$ rpki-client -vvvf krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft File: 9868B8A018D41E9D418D93B52C0A31174F40F11E.mft (raw, json) Hash identifier: lr9PbRlzbRc1fTtV47BKL2CDPk7FfzTK/+cF5ooInkE= Subject key identifier: 0D:60:71:B1:F6:1B:D3:56:4D:72:42:D7:83:6E:08:7E:A4:84:FE:EA Authority key identifier: 98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E Certificate issuer: /CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Certificate serial: 7E95D890597DB3246E276FEA7C33757641B7F305 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft Manifest number: 9E Signing time: Thu 24 Sep 2026 00:23:17 +0000 Manifest this update: Thu 24 Sep 2026 00:18:17 +0000 Manifest next update: Fri 25 Sep 2026 03:34:17 +0000 Files and hashes: 1: 9868B8A018D41E9D418D93B52C0A31174F40F11E.crl (hash: A5Pj4w2sNYG58jpJ9ynVCEYPJViF1Df21YHykVgaCvk=) 2: 326131343a373538363a363030303a3a2f34302d3438203d3e20313531363733.roa (hash: nAQJIz3m4DL0ffcnjUVRZFFoDNAbg8/PAwJ2tYnoprw=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.crl rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 03:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:95:d8:90:59:7d:b3:24:6e:27:6f:ea:7c:33:75:76:41:b7:f3:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Validity Not Before: Sep 24 00:18:17 2026 GMT Not After : Sep 25 03:34:17 2026 GMT Subject: CN=0D6071B1F61BD3564D7242D7836E087EA484FEEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:34:3c:10:bf:ee:79:2b:12:41:11:78:11:cf: 7f:2d:16:23:b3:28:97:3f:03:bd:b5:bd:d9:d8:dd: 1f:67:52:3c:81:f3:61:9e:63:7d:40:5c:1a:3d:a3: 1e:ab:e8:b4:14:ac:8c:74:71:b1:ad:35:a8:65:49: da:04:15:39:6f:a0:b6:c4:a6:3a:7b:c3:c6:61:22: d5:87:ce:95:7a:a2:1d:0c:0a:d4:aa:e9:87:fb:3f: 74:ad:3a:88:a6:98:e5:15:2c:ee:81:b6:51:02:df: 66:72:2f:51:9c:00:29:9a:9a:cd:c4:03:64:88:de: 9b:4d:4e:46:55:cc:46:0f:fa:85:e3:3d:62:ae:65: 73:97:aa:af:46:0c:a1:0a:61:25:6b:e0:a0:7b:1a: 81:c4:d7:73:05:24:e2:ee:70:7f:46:c9:0a:f0:a7: 61:68:f2:62:b8:dc:dd:67:ad:4f:55:6d:d8:95:86: bb:5c:e5:9e:c0:5a:40:19:3f:03:f2:12:4c:66:c1: d8:2c:e8:6a:4a:1b:46:2e:98:e2:7d:8a:09:79:c3: 70:2f:35:19:25:f5:23:be:36:46:00:1c:e5:3f:26: df:2a:b8:23:73:25:9d:5f:19:23:21:b4:cc:4e:ae: 59:44:53:6d:7f:c6:e2:83:e8:67:a9:f6:d4:b4:c2: b3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:60:71:B1:F6:1B:D3:56:4D:72:42:D7:83:6E:08:7E:A4:84:FE:EA X509v3 Authority Key Identifier: keyid:98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a0:b9:13:3e:4a:d2:f6:4a:0e:91:f9:84:f9:2c:05:e5:ab: 62:a3:e9:be:3d:6e:5a:d8:d5:89:8e:01:4b:0c:60:6c:ff:4a: d1:6d:7f:26:98:64:3c:5f:06:38:3a:51:18:65:0d:b6:6c:2b: ad:b4:96:ea:84:d5:f8:a0:6f:93:9d:73:34:40:21:a7:99:19: e8:df:43:b9:e8:29:a8:4d:55:07:ae:ab:55:cb:9a:77:8c:08: bb:1c:c7:ad:3a:e5:5c:9a:af:06:3c:60:d1:3f:03:ca:02:1d: 4e:52:04:7b:b1:5d:da:76:4e:a0:17:22:5c:d1:0e:dc:ad:81: 3b:4b:c6:bb:a6:71:29:e9:8a:d9:b1:08:61:a0:e4:00:fc:89: 0e:d6:e3:54:5e:3f:1f:ae:5e:4d:f1:39:5c:16:80:bc:a6:31: 9f:2a:8d:53:5c:40:d7:9d:58:41:f0:34:75:81:35:1a:72:b6: 14:05:3b:d9:72:22:c3:a2:76:b7:c2:67:db:85:ba:e6:75:20: 71:c3:78:9c:56:65:94:23:67:90:69:55:1e:92:94:dc:40:85: 10:02:bb:09:d8:77:bc:4a:92:43:56:a9:be:1c:27:eb:74:15: 7e:93:b6:21:0e:81:48:d3:78:82:6e:db:81:89:8f:d2:47:79: b5:5a:8f:86 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUfpXYkFl9syRuJ2/qfDN1dkG38wUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2OEI4QTAxOEQ0MUU5RDQxOEQ5M0I1MkMwQTMxMTc0 RjQwRjExRTAeFw0yNjA5MjQwMDE4MTdaFw0yNjA5MjUwMzM0MTdaMDMxMTAvBgNV BAMTKDBENjA3MUIxRjYxQkQzNTY0RDcyNDJENzgzNkUwODdFQTQ4NEZFRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1NDwQv+55KxJBEXgRz38tFiOz KJc/A721vdnY3R9nUjyB82GeY31AXBo9ox6r6LQUrIx0cbGtNahlSdoEFTlvoLbE pjp7w8ZhItWHzpV6oh0MCtSq6Yf7P3StOoimmOUVLO6BtlEC32ZyL1GcACmams3E A2SI3ptNTkZVzEYP+oXjPWKuZXOXqq9GDKEKYSVr4KB7GoHE13MFJOLucH9GyQrw p2Fo8mK43N1nrU9VbdiVhrtc5Z7AWkAZPwPyEkxmwdgs6GpKG0YumOJ9igl5w3Av NRkl9SO+NkYAHOU/Jt8quCNzJZ1fGSMhtMxOrllEU21/xuKD6Gep9tS0wrPrAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUDWBxsfYb01ZNckLXg24IfqSE/uowHwYDVR0j BBgwFoAUmGi4oBjUHp1BjZO1LAoxF09A8R4wDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvMi85 ODY4QjhBMDE4RDQxRTlENDE4RDkzQjUyQzBBMzExNzRGNDBGMTFFLmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2U4MDVlYTVjLWQ3YTMtNDg0OC04Mzdi LTQ2OTdjY2RkNmVmZS8zLzk4NjhCOEEwMThENDFFOUQ0MThEOTNCNTJDMEEzMTE3 NEY0MEYxMUUuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS8yLzk4NjhCOEEwMThENDFFOUQ0MThE OTNCNTJDMEEzMTE3NEY0MEYxMUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4oLkTPkrS9koOkfmE+SwF 5atio+m+PW5a2NWJjgFLDGBs/0rRbX8mmGQ8XwY4OlEYZQ22bCuttJbqhNX4oG+T nXM0QCGnmRno30O56CmoTVUHrqtVy5p3jAi7HMetOuVcmq8GPGDRPwPKAh1OUgR7 sV3adk6gFyJc0Q7crYE7S8a7pnEp6YrZsQhhoOQA/IkO1uNUXj8frl5N8TlcFoC8 pjGfKo1TXEDXnVhB8DR1gTUacrYUBTvZciLDona3wmfbhbrmdSBxw3icVmWUI2eQ aVUekpTcQIUQArsJ2He8SpJDVqm+HCfrdBV+k7YhDoFI03iCbtuBiY/SR3m1Wo+G -----END CERTIFICATE-----Generated at Thu Sep 24 17:34:45 2026 by rpki-client