$ rpki-client -vvf krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft File: A9D80600BE2DA447AA0056537C94F64A1A69D021.mft (raw, json) Hash identifier: voWgp0F59BziFyZNo4Fwhh9nUxL2PRpbyxbUQEfdaUQ= Subject key identifier: FE:09:46:E2:B8:90:C1:19:B1:86:8E:FB:4B:DD:9B:4D:88:F8:24:CA Authority key identifier: A9:D8:06:00:BE:2D:A4:47:AA:00:56:53:7C:94:F6:4A:1A:69:D0:21 Certificate issuer: /CN=A9D80600BE2DA447AA0056537C94F64A1A69D021 Certificate serial: 2CAE66FE2A1EFD23E7689302CBF6DF3222DF4053 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/A9D80600BE2DA447AA0056537C94F64A1A69D021.cer Subject info access: rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft Manifest number: 0B Signing time: Mon 27 Jul 2026 23:23:16 +0000 Manifest this update: Mon 27 Jul 2026 23:18:16 +0000 Manifest next update: Wed 29 Jul 2026 02:50:16 +0000 Files and hashes: 1: A9D80600BE2DA447AA0056537C94F64A1A69D021.crl (hash: TZHXXlm1FJSXNrwyZI+XIZmy0eOAi+EAxteX1kmyYCo=) 2: AS151673.asa (hash: geeEsaMkyqvVIKkrzEscYUOszo0N2PjIryztORdhZ0M=) Validation: OK Signature path: rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.crl rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/A9D80600BE2DA447AA0056537C94F64A1A69D021.cer rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.crl rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/DBF6383BA05DBD5108C2D321CD79FE0242E79ADF.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2_Y4O6BdvVEIwtMhzXn-AkLnmt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 02:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ae:66:fe:2a:1e:fd:23:e7:68:93:02:cb:f6:df:32:22:df:40:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9D80600BE2DA447AA0056537C94F64A1A69D021 Validity Not Before: Jul 27 23:18:16 2026 GMT Not After : Jul 29 02:50:16 2026 GMT Subject: CN=FE0946E2B890C119B1868EFB4BDD9B4D88F824CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:47:95:99:0f:86:5a:90:fc:2d:97:bd:f9:b5: 55:72:ba:0e:bb:f9:b2:3e:42:13:85:88:36:87:39: 97:a1:65:d5:25:b1:23:9a:fb:31:a6:ca:ef:35:c6: f1:a2:c7:69:c3:1c:96:12:b8:e5:5a:dc:c0:23:23: b8:72:b4:e6:e5:de:93:13:f4:5b:65:79:1f:d4:24: 5f:e7:ab:17:ca:8b:c0:cb:20:42:42:4c:04:79:b9: 3a:15:8b:1e:aa:f4:9e:df:a5:41:8b:f7:ff:f8:6f: aa:93:22:40:f9:27:25:ae:4c:59:4d:03:26:e5:93: db:45:1a:ac:59:7e:69:2b:c7:2b:f0:22:b4:e7:b8: 37:d0:40:cb:89:83:f6:63:d9:ff:f9:25:c6:ea:f6: a1:43:13:c4:3d:30:47:cb:74:cf:a4:a1:4b:e5:a2: bb:9c:a9:fe:91:73:37:f2:b8:66:1e:8f:b1:69:61: 2a:94:a5:55:39:51:ba:1d:02:20:01:07:f1:05:96: ea:ab:ba:cd:06:9d:06:18:c2:5f:83:67:9c:81:91: 7f:78:2f:7a:72:20:64:63:03:79:42:39:df:f8:26: d4:f2:8a:9d:8f:38:82:1a:0b:07:86:99:b1:e8:e3: ae:26:b7:30:ea:f4:88:44:57:dd:b4:17:5d:91:ef: 3d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:09:46:E2:B8:90:C1:19:B1:86:8E:FB:4B:DD:9B:4D:88:F8:24:CA X509v3 Authority Key Identifier: keyid:A9:D8:06:00:BE:2D:A4:47:AA:00:56:53:7C:94:F6:4A:1A:69:D0:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/b3f2aaae-23cf-4a37-9403-743b15ec2a8e/1/A9D80600BE2DA447AA0056537C94F64A1A69D021.cer Subject Information Access: Signed Object - URI:rsync://krill.cxy.hk/repo/Xinyu/5/A9D80600BE2DA447AA0056537C94F64A1A69D021.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a8:f8:7a:cf:2c:cb:5f:44:0a:5e:c8:5c:16:de:46:6c:f6: a5:d3:7b:6a:53:1a:a1:23:2b:82:ac:86:37:81:12:45:72:ce: 41:57:09:a7:fd:6b:1e:67:e4:89:4c:b0:20:5e:ed:2a:22:49: 31:8d:be:85:a3:16:18:00:40:bf:cb:f0:7a:ab:a9:16:78:01: 83:a6:3b:16:73:ca:bf:42:58:53:ae:81:3c:74:30:27:46:e0: 94:81:f5:57:1d:cf:d7:aa:b6:72:e4:04:56:79:c8:2f:fc:f0: 38:1f:4f:20:fe:c5:b5:11:a5:e0:5e:cb:7a:07:c8:0b:fa:cc: ec:a9:7d:5d:00:6d:21:d3:5d:3b:e7:15:fb:f0:f0:88:1c:e8: 17:e4:f1:4a:21:03:3f:3a:51:21:04:a4:9c:7c:9e:06:9f:2b: 88:53:c3:6c:54:85:27:de:68:cb:ad:8d:35:dc:5a:c3:c6:75: 1d:d1:35:86:f8:e2:67:54:0f:4c:c8:66:e8:94:22:dd:02:cf: ae:5d:24:eb:02:ee:70:4b:2d:49:2a:52:06:c6:5a:cf:bc:f5: aa:c4:26:a8:1c:9f:d6:f6:54:a7:c2:a5:ab:3c:55:7a:ff:17: 9a:10:22:ec:17:3f:ac:e4:c2:c5:8f:2f:36:a5:1a:4e:47:37: 29:43:b2:9b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIULK5m/ioe/SPnaJMCy/bfMiLfQFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlEODA2MDBCRTJEQTQ0N0FBMDA1NjUzN0M5NEY2NEEx QTY5RDAyMTAeFw0yNjA3MjcyMzE4MTZaFw0yNjA3MjkwMjUwMTZaMDMxMTAvBgNV BAMTKEZFMDk0NkUyQjg5MEMxMTlCMTg2OEVGQjRCREQ5QjREODhGODI0Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoR5WZD4ZakPwtl735tVVyug67 +bI+QhOFiDaHOZehZdUlsSOa+zGmyu81xvGix2nDHJYSuOVa3MAjI7hytObl3pMT 9FtleR/UJF/nqxfKi8DLIEJCTAR5uToVix6q9J7fpUGL9//4b6qTIkD5JyWuTFlN Ayblk9tFGqxZfmkrxyvwIrTnuDfQQMuJg/Zj2f/5Jcbq9qFDE8Q9MEfLdM+koUvl orucqf6RczfyuGYej7FpYSqUpVU5UbodAiABB/EFluqrus0GnQYYwl+DZ5yBkX94 L3pyIGRjA3lCOd/4JtTyip2POIIaCweGmbHo464mtzDq9IhEV920F12R7z03AgMB AAGjggIWMIICEjAdBgNVHQ4EFgQU/glG4riQwRmxho77S92bTYj4JMowHwYDVR0j BBgwFoAUqdgGAL4tpEeqAFZTfJT2Shpp0CEwDgYDVR0PAQH/BAQDAgeAMF8GA1Ud HwRYMFYwVKBSoFCGTnJzeW5jOi8va3JpbGwuY3h5LmhrL3JlcG8vWGlueXUvNS9B OUQ4MDYwMEJFMkRBNDQ3QUEwMDU2NTM3Qzk0RjY0QTFBNjlEMDIxLmNybDCBngYI KwYBBQUHAQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L2IzZjJhYWFlLTIzY2YtNGEzNy05NDAz LTc0M2IxNWVjMmE4ZS8xL0E5RDgwNjAwQkUyREE0NDdBQTAwNTY1MzdDOTRGNjRB MUE2OUQwMjEuY2VyMGoGCCsGAQUFBwELBF4wXDBaBggrBgEFBQcwC4ZOcnN5bmM6 Ly9rcmlsbC5jeHkuaGsvcmVwby9YaW55dS81L0E5RDgwNjAwQkUyREE0NDdBQTAw NTY1MzdDOTRGNjRBMUE2OUQwMjEubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVqPh6zyzLX0QKXshcFt5G bPal03tqUxqhIyuCrIY3gRJFcs5BVwmn/WseZ+SJTLAgXu0qIkkxjb6FoxYYAEC/ y/B6q6kWeAGDpjsWc8q/QlhTroE8dDAnRuCUgfVXHc/XqrZy5ARWecgv/PA4H08g /sW1EaXgXst6B8gL+szsqX1dAG0h01075xX78PCIHOgX5PFKIQM/OlEhBKScfJ4G nyuIU8NsVIUn3mjLrY013FrDxnUd0TWG+OJnVA9MyGbolCLdAs+uXSTrAu5wSy1J KlIGxlrPvPWqxCaoHJ/W9lSnwqWrPFV6/xeaECLsFz+s5MLFjy82pRpORzcpQ7Kb -----END CERTIFICATE-----Generated at Tue Jul 28 16:39:23 2026 by rpki-client