$ rpki-client -vvvf krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft File: A9D80600BE2DA447AA0056537C94F64A1A69D021.mft (raw, json) Hash identifier: I1NHVG5T9u0S6GfycloFoseybgkeWJc4qWOWAXZtx08= Subject key identifier: 08:32:28:EC:ED:90:4C:BA:2D:F1:19:CB:5B:50:20:F1:C7:D3:8E:32 Authority key identifier: A9:D8:06:00:BE:2D:A4:47:AA:00:56:53:7C:94:F6:4A:1A:69:D0:21 Certificate issuer: /CN=A9D80600BE2DA447AA0056537C94F64A1A69D021 Certificate serial: 34516DA6870CEC63B2C9D4B20E8E32CC52BCC0BC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/A9D80600BE2DA447AA0056537C94F64A1A69D021.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft Manifest number: 87 Signing time: Wed 04 Nov 2026 23:19:43 +0000 Manifest this update: Wed 04 Nov 2026 23:14:43 +0000 Manifest next update: Fri 06 Nov 2026 03:14:43 +0000 Files and hashes: 1: A9D80600BE2DA447AA0056537C94F64A1A69D021.crl (hash: DOkjgDWnxCj4QEAedpfGEYO0Jhpy4yKPZyxbzUv1KnM=) 2: AS151673.asa (hash: geeEsaMkyqvVIKkrzEscYUOszo0N2PjIryztORdhZ0M=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.crl rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/A9D80600BE2DA447AA0056537C94F64A1A69D021.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Nov 2026 03:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:51:6d:a6:87:0c:ec:63:b2:c9:d4:b2:0e:8e:32:cc:52:bc:c0:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D80600BE2DA447AA0056537C94F64A1A69D021 Validity Not Before: Nov 4 23:14:43 2026 GMT Not After : Nov 6 03:14:43 2026 GMT Subject: CN=083228ECED904CBA2DF119CB5B5020F1C7D38E32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ba:57:1b:18:f9:3d:cf:eb:dc:1e:b4:1d:a4: f9:6e:5b:f9:f0:1a:f7:88:21:82:55:9e:61:35:39: f1:35:cf:bf:4b:82:70:4a:51:32:3a:f8:b2:52:11: ae:d1:3f:e5:c9:ce:bf:56:7b:f5:b2:af:04:83:29: c2:bc:96:54:25:a4:c5:6f:c8:6a:27:c9:c0:a0:fe: 9a:0c:65:16:2d:77:c9:be:78:bb:ce:99:e5:01:30: 3d:2b:a1:b5:92:e4:42:c2:21:01:f2:a3:19:ec:06: 4d:00:0b:9c:92:2f:35:82:4e:c8:8f:c2:b0:cd:8f: 07:4e:26:ad:0f:49:61:04:97:17:89:d4:a7:25:8f: 05:ee:dd:bf:95:68:5c:bd:38:95:c1:e5:4f:7d:9b: 79:7d:9f:ca:d6:ad:32:d7:27:fa:d2:ec:82:33:d9: 3a:67:18:64:17:54:d8:0c:21:7b:24:ef:e7:39:ed: a8:7a:d1:38:c7:18:fb:3b:e2:09:79:5f:95:78:85: 76:95:d3:b3:c8:79:fe:66:21:56:74:2d:a7:89:29: 92:d1:4d:b3:f8:3f:74:2b:35:c1:f9:bb:72:bd:1a: 59:30:fe:54:da:0c:c4:fe:d0:ee:3a:cb:77:79:45: 2a:1b:84:29:28:16:a5:78:59:10:e8:e0:05:23:88: 41:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:32:28:EC:ED:90:4C:BA:2D:F1:19:CB:5B:50:20:F1:C7:D3:8E:32 X509v3 Authority Key Identifier: keyid:A9:D8:06:00:BE:2D:A4:47:AA:00:56:53:7C:94:F6:4A:1A:69:D0:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/A9D80600BE2DA447AA0056537C94F64A1A69D021.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:33:c8:34:57:fb:4a:24:b7:57:6f:42:bd:7f:ca:67:30:37: e9:aa:83:ab:36:2a:d8:3e:00:d5:6c:91:2c:b3:d1:1c:e6:78: 7d:29:a8:e5:89:b4:92:24:fd:b1:b5:88:41:89:79:65:64:1a: ce:e0:63:b4:62:93:90:aa:ce:03:a9:42:59:e9:b9:3f:72:39: cc:e1:89:8c:88:43:88:67:50:f2:ea:2c:35:8d:67:6a:09:f8: 10:70:9f:67:2a:bc:23:57:a0:59:93:36:f4:44:e6:30:24:df: 4f:22:90:dd:e2:28:da:98:05:31:d6:46:be:91:4b:8d:2e:97: 2c:00:3a:1c:fb:9d:97:18:ff:8d:4e:7f:49:26:ca:eb:a6:b1: 1a:f1:17:41:cd:d2:fe:9c:62:ab:d2:31:12:3b:b2:3a:90:85: e8:49:e6:b3:b3:01:ad:27:29:39:2f:7a:05:16:5b:9f:d4:21: 95:b5:f5:89:a9:18:fe:00:f5:4a:6c:4e:1c:96:e4:7c:f1:4d: a8:31:51:49:c0:3f:32:98:56:9b:d4:cb:6c:ca:e5:1b:ad:b4: e5:dd:06:5e:93:85:c2:20:97:07:5f:fb:98:09:7c:59:a2:76: 3a:11:18:08:94:ea:97:9e:52:aa:54:90:ff:89:02:9a:aa:68: 4c:41:af:0f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUNFFtpocM7GOyydSyDo4yzFK8wLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlEODA2MDBCRTJEQTQ0N0FBMDA1NjUzN0M5NEY2NEEx QTY5RDAyMTAeFw0yNjExMDQyMzE0NDNaFw0yNjExMDYwMzE0NDNaMDMxMTAvBgNV BAMTKDA4MzIyOEVDRUQ5MDRDQkEyREYxMTlDQjVCNTAyMEYxQzdEMzhFMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyulcbGPk9z+vcHrQdpPluW/nw GveIIYJVnmE1OfE1z79LgnBKUTI6+LJSEa7RP+XJzr9We/WyrwSDKcK8llQlpMVv yGonycCg/poMZRYtd8m+eLvOmeUBMD0robWS5ELCIQHyoxnsBk0AC5ySLzWCTsiP wrDNjwdOJq0PSWEElxeJ1KcljwXu3b+VaFy9OJXB5U99m3l9n8rWrTLXJ/rS7IIz 2TpnGGQXVNgMIXsk7+c57ah60TjHGPs74gl5X5V4hXaV07PIef5mIVZ0LaeJKZLR TbP4P3QrNcH5u3K9Glkw/lTaDMT+0O46y3d5RSobhCkoFqV4WRDo4AUjiEEfAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUCDIo7O2QTLot8RnLW1Ag8cfTjjIwHwYDVR0j BBgwFoAUqdgGAL4tpEeqAFZTfJT2Shpp0CEwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvNS9B OUQ4MDYwMEJFMkRBNDQ3QUEwMDU2NTM3Qzk0RjY0QTFBNjlEMDIxLmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2IzZjJhYWFlLTIzY2YtNGEzNy05NDAz LTc0M2IxNWVjMmE4ZS8xL0E5RDgwNjAwQkUyREE0NDdBQTAwNTY1MzdDOTRGNjRB MUE2OUQwMjEuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS81L0E5RDgwNjAwQkUyREE0NDdBQTAw NTY1MzdDOTRGNjRBMUE2OUQwMjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1M8g0V/tKJLdXb0K9f8pn MDfpqoOrNirYPgDVbJEss9Ec5nh9KajlibSSJP2xtYhBiXllZBrO4GO0YpOQqs4D qUJZ6bk/cjnM4YmMiEOIZ1Dy6iw1jWdqCfgQcJ9nKrwjV6BZkzb0ROYwJN9PIpDd 4ijamAUx1ka+kUuNLpcsADoc+52XGP+NTn9JJsrrprEa8RdBzdL+nGKr0jESO7I6 kIXoSeazswGtJyk5L3oFFluf1CGVtfWJqRj+APVKbE4cluR88U2oMVFJwD8ymFab 1MtsyuUbrbTl3QZek4XCIJcHX/uYCXxZonY6ERgIlOqXnlKqVJD/iQKaqmhMQa8P -----END CERTIFICATE-----Generated at Thu Nov 5 11:23:15 2026 by rpki-client