
$ rpki-client -vvf krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft
File: 321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft (raw, json)
Hash identifier: bLxgELsLD7dxElRnoKzPT5pHvU5pPTQh4T5ftrWnov4=
Subject key identifier: 21:30:81:E3:05:3C:30:ED:50:3C:84:83:17:DE:75:4E:E3:68:38:6D
Authority key identifier: 32:1F:BF:E5:FB:20:42:FF:2B:B2:EE:8F:5E:32:5D:96:3C:17:C9:97
Certificate issuer: /CN=321FBFE5FB2042FF2BB2EE8F5E325D963C17C997
Certificate serial: 58E0E97977E31DDEBB13EEE0353B787932C0EB9E
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer
Subject info access: rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft
Manifest number: 13
Signing time: Sat 13 Jun 2026 10:03:52 +0000
Manifest this update: Sat 13 Jun 2026 09:58:52 +0000
Manifest next update: Sun 14 Jun 2026 11:57:52 +0000
Files and hashes: 1: 326130663a316363353a323431313a3a2f34382d3438203d3e20323036303639.roa (hash: +AYzvxTOdmaj71wPUnYNAWebe4QXVmX6EA2aQO2VSuQ=)
2: 321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl (hash: iKt7JhD9wwdGjrOcHxpMVyDnoNKF6za0+MKxgGuaO/o=)
Validation: OK
Signature path: rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl
rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:39:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:e0:e9:79:77:e3:1d:de:bb:13:ee:e0:35:3b:78:79:32:c0:eb:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321FBFE5FB2042FF2BB2EE8F5E325D963C17C997
Validity
Not Before: Jun 13 09:58:52 2026 GMT
Not After : Jun 14 11:57:52 2026 GMT
Subject: CN=213081E3053C30ED503C848317DE754EE368386D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:24:2c:fe:d7:ce:a3:6a:68:1e:11:62:3d:
0c:91:85:56:64:6b:a0:1e:cc:70:06:97:93:2b:fc:
2e:7e:22:1e:4f:5e:b1:a4:69:ba:47:e5:cc:36:b6:
28:68:17:b0:6b:08:f9:87:81:e3:5d:4f:cf:35:25:
73:b7:a4:c3:38:d4:3a:b0:34:57:8d:ee:e7:57:66:
32:1e:83:07:0f:5d:f4:74:21:b0:ee:bb:22:d2:4d:
b0:23:9b:68:b0:a8:ed:1d:06:b6:84:2e:9b:1d:bb:
c4:34:07:a7:10:8d:8a:4c:77:e0:0a:fa:da:7c:59:
d3:9f:9f:57:5b:8c:93:5a:c8:5a:fe:3c:92:e3:25:
fa:cc:85:f8:b3:cf:78:e7:3d:28:cc:87:f3:c9:e8:
60:ff:83:8a:b9:fa:7f:1d:2c:f2:27:e2:75:f7:cc:
14:91:d7:f3:3b:61:cb:c8:80:c3:2f:cb:6a:f0:b1:
3e:57:65:4c:59:71:40:16:bc:91:33:61:71:c5:8a:
75:98:8b:3d:77:e5:23:34:00:51:45:0c:e4:99:8c:
2e:d4:4d:8d:75:c0:6a:a9:ec:d7:eb:3b:a9:d6:0d:
8a:22:e2:91:0f:08:97:98:51:6f:70:33:ac:31:37:
07:72:2f:6e:4d:d6:9e:cf:11:38:24:c9:73:61:4b:
e7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:30:81:E3:05:3C:30:ED:50:3C:84:83:17:DE:75:4E:E3:68:38:6D
X509v3 Authority Key Identifier:
keyid:32:1F:BF:E5:FB:20:42:FF:2B:B2:EE:8F:5E:32:5D:96:3C:17:C9:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.cer
Subject Information Access:
Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/4/321FBFE5FB2042FF2BB2EE8F5E325D963C17C997.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:01:a0:66:ea:da:5a:06:1e:98:18:be:e9:34:b8:fc:cb:64:
f2:74:a0:45:36:7e:41:17:67:e4:a4:75:91:8e:91:9e:77:4e:
b6:a1:61:be:6d:7b:cd:3b:fe:63:bf:0c:01:ba:57:e6:90:fa:
90:72:66:a2:22:9f:4d:e2:3c:63:8b:89:32:45:ab:c2:fe:79:
9c:85:a6:03:8a:eb:dd:d9:de:11:21:da:4e:4f:0f:5f:d2:e4:
ba:88:4e:1b:0a:a7:55:1a:09:0a:a9:f6:6e:5f:2e:15:db:0a:
4f:1d:6d:59:a4:72:51:8b:4f:73:a5:94:94:7c:48:4c:2e:cd:
a1:e7:20:4a:32:68:e6:8a:49:b4:32:0b:45:fb:51:a0:c2:cc:
5f:94:4c:fe:56:cf:68:08:cb:fb:a3:90:74:24:69:16:e4:73:
e6:6b:eb:4a:35:a6:1c:21:c9:9c:29:76:f7:54:42:fa:66:ca:
57:99:0e:19:e0:e9:17:e8:f5:35:9a:6a:ff:5e:e4:f9:0a:54:
65:bf:94:95:71:bd:69:2b:53:aa:fa:d1:a5:99:82:69:54:f9:
3c:b6:6b:24:d8:c6:67:1e:2d:3e:4b:34:eb:e7:85:04:29:3b:
6e:01:f2:58:83:0e:f0:a9:d7:f9:b3:c9:a8:d0:57:5f:9f:cd:
63:e2:a4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:38:52 2026 by rpki-client