$ rpki-client -vvvf krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft File: 5B9C459FED5E28921D6D57A342A855A1BA969897.mft (raw, json) Hash identifier: dqZeMM9DBl2TxQ1uRatj48bM/Qcjlc603RkK80URp1I= Subject key identifier: F1:47:DA:01:75:AB:D1:DC:F6:DC:0A:E3:62:37:DB:AB:2A:C4:52:9C Authority key identifier: 5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97 Certificate issuer: /CN=5B9C459FED5E28921D6D57A342A855A1BA969897 Certificate serial: 627B053A02F9E5FD6867CB494A4448C22283EF94 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft Manifest number: 9E Signing time: Wed 23 Sep 2026 16:58:17 +0000 Manifest this update: Wed 23 Sep 2026 16:53:17 +0000 Manifest next update: Thu 24 Sep 2026 18:55:17 +0000 Files and hashes: 1: 326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa (hash: /ary5zP9OQDMFHRngTCodTLCsHVfTXFD9vmLwzXrQjo=) 2: 5B9C459FED5E28921D6D57A342A855A1BA969897.crl (hash: I+BZrC1mb9QFAaHTlyDgkVJ+QrY3frH6xVKB9Qv9lHY=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:7b:05:3a:02:f9:e5:fd:68:67:cb:49:4a:44:48:c2:22:83:ef:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B9C459FED5E28921D6D57A342A855A1BA969897 Validity Not Before: Sep 23 16:53:17 2026 GMT Not After : Sep 24 18:55:17 2026 GMT Subject: CN=F147DA0175ABD1DCF6DC0AE36237DBAB2AC4529C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:70:9f:fc:1d:4d:ab:32:d0:5c:2e:62:00:3c: c6:4a:1b:4c:71:29:6b:d4:b8:d0:aa:58:b8:cc:6e: 20:e6:c8:af:b8:9e:45:16:bf:8c:c2:c8:d2:bc:b5: 2d:a5:40:f1:c7:4d:ec:6f:d2:0d:e2:e3:1c:11:ed: 60:bb:29:b3:e0:6d:3f:3a:6a:55:a8:bb:f3:c9:70: 25:77:8a:ab:0d:99:75:e5:e9:fe:2f:e7:33:a1:81: 45:f9:83:8c:fc:2e:ec:c5:d9:0f:a6:dc:3e:40:9a: dc:d1:d8:1e:e9:fe:45:f3:8d:2b:46:08:f8:4e:72: bf:3a:98:cf:78:99:48:b8:b3:bf:19:3d:f5:df:dd: 49:91:5c:7c:ee:3d:48:5d:bd:32:a1:3e:a0:e4:80: 15:1e:8a:a9:9c:6b:6b:43:77:99:cb:c0:43:91:98: c6:c2:82:9d:c8:18:bd:c8:ef:bd:63:08:83:68:7e: 31:62:c3:9b:e4:17:42:d2:0b:63:61:49:9b:1b:61: e5:21:80:c8:98:b7:00:b8:04:21:92:eb:55:4b:e5: 31:4d:e2:36:f3:c2:67:71:77:ce:08:ea:4b:dc:c8: e0:87:38:e3:e4:48:10:41:42:7c:ef:6b:30:ae:15: 66:2e:fd:b8:3d:52:7f:b3:57:d8:53:41:38:6d:c1: 7f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:47:DA:01:75:AB:D1:DC:F6:DC:0A:E3:62:37:DB:AB:2A:C4:52:9C X509v3 Authority Key Identifier: keyid:5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ed:db:e0:2e:de:45:24:b5:47:c5:1e:f6:a5:75:d3:ba:c2: 80:17:37:66:01:72:e6:f0:4f:f0:19:aa:b3:47:e0:8b:ad:03: db:64:67:ad:9f:31:6c:3a:fc:0e:80:30:3a:57:b4:41:3f:3a: 1a:dd:8d:f0:d4:2e:fe:15:4c:19:fa:2b:b1:10:6c:28:8e:c1: c4:5a:24:f3:e4:56:b4:c4:ae:07:41:4d:3d:83:1d:f5:03:18: 8c:a0:25:a5:bb:7e:67:3d:50:d0:72:e1:f0:68:ee:c6:1f:aa: ad:19:00:03:87:79:95:65:6a:a1:ad:e4:7e:c5:4c:c5:02:52: d3:49:b9:20:18:db:e3:63:eb:ba:66:d0:a6:f7:f5:8e:f5:41: c6:4a:84:ec:ec:57:66:75:cf:4f:29:a8:ea:07:bc:0a:7c:83: 7f:2f:e1:a6:7e:5f:b0:a4:c0:c7:35:5a:a5:da:17:29:a6:f0: 93:7e:75:ed:fe:2e:f0:ed:00:3c:90:1b:5f:10:6f:af:27:84: fe:f2:f5:ee:dd:16:dc:55:08:8a:10:fe:16:6e:cd:9a:81:08: cf:4a:2d:56:4d:c4:48:78:93:75:77:dc:1e:cd:43:4a:c1:ab: 1d:6e:2c:5e:90:c0:8e:71:1a:6e:3d:50:f6:6b:81:1e:05:b0: 56:9b:e7:82 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUYnsFOgL55f1oZ8tJSkRIwiKD75QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI5QzQ1OUZFRDVFMjg5MjFENkQ1N0EzNDJBODU1QTFC QTk2OTg5NzAeFw0yNjA5MjMxNjUzMTdaFw0yNjA5MjQxODU1MTdaMDMxMTAvBgNV BAMTKEYxNDdEQTAxNzVBQkQxRENGNkRDMEFFMzYyMzdEQkFCMkFDNDUyOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLcJ/8HU2rMtBcLmIAPMZKG0xx KWvUuNCqWLjMbiDmyK+4nkUWv4zCyNK8tS2lQPHHTexv0g3i4xwR7WC7KbPgbT86 alWou/PJcCV3iqsNmXXl6f4v5zOhgUX5g4z8LuzF2Q+m3D5AmtzR2B7p/kXzjStG CPhOcr86mM94mUi4s78ZPfXf3UmRXHzuPUhdvTKhPqDkgBUeiqmca2tDd5nLwEOR mMbCgp3IGL3I771jCINofjFiw5vkF0LSC2NhSZsbYeUhgMiYtwC4BCGS61VL5TFN 4jbzwmdxd84I6kvcyOCHOOPkSBBBQnzvazCuFWYu/bg9Un+zV9hTQThtwX/9AgMB AAGjggIWMIICEjAdBgNVHQ4EFgQU8UfaAXWr0dz23ArjYjfbqyrEUpwwHwYDVR0j BBgwFoAUW5xFn+1eKJIdbVejQqhVobqWmJcwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvMC81 QjlDNDU5RkVENUUyODkyMUQ2RDU3QTM0MkE4NTVBMUJBOTY5ODk3LmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8wLzVCOUM0NTlGRUQ1RTI4OTIxRDZENTdBMzQyQTg1NUEx QkE5Njk4OTcuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS8wLzVCOUM0NTlGRUQ1RTI4OTIxRDZE NTdBMzQyQTg1NUExQkE5Njk4OTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBh7dvgLt5FJLVHxR72pXXT usKAFzdmAXLm8E/wGaqzR+CLrQPbZGetnzFsOvwOgDA6V7RBPzoa3Y3w1C7+FUwZ +iuxEGwojsHEWiTz5Fa0xK4HQU09gx31AxiMoCWlu35nPVDQcuHwaO7GH6qtGQAD h3mVZWqhreR+xUzFAlLTSbkgGNvjY+u6ZtCm9/WO9UHGSoTs7Fdmdc9PKajqB7wK fIN/L+Gmfl+wpMDHNVql2hcppvCTfnXt/i7w7QA8kBtfEG+vJ4T+8vXu3RbcVQiK EP4Wbs2agQjPSi1WTcRIeJN1d9wezUNKwasdbixekMCOcRpuPVD2a4EeBbBWm+eC -----END CERTIFICATE-----Generated at Thu Sep 24 02:02:52 2026 by rpki-client