$ rpki-client -vvf krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft File: 5B9C459FED5E28921D6D57A342A855A1BA969897.mft (raw, json) Hash identifier: N4NBo1VoRaFvTW8r8gkFnxZTJhHgPRL8GTaoJ0i09WE= Subject key identifier: 4D:CB:DB:C2:C0:E7:62:FE:6D:9A:00:F1:D4:92:76:06:18:B4:BA:26 Authority key identifier: 5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97 Certificate issuer: /CN=5B9C459FED5E28921D6D57A342A855A1BA969897 Certificate serial: 164213987892771FCF565E093F77E4ED9C3CC486 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft Manifest number: 52 Signing time: Tue 28 Jul 2026 20:33:16 +0000 Manifest this update: Tue 28 Jul 2026 20:28:16 +0000 Manifest next update: Wed 29 Jul 2026 20:44:16 +0000 Files and hashes: 1: 326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa (hash: /ary5zP9OQDMFHRngTCodTLCsHVfTXFD9vmLwzXrQjo=) 2: 5B9C459FED5E28921D6D57A342A855A1BA969897.crl (hash: SUA4WoBimOkeXJPURCo4eFbMWStTKWAeqmquhJsOqis=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 20:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:42:13:98:78:92:77:1f:cf:56:5e:09:3f:77:e4:ed:9c:3c:c4:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B9C459FED5E28921D6D57A342A855A1BA969897 Validity Not Before: Jul 28 20:28:16 2026 GMT Not After : Jul 29 20:44:16 2026 GMT Subject: CN=4DCBDBC2C0E762FE6D9A00F1D492760618B4BA26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b6:87:32:c3:26:a5:71:ba:5a:7f:12:b0:f9: 30:f5:a0:de:86:bd:7d:6b:a6:62:4b:7c:3c:d5:26: 93:cf:88:66:80:b8:25:87:2e:86:ee:10:8e:7a:8c: 83:74:72:87:ba:f6:c1:d5:22:76:68:d0:5f:2f:82: c7:30:ab:91:21:9d:fd:a6:fd:b4:cb:95:9e:11:fd: 9a:9a:68:91:81:83:c2:00:e1:ee:6e:9c:e4:70:cb: 1e:e5:54:77:3b:dc:b7:87:46:7d:3b:63:e0:0f:36: 37:9b:69:6a:3d:a9:57:78:b0:da:f7:19:22:af:72: a5:c2:1f:62:0a:2e:92:09:79:cd:16:4a:a7:29:69: 0d:a3:e4:3d:94:77:1d:8f:0e:05:c6:69:40:7d:4f: 6b:29:1d:8c:3d:b6:f3:07:6e:b5:de:48:21:1d:4b: b7:31:a7:12:b3:8c:52:d3:d6:51:23:0d:ea:0f:02: c0:a1:be:b7:ef:71:cd:cc:48:ce:3e:11:b8:87:0c: 36:e8:e5:cc:34:c1:4b:56:fb:83:a4:a1:c5:c3:33: ab:54:79:78:e2:a7:28:61:61:f5:01:84:02:7d:5e: 6e:29:47:b4:4b:d7:85:02:1e:b1:8f:7c:5c:1f:cd: 2a:db:86:14:6e:e3:a5:3f:2b:1c:ae:14:b1:86:5b: be:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CB:DB:C2:C0:E7:62:FE:6D:9A:00:F1:D4:92:76:06:18:B4:BA:26 X509v3 Authority Key Identifier: keyid:5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f2:23:0c:20:7f:95:c6:a2:1c:07:29:8c:8c:4e:4a:24:a7: 97:47:e2:7f:24:d2:6a:36:c8:96:6e:0f:46:17:06:b0:25:04: 3a:4c:7f:cc:50:9e:6c:b4:b6:e5:3a:58:59:e5:07:2f:b3:c0: 22:cd:7d:e2:20:3b:dd:35:33:d0:f6:5f:c9:75:03:e9:17:c4: 54:5a:49:20:8b:5a:f9:4d:b0:3a:06:78:3c:56:9c:bc:2c:81: 69:66:2c:48:cb:93:b4:66:ab:2a:d3:22:cf:1b:84:a4:42:ae: 8e:5e:3e:dd:b0:f6:c6:59:b4:76:59:e0:5f:5c:4d:27:59:85: fb:f2:11:aa:0f:ef:3c:b1:48:75:b4:37:d1:53:f7:0d:a9:bb: d3:bd:fe:a2:ee:ca:04:f5:21:d2:86:7b:40:b3:79:e1:6b:56: 40:5f:68:35:f5:d1:39:1e:a3:7d:e0:77:da:b9:d6:8d:4d:6f: 55:52:77:18:69:60:50:4a:c2:72:1d:11:13:fd:31:5d:9e:92: ae:03:fe:ba:f2:58:81:14:34:9f:62:20:5e:f6:11:4b:3b:b5: fa:cf:63:67:f4:9e:8c:bd:ba:49:3d:65:7a:98:65:18:29:98: c3:29:e0:e0:49:43:df:a5:ab:ac:27:e0:d5:b3:85:3d:e9:ae: a4:5c:29:b8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUFkITmHiSdx/PVl4JP3fk7Zw8xIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI5QzQ1OUZFRDVFMjg5MjFENkQ1N0EzNDJBODU1QTFC QTk2OTg5NzAeFw0yNjA3MjgyMDI4MTZaFw0yNjA3MjkyMDQ0MTZaMDMxMTAvBgNV BAMTKDREQ0JEQkMyQzBFNzYyRkU2RDlBMDBGMUQ0OTI3NjA2MThCNEJBMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDtocywyalcbpafxKw+TD1oN6G vX1rpmJLfDzVJpPPiGaAuCWHLobuEI56jIN0coe69sHVInZo0F8vgscwq5Ehnf2m /bTLlZ4R/ZqaaJGBg8IA4e5unORwyx7lVHc73LeHRn07Y+APNjebaWo9qVd4sNr3 GSKvcqXCH2IKLpIJec0WSqcpaQ2j5D2Udx2PDgXGaUB9T2spHYw9tvMHbrXeSCEd S7cxpxKzjFLT1lEjDeoPAsChvrfvcc3MSM4+EbiHDDbo5cw0wUtW+4OkocXDM6tU eXjipyhhYfUBhAJ9Xm4pR7RL14UCHrGPfFwfzSrbhhRu46U/KxyuFLGGW747AgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUTcvbwsDnYv5tmgDx1JJ2Bhi0uiYwHwYDVR0j BBgwFoAUW5xFn+1eKJIdbVejQqhVobqWmJcwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvMC81 QjlDNDU5RkVENUUyODkyMUQ2RDU3QTM0MkE4NTVBMUJBOTY5ODk3LmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8wLzVCOUM0NTlGRUQ1RTI4OTIxRDZENTdBMzQyQTg1NUEx QkE5Njk4OTcuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS8wLzVCOUM0NTlGRUQ1RTI4OTIxRDZE NTdBMzQyQTg1NUExQkE5Njk4OTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBb8iMMIH+VxqIcBymMjE5K JKeXR+J/JNJqNsiWbg9GFwawJQQ6TH/MUJ5stLblOlhZ5Qcvs8AizX3iIDvdNTPQ 9l/JdQPpF8RUWkkgi1r5TbA6Bng8Vpy8LIFpZixIy5O0Zqsq0yLPG4SkQq6OXj7d sPbGWbR2WeBfXE0nWYX78hGqD+88sUh1tDfRU/cNqbvTvf6i7soE9SHShntAs3nh a1ZAX2g19dE5HqN94HfaudaNTW9VUncYaWBQSsJyHRET/TFdnpKuA/668liBFDSf YiBe9hFLO7X6z2Nn9J6MvbpJPWV6mGUYKZjDKeDgSUPfpausJ+DVs4U96a6kXCm4 -----END CERTIFICATE-----Generated at Wed Jul 29 00:59:53 2026 by rpki-client