$ rpki-client -vvvf krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft File: 321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft (raw, json) Hash identifier: A8XQ3umvG2qQDhQQltIgE/QTa0jY319LVmIPJIJ68LA= Subject key identifier: C5:9D:2D:94:4D:81:9C:F0:FB:4E:98:35:B6:D4:41:55:17:3C:46:C3 Authority key identifier: 32:1F:BF:E5:FB:20:42:FF:2B:B2:EE:8F:5E:32:5D:96:3C:17:C9:97 Certificate issuer: /CN=321FBFE5FB2042FF2BB2EE8F5E325D963C17C997 Certificate serial: 1392CC12B6BFF605B13E857E444757AC6E445461 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft Manifest number: 9C Signing time: Wed 23 Sep 2026 05:23:17 +0000 Manifest this update: Wed 23 Sep 2026 05:18:17 +0000 Manifest next update: Thu 24 Sep 2026 05:51:17 +0000 Files and hashes: 1: 321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl (hash: EzBDkmyOo7dcOnD4Qoa7jv9clTwLQHb6ZL/KpUAFqSo=) 2: 326130663a316363353a323431313a3a2f34382d3438203d3e20323036303639.roa (hash: +AYzvxTOdmaj71wPUnYNAWebe4QXVmX6EA2aQO2VSuQ=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 05:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:92:cc:12:b6:bf:f6:05:b1:3e:85:7e:44:47:57:ac:6e:44:54:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=321FBFE5FB2042FF2BB2EE8F5E325D963C17C997 Validity Not Before: Sep 23 05:18:17 2026 GMT Not After : Sep 24 05:51:17 2026 GMT Subject: CN=C59D2D944D819CF0FB4E9835B6D44155173C46C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:85:d4:d0:6c:12:0d:3a:79:24:b3:d2:59:8c: 96:9a:d7:5c:23:1e:24:ed:f0:3a:f8:05:af:a5:c7: b5:22:5a:88:4e:5b:a6:67:38:b7:6f:b8:fe:08:09: 99:75:a2:10:1d:19:83:52:47:0f:86:6e:e9:49:e2: 02:88:26:e0:69:92:2f:50:1e:20:b5:86:81:c2:82: 7f:86:7d:29:fa:df:71:9d:0d:7e:7a:19:e1:94:fa: 78:de:a8:02:04:44:41:cb:b6:b2:dd:c9:c7:1f:c2: 54:26:85:89:21:b0:af:62:bd:0a:4c:ae:21:72:ab: e6:e8:9b:3e:53:fe:83:de:9e:24:99:9a:b8:fe:4b: 7f:0e:20:14:68:46:41:57:c4:cf:a5:bf:ea:99:f6: 33:94:1c:ec:ae:a2:eb:51:f6:6a:b9:b2:6e:79:55: 19:8c:d5:cf:e7:a6:81:7c:7c:13:d8:72:5c:3d:e5: a2:1b:fa:fc:e3:30:44:da:95:ad:48:2e:da:06:bc: df:9a:b7:33:a9:3f:c5:8f:bb:05:14:15:a2:6f:83: 4e:46:5f:fe:35:79:82:d2:d9:62:62:88:9b:de:de: 7d:82:f0:34:35:0d:d3:f7:d7:d0:27:98:5f:f4:c0: 5e:bb:33:01:30:a6:f4:92:95:7a:a3:04:b8:78:b9: 44:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9D:2D:94:4D:81:9C:F0:FB:4E:98:35:B6:D4:41:55:17:3C:46:C3 X509v3 Authority Key Identifier: keyid:32:1F:BF:E5:FB:20:42:FF:2B:B2:EE:8F:5E:32:5D:96:3C:17:C9:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:bb:81:02:9d:de:aa:3c:1a:30:65:7d:1f:32:1c:29:4f:de: b9:60:20:4f:e7:12:25:0a:03:88:19:0b:51:48:74:18:a0:a2: eb:25:f8:c5:c4:9c:d9:02:b3:61:2e:dc:9e:24:0e:73:17:64: d0:4e:5f:21:de:81:94:f6:7a:5b:80:6d:31:60:cd:1d:ce:20: 1a:5d:a1:78:da:d7:87:18:ee:69:63:3d:a7:94:2b:74:d0:d2: 17:50:02:9b:31:0b:30:59:87:ac:dd:3e:79:1d:d3:5b:bb:36: 52:2f:71:07:57:8d:44:58:be:26:90:5d:fb:1f:08:ef:47:43: cd:cf:f6:2d:ab:74:f9:3c:68:90:fe:1e:9d:09:c4:43:35:6b: 27:fe:09:36:46:d3:72:57:3a:0c:6f:63:e3:fb:e7:46:1c:00: 19:56:08:1e:c1:ea:b6:76:d4:d9:a2:85:c0:0a:38:06:38:c8: 23:11:d0:7c:ae:4f:37:8e:02:91:a1:69:33:ae:23:22:b2:41: 63:7c:6d:b1:c2:3d:1a:2f:35:7e:c1:a7:4a:9c:14:d8:c1:52: 54:c0:d4:cf:d9:90:a7:ee:b9:ca:6d:a4:01:5b:a2:65:30:f6: b8:9b:65:62:ec:ce:3e:40:20:00:6d:e9:a1:be:5b:8e:3b:e4: 64:36:3d:c4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUE5LMEra/9gWxPoV+REdXrG5EVGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIxRkJGRTVGQjIwNDJGRjJCQjJFRThGNUUzMjVEOTYz QzE3Qzk5NzAeFw0yNjA5MjMwNTE4MTdaFw0yNjA5MjQwNTUxMTdaMDMxMTAvBgNV BAMTKEM1OUQyRDk0NEQ4MTlDRjBGQjRFOTgzNUI2RDQ0MTU1MTczQzQ2QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPhdTQbBINOnkks9JZjJaa11wj HiTt8Dr4Ba+lx7UiWohOW6ZnOLdvuP4ICZl1ohAdGYNSRw+GbulJ4gKIJuBpki9Q HiC1hoHCgn+GfSn633GdDX56GeGU+njeqAIEREHLtrLdyccfwlQmhYkhsK9ivQpM riFyq+bomz5T/oPeniSZmrj+S38OIBRoRkFXxM+lv+qZ9jOUHOyuoutR9mq5sm55 VRmM1c/npoF8fBPYclw95aIb+vzjMETala1ILtoGvN+atzOpP8WPuwUUFaJvg05G X/41eYLS2WJiiJve3n2C8DQ1DdP319AnmF/0wF67MwEwpvSSlXqjBLh4uURdAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUxZ0tlE2BnPD7Tpg1ttRBVRc8RsMwHwYDVR0j BBgwFoAUMh+/5fsgQv8rsu6PXjJdljwXyZcwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvNC8z MjFGQkZFNUZCMjA0MkZGMkJCMkVFOEY1RTMyNUQ5NjNDMTdDOTk3LmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8wLzMyMUZCRkU1RkIyMDQyRkYyQkIyRUU4RjVFMzI1RDk2 M0MxN0M5OTcuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS80LzMyMUZCRkU1RkIyMDQyRkYyQkIy RUU4RjVFMzI1RDk2M0MxN0M5OTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCeu4ECnd6qPBowZX0fMhwp T965YCBP5xIlCgOIGQtRSHQYoKLrJfjFxJzZArNhLtyeJA5zF2TQTl8h3oGU9npb gG0xYM0dziAaXaF42teHGO5pYz2nlCt00NIXUAKbMQswWYes3T55HdNbuzZSL3EH V41EWL4mkF37HwjvR0PNz/Ytq3T5PGiQ/h6dCcRDNWsn/gk2RtNyVzoMb2Pj++dG HAAZVggeweq2dtTZooXACjgGOMgjEdB8rk83jgKRoWkzriMiskFjfG2xwj0aLzV+ wadKnBTYwVJUwNTP2ZCn7rnKbaQBW6JlMPa4m2Vi7M4+QCAAbemhvluOO+RkNj3E -----END CERTIFICATE-----Generated at Wed Sep 23 21:16:02 2026 by rpki-client