$ rpki-client -vvf krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft File: A9D80600BE2DA447AA0056537C94F64A1A69D021.mft (raw, json) Hash identifier: 6up/60dqZnP5bwslWdUiHxSVqkDAv9j82SJkZmaarvs= Subject key identifier: 40:E4:2E:62:1E:F7:D7:10:F0:EA:1A:C7:05:81:FB:CE:DC:0F:EF:40 Authority key identifier: A9:D8:06:00:BE:2D:A4:47:AA:00:56:53:7C:94:F6:4A:1A:69:D0:21 Certificate issuer: /CN=A9D80600BE2DA447AA0056537C94F64A1A69D021 Certificate serial: 23768BE61779F10F789901DC40A84B6E7F44D35F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/A9D80600BE2DA447AA0056537C94F64A1A69D021.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft Manifest number: 05 Signing time: Thu 23 Jul 2026 10:38:16 +0000 Manifest this update: Thu 23 Jul 2026 10:33:16 +0000 Manifest next update: Fri 24 Jul 2026 11:43:16 +0000 Files and hashes: 1: AS151673.asa (hash: geeEsaMkyqvVIKkrzEscYUOszo0N2PjIryztORdhZ0M=) 2: A9D80600BE2DA447AA0056537C94F64A1A69D021.crl (hash: abfCQSo76+nE1JxhxVoiPt6c4bFi5E0RP+DMRENiqp4=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.crl rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/A9D80600BE2DA447AA0056537C94F64A1A69D021.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 08:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:76:8b:e6:17:79:f1:0f:78:99:01:dc:40:a8:4b:6e:7f:44:d3:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D80600BE2DA447AA0056537C94F64A1A69D021 Validity Not Before: Jul 23 10:33:16 2026 GMT Not After : Jul 24 11:43:16 2026 GMT Subject: CN=40E42E621EF7D710F0EA1AC70581FBCEDC0FEF40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:55:ea:9e:43:47:d7:0d:9b:d8:4e:eb:93:43: 21:f1:0d:2b:90:80:b5:83:c6:ad:73:96:2c:03:1e: 6f:d6:c6:5d:49:1b:79:f8:57:76:57:b0:ab:d4:4b: f9:a0:d6:a4:35:25:cd:4c:5f:54:25:74:a5:49:04: b4:dc:25:fe:d2:c6:20:df:bd:c7:80:f7:bf:0d:77: b8:9c:50:47:c5:fb:28:cf:90:22:4d:be:56:22:d9: 6f:79:09:85:d3:05:c1:62:86:95:f6:d0:4c:44:08: e7:94:0c:5d:c5:c5:14:42:f4:3c:79:6d:08:47:a3: a7:b3:2e:b5:04:bf:71:36:77:70:42:8c:aa:9b:48: be:f8:49:4d:07:d6:d3:55:93:85:f7:67:30:e7:a5: 80:b4:33:f8:58:53:94:f3:c3:d8:15:e5:66:4b:54: a7:07:32:43:b3:f4:a5:35:83:e6:12:3b:53:a5:ed: 8c:06:61:cc:a4:51:9c:a7:f8:e5:96:20:93:1b:f1: 0f:79:a7:6f:49:48:d6:53:4a:29:84:48:73:ff:43: 59:69:68:94:2d:c8:c3:24:3b:72:4d:8e:df:08:03: 71:69:43:85:48:0c:91:c1:b3:1c:88:d3:f1:73:62: 06:17:7e:41:82:30:82:34:3c:0c:ed:40:8a:9f:5c: d6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E4:2E:62:1E:F7:D7:10:F0:EA:1A:C7:05:81:FB:CE:DC:0F:EF:40 X509v3 Authority Key Identifier: keyid:A9:D8:06:00:BE:2D:A4:47:AA:00:56:53:7C:94:F6:4A:1A:69:D0:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/A9D80600BE2DA447AA0056537C94F64A1A69D021.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:d7:36:7d:ac:4f:e0:75:53:82:fa:cd:50:91:86:88:14:bf: 43:58:b9:8d:5c:d3:ac:80:40:31:2b:cd:00:75:be:a6:3e:90: fb:ff:27:e4:ce:bc:76:4a:ec:e5:19:b7:a2:ea:9f:49:25:a8: f6:a0:f1:2e:55:60:27:19:75:cd:b4:54:32:ef:94:ea:d2:0c: 32:4e:66:4e:14:aa:13:1f:15:c6:37:b9:04:1e:67:5e:09:53: 12:ff:b6:2b:20:38:68:d0:0f:f3:8c:e5:e0:65:b9:7d:00:db: 33:cd:ef:c3:ef:f7:d1:a0:ac:88:4e:11:a8:9f:e5:d1:6f:fe: 41:5a:24:af:86:ec:e5:28:03:7d:4f:bf:75:4f:5a:ab:7b:c4: 1c:f8:20:37:fd:91:df:34:20:af:40:61:ed:bb:68:eb:c7:fc: b4:da:fb:c2:d8:cf:f7:ac:43:b8:d2:f6:91:47:61:4d:40:c3: 6d:93:ab:cc:80:ee:ab:27:bb:c7:62:7d:e7:fc:57:4c:8c:ef: 94:cb:c0:44:74:f9:23:1f:eb:17:59:7d:51:8c:b8:44:56:37: 36:de:fe:06:84:b7:9d:57:73:2d:77:7d:7d:0c:85:0c:75:5b: 78:5b:42:85:00:6e:cf:f4:b0:34:18:21:6b:b7:36:2c:ae:19: 12:53:e2:3b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUI3aL5hd58Q94mQHcQKhLbn9E018wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlEODA2MDBCRTJEQTQ0N0FBMDA1NjUzN0M5NEY2NEEx QTY5RDAyMTAeFw0yNjA3MjMxMDMzMTZaFw0yNjA3MjQxMTQzMTZaMDMxMTAvBgNV BAMTKDQwRTQyRTYyMUVGN0Q3MTBGMEVBMUFDNzA1ODFGQkNFREMwRkVGNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTVeqeQ0fXDZvYTuuTQyHxDSuQ gLWDxq1zliwDHm/Wxl1JG3n4V3ZXsKvUS/mg1qQ1Jc1MX1QldKVJBLTcJf7SxiDf vceA978Nd7icUEfF+yjPkCJNvlYi2W95CYXTBcFihpX20ExECOeUDF3FxRRC9Dx5 bQhHo6ezLrUEv3E2d3BCjKqbSL74SU0H1tNVk4X3ZzDnpYC0M/hYU5Tzw9gV5WZL VKcHMkOz9KU1g+YSO1Ol7YwGYcykUZyn+OWWIJMb8Q95p29JSNZTSimESHP/Q1lp aJQtyMMkO3JNjt8IA3FpQ4VIDJHBsxyI0/FzYgYXfkGCMII0PAztQIqfXNYPAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUQOQuYh731xDw6hrHBYH7ztwP70AwHwYDVR0j BBgwFoAUqdgGAL4tpEeqAFZTfJT2Shpp0CEwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvNS9B OUQ4MDYwMEJFMkRBNDQ3QUEwMDU2NTM3Qzk0RjY0QTFBNjlEMDIxLmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2IzZjJhYWFlLTIzY2YtNGEzNy05NDAz LTc0M2IxNWVjMmE4ZS8xL0E5RDgwNjAwQkUyREE0NDdBQTAwNTY1MzdDOTRGNjRB MUE2OUQwMjEuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS81L0E5RDgwNjAwQkUyREE0NDdBQTAw NTY1MzdDOTRGNjRBMUE2OUQwMjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAH1zZ9rE/gdVOC+s1QkYaI FL9DWLmNXNOsgEAxK80Adb6mPpD7/yfkzrx2SuzlGbei6p9JJaj2oPEuVWAnGXXN tFQy75Tq0gwyTmZOFKoTHxXGN7kEHmdeCVMS/7YrIDho0A/zjOXgZbl9ANszze/D 7/fRoKyIThGon+XRb/5BWiSvhuzlKAN9T791T1qre8Qc+CA3/ZHfNCCvQGHtu2jr x/y02vvC2M/3rEO40vaRR2FNQMNtk6vMgO6rJ7vHYn3n/FdMjO+Uy8BEdPkjH+sX WX1RjLhEVjc23v4GhLedV3Mtd319DIUMdVt4W0KFAG7P9LA0GCFrtzYsrhkSU+I7 -----END CERTIFICATE-----Generated at Thu Jul 23 18:59:07 2026 by rpki-client