$ rpki-client -vvvf krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft File: 5B9C459FED5E28921D6D57A342A855A1BA969897.mft (raw, json) Hash identifier: X2HIwj/DwaL6F0hB00MlKofzLhhHC4gtqyNf/9kentc= Subject key identifier: E4:66:89:AC:86:7C:0E:FB:B4:32:17:E1:78:E5:6C:BC:98:05:FC:30 Authority key identifier: 5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97 Certificate issuer: /CN=5B9C459FED5E28921D6D57A342A855A1BA969897 Certificate serial: 0AEFD6559B6D53D19A850C7B18AD95F5C890A206 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft Manifest number: 99 Signing time: Sat 19 Sep 2026 23:48:17 +0000 Manifest this update: Sat 19 Sep 2026 23:43:17 +0000 Manifest next update: Mon 21 Sep 2026 00:26:17 +0000 Files and hashes: 1: 5B9C459FED5E28921D6D57A342A855A1BA969897.crl (hash: GQqK6AOmvqYlwty1yHJgm/VPzx8SkrratyzdmcM+Em8=) 2: 326131343a373538313a333830303a3a2f34302d3438203d3e20313531363733.roa (hash: /ary5zP9OQDMFHRngTCodTLCsHVfTXFD9vmLwzXrQjo=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 00:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ef:d6:55:9b:6d:53:d1:9a:85:0c:7b:18:ad:95:f5:c8:90:a2:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5B9C459FED5E28921D6D57A342A855A1BA969897 Validity Not Before: Sep 19 23:43:17 2026 GMT Not After : Sep 21 00:26:17 2026 GMT Subject: CN=E46689AC867C0EFBB43217E178E56CBC9805FC30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7a:53:b9:df:f2:35:42:09:3a:8b:f2:df:0d: 8f:db:86:84:43:2b:1e:0e:70:e0:88:67:1a:ae:44: 1a:56:33:bc:03:24:4b:9a:de:a5:00:8c:6c:8a:4c: 9f:b9:fa:01:fa:22:b7:fe:07:9e:78:d6:6b:e0:ea: 0e:88:e7:05:67:76:e2:44:4b:23:63:a3:1d:40:1d: 1c:96:83:29:cf:95:38:7a:44:77:2e:22:1f:01:22: f8:9c:68:4d:01:a8:0c:94:ec:1f:80:67:3e:ab:1b: 9f:e3:f0:2a:ce:56:6b:2f:05:a9:95:7d:b3:ca:bb: f9:40:50:b8:b9:ab:9d:e2:bc:51:4a:2e:52:70:48: 0b:64:c7:6f:c2:04:bc:7b:d0:d7:3b:f6:06:c2:85: 95:91:9c:71:d5:6f:aa:27:28:9f:3e:c8:39:05:e5: 95:b4:6e:e1:ee:38:1b:1e:4d:6e:d1:8b:0c:3b:49: 69:d0:2d:87:81:93:97:6d:ea:02:84:31:2f:7a:2b: 10:fa:cc:dc:67:45:b8:4e:63:7d:2c:89:32:66:d1: 41:e2:9c:22:5f:ee:9b:81:7d:2a:86:a3:aa:ae:37: 1f:e7:d6:86:9b:48:4b:8d:8d:c9:7b:0e:33:47:ec: 33:10:a3:9e:0b:82:5f:01:ed:41:3c:a0:76:0f:03: a8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:66:89:AC:86:7C:0E:FB:B4:32:17:E1:78:E5:6C:BC:98:05:FC:30 X509v3 Authority Key Identifier: keyid:5B:9C:45:9F:ED:5E:28:92:1D:6D:57:A3:42:A8:55:A1:BA:96:98:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5B9C459FED5E28921D6D57A342A855A1BA969897.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/0/5B9C459FED5E28921D6D57A342A855A1BA969897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:e7:60:27:f9:e8:44:b3:64:2b:21:7a:ed:00:98:53:8f:11: 7c:ae:15:21:ea:93:c3:f3:47:4c:ef:f5:56:a6:99:ef:7a:67: 5f:69:f2:20:8f:dd:44:5b:19:ec:66:3f:4f:fb:da:7b:81:af: c5:3e:cf:e1:b1:07:99:d0:ea:af:92:47:2e:12:12:f0:b6:e4: 88:7f:ef:77:de:45:24:a9:fa:a2:5c:1f:6c:eb:25:2d:4b:d4: be:09:d4:0f:0d:5f:0b:6c:48:50:f3:18:dc:a5:c2:3a:15:f8: 0d:ce:3e:bb:a7:ea:94:fb:90:32:23:a9:20:3b:ca:52:53:98: 2b:d5:a3:e0:be:5f:bb:87:f8:65:39:fd:74:b9:cc:fa:33:16: 19:8d:b3:b8:3c:9a:e9:c4:53:eb:ab:3b:e3:24:da:0e:2a:c2: c8:20:48:6e:42:fa:d0:d7:2d:61:1a:9b:5c:44:8d:b5:5e:da: ed:3a:e7:91:07:52:82:95:81:e8:6d:db:0c:ee:b9:b1:b2:d7: 17:9e:4c:b9:9b:a9:0e:06:3d:3c:89:47:a5:df:de:d8:10:a3: 06:c7:4d:76:58:08:7f:88:e4:4d:dd:48:a0:97:90:f6:84:4c: 72:f9:46:d5:b8:49:96:da:ae:5c:ce:3f:d5:7b:28:7d:28:fe: 5e:90:62:6c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUCu/WVZttU9GahQx7GK2V9ciQogYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUI5QzQ1OUZFRDVFMjg5MjFENkQ1N0EzNDJBODU1QTFC QTk2OTg5NzAeFw0yNjA5MTkyMzQzMTdaFw0yNjA5MjEwMDI2MTdaMDMxMTAvBgNV BAMTKEU0NjY4OUFDODY3QzBFRkJCNDMyMTdFMTc4RTU2Q0JDOTgwNUZDMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3elO53/I1Qgk6i/LfDY/bhoRD Kx4OcOCIZxquRBpWM7wDJEua3qUAjGyKTJ+5+gH6Irf+B5541mvg6g6I5wVnduJE SyNjox1AHRyWgynPlTh6RHcuIh8BIvicaE0BqAyU7B+AZz6rG5/j8CrOVmsvBamV fbPKu/lAULi5q53ivFFKLlJwSAtkx2/CBLx70Nc79gbChZWRnHHVb6onKJ8+yDkF 5ZW0buHuOBseTW7Riww7SWnQLYeBk5dt6gKEMS96KxD6zNxnRbhOY30siTJm0UHi nCJf7puBfSqGo6quNx/n1oabSEuNjcl7DjNH7DMQo54Lgl8B7UE8oHYPA6jnAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQU5GaJrIZ8Dvu0MhfheOVsvJgF/DAwHwYDVR0j BBgwFoAUW5xFn+1eKJIdbVejQqhVobqWmJcwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvMC81 QjlDNDU5RkVENUUyODkyMUQ2RDU3QTM0MkE4NTVBMUJBOTY5ODk3LmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5 LTMwOWVkOTdmMzgyNC8wLzVCOUM0NTlGRUQ1RTI4OTIxRDZENTdBMzQyQTg1NUEx QkE5Njk4OTcuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS8wLzVCOUM0NTlGRUQ1RTI4OTIxRDZE NTdBMzQyQTg1NUExQkE5Njk4OTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCA52An+ehEs2QrIXrtAJhT jxF8rhUh6pPD80dM7/VWppnvemdfafIgj91EWxnsZj9P+9p7ga/FPs/hsQeZ0Oqv kkcuEhLwtuSIf+933kUkqfqiXB9s6yUtS9S+CdQPDV8LbEhQ8xjcpcI6FfgNzj67 p+qU+5AyI6kgO8pSU5gr1aPgvl+7h/hlOf10ucz6MxYZjbO4PJrpxFPrqzvjJNoO KsLIIEhuQvrQ1y1hGptcRI21XtrtOueRB1KClYHobdsM7rmxstcXnky5m6kOBj08 iUel397YEKMGx012WAh/iORN3Uigl5D2hExy+UbVuEmW2q5czj/Veyh9KP5ekGJs -----END CERTIFICATE-----Generated at Sun Sep 20 10:22:50 2026 by rpki-client