$ rpki-client -vvf krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft File: 5B9C459FED5E28921D6D57A342A855A1BA969897.mft (raw, json) Hash identifier: qGZqois2xJ8KiNtDBG7apJlCvZ94ej8UJY+sBywQEik= Subject key identifier: 5E:FA:4E:24:94:2C:8B:B3:66:9D:63:15:5E:6E:AA:52:B2:53:51:D8 Authority key identifier: 5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97 Certificate issuer: /CN=5B9C459FED5E28921D6D57A342A855A1BA969897 Certificate serial: 45802136318C5468F99EB80A06B5CEBB62B67C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft Manifest number: 4B Signing time: Thu 23 Jul 2026 11:33:16 +0000 Manifest this update: Thu 23 Jul 2026 11:28:16 +0000 Manifest next update: Fri 24 Jul 2026 14:16:16 +0000 Files and hashes: 1: 326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa (hash: /ary5zP9OQDMFHRngTCodTLCsHVfTXFD9vmLwzXrQjo=) 2: 5B9C459FED5E28921D6D57A342A855A1BA969897.crl (hash: idxbE7pdo3nO1i0Tci3hbB57qevSnqdil3kapvk82hs=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:80:21:36:31:8c:54:68:f9:9e:b8:0a:06:b5:ce:bb:62:b6:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B9C459FED5E28921D6D57A342A855A1BA969897 Validity Not Before: Jul 23 11:28:16 2026 GMT Not After : Jul 24 14:16:16 2026 GMT Subject: CN=5EFA4E24942C8BB3669D63155E6EAA52B25351D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1d:4b:b8:1a:c8:aa:f7:bd:46:3f:79:cf:fc: 38:ae:92:3b:95:5d:91:0d:5c:39:cb:25:a6:ac:0a: c6:7a:00:33:4f:0c:89:78:00:05:26:34:8f:c5:70: 72:62:08:e0:a9:41:e3:96:c1:30:59:89:c8:ff:16: b1:4f:92:6d:63:f1:45:d7:9e:68:ae:73:34:86:f1: fd:c2:ee:ea:85:2d:cb:8b:48:2e:06:5b:46:3c:f6: 4a:b8:17:7b:b9:df:61:d3:3a:df:41:e6:d8:eb:57: 6e:7c:01:8e:c6:0a:52:fd:da:55:cd:bc:4c:1c:f4: a1:3f:b4:c5:20:fe:af:4b:3d:50:49:bd:67:40:3a: 74:27:8f:af:91:3f:9b:92:9b:66:98:02:85:3c:bc: 71:a5:02:32:97:0b:03:78:56:10:64:b5:59:44:00: 6f:e2:33:4d:69:99:12:eb:4f:5b:a7:6d:4d:1e:6f: b0:31:c8:bd:20:e8:25:f8:3c:66:12:9e:33:88:71: 74:55:7d:e1:84:31:5f:2a:e4:59:17:c9:19:5b:16: 42:81:d9:66:fb:3f:52:20:92:bb:b1:11:f6:e7:d4: 7d:80:d0:f1:7b:be:24:6a:87:43:19:a8:28:fe:40: c9:39:22:29:bd:5d:16:c1:4e:7b:c6:67:23:57:9d: 95:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FA:4E:24:94:2C:8B:B3:66:9D:63:15:5E:6E:AA:52:B2:53:51:D8 X509v3 Authority Key Identifier: keyid:5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:78:95:48:92:e6:9a:7a:49:7e:e2:b1:4c:41:62:5c:64:e7: 4a:3d:0c:25:05:82:56:02:36:cd:3a:98:b4:5d:86:4c:1a:35: c9:9e:b9:bf:c3:b2:66:8c:74:ee:47:1a:1c:73:6c:75:49:bc: cb:d6:ba:cf:6a:cf:35:d1:45:de:50:68:dd:83:84:cb:ec:c1: bb:78:cd:51:71:ef:64:24:f5:bf:dc:6d:68:2b:3f:44:7f:cc: f9:59:11:65:27:c9:78:91:f1:1d:ca:09:00:b8:8c:be:0d:36: cd:1c:8c:76:e3:45:99:c3:9e:5b:e8:05:3d:0f:fd:1e:e4:1e: 76:99:42:4a:6b:53:7e:fc:6b:2c:50:b8:43:5b:af:0d:10:26: 98:c0:79:ef:51:01:46:0b:20:7f:5d:2f:cc:7f:3f:ed:ab:3c: 53:8b:f0:22:f8:24:6a:f2:e6:6a:6f:fb:3f:6e:52:7a:97:98: 41:94:73:f4:a1:88:f0:7e:a8:5d:f8:66:d5:3b:45:26:d6:cb: 8f:06:40:62:e4:c5:e6:e2:93:f0:a9:c7:43:5d:4a:8c:a1:a8: 97:8f:35:f5:c6:fa:dd:0f:cd:3f:66:29:fb:1c:42:d0:35:a4: db:58:c5:60:49:d2:0d:a8:fb:02:75:75:db:ff:3e:c8:0c:36: 2e:4b:9f:07 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgITRYAhNjGMVGj5nrgKBrXOu2K2fDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg1QjlDNDU5RkVENUUyODkyMUQ2RDU3QTM0MkE4NTVBMUJB OTY5ODk3MB4XDTI2MDcyMzExMjgxNloXDTI2MDcyNDE0MTYxNlowMzExMC8GA1UE AxMoNUVGQTRFMjQ5NDJDOEJCMzY2OUQ2MzE1NUU2RUFBNTJCMjUzNTFEODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAO4dS7gayKr3vUY/ec/8OK6SO5Vd kQ1cOcslpqwKxnoAM08MiXgABSY0j8VwcmII4KlB45bBMFmJyP8WsU+SbWPxRdee aK5zNIbx/cLu6oUty4tILgZbRjz2SrgXe7nfYdM630Hm2OtXbnwBjsYKUv3aVc28 TBz0oT+0xSD+r0s9UEm9Z0A6dCePr5E/m5KbZpgChTy8caUCMpcLA3hWEGS1WUQA b+IzTWmZEutPW6dtTR5vsDHIvSDoJfg8ZhKeM4hxdFV94YQxXyrkWRfJGVsWQoHZ Zvs/UiCSu7ER9ufUfYDQ8Xu+JGqHQxmoKP5AyTkiKb1dFsFOe8ZnI1edlSsCAwEA AaOCAhYwggISMB0GA1UdDgQWBBRe+k4klCyLs2adYxVebqpSslNR2DAfBgNVHSME GDAWgBRbnEWf7V4okh1tV6NCqFWhupaYlzAOBgNVHQ8BAf8EBAMCB4AwXwYDVR0f BFgwVjBUoFKgUIZOcnN5bmM6Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS8wLzVC OUM0NTlGRUQ1RTI4OTIxRDZENTdBMzQyQTg1NUExQkE5Njk4OTcuY3JsMIGeBggr BgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMucGFhcy5y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIwNzkt MzA5ZWQ5N2YzODI0LzAvNUI5QzQ1OUZFRDVFMjg5MjFENkQ1N0EzNDJBODU1QTFC QTk2OTg5Ny5jZXIwagYIKwYBBQUHAQsEXjBcMFoGCCsGAQUFBzALhk5yc3luYzov L2tyaWxsLmN4eS5oay9yZXBvL1hpbnl1LzAvNUI5QzQ1OUZFRDVFMjg5MjFENkQ1 N0EzNDJBODU1QTFCQTk2OTg5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAE54lUiS5pp6SX7isUxBYlxk 50o9DCUFglYCNs06mLRdhkwaNcmeub/DsmaMdO5HGhxzbHVJvMvWus9qzzXRRd5Q aN2DhMvswbt4zVFx72Qk9b/cbWgrP0R/zPlZEWUnyXiR8R3KCQC4jL4NNs0cjHbj RZnDnlvoBT0P/R7kHnaZQkprU378ayxQuENbrw0QJpjAee9RAUYLIH9dL8x/P+2r PFOL8CL4JGry5mpv+z9uUnqXmEGUc/ShiPB+qF34ZtU7RSbWy48GQGLkxebik/Cp x0NdSoyhqJePNfXG+t0PzT9mKfscQtA1pNtYxWBJ0g2o+wJ1ddv/PsgMNi5Lnwc= -----END CERTIFICATE-----Generated at Thu Jul 23 20:08:54 2026 by rpki-client