$ rpki-client -vvvf krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft File: A9D80600BE2DA447AA0056537C94F64A1A69D021.mft (raw, json) Hash identifier: 4jUlXw9oRT5ltnrbXdDzqaO6LWQp1Fjo1e0a9xJqH1M= Subject key identifier: 24:46:34:87:5A:D9:62:40:B9:D1:95:ED:4B:B3:3B:7C:78:FF:9F:59 Authority key identifier: A9:D8:06:00:BE:2D:A4:47:AA:00:56:53:7C:94:F6:4A:1A:69:D0:21 Certificate issuer: /CN=A9D80600BE2DA447AA0056537C94F64A1A69D021 Certificate serial: 587C4FF4CB334D540C7E0FC6304ABDDB844BDA68 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/A9D80600BE2DA447AA0056537C94F64A1A69D021.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft Manifest number: 5E Signing time: Mon 28 Sep 2026 15:33:17 +0000 Manifest this update: Mon 28 Sep 2026 15:28:17 +0000 Manifest next update: Tue 29 Sep 2026 17:45:17 +0000 Files and hashes: 1: AS151673.asa (hash: geeEsaMkyqvVIKkrzEscYUOszo0N2PjIryztORdhZ0M=) 2: A9D80600BE2DA447AA0056537C94F64A1A69D021.crl (hash: eAmzWG+ooIQzgXNrACfaGdBt9oIOUF1vyQHZvwK0HT8=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.crl rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/A9D80600BE2DA447AA0056537C94F64A1A69D021.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 11:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:7c:4f:f4:cb:33:4d:54:0c:7e:0f:c6:30:4a:bd:db:84:4b:da:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D80600BE2DA447AA0056537C94F64A1A69D021 Validity Not Before: Sep 28 15:28:17 2026 GMT Not After : Sep 29 17:45:17 2026 GMT Subject: CN=244634875AD96240B9D195ED4BB33B7C78FF9F59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dc:6a:80:e9:69:43:35:60:73:c3:a2:75:73: b7:88:44:bc:97:35:4b:a4:40:0a:b1:45:15:a4:22: 32:76:b3:9a:68:4b:f3:aa:b0:ee:fd:c2:12:53:a9: 5b:c1:59:f5:6c:53:90:85:97:e9:42:c5:6f:2d:fc: 30:ab:7d:62:41:00:33:ce:a2:df:76:70:2b:83:1a: 04:09:ad:3a:28:61:ff:41:53:db:67:e2:6a:07:ed: 46:e2:ec:ab:92:2a:e8:73:3e:39:cf:95:d1:99:0c: a2:d7:82:06:c7:f9:b6:09:0c:51:cd:b8:1f:63:b2: 37:37:e7:f0:96:fb:17:68:9f:2c:79:73:03:36:a7: ed:4d:20:e0:48:54:58:7a:1e:d1:af:d3:95:ca:e1: 36:d3:3e:7a:82:a3:38:5e:64:f0:ea:09:cc:18:6f: 82:d0:c6:28:bc:3f:f7:37:e6:31:c2:69:78:76:23: 48:e4:2c:8a:f0:21:66:5f:51:e7:8f:8b:b9:95:4e: 1a:76:64:cf:89:46:6b:64:c0:db:11:29:75:25:a0: 4a:4b:d1:1b:5b:23:68:7f:02:52:6a:82:eb:19:83: eb:42:65:49:2d:6f:5e:6d:18:89:74:10:bf:aa:e1: d0:56:ad:18:5a:ef:23:fd:28:37:8f:79:2d:17:7d: f8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:46:34:87:5A:D9:62:40:B9:D1:95:ED:4B:B3:3B:7C:78:FF:9F:59 X509v3 Authority Key Identifier: keyid:A9:D8:06:00:BE:2D:A4:47:AA:00:56:53:7C:94:F6:4A:1A:69:D0:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/A9D80600BE2DA447AA0056537C94F64A1A69D021.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:9d:ac:bd:cd:7d:32:93:81:05:f0:66:54:f9:f3:eb:e6:de: 6b:ed:6c:6a:0a:dd:a0:cb:a6:7d:40:81:05:6e:96:1f:fb:6d: 46:5c:9e:7c:42:42:60:e6:9b:72:69:f4:f1:fb:c6:54:f4:3c: 10:c9:24:36:1e:98:f8:a2:06:c8:33:a8:73:3d:75:68:b3:d6: e5:68:54:6b:9d:fb:ab:c9:96:41:5d:75:46:82:04:84:0c:29: 8a:f5:1e:43:a7:62:1b:fc:a0:c4:83:4f:73:00:4a:c2:b7:12: 41:0c:35:57:43:67:cf:67:c7:f2:da:c2:63:5c:f0:78:1c:47: 98:b1:1c:8f:62:30:a5:b4:04:0b:43:c2:99:ac:a3:2b:98:b2: 94:d7:31:b2:65:b3:57:e0:80:a6:5e:6a:3e:2d:a8:15:04:8f: 1f:d7:9f:e9:d6:a9:e6:f5:b3:88:c1:3c:95:d1:14:fa:21:09: bf:3f:7d:5a:07:58:1b:24:b9:d5:54:69:c1:40:a8:8e:98:6c: ee:6b:e1:b9:ab:f1:c1:de:0a:ac:89:44:77:80:6d:01:63:62: aa:21:3a:86:d3:7b:14:6e:66:50:46:21:e1:93:44:3a:2d:87: c3:2a:28:92:3f:47:4a:90:07:b9:64:90:17:db:34:fa:77:c3: df:ea:55:c0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUWHxP9MszTVQMfg/GMEq924RL2mgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlEODA2MDBCRTJEQTQ0N0FBMDA1NjUzN0M5NEY2NEEx QTY5RDAyMTAeFw0yNjA5MjgxNTI4MTdaFw0yNjA5MjkxNzQ1MTdaMDMxMTAvBgNV BAMTKDI0NDYzNDg3NUFEOTYyNDBCOUQxOTVFRDRCQjMzQjdDNzhGRjlGNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg3GqA6WlDNWBzw6J1c7eIRLyX NUukQAqxRRWkIjJ2s5poS/OqsO79whJTqVvBWfVsU5CFl+lCxW8t/DCrfWJBADPO ot92cCuDGgQJrTooYf9BU9tn4moH7Ubi7KuSKuhzPjnPldGZDKLXggbH+bYJDFHN uB9jsjc35/CW+xdonyx5cwM2p+1NIOBIVFh6HtGv05XK4TbTPnqCozheZPDqCcwY b4LQxii8P/c35jHCaXh2I0jkLIrwIWZfUeePi7mVThp2ZM+JRmtkwNsRKXUloEpL 0RtbI2h/AlJqgusZg+tCZUktb15tGIl0EL+q4dBWrRha7yP9KDePeS0Xffj3AgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUJEY0h1rZYkC50ZXtS7M7fHj/n1kwHwYDVR0j BBgwFoAUqdgGAL4tpEeqAFZTfJT2Shpp0CEwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvNS9B OUQ4MDYwMEJFMkRBNDQ3QUEwMDU2NTM3Qzk0RjY0QTFBNjlEMDIxLmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2IzZjJhYWFlLTIzY2YtNGEzNy05NDAz LTc0M2IxNWVjMmE4ZS8xL0E5RDgwNjAwQkUyREE0NDdBQTAwNTY1MzdDOTRGNjRB MUE2OUQwMjEuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS81L0E5RDgwNjAwQkUyREE0NDdBQTAw NTY1MzdDOTRGNjRBMUE2OUQwMjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqnay9zX0yk4EF8GZU+fPr 5t5r7WxqCt2gy6Z9QIEFbpYf+21GXJ58QkJg5ptyafTx+8ZU9DwQySQ2Hpj4ogbI M6hzPXVos9blaFRrnfuryZZBXXVGggSEDCmK9R5Dp2Ib/KDEg09zAErCtxJBDDVX Q2fPZ8fy2sJjXPB4HEeYsRyPYjCltAQLQ8KZrKMrmLKU1zGyZbNX4ICmXmo+LagV BI8f15/p1qnm9bOIwTyV0RT6IQm/P31aB1gbJLnVVGnBQKiOmGzua+G5q/HB3gqs iUR3gG0BY2KqITqG03sUbmZQRiHhk0Q6LYfDKiiSP0dKkAe5ZJAX2zT6d8Pf6lXA -----END CERTIFICATE-----Generated at Tue Sep 29 04:11:25 2026 by rpki-client