$ rpki-client -vvvf krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft File: 321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft (raw, json) Hash identifier: A7I8X7DfEuSHgXPLuWzlmWrA3adYwKSTS5Zhb01wu3g= Subject key identifier: 37:50:33:6E:49:50:73:06:30:2D:7A:8D:27:14:93:04:C4:12:C2:9B Authority key identifier: 32:1F:BF:E5:FB:20:42:FF:2B:B2:EE:8F:5E:32:5D:96:3C:17:C9:97 Certificate issuer: /CN=321FBFE5FB2042FF2BB2EE8F5E325D963C17C997 Certificate serial: 6D49C9D726A2AC9695D0A951D02B863A125A6012 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft Manifest number: 99 Signing time: Sun 20 Sep 2026 22:58:17 +0000 Manifest this update: Sun 20 Sep 2026 22:53:17 +0000 Manifest next update: Tue 22 Sep 2026 00:08:17 +0000 Files and hashes: 1: 321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl (hash: X9E0qdC1/9cY0Ex4nXU5ZoLM3IDukX9sj2LryRLzmXI=) 2: 326130663a316363353a323431313a3a2f34382d3438203d3e20323036303639.roa (hash: +AYzvxTOdmaj71wPUnYNAWebe4QXVmX6EA2aQO2VSuQ=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 00:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:49:c9:d7:26:a2:ac:96:95:d0:a9:51:d0:2b:86:3a:12:5a:60:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=321FBFE5FB2042FF2BB2EE8F5E325D963C17C997 Validity Not Before: Sep 20 22:53:17 2026 GMT Not After : Sep 22 00:08:17 2026 GMT Subject: CN=3750336E49507306302D7A8D27149304C412C29B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c4:83:93:0e:60:26:b8:ca:8a:02:6e:2f:29: ae:64:e9:eb:de:76:15:2d:12:fe:db:8c:2b:1c:f6: 34:c5:a2:b2:f0:1b:38:05:08:8a:8d:f6:98:c8:d3: 3d:27:04:34:c4:05:61:ec:33:8a:4b:06:e3:5e:cd: 25:e0:25:0f:c8:38:69:f2:d4:09:d6:04:04:f0:55: 98:e5:1f:71:ef:93:90:58:e0:4e:00:31:1b:10:6f: 43:d8:61:34:d0:d2:fe:2e:de:1f:6b:da:aa:76:9a: 35:40:04:62:52:70:2d:a3:95:49:2a:68:d3:a7:c8: 74:fb:d0:01:54:e4:a0:13:ac:50:6f:3b:08:66:6d: 8f:10:c4:27:69:71:33:62:25:e2:ab:62:18:85:93: 9b:73:cf:78:c5:97:21:be:ef:53:34:ad:71:d3:e9: d2:63:54:b4:9c:1c:46:44:76:c6:cb:21:69:1a:3c: 66:7d:21:bc:e2:25:22:a9:6b:19:9f:7e:a2:c2:f3: 8d:08:6b:f1:85:12:77:aa:3c:7a:e4:3b:c5:f2:54: e6:60:de:ae:ee:5d:8e:63:d3:1c:7c:c4:df:bd:92: 4b:b4:4b:09:30:d2:32:df:2f:18:8f:78:51:6e:10: c5:45:93:91:a6:12:4d:39:27:be:17:82:d4:c2:e0: 48:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:50:33:6E:49:50:73:06:30:2D:7A:8D:27:14:93:04:C4:12:C2:9B X509v3 Authority Key Identifier: keyid:32:1F:BF:E5:FB:20:42:FF:2B:B2:EE:8F:5E:32:5D:96:3C:17:C9:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:0f:ca:67:29:83:55:02:a2:93:63:9a:b6:a1:78:b2:55:2c: fd:7b:90:c8:b7:43:fd:eb:34:02:c9:fa:4b:80:c4:e0:76:25: fc:92:0b:00:b4:89:05:5e:7b:3f:5e:a8:3c:4c:f8:95:9d:96: 56:90:3a:96:ea:12:aa:76:45:0c:86:2d:ea:62:c1:29:23:23: 9d:39:83:77:43:1b:e0:3c:be:e7:ad:b8:f0:9b:81:59:c8:5b: f0:8f:ac:fa:81:59:f9:e8:14:9b:70:64:e5:a5:0c:93:36:60: 41:8f:3b:62:5b:3f:a8:e4:e2:70:eb:36:f1:67:a0:53:0b:28: 08:ea:c8:54:8e:a6:3a:89:55:22:f5:a4:9e:18:f4:29:0f:ca: 03:d1:52:eb:43:39:11:d2:4c:65:8b:6d:47:7c:8d:46:1b:a8: 11:c8:c2:21:76:a7:bd:52:c8:9e:7c:4f:b8:9a:da:86:45:17: 9d:44:3a:b1:76:5c:07:bc:c8:9f:5f:99:2e:9d:32:8c:f5:4f: f9:b4:b1:67:f1:50:e6:ea:2f:fc:da:7c:9b:be:3b:7c:6b:9d: fc:3d:cb:ad:de:f8:ca:13:bd:c4:89:d8:73:1f:c3:3a:fd:07: 31:26:90:76:91:96:b3:c4:a1:f1:0b:b7:6e:6e:50:a5:25:9d: e5:06:6e:95 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUbUnJ1yairJaV0KlR0CuGOhJaYBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIxRkJGRTVGQjIwNDJGRjJCQjJFRThGNUUzMjVEOTYz QzE3Qzk5NzAeFw0yNjA5MjAyMjUzMTdaFw0yNjA5MjIwMDA4MTdaMDMxMTAvBgNV BAMTKDM3NTAzMzZFNDk1MDczMDYzMDJEN0E4RDI3MTQ5MzA0QzQxMkMyOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnxIOTDmAmuMqKAm4vKa5k6eve dhUtEv7bjCsc9jTForLwGzgFCIqN9pjI0z0nBDTEBWHsM4pLBuNezSXgJQ/IOGny 1AnWBATwVZjlH3Hvk5BY4E4AMRsQb0PYYTTQ0v4u3h9r2qp2mjVABGJScC2jlUkq aNOnyHT70AFU5KATrFBvOwhmbY8QxCdpcTNiJeKrYhiFk5tzz3jFlyG+71M0rXHT 6dJjVLScHEZEdsbLIWkaPGZ9IbziJSKpaxmffqLC840Ia/GFEneqPHrkO8XyVOZg 3q7uXY5j0xx8xN+9kku0Swkw0jLfLxiPeFFuEMVFk5GmEk05J74XgtTC4EiNAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUN1AzbklQcwYwLXqNJxSTBMQSwpswHwYDVR0j BBgwFoAUMh+/5fsgQv8rsu6PXjJdljwXyZcwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvNC8z MjFGQkZFNUZCMjA0MkZGMkJCMkVFOEY1RTMyNUQ5NjNDMTdDOTk3LmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzhhZmI1ZmUyLTNjMmEtNDkzOS05NWU5 LTAwNzdiODBiNGYwZS8wLzMyMUZCRkU1RkIyMDQyRkYyQkIyRUU4RjVFMzI1RDk2 M0MxN0M5OTcuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS80LzMyMUZCRkU1RkIyMDQyRkYyQkIy RUU4RjVFMzI1RDk2M0MxN0M5OTcubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCvD8pnKYNVAqKTY5q2oXiy VSz9e5DIt0P96zQCyfpLgMTgdiX8kgsAtIkFXns/Xqg8TPiVnZZWkDqW6hKqdkUM hi3qYsEpIyOdOYN3QxvgPL7nrbjwm4FZyFvwj6z6gVn56BSbcGTlpQyTNmBBjzti Wz+o5OJw6zbxZ6BTCygI6shUjqY6iVUi9aSeGPQpD8oD0VLrQzkR0kxli21HfI1G G6gRyMIhdqe9UsiefE+4mtqGRRedRDqxdlwHvMifX5kunTKM9U/5tLFn8VDm6i/8 2nybvjt8a538Pcut3vjKE73EidhzH8M6/QcxJpB2kZazxKHxC7dublClJZ3lBm6V -----END CERTIFICATE-----Generated at Mon Sep 21 15:47:36 2026 by rpki-client