$ rpki-client -vvf krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft File: 9868B8A018D41E9D418D93B52C0A31174F40F11E.mft (raw, json) Hash identifier: 2vvzbyuFu4qVj/f5TQ6wOZj5rNwnmt7prpQwX22DYUY= Subject key identifier: 6F:25:D4:F4:92:E3:A6:AE:D0:AB:B2:49:32:D4:3F:89:1E:34:95:32 Authority key identifier: 98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E Certificate issuer: /CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Certificate serial: 671D0B5B7C85CA584230C793FA0E9FF9E26F1558 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft Manifest number: 4B Signing time: Thu 23 Jul 2026 10:08:16 +0000 Manifest this update: Thu 23 Jul 2026 10:03:16 +0000 Manifest next update: Fri 24 Jul 2026 10:10:16 +0000 Files and hashes: 1: 326131343a373538363a363030303a3a2f34302d3438203d3e20313531363733.roa (hash: nAQJIz3m4DL0ffcnjUVRZFFoDNAbg8/PAwJ2tYnoprw=) 2: 9868B8A018D41E9D418D93B52C0A31174F40F11E.crl (hash: PUy9bGT32eKRVNcRsH579VX2LDVkCt2FAw7Pk+X1SDM=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.crl rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 10:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:1d:0b:5b:7c:85:ca:58:42:30:c7:93:fa:0e:9f:f9:e2:6f:15:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Validity Not Before: Jul 23 10:03:16 2026 GMT Not After : Jul 24 10:10:16 2026 GMT Subject: CN=6F25D4F492E3A6AED0ABB24932D43F891E349532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:06:8c:61:88:48:b5:6e:6a:1c:7d:76:7f:1b: 2e:b5:2e:c0:02:14:71:7b:9d:ce:4a:8a:dd:f4:53: ba:4b:f2:e6:d4:0b:ff:37:03:bb:7f:63:f7:95:88: cb:e3:1d:51:64:0b:73:91:38:84:da:38:ee:38:6d: 98:ee:6a:33:3e:de:7d:75:a4:96:b4:33:2d:a0:d1: 86:b5:c8:70:04:8e:0d:a8:a2:9b:c0:38:40:2b:aa: f7:79:10:2c:3e:02:ee:e0:2d:d6:a4:f9:da:92:83: cc:f2:d6:79:0f:aa:14:91:c8:bf:63:0c:6c:0b:ac: 59:7e:80:e4:a2:6e:d3:d4:e1:84:2a:2a:7d:c1:0d: 14:c3:22:e4:f0:fd:60:f6:04:67:b3:f1:b9:10:ec: 25:5f:05:6f:00:19:2a:ad:5f:35:71:0d:7f:eb:35: 43:7b:e8:37:e7:81:f9:f7:d8:59:c2:62:a8:79:f5: 63:35:ec:91:93:0e:f4:71:86:42:58:32:ca:92:b6: e2:e6:77:9d:fe:bb:e7:90:a4:91:7a:05:de:b6:16: 92:55:29:b3:09:2d:b6:78:54:b9:fe:eb:e3:39:ce: 55:d0:be:28:8b:9d:51:05:fb:d6:d9:ff:08:14:36: c0:68:28:95:b7:17:b5:97:cc:b1:92:f3:78:cf:16: 0d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:25:D4:F4:92:E3:A6:AE:D0:AB:B2:49:32:D4:3F:89:1E:34:95:32 X509v3 Authority Key Identifier: keyid:98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:b1:56:e4:c4:0b:8a:71:3b:7a:ce:e6:e1:e5:71:76:c3:d8: 30:e6:69:94:c0:cf:b2:cb:66:aa:62:56:db:1a:05:1d:d9:0f: 14:62:f2:0a:66:97:d9:94:f6:51:06:4c:18:69:b6:f3:0d:88: 92:64:1b:c9:fe:8c:91:51:44:d6:05:a7:16:d0:fa:57:26:84: bb:0e:e0:2e:37:4e:4a:f6:fe:4c:5a:64:be:e2:8f:12:f8:e5: 5a:7c:41:09:6e:80:53:03:55:ba:17:07:71:29:2e:eb:b4:4a: 1a:fe:00:ad:98:1e:75:85:ed:76:2a:74:04:e3:45:60:38:c5: 5e:4f:79:df:90:02:f4:0f:df:dd:06:6c:aa:04:1e:f1:dd:23: 7b:b9:81:43:4b:c1:38:0e:4b:86:4a:0d:be:c6:f2:07:49:bb: 8e:4a:09:55:10:ed:a5:2f:97:a7:79:20:60:ec:cf:50:04:e1: b5:2a:31:df:68:a0:9f:66:c3:13:bc:e5:8f:52:6f:81:90:b1: 9b:d9:72:2a:68:1a:67:9a:dd:32:db:92:8c:34:b1:59:ca:11: 6c:62:bd:91:38:c0:f5:67:70:cc:89:09:33:17:4f:4c:b5:ce: 84:f6:63:e9:a0:89:67:4a:3e:76:26:71:1a:46:dc:7c:f4:9e: bd:4d:fe:5d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUZx0LW3yFylhCMMeT+g6f+eJvFVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2OEI4QTAxOEQ0MUU5RDQxOEQ5M0I1MkMwQTMxMTc0 RjQwRjExRTAeFw0yNjA3MjMxMDAzMTZaFw0yNjA3MjQxMDEwMTZaMDMxMTAvBgNV BAMTKDZGMjVENEY0OTJFM0E2QUVEMEFCQjI0OTMyRDQzRjg5MUUzNDk1MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3BoxhiEi1bmocfXZ/Gy61LsAC FHF7nc5Kit30U7pL8ubUC/83A7t/Y/eViMvjHVFkC3OROITaOO44bZjuajM+3n11 pJa0My2g0Ya1yHAEjg2oopvAOEArqvd5ECw+Au7gLdak+dqSg8zy1nkPqhSRyL9j DGwLrFl+gOSibtPU4YQqKn3BDRTDIuTw/WD2BGez8bkQ7CVfBW8AGSqtXzVxDX/r NUN76Dfngfn32FnCYqh59WM17JGTDvRxhkJYMsqStuLmd53+u+eQpJF6Bd62FpJV KbMJLbZ4VLn+6+M5zlXQviiLnVEF+9bZ/wgUNsBoKJW3F7WXzLGS83jPFg21AgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUbyXU9JLjpq7Qq7JJMtQ/iR40lTIwHwYDVR0j BBgwFoAUmGi4oBjUHp1BjZO1LAoxF09A8R4wDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvMi85 ODY4QjhBMDE4RDQxRTlENDE4RDkzQjUyQzBBMzExNzRGNDBGMTFFLmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y1MzJiOWViLTJmYWUtNDhhOC05Nzkz LTMzZWVjMDY3Y2UzOS8zLzk4NjhCOEEwMThENDFFOUQ0MThEOTNCNTJDMEEzMTE3 NEY0MEYxMUUuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS8yLzk4NjhCOEEwMThENDFFOUQ0MThE OTNCNTJDMEEzMTE3NEY0MEYxMUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCYsVbkxAuKcTt6zubh5XF2 w9gw5mmUwM+yy2aqYlbbGgUd2Q8UYvIKZpfZlPZRBkwYabbzDYiSZBvJ/oyRUUTW BacW0PpXJoS7DuAuN05K9v5MWmS+4o8S+OVafEEJboBTA1W6FwdxKS7rtEoa/gCt mB51he12KnQE40VgOMVeT3nfkAL0D9/dBmyqBB7x3SN7uYFDS8E4DkuGSg2+xvIH SbuOSglVEO2lL5eneSBg7M9QBOG1KjHfaKCfZsMTvOWPUm+BkLGb2XIqaBpnmt0y 25KMNLFZyhFsYr2ROMD1Z3DMiQkzF09Mtc6E9mPpoIlnSj52JnEaRtx89J69Tf5d -----END CERTIFICATE-----Generated at Thu Jul 23 20:08:54 2026 by rpki-client