$ rpki-client -vvvf krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft File: 5B9C459FED5E28921D6D57A342A855A1BA969897.mft (raw, json) Hash identifier: jjAR/qy7OhxfafHu2F3OpJPIb6BCidynT7PGudC4zro= Subject key identifier: C1:E2:D5:7A:D8:5E:CA:1F:32:12:7C:B1:70:3D:49:40:7D:B6:FD:E0 Authority key identifier: 5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97 Certificate issuer: /CN=5B9C459FED5E28921D6D57A342A855A1BA969897 Certificate serial: 6A7E6AA4129F45EFFD7207DC5BFED4059B91ACC8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft Manifest number: CC Signing time: Wed 04 Nov 2026 22:14:43 +0000 Manifest this update: Wed 04 Nov 2026 22:09:43 +0000 Manifest next update: Thu 05 Nov 2026 23:52:43 +0000 Files and hashes: 1: 5B9C459FED5E28921D6D57A342A855A1BA969897.crl (hash: g7FujS8+mtV39dlLzFY4eqvjnW8u99zg8VG/a2lqY68=) 2: 326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa (hash: /ary5zP9OQDMFHRngTCodTLCsHVfTXFD9vmLwzXrQjo=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 23:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:7e:6a:a4:12:9f:45:ef:fd:72:07:dc:5b:fe:d4:05:9b:91:ac:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B9C459FED5E28921D6D57A342A855A1BA969897 Validity Not Before: Nov 4 22:09:43 2026 GMT Not After : Nov 5 23:52:43 2026 GMT Subject: CN=C1E2D57AD85ECA1F32127CB1703D49407DB6FDE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:90:31:59:2d:84:a5:60:59:74:92:50:f8:4e: aa:39:e9:0b:35:cc:6e:82:ba:d3:8f:08:b1:9f:5c: e3:b8:a3:a9:60:ce:36:e3:24:62:9e:0a:90:63:ea: 9b:2b:6f:8e:e8:52:ca:2c:e7:11:25:3d:db:c1:f5: d3:ab:18:f3:03:24:12:d7:e1:d3:3b:e1:63:c6:7a: 84:d2:66:d6:c1:82:69:a8:a5:da:dd:0d:35:62:a2: b0:71:d5:48:36:73:14:56:40:4e:51:ab:21:08:94: e5:93:f7:cc:95:82:6f:28:d6:62:a6:93:7f:5a:28: b7:ae:0c:7d:1f:86:3f:23:d4:4e:df:b3:b7:e3:ef: f5:32:8a:58:be:c5:3c:86:97:ce:8e:13:ba:bc:89: 6e:fa:05:37:02:0a:88:af:54:a5:cb:20:1b:96:df: 76:c0:d4:2a:c4:26:df:ae:ae:72:f2:f5:b8:fd:dd: 58:d9:7c:0b:12:0c:80:87:42:61:95:c6:ca:44:2a: 77:be:62:a4:fc:d4:0b:57:e8:69:4a:b9:3e:6a:8d: 34:fe:59:3f:98:0e:82:1a:ed:87:11:61:4e:01:d3: 6c:3c:4a:d7:c2:ab:c7:7e:ef:bc:b8:28:79:dd:a4: 75:46:75:4d:0c:9c:50:36:73:ef:49:fa:09:3d:7f: cf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E2:D5:7A:D8:5E:CA:1F:32:12:7C:B1:70:3D:49:40:7D:B6:FD:E0 X509v3 Authority Key Identifier: keyid:5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:6d:f6:e6:19:77:9a:b1:f2:08:1d:fc:3a:9d:1d:76:d6:59: 23:0a:5a:96:2f:66:17:48:96:a0:b0:db:1b:ef:ba:71:bb:91: ef:12:a3:0c:25:64:2f:cb:d1:35:7e:6a:16:4e:df:66:bb:e6: e8:b2:a8:6f:18:4c:8d:91:71:d3:f4:0e:e7:6f:36:99:07:74: 07:bc:9a:1b:97:7d:d1:c5:2a:b8:61:5f:fe:cc:fc:0d:b6:bb: 6b:fa:66:08:0b:11:ee:86:26:a5:52:fe:f0:95:26:9d:8a:49: 4c:56:eb:0c:91:c7:a0:a2:7e:ac:51:33:f0:5c:48:0c:74:f1: ac:fd:4d:e2:4d:03:50:79:ee:fe:ac:d1:8b:06:bf:7b:b5:2e: d9:49:da:a9:ac:bc:59:80:67:7c:6f:39:e9:82:de:d7:c0:a6: 89:90:1a:c4:ed:c7:a2:c4:c4:23:02:eb:46:bf:de:be:a3:ef: 26:9c:4b:87:1a:90:0d:87:3f:ab:00:53:ef:20:a9:79:b1:31: 7c:ae:15:5c:2a:93:4d:60:06:8d:41:6b:be:eb:e1:45:bb:14: 23:6c:69:04:04:b2:f6:d5:af:bf:3e:80:1b:20:88:14:48:2a: 8b:56:5d:9b:22:69:49:7e:92:f6:e7:d8:22:f3:93:35:d3:c3: c4:6f:5b:d4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUan5qpBKfRe/9cgfcW/7UBZuRrMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI5QzQ1OUZFRDVFMjg5MjFENkQ1N0EzNDJBODU1QTFC QTk2OTg5NzAeFw0yNjExMDQyMjA5NDNaFw0yNjExMDUyMzUyNDNaMDMxMTAvBgNV BAMTKEMxRTJENTdBRDg1RUNBMUYzMjEyN0NCMTcwM0Q0OTQwN0RCNkZERTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxkDFZLYSlYFl0klD4Tqo56Qs1 zG6CutOPCLGfXOO4o6lgzjbjJGKeCpBj6psrb47oUsos5xElPdvB9dOrGPMDJBLX 4dM74WPGeoTSZtbBgmmopdrdDTViorBx1Ug2cxRWQE5RqyEIlOWT98yVgm8o1mKm k39aKLeuDH0fhj8j1E7fs7fj7/Uyili+xTyGl86OE7q8iW76BTcCCoivVKXLIBuW 33bA1CrEJt+urnLy9bj93VjZfAsSDICHQmGVxspEKne+YqT81AtX6GlKuT5qjTT+ WT+YDoIa7YcRYU4B02w8StfCq8d+77y4KHndpHVGdU0MnFA2c+9J+gk9f8+nAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUweLVetheyh8yEnyxcD1JQH22/eAwHwYDVR0j BBgwFoAUW5xFn+1eKJIdbVejQqhVobqWmJcwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvMC81 QjlDNDU5RkVENUUyODkyMUQ2RDU3QTM0MkE4NTVBMUJBOTY5ODk3LmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8wLzVCOUM0NTlGRUQ1RTI4OTIxRDZENTdBMzQyQTg1NUEx QkE5Njk4OTcuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS8wLzVCOUM0NTlGRUQ1RTI4OTIxRDZE NTdBMzQyQTg1NUExQkE5Njk4OTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApbfbmGXeasfIIHfw6nR12 1lkjClqWL2YXSJagsNsb77pxu5HvEqMMJWQvy9E1fmoWTt9mu+bosqhvGEyNkXHT 9A7nbzaZB3QHvJobl33RxSq4YV/+zPwNtrtr+mYICxHuhialUv7wlSadiklMVusM kcegon6sUTPwXEgMdPGs/U3iTQNQee7+rNGLBr97tS7ZSdqprLxZgGd8bznpgt7X wKaJkBrE7ceixMQjAutGv96+o+8mnEuHGpANhz+rAFPvIKl5sTF8rhVcKpNNYAaN QWu+6+FFuxQjbGkEBLL21a+/PoAbIIgUSCqLVl2bImlJfpL259gi85M108PEb1vU -----END CERTIFICATE-----Generated at Thu Nov 5 14:32:47 2026 by rpki-client