$ rpki-client -vvvf krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft File: A9D80600BE2DA447AA0056537C94F64A1A69D021.mft (raw, json) Hash identifier: R7zjXSg0PF+29S09sLA9dzyaDgfi7RrnXpZ9iaxu9uI= Subject key identifier: 3A:9D:15:D8:59:2C:5C:E9:9B:C9:80:DD:78:D7:B9:B8:59:55:42:B1 Authority key identifier: A9:D8:06:00:BE:2D:A4:47:AA:00:56:53:7C:94:F6:4A:1A:69:D0:21 Certificate issuer: /CN=A9D80600BE2DA447AA0056537C94F64A1A69D021 Certificate serial: 5CD086783A4EEA31E6B79BDE80C6443305B93F9C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/A9D80600BE2DA447AA0056537C94F64A1A69D021.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft Manifest number: 57 Signing time: Wed 23 Sep 2026 03:33:17 +0000 Manifest this update: Wed 23 Sep 2026 03:28:17 +0000 Manifest next update: Thu 24 Sep 2026 07:18:17 +0000 Files and hashes: 1: AS151673.asa (hash: geeEsaMkyqvVIKkrzEscYUOszo0N2PjIryztORdhZ0M=) 2: A9D80600BE2DA447AA0056537C94F64A1A69D021.crl (hash: C/3kAdM/9ad4hbzLOOU1nJGncs9N35tTnyCbEfiUS6w=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.crl rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/A9D80600BE2DA447AA0056537C94F64A1A69D021.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 00:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d0:86:78:3a:4e:ea:31:e6:b7:9b:de:80:c6:44:33:05:b9:3f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D80600BE2DA447AA0056537C94F64A1A69D021 Validity Not Before: Sep 23 03:28:17 2026 GMT Not After : Sep 24 07:18:17 2026 GMT Subject: CN=3A9D15D8592C5CE99BC980DD78D7B9B8595542B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ba:90:4b:0e:61:70:55:12:f6:0d:7c:4d:64: 6f:8d:77:6f:8f:cb:00:d4:ae:d2:fa:60:fb:c0:46: c7:7c:75:15:32:9f:d9:3c:01:f8:12:75:12:46:45: e8:a1:96:ff:64:e3:f7:b3:94:4e:40:19:4f:dd:3d: 38:c6:9b:e9:8f:84:9c:21:bb:08:a0:fe:87:54:89: 8b:3c:d2:dd:86:59:12:cc:b5:bd:12:a9:f0:87:03: df:ee:fd:da:1a:73:99:6c:f4:ee:22:d6:7d:d1:fd: 68:99:62:ed:ff:e1:b4:f7:1f:ba:63:ea:d1:52:8f: 5e:ac:7a:fe:b9:24:1f:04:4f:9d:43:83:80:10:39: d4:0d:11:20:91:62:e8:fa:51:18:3f:83:52:8a:b5: 22:75:ed:c5:80:68:50:98:14:80:a1:19:52:56:ed: 24:eb:b5:2e:7f:87:e2:e9:04:06:7e:ae:cf:b7:3e: 85:21:21:ae:14:43:e8:5d:e6:81:dc:32:fb:a2:34: c8:8d:65:0f:41:ef:ff:ee:04:0b:82:b9:87:53:84: a7:97:fc:83:f9:7f:18:67:ee:59:91:ef:29:d3:a6: 4e:09:64:b6:54:21:d6:88:4b:e5:b3:fb:be:60:b7: 64:79:6c:e2:a1:c4:04:86:06:3d:10:18:a2:fd:32: e5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9D:15:D8:59:2C:5C:E9:9B:C9:80:DD:78:D7:B9:B8:59:55:42:B1 X509v3 Authority Key Identifier: keyid:A9:D8:06:00:BE:2D:A4:47:AA:00:56:53:7C:94:F6:4A:1A:69:D0:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/A9D80600BE2DA447AA0056537C94F64A1A69D021.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:70:78:52:72:f9:45:54:27:8d:9c:a4:92:8d:54:f0:cd:94: 5f:ca:36:ff:30:f6:47:b8:8a:31:ad:7d:6c:fb:8f:e3:e5:69: 6f:cf:2d:ef:ad:3c:8d:0b:3e:ff:5e:44:f7:dc:09:97:d9:78: f6:a5:8b:75:10:60:71:b4:7c:7f:35:16:04:24:4d:69:23:15: fb:f8:4d:4a:51:29:f0:41:62:0f:a2:a3:08:bf:7c:4a:14:68: 54:4d:60:21:45:36:e4:da:ce:85:6e:62:18:b9:a1:61:8c:7c: a2:20:ec:b1:f8:7a:1f:a0:48:40:e0:65:f9:00:7c:80:61:00: 18:46:e9:b1:2a:55:47:25:30:be:3d:1d:05:4c:47:01:fa:78: 10:e6:c2:19:23:19:16:8a:6a:7a:b8:42:2a:39:d7:54:6f:e6: 2e:16:47:0b:f0:ec:a2:17:2d:99:59:7c:98:28:90:0c:70:2d: 6e:80:7a:b9:fd:43:2b:e5:94:ba:da:15:ab:18:51:99:25:e8: 16:fb:2d:97:7c:9a:29:ca:e0:da:42:01:8a:1b:9a:00:01:b7: cc:f4:d2:80:05:03:a8:26:ff:7e:91:a4:4f:51:f0:48:77:f9: ef:33:23:34:b2:67:4c:d1:19:eb:08:21:49:39:0e:7b:25:1e: cf:d8:5b:77 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUXNCGeDpO6jHmt5vegMZEMwW5P5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlEODA2MDBCRTJEQTQ0N0FBMDA1NjUzN0M5NEY2NEEx QTY5RDAyMTAeFw0yNjA5MjMwMzI4MTdaFw0yNjA5MjQwNzE4MTdaMDMxMTAvBgNV BAMTKDNBOUQxNUQ4NTkyQzVDRTk5QkM5ODBERDc4RDdCOUI4NTk1NTQyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXupBLDmFwVRL2DXxNZG+Nd2+P ywDUrtL6YPvARsd8dRUyn9k8AfgSdRJGReihlv9k4/ezlE5AGU/dPTjGm+mPhJwh uwig/odUiYs80t2GWRLMtb0SqfCHA9/u/doac5ls9O4i1n3R/WiZYu3/4bT3H7pj 6tFSj16sev65JB8ET51Dg4AQOdQNESCRYuj6URg/g1KKtSJ17cWAaFCYFIChGVJW 7STrtS5/h+LpBAZ+rs+3PoUhIa4UQ+hd5oHcMvuiNMiNZQ9B7//uBAuCuYdThKeX /IP5fxhn7lmR7ynTpk4JZLZUIdaIS+Wz+75gt2R5bOKhxASGBj0QGKL9MuXRAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUOp0V2FksXOmbyYDdeNe5uFlVQrEwHwYDVR0j BBgwFoAUqdgGAL4tpEeqAFZTfJT2Shpp0CEwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvNS9B OUQ4MDYwMEJFMkRBNDQ3QUEwMDU2NTM3Qzk0RjY0QTFBNjlEMDIxLmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2IzZjJhYWFlLTIzY2YtNGEzNy05NDAz LTc0M2IxNWVjMmE4ZS8xL0E5RDgwNjAwQkUyREE0NDdBQTAwNTY1MzdDOTRGNjRB MUE2OUQwMjEuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS81L0E5RDgwNjAwQkUyREE0NDdBQTAw NTY1MzdDOTRGNjRBMUE2OUQwMjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAMcHhScvlFVCeNnKSSjVTw zZRfyjb/MPZHuIoxrX1s+4/j5Wlvzy3vrTyNCz7/XkT33AmX2Xj2pYt1EGBxtHx/ NRYEJE1pIxX7+E1KUSnwQWIPoqMIv3xKFGhUTWAhRTbk2s6FbmIYuaFhjHyiIOyx +HofoEhA4GX5AHyAYQAYRumxKlVHJTC+PR0FTEcB+ngQ5sIZIxkWimp6uEIqOddU b+YuFkcL8OyiFy2ZWXyYKJAMcC1ugHq5/UMr5ZS62hWrGFGZJegW+y2XfJopyuDa QgGKG5oAAbfM9NKABQOoJv9+kaRPUfBId/nvMyM0smdM0RnrCCFJOQ57JR7P2Ft3 -----END CERTIFICATE-----Generated at Wed Sep 23 08:48:43 2026 by rpki-client