$ rpki-client -vvf krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft File: 9868B8A018D41E9D418D93B52C0A31174F40F11E.mft (raw, json) Hash identifier: 5VWdX3naiH1Ed9tpyRmewwbmDfXblYSDMQKHg2eV/RU= Subject key identifier: A8:D1:6A:95:C5:6B:1C:E6:49:3D:69:FF:93:91:7F:26:61:56:1F:69 Authority key identifier: 98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E Certificate issuer: /CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Certificate serial: 771E0323E914D2257BC2C759FE5E73A41EB248B1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft Manifest number: 15 Signing time: Sun 14 Jun 2026 17:33:58 +0000 Manifest this update: Sun 14 Jun 2026 17:28:58 +0000 Manifest next update: Mon 15 Jun 2026 19:44:58 +0000 Files and hashes: 1: 9868B8A018D41E9D418D93B52C0A31174F40F11E.crl (hash: tH2y921DpMVFwwySO0Gn7Y1gPq3XGNAfLmePlibZRAk=) 2: 326131343a373538363a363030303a3a2f34302d3438203d3e20313531363733.roa (hash: nAQJIz3m4DL0ffcnjUVRZFFoDNAbg8/PAwJ2tYnoprw=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.crl rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.crl rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/20914720382A1F52B950212C138E5E1E81BA69B7.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/20914720382A1F52B950212C138E5E1E81BA69B7.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Jun 2026 19:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:1e:03:23:e9:14:d2:25:7b:c2:c7:59:fe:5e:73:a4:1e:b2:48:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Validity Not Before: Jun 14 17:28:58 2026 GMT Not After : Jun 15 19:44:58 2026 GMT Subject: CN=A8D16A95C56B1CE6493D69FF93917F2661561F69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:ce:66:20:63:f4:34:b0:d3:15:3b:da:3d:e4: 68:06:25:4e:0b:03:63:5a:41:fb:7d:ca:ce:79:95: 61:cf:5d:b2:eb:82:ba:09:6a:c9:f1:fa:40:34:c1: 54:5a:18:54:fb:fd:20:e1:97:05:2b:da:11:54:e8: cd:c5:0a:84:63:87:67:3c:4d:78:e2:5d:68:b0:8e: df:bc:58:75:5d:93:ec:63:d9:27:d8:2f:8d:9d:e0: e3:a4:5d:fe:7b:8b:79:87:60:fd:f6:d7:1a:c1:44: a3:78:0c:b1:11:78:02:c7:83:97:47:79:7e:c9:72: d3:70:bf:25:5a:7e:50:b5:9f:41:26:d7:ab:f4:34: d0:0f:5b:68:f8:b1:c7:72:0f:fe:eb:a0:53:dd:a7: 68:42:10:36:55:eb:e1:d3:9b:29:bb:75:5a:21:63: 8a:56:af:9a:3c:d4:93:9a:bd:eb:d1:26:b2:05:14: 7e:cb:5d:fb:ee:09:6c:f4:75:aa:42:7c:44:85:61: a3:fa:62:c2:43:98:b7:71:2f:9e:a5:57:f9:bb:e1: 5a:4e:23:6e:f6:ce:bb:34:91:f9:0e:99:af:7b:25: a9:59:1f:58:31:59:8f:85:6a:e8:db:50:f9:42:89: 14:a0:5e:3a:58:2c:85:56:ff:72:5a:df:c8:b5:ad: 77:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D1:6A:95:C5:6B:1C:E6:49:3D:69:FF:93:91:7F:26:61:56:1F:69 X509v3 Authority Key Identifier: keyid:98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f532b9eb-2fae-48a8-9793-33eec067ce39/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:91:e9:03:35:6b:ca:0b:36:a2:9e:ed:e7:7e:37:ff:39:82: 27:a1:dd:0f:4e:d9:4e:6c:c8:08:b7:65:7a:64:c9:ba:6b:a5: e6:b4:e2:c3:dc:51:3b:ef:a0:20:ee:0d:c8:bb:cd:4a:5b:bf: f1:a6:8d:f6:73:38:f2:1f:a7:31:9d:65:e1:a5:81:34:7c:be: b1:c4:92:6a:ad:41:f5:a7:26:f6:e9:1b:6c:87:50:d6:15:ab: 7d:f7:7d:59:84:28:d7:2b:0a:e8:5d:ea:8e:b2:f8:e6:4d:53: 46:71:06:2d:4f:77:27:8f:4a:72:62:53:0e:6f:63:63:e1:6e: 46:f8:29:bc:90:48:e9:f2:d0:d4:ba:a6:f8:29:a4:48:eb:63: ee:67:93:57:23:5e:2b:a1:67:0b:2c:57:3d:1a:6c:1c:a5:ea: 2f:6a:65:2c:c6:15:24:72:6c:32:ba:9d:59:82:e2:a6:51:c1: 5b:84:38:34:3b:55:f8:08:c5:6e:48:7d:eb:4f:8c:dc:6f:7b: a1:9c:6a:76:0c:99:1c:cb:a9:f8:fd:8d:cd:0a:8e:c0:85:11: 8a:76:a3:2b:b3:94:25:ca:0c:9b:07:f0:12:63:9f:53:de:cc: 39:01:4d:93:7e:90:b4:10:77:04:ba:d9:d4:ab:9d:f5:31:2e: 7f:27:4f:82 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUdx4DI+kU0iV7wsdZ/l5zpB6ySLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2OEI4QTAxOEQ0MUU5RDQxOEQ5M0I1MkMwQTMxMTc0 RjQwRjExRTAeFw0yNjA2MTQxNzI4NThaFw0yNjA2MTUxOTQ0NThaMDMxMTAvBgNV BAMTKEE4RDE2QTk1QzU2QjFDRTY0OTNENjlGRjkzOTE3RjI2NjE1NjFGNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQzmYgY/Q0sNMVO9o95GgGJU4L A2NaQft9ys55lWHPXbLrgroJasnx+kA0wVRaGFT7/SDhlwUr2hFU6M3FCoRjh2c8 TXjiXWiwjt+8WHVdk+xj2SfYL42d4OOkXf57i3mHYP321xrBRKN4DLEReALHg5dH eX7JctNwvyVaflC1n0Em16v0NNAPW2j4scdyD/7roFPdp2hCEDZV6+HTmym7dVoh Y4pWr5o81JOavevRJrIFFH7LXfvuCWz0dapCfESFYaP6YsJDmLdxL56lV/m74VpO I272zrs0kfkOma97JalZH1gxWY+FaujbUPlCiRSgXjpYLIVW/3Ja38i1rXeZAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUqNFqlcVrHOZJPWn/k5F/JmFWH2kwHwYDVR0j BBgwFoAUmGi4oBjUHp1BjZO1LAoxF09A8R4wDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvMi85 ODY4QjhBMDE4RDQxRTlENDE4RDkzQjUyQzBBMzExNzRGNDBGMTFFLmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2Y1MzJiOWViLTJmYWUtNDhhOC05Nzkz LTMzZWVjMDY3Y2UzOS8zLzk4NjhCOEEwMThENDFFOUQ0MThEOTNCNTJDMEEzMTE3 NEY0MEYxMUUuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS8yLzk4NjhCOEEwMThENDFFOUQ0MThE OTNCNTJDMEEzMTE3NEY0MEYxMUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCPkekDNWvKCzainu3nfjf/ OYInod0PTtlObMgIt2V6ZMm6a6XmtOLD3FE776Ag7g3Iu81KW7/xpo32czjyH6cx nWXhpYE0fL6xxJJqrUH1pyb26Rtsh1DWFat9931ZhCjXKwroXeqOsvjmTVNGcQYt T3cnj0pyYlMOb2Nj4W5G+Cm8kEjp8tDUuqb4KaRI62PuZ5NXI14roWcLLFc9Gmwc peovamUsxhUkcmwyup1ZguKmUcFbhDg0O1X4CMVuSH3rT4zcb3uhnGp2DJkcy6n4 /Y3NCo7AhRGKdqMrs5QlygybB/ASY59T3sw5AU2TfpC0EHcEutnUq531MS5/J0+C -----END CERTIFICATE-----Generated at Mon Jun 15 12:55:10 2026 by rpki-client