$ rpki-client -vvvf krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft File: 9868B8A018D41E9D418D93B52C0A31174F40F11E.mft (raw, json) Hash identifier: zEybN6FbICoeopVbEY+A8Y7jr7GUVIJLFvDdwOm8dIY= Subject key identifier: 34:D7:49:0A:7A:E2:B4:EF:02:C3:94:31:07:6D:9B:09:EF:39:21:CE Authority key identifier: 98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E Certificate issuer: /CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Certificate serial: 6DAD3FFA7D873E2A258568A6603291F9712F1164 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft Manifest number: 9B Signing time: Mon 21 Sep 2026 16:53:17 +0000 Manifest this update: Mon 21 Sep 2026 16:48:17 +0000 Manifest next update: Tue 22 Sep 2026 17:52:17 +0000 Files and hashes: 1: 326131343a373538363a363030303a3a2f34302d3438203d3e20313531363733.roa (hash: nAQJIz3m4DL0ffcnjUVRZFFoDNAbg8/PAwJ2tYnoprw=) 2: 9868B8A018D41E9D418D93B52C0A31174F40F11E.crl (hash: QAMeQS8T3AQyGZQkhbPEUKad5qGR6BZe0MZ4JTR6ZmU=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.crl rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.crl rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/83DE7037B8E20566D2FE89BA8917883B6B964E3E.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/83DE7037B8E20566D2FE89BA8917883B6B964E3E.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 17:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ad:3f:fa:7d:87:3e:2a:25:85:68:a6:60:32:91:f9:71:2f:11:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868B8A018D41E9D418D93B52C0A31174F40F11E Validity Not Before: Sep 21 16:48:17 2026 GMT Not After : Sep 22 17:52:17 2026 GMT Subject: CN=34D7490A7AE2B4EF02C39431076D9B09EF3921CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:db:e3:d7:3f:0a:eb:60:0b:07:ea:f0:14:8d: 16:e6:94:67:bf:86:66:67:92:e6:4d:59:21:a3:6e: 4e:e2:24:57:72:35:1a:c8:35:46:3f:37:f9:74:7b: 1d:c5:c4:1f:33:60:2f:92:7a:42:85:a9:b7:d4:33: 58:cc:49:bf:64:40:9a:80:65:2f:3f:55:c0:b3:f6: 92:b0:dd:7e:23:c3:28:d1:39:09:a3:7d:14:16:35: 60:09:b6:28:78:ef:47:e4:75:47:c3:11:21:4a:f5: 20:a4:e8:7a:e9:38:2e:69:84:ae:f9:7f:93:83:9d: 5f:a2:e2:b8:89:9c:11:22:03:4c:d3:27:32:aa:e5: 61:ef:f6:ef:ce:76:2f:f8:7f:15:bc:f4:61:4f:3a: be:11:8f:72:9b:14:00:19:00:42:47:2a:d6:57:58: 0a:ff:07:15:69:ae:97:30:25:5b:a7:f6:b4:83:b5: 90:b8:8c:1a:27:94:ee:37:c9:d3:3d:ae:e1:7a:9f: ac:4e:49:de:d1:8c:8a:4a:a5:b5:c2:b1:e0:35:bd: c6:97:ae:31:13:a2:45:ff:82:de:16:ac:21:96:ab: b4:32:3b:2c:80:27:0c:2e:d5:b2:66:8e:65:7c:fa: 30:cb:6c:3c:e0:d4:d2:f6:25:a8:5c:ed:ba:2f:83: 68:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D7:49:0A:7A:E2:B4:EF:02:C3:94:31:07:6D:9B:09:EF:39:21:CE X509v3 Authority Key Identifier: keyid:98:68:B8:A0:18:D4:1E:9D:41:8D:93:B5:2C:0A:31:17:4F:40:F1:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e805ea5c-d7a3-4848-837b-4697ccdd6efe/3/9868B8A018D41E9D418D93B52C0A31174F40F11E.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/2/9868B8A018D41E9D418D93B52C0A31174F40F11E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:da:fd:cd:e0:3a:2c:5e:f0:fd:12:f9:2d:fa:2a:8f:77:91: f6:79:41:bc:f9:68:a7:aa:d7:14:e9:47:68:80:71:5c:99:4d: 32:66:02:8e:8e:29:87:7b:e3:b8:41:da:61:39:28:58:25:83: 74:0e:ce:ac:d1:99:0e:71:21:04:9f:9b:5f:e1:e5:8d:55:87: 83:0e:d7:70:7b:61:b4:6e:9c:04:a4:2a:43:34:e9:ac:0f:3e: dd:a4:02:bf:f5:04:b4:82:ea:90:3b:c5:0e:a2:0c:40:77:a1: 7d:fd:b0:98:67:ef:4b:e1:3f:d1:02:92:e3:23:e5:80:c0:fb: c8:f4:b7:a3:a4:0f:00:f7:78:a6:c8:11:a2:2c:a3:aa:93:74: 4b:df:57:c2:de:41:8f:a4:52:6f:63:35:18:44:b1:28:b9:47: 23:6c:05:fa:50:91:b1:b3:94:bd:b7:a5:6a:21:29:d4:22:3e: ec:89:36:6d:cb:60:e6:2a:9f:bf:67:ca:27:3c:9b:5e:a0:c4: d6:0a:4d:f7:25:1a:6e:87:cc:14:f5:15:ab:20:7f:83:2b:42: db:4d:73:31:2d:55:d2:9e:83:56:a0:e8:88:8f:97:18:dc:a0: 63:75:a3:be:05:f0:52:c5:fc:b0:1c:1a:54:b6:5f:3b:41:2b: 09:8f:27:4e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUba0/+n2HPiolhWimYDKR+XEvEWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2OEI4QTAxOEQ0MUU5RDQxOEQ5M0I1MkMwQTMxMTc0 RjQwRjExRTAeFw0yNjA5MjExNjQ4MTdaFw0yNjA5MjIxNzUyMTdaMDMxMTAvBgNV BAMTKDM0RDc0OTBBN0FFMkI0RUYwMkMzOTQzMTA3NkQ5QjA5RUYzOTIxQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ2+PXPwrrYAsH6vAUjRbmlGe/ hmZnkuZNWSGjbk7iJFdyNRrINUY/N/l0ex3FxB8zYC+SekKFqbfUM1jMSb9kQJqA ZS8/VcCz9pKw3X4jwyjROQmjfRQWNWAJtih470fkdUfDESFK9SCk6HrpOC5phK75 f5ODnV+i4riJnBEiA0zTJzKq5WHv9u/Odi/4fxW89GFPOr4Rj3KbFAAZAEJHKtZX WAr/BxVprpcwJVun9rSDtZC4jBonlO43ydM9ruF6n6xOSd7RjIpKpbXCseA1vcaX rjETokX/gt4WrCGWq7QyOyyAJwwu1bJmjmV8+jDLbDzg1NL2Jahc7bovg2iLAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUNNdJCnritO8Cw5QxB22bCe85Ic4wHwYDVR0j BBgwFoAUmGi4oBjUHp1BjZO1LAoxF09A8R4wDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvMi85 ODY4QjhBMDE4RDQxRTlENDE4RDkzQjUyQzBBMzExNzRGNDBGMTFFLmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2U4MDVlYTVjLWQ3YTMtNDg0OC04Mzdi LTQ2OTdjY2RkNmVmZS8zLzk4NjhCOEEwMThENDFFOUQ0MThEOTNCNTJDMEEzMTE3 NEY0MEYxMUUuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS8yLzk4NjhCOEEwMThENDFFOUQ0MThE OTNCNTJDMEEzMTE3NEY0MEYxMUUubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBM2v3N4DosXvD9Evkt+iqP d5H2eUG8+WinqtcU6UdogHFcmU0yZgKOjimHe+O4QdphOShYJYN0Ds6s0ZkOcSEE n5tf4eWNVYeDDtdwe2G0bpwEpCpDNOmsDz7dpAK/9QS0guqQO8UOogxAd6F9/bCY Z+9L4T/RApLjI+WAwPvI9LejpA8A93imyBGiLKOqk3RL31fC3kGPpFJvYzUYRLEo uUcjbAX6UJGxs5S9t6VqISnUIj7siTZty2DmKp+/Z8onPJteoMTWCk33JRpuh8wU 9RWrIH+DK0LbTXMxLVXSnoNWoOiIj5cY3KBjdaO+BfBSxfywHBpUtl87QSsJjydO -----END CERTIFICATE-----Generated at Tue Sep 22 09:20:44 2026 by rpki-client