:c8:b9:79:99:9a:18:29:29:3b:8b:d7:58:6c: b8:fd:2c:6f:8f:b1:78:c3:4e:68:e9:be:93:bd:a9: ca:a2:bc:5c:86:8d:64:f3:79:86:29:98:19:c4:73: 23:ce:72:e0:ac:dc:af:01:e2:3a:c5:a9:d4:dc:c4: 83:41:b6:ce:45:87:1a:9d:a9:47:48:39:2a:f6:3a: 43:c3:e5:d4:ee:b9:e3:26:fe:b2:16:61:84:da:3b: 8d:4e:a8:42:3d:a7:30:84:3d:4e:6a:87:35:23:e7: d7:0f:a6:5a:9a:c4:16:46:b5:11:24:13:ba:2f:f5: 80:c5:56:ea:b0:d8:9a:74:fb:f9:e5:aa:99:4c:cd: 54:07:36:de:89:16:68:95:28:c0:32:ba:b6:18:de: 33:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:29:97:F0:25:57:F5:07:64:29:E9:C6:31:F5:05:BB:8B:1F:F6:F6 X509v3 Authority Key Identifier: keyid:32:1F:BF:E5:FB:20:42:FF:2B:B2:EE:8F:5E:32:5D:96:3C:17:C9:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:78:86:33:bd:e1:ad:a4:c0:ac:31:f1:29:e3:4f:a5:6f:53: bd:67:61:5f:66:e8:e3:5d:a1:30:72:c1:28:80:fc:cb:90:38: 12:68:ae:ed:8b:b0:7b:d1:4c:94:bf:39:08:89:d1:62:3b:cf: 8e:f0:88:69:17:34:ef:c1:5c:b1:1c:aa:86:65:26:a0:a6:a6: a5:b6:e6:4d:d8:80:69:86:ce:d5:a1:20:a8:52:ad:37:37:6c: 17:f2:69:32:80:e0:8d:2b:9e:62:01:7a:c1:45:a5:bb:70:1e: 62:62:0e:08:69:a1:ca:9f:15:3d:5c:1d:94:4c:8f:b9:d9:ef: c7:f4:b0:79:34:79:4c:26:77:2b:8f:6e:37:dd:d9:34:0e:37: 98:f8:7c:cd:14:a1:50:05:ec:d5:8e:0a:96:59:ab:09:e1:3e: 66:90:68:56:21:8a:11:b7:47:33:fd:ac:0f:48:4b:e9:63:23: c9:95:7d:14:86:f0:7b:00:f0:fe:59:f8:e2:bc:fc:9a:f5:0e: f8:7d:30:09:f6:50:3b:34:87:4f:e6:a1:6f:bb:0e:5c:ca:bd: 48:85:bf:0d:10:d1:63:5f:ba:b8:e0:d4:ca:d4:d6:1d:95:7f: 30:5b:87:fd:9b:7d:f2:b4:5c:6c:84:9c:71:cd:21:61:5a:ba: 30:65:0a:7c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUDBYRNM2RJeA6tvn81TpQ/T2APbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIxRkJGRTVGQjIwNDJGRjJCQjJFRThGNUUzMjVEOTYz QzE3Qzk5NzAeFw0yNjA2MDIwNjM0NTdaFw0yNjA2MDMwODQ1NTdaMDMxMTAvBgNV BAMTKDdCMjk5N0YwMjU1N0Y1MDc2NDI5RTlDNjMxRjUwNUJCOEIxRkY2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQGEoGKgwqca1SA61gMq3xdwVI PV+qYQ6BxJcyoqRqh11Hqz3BSw5xkuh1Rm4VOJ+3RzNwquvDinJRxWA8yxNhneBP 9os5WjPCk4fqsE1zyCfUANh3rP1CfpJzxo/eNhmYCXwO0XlgMT1PyLl5mZoYKSk7 i9dYbLj9LG+PsXjDTmjpvpO9qcqivFyGjWTzeYYpmBnEcyPOcuCs3K8B4jrFqdTc xINBts5FhxqdqUdIOSr2OkPD5dTuueMm/rIWYYTaO41OqEI9pzCEPU5qhzUj59cP plqaxBZGtREkE7ov9YDFVuqw2Jp0+/nlqplMzVQHNt6JFmiVKMAyurYY3jMjAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUeymX8CVX9QdkKenGMfUFu4sf9vYwHwYDVR0j BBgwFoAUMh+/5fsgQv8rsu6PXjJdljwXyZcwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvNC8z MjFGQkZFNUZCMjA0MkZGMkJCMkVFOEY1RTMyNUQ5NjNDMTdDOTk3LmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8wLzMyMUZCRkU1RkIyMDQyRkYyQkIyRUU4RjVFMzI1RDk2 M0MxN0M5OTcuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS80LzMyMUZCRkU1RkIyMDQyRkYyQkIy RUU4RjVFMzI1RDk2M0MxN0M5OTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpeIYzveGtpMCsMfEp40+l b1O9Z2FfZujjXaEwcsEogPzLkDgSaK7ti7B70UyUvzkIidFiO8+O8IhpFzTvwVyx HKqGZSagpqaltuZN2IBphs7VoSCoUq03N2wX8mkygOCNK55iAXrBRaW7cB5iYg4I aaHKnxU9XB2UTI+52e/H9LB5NHlMJncrj2433dk0DjeY+HzNFKFQBezVjgqWWasJ 4T5mkGhWIYoRt0cz/awPSEvpYyPJlX0UhvB7APD+WfjivPya9Q74fTAJ9lA7NIdP 5qFvuw5cyr1Ihb8NENFjX7q44NTK1NYdlX8wW4f9m33ytFxshJxxzSFhWrowZQp8 -----END CERTIFICATE-----Generated at Tue Jun 2 21:46:40 2026 by rpki-client