$ rpki-client -vvvf krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft File: A9D80600BE2DA447AA0056537C94F64A1A69D021.mft (raw, json) Hash identifier: PlbaTeWEQMT9cEMTqMHJ0v4Ox78At+kEZaWa05eYx4s= Subject key identifier: 57:D8:36:C3:32:DD:E7:90:FA:07:2B:1E:E1:4A:00:1A:F1:C5:F0:50 Authority key identifier: A9:D8:06:00:BE:2D:A4:47:AA:00:56:53:7C:94:F6:4A:1A:69:D0:21 Certificate issuer: /CN=A9D80600BE2DA447AA0056537C94F64A1A69D021 Certificate serial: 269837C53A83690D173AC940041E6ECD22F89212 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/A9D80600BE2DA447AA0056537C94F64A1A69D021.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft Manifest number: 53 Signing time: Sun 20 Sep 2026 03:53:17 +0000 Manifest this update: Sun 20 Sep 2026 03:48:17 +0000 Manifest next update: Mon 21 Sep 2026 04:24:17 +0000 Files and hashes: 1: A9D80600BE2DA447AA0056537C94F64A1A69D021.crl (hash: X2+YRjJx/UsTmLIdzE3dkzpuhjnXKk4mmI3vFdoTInQ=) 2: AS151673.asa (hash: geeEsaMkyqvVIKkrzEscYUOszo0N2PjIryztORdhZ0M=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.crl rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/A9D80600BE2DA447AA0056537C94F64A1A69D021.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 00:53:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:98:37:c5:3a:83:69:0d:17:3a:c9:40:04:1e:6e:cd:22:f8:92:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D80600BE2DA447AA0056537C94F64A1A69D021 Validity Not Before: Sep 20 03:48:17 2026 GMT Not After : Sep 21 04:24:17 2026 GMT Subject: CN=57D836C332DDE790FA072B1EE14A001AF1C5F050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:35:05:c4:e8:31:b5:91:28:67:f1:29:91:bc: a5:5d:97:40:f6:69:c2:62:c7:e9:b2:bc:85:f3:8c: e8:1f:21:70:8b:10:ca:6e:d4:9f:b9:65:8b:ae:13: 32:65:42:5f:52:6d:1e:0d:73:c0:79:62:c5:0b:de: 46:34:56:52:08:92:b8:a7:f5:54:28:ea:48:63:3e: 38:36:1c:b0:dc:ed:cb:db:24:61:07:f4:64:19:d4: f4:95:8c:ba:c0:9b:96:3a:08:09:88:ec:93:6c:2c: b1:3e:f1:8b:89:f6:3d:0a:2c:58:37:96:2b:75:2c: 0f:b0:0e:b1:9d:48:76:45:e0:b8:cc:21:d8:24:59: 22:4c:7e:e7:09:9a:53:f7:3a:c0:72:4c:8c:20:0a: 4a:3c:5e:1c:ac:5a:75:41:57:7d:37:33:fd:e7:32: d1:a0:47:fc:e7:a2:f8:a1:9a:39:60:b3:d0:9e:a1: 62:d1:66:f6:fe:4b:21:6e:d1:7c:96:01:d1:81:be: c1:be:50:de:f6:d3:bb:48:6e:dd:5b:d1:2b:a1:61: ae:38:55:d6:18:48:0e:af:fd:db:d0:a4:93:a1:29: db:6d:2e:c7:63:f4:cb:88:77:cd:9d:b5:6c:b9:9c: d0:b4:40:62:53:26:23:22:55:de:65:d2:7e:f1:46: a0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D8:36:C3:32:DD:E7:90:FA:07:2B:1E:E1:4A:00:1A:F1:C5:F0:50 X509v3 Authority Key Identifier: keyid:A9:D8:06:00:BE:2D:A4:47:AA:00:56:53:7C:94:F6:4A:1A:69:D0:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/A9D80600BE2DA447AA0056537C94F64A1A69D021.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:fa:75:88:11:1d:1d:88:8c:b1:c9:a2:2e:1e:c3:2b:16:29: ec:e1:27:b4:cd:b8:d1:33:49:3b:bb:b9:1f:03:61:a1:95:6d: ef:f4:91:4e:a6:2d:42:46:04:38:c5:41:37:70:b9:97:3d:bd: 7c:5a:3e:ab:bb:c9:97:50:d7:11:7e:57:b1:a3:a3:2d:2c:6a: ff:83:2e:09:b4:71:38:bf:57:3b:65:d0:1f:1d:cb:11:5b:6d: ec:46:30:bd:1b:3c:3d:11:34:7c:40:45:de:ef:22:73:37:dd: 17:a8:68:cd:bf:dd:fc:ba:fd:03:fc:b1:ec:1d:f2:34:36:20: b0:b1:9a:4f:d4:a7:a1:e4:16:17:51:fe:50:65:e1:e4:a6:65: 4c:54:77:c5:5a:b4:cb:c8:5d:de:0b:8d:a5:55:02:65:60:1e: c3:4f:12:ad:e6:da:b3:59:26:8e:de:37:56:3e:3a:62:21:ef: 55:e6:ff:dd:fb:44:53:b8:3c:f2:fe:89:a2:ec:24:35:12:c0: a5:64:cf:c4:91:0d:72:77:ad:cb:b5:e3:55:c6:9a:f4:80:b5: e4:1f:e6:66:9e:d3:fc:3d:21:58:a1:42:1e:f3:26:df:4d:ce: 61:7a:89:aa:f5:89:8c:3f:e9:73:76:c1:55:04:a8:0f:20:b3: 71:d1:14:3d -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUJpg3xTqDaQ0XOslABB5uzSL4khIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlEODA2MDBCRTJEQTQ0N0FBMDA1NjUzN0M5NEY2NEEx QTY5RDAyMTAeFw0yNjA5MjAwMzQ4MTdaFw0yNjA5MjEwNDI0MTdaMDMxMTAvBgNV BAMTKDU3RDgzNkMzMzJEREU3OTBGQTA3MkIxRUUxNEEwMDFBRjFDNUYwNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2NQXE6DG1kShn8SmRvKVdl0D2 acJix+myvIXzjOgfIXCLEMpu1J+5ZYuuEzJlQl9SbR4Nc8B5YsUL3kY0VlIIkrin 9VQo6khjPjg2HLDc7cvbJGEH9GQZ1PSVjLrAm5Y6CAmI7JNsLLE+8YuJ9j0KLFg3 lit1LA+wDrGdSHZF4LjMIdgkWSJMfucJmlP3OsByTIwgCko8XhysWnVBV303M/3n MtGgR/znovihmjlgs9CeoWLRZvb+SyFu0XyWAdGBvsG+UN7207tIbt1b0SuhYa44 VdYYSA6v/dvQpJOhKdttLsdj9MuId82dtWy5nNC0QGJTJiMiVd5l0n7xRqATAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUV9g2wzLd55D6Byse4UoAGvHF8FAwHwYDVR0j BBgwFoAUqdgGAL4tpEeqAFZTfJT2Shpp0CEwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvNS9B OUQ4MDYwMEJFMkRBNDQ3QUEwMDU2NTM3Qzk0RjY0QTFBNjlEMDIxLmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2IzZjJhYWFlLTIzY2YtNGEzNy05NDAz LTc0M2IxNWVjMmE4ZS8xL0E5RDgwNjAwQkUyREE0NDdBQTAwNTY1MzdDOTRGNjRB MUE2OUQwMjEuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS81L0E5RDgwNjAwQkUyREE0NDdBQTAw NTY1MzdDOTRGNjRBMUE2OUQwMjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBV+nWIER0diIyxyaIuHsMr Fins4Se0zbjRM0k7u7kfA2GhlW3v9JFOpi1CRgQ4xUE3cLmXPb18Wj6ru8mXUNcR flexo6MtLGr/gy4JtHE4v1c7ZdAfHcsRW23sRjC9Gzw9ETR8QEXe7yJzN90XqGjN v938uv0D/LHsHfI0NiCwsZpP1Keh5BYXUf5QZeHkpmVMVHfFWrTLyF3eC42lVQJl YB7DTxKt5tqzWSaO3jdWPjpiIe9V5v/d+0RTuDzy/omi7CQ1EsClZM/EkQ1yd63L teNVxpr0gLXkH+ZmntP8PSFYoUIe8ybfTc5heomq9YmMP+lzdsFVBKgPILNx0RQ9 -----END CERTIFICATE-----Generated at Sun Sep 20 16:21:15 2026 by rpki-client