$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft File: 64CE724CC33744853B20D6E7922A2F808B8C300C.mft (raw, json) Hash identifier: ZsE+Opm1dhizBGylqDIxs2JndTmNAvA6M7I2+XQwWig= Subject key identifier: 38:19:C8:01:20:02:D0:61:81:DD:39:AC:37:B2:EF:B1:D2:03:0F:F5 Authority key identifier: 64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C Certificate issuer: /CN=64CE724CC33744853B20D6E7922A2F808B8C300C Certificate serial: 15119566CCC61585DED5D924A281EA9133B479B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft Manifest number: 25 Signing time: Wed 13 May 2026 07:16:02 +0000 Manifest this update: Wed 13 May 2026 07:11:02 +0000 Manifest next update: Thu 14 May 2026 10:56:02 +0000 Files and hashes: 1: 64CE724CC33744853B20D6E7922A2F808B8C300C.crl (hash: C/fK49sLlwd8CbAilRHPFeO4HoP6ujo9h1aJiVuCvTQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.crl rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:56:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:11:95:66:cc:c6:15:85:de:d5:d9:24:a2:81:ea:91:33:b4:79:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64CE724CC33744853B20D6E7922A2F808B8C300C Validity Not Before: May 13 07:11:02 2026 GMT Not After : May 14 10:56:02 2026 GMT Subject: CN=3819C8012002D06181DD39AC37B2EFB1D2030FF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5c:39:77:03:4d:c4:1c:db:02:21:86:b0:2c: be:fc:74:84:6d:5a:1d:1c:46:fd:9a:68:01:22:b5: 11:fb:6b:f0:96:2f:7e:83:4e:87:27:60:cd:b5:13: e2:81:d7:62:fb:91:0a:68:19:4d:98:04:3d:fe:bb: 36:da:74:34:b9:37:e0:24:2b:18:42:06:c2:59:46: b1:75:2d:f2:e7:e3:33:2e:eb:dd:c0:0e:58:7f:17: ac:74:d2:d4:26:27:9c:0d:7c:ed:8d:36:93:02:ad: f7:36:29:2f:81:56:4f:3e:e9:92:08:0d:61:5b:22: 3b:8f:53:7b:e3:b1:70:ba:b0:a5:3f:5d:23:fb:9b: 21:4e:1b:3d:40:0c:58:46:eb:34:09:d8:55:7c:85: 45:04:54:f9:e6:e8:c0:0e:5b:8a:2e:87:a7:57:fe: 4d:b5:19:25:7c:b0:da:cf:65:6d:9c:55:65:4a:5c: 83:1d:ba:cd:2a:29:24:50:82:aa:43:24:f0:a0:e6: 35:1c:9c:05:8b:36:2e:ec:55:2a:f7:19:e5:c5:97: 5d:fb:75:0a:73:da:84:ae:bc:79:76:8f:5e:d5:53: 01:0f:22:9e:00:22:62:2e:4d:ab:0a:86:9e:a3:5e: 52:0f:1b:ef:69:00:4c:9d:12:fa:15:86:48:68:4a: d5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:19:C8:01:20:02:D0:61:81:DD:39:AC:37:B2:EF:B1:D2:03:0F:F5 X509v3 Authority Key Identifier: keyid:64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:ff:c9:be:5a:e7:01:7a:34:e3:93:80:e2:05:a3:49:97:30: 05:b8:97:89:db:cb:88:af:d0:99:0f:21:fb:88:36:c8:0b:26: 9f:17:39:9d:f6:23:a9:fe:f7:14:98:31:31:c8:a6:ca:2f:da: c2:ee:7f:ed:b4:48:b6:e6:3a:96:ff:ae:c2:69:1a:83:ed:d8: 94:92:bb:58:ec:e7:7a:fe:25:27:a8:65:8c:1e:bb:79:89:bf: 72:1b:7c:2b:6e:28:8e:98:09:25:c7:3b:c0:67:cb:16:e0:75: b0:c2:5c:9f:1a:fc:c4:a9:96:ab:a0:73:70:21:b3:6d:17:05: 02:46:5d:b3:97:37:ad:66:a9:05:58:90:53:0b:f4:7a:18:2b: fe:fe:f6:76:c2:d9:d7:2d:9d:ca:93:59:aa:7e:ec:d2:11:6b: 2a:c3:82:4f:d4:37:b1:e2:8c:38:0e:7f:a4:b9:b1:b2:06:25: 7e:31:94:45:61:1c:fd:bf:81:15:88:b9:ac:4d:43:fe:3c:93: d7:06:82:b9:63:ac:6c:09:5b:3d:37:8f:76:d1:a9:7c:2f:7a: d3:05:74:1d:41:ac:85:59:28:18:d6:96:87:40:40:d7:dc:ed: 35:25:af:02:91:b2:27:36:3c:bd:d1:5e:44:90:85:8e:f0:7c: 4a:53:09:0a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFRGVZszGFYXe1dkkooHqkTO0ebcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRDRTcyNENDMzM3NDQ4NTNCMjBENkU3OTIyQTJGODA4 QjhDMzAwQzAeFw0yNjA1MTMwNzExMDJaFw0yNjA1MTQxMDU2MDJaMDMxMTAvBgNV BAMTKDM4MTlDODAxMjAwMkQwNjE4MUREMzlBQzM3QjJFRkIxRDIwMzBGRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/XDl3A03EHNsCIYawLL78dIRt Wh0cRv2aaAEitRH7a/CWL36DTocnYM21E+KB12L7kQpoGU2YBD3+uzbadDS5N+Ak KxhCBsJZRrF1LfLn4zMu693ADlh/F6x00tQmJ5wNfO2NNpMCrfc2KS+BVk8+6ZII DWFbIjuPU3vjsXC6sKU/XSP7myFOGz1ADFhG6zQJ2FV8hUUEVPnm6MAOW4ouh6dX /k21GSV8sNrPZW2cVWVKXIMdus0qKSRQgqpDJPCg5jUcnAWLNi7sVSr3GeXFl137 dQpz2oSuvHl2j17VUwEPIp4AImIuTasKhp6jXlIPG+9pAEydEvoVhkhoStVPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOBnIASAC0GGB3TmsN7LvsdIDD/UwHwYDVR0j BBgwFoAUZM5yTMM3RIU7INbnkiovgIuMMAwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk4OTExNDA2MzkxMjk2My8wLzY0Q0U3MjRDQzMzNzQ0ODUzQjIwRDZFNzkyMkEy RjgwOEI4QzMwMEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjRDRTcyNENDMzM3NDQ4NTNCMjBENkU3OTIyQTJGODA4QjhDMzAwQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5ODkxMTQwNjM5MTI5NjMvMC82NENFNzI0Q0MzMzc0 NDg1M0IyMEQ2RTc5MjJBMkY4MDhCOEMzMDBDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlP/JvlrnAXo0 45OA4gWjSZcwBbiXidvLiK/QmQ8h+4g2yAsmnxc5nfYjqf73FJgxMcimyi/awu5/ 7bRItuY6lv+uwmkag+3YlJK7WOznev4lJ6hljB67eYm/cht8K24ojpgJJcc7wGfL FuB1sMJcnxr8xKmWq6BzcCGzbRcFAkZds5c3rWapBViQUwv0ehgr/v72dsLZ1y2d ypNZqn7s0hFrKsOCT9Q3seKMOA5/pLmxsgYlfjGURWEc/b+BFYi5rE1D/jyT1waC uWOsbAlbPTePdtGpfC960wV0HUGshVkoGNaWh0BA19ztNSWvApGyJzY8vdFeRJCF jvB8SlMJCg== -----END CERTIFICATE-----Generated at Wed May 13 20:55:32 2026 by rpki-client