$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft File: 64CE724CC33744853B20D6E7922A2F808B8C300C.mft (raw, json) Hash identifier: sYmMJHjKhnI37TIzyRO0Dxj5lKiOvO4uri+Tsmf+ES0= Subject key identifier: 91:B2:C4:8F:D5:24:20:EA:19:43:9A:ED:13:23:02:4E:5B:56:25:5B Authority key identifier: 64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C Certificate issuer: /CN=64CE724CC33744853B20D6E7922A2F808B8C300C Certificate serial: 28A68BCCE681965CE7E55A0B1133D0C4323B475B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft Manifest number: 85 Signing time: Fri 24 Jul 2026 17:56:49 +0000 Manifest this update: Fri 24 Jul 2026 17:51:49 +0000 Manifest next update: Sat 25 Jul 2026 20:46:49 +0000 Files and hashes: 1: 64CE724CC33744853B20D6E7922A2F808B8C300C.crl (hash: jWaqS7Z2CVYzJxmGTkRT0oxs/9303l7BeidQJYbs3IQ=) 2: 3130332e3234352e3132382e302f32322d3232203d3e203535393832.roa (hash: Md4+IrPlN/VFjDo9GOcLPihi6j6Vf2NSeSyN1+Jh1x8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.crl rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a6:8b:cc:e6:81:96:5c:e7:e5:5a:0b:11:33:d0:c4:32:3b:47:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64CE724CC33744853B20D6E7922A2F808B8C300C Validity Not Before: Jul 24 17:51:49 2026 GMT Not After : Jul 25 20:46:49 2026 GMT Subject: CN=91B2C48FD52420EA19439AED1323024E5B56255B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ff:9c:50:89:74:a2:6d:9d:b6:eb:e6:a5:57: 5c:80:01:ca:1e:1f:91:0b:82:f7:3b:ad:ce:83:9a: b9:de:17:90:0a:e1:d3:d2:c3:a8:1c:22:bb:1c:0e: 70:cb:fd:9d:be:da:f3:0c:01:64:4d:6c:43:f7:82: db:cf:6c:9d:f9:ce:d2:b6:08:43:83:e7:66:92:1a: be:b2:94:59:91:4a:59:d1:b0:4f:7e:d7:64:cd:cb: 43:a5:04:90:e0:e8:75:5e:75:9a:48:54:ac:85:fa: a3:94:0d:db:2c:0a:70:f9:46:d1:c4:57:f8:7e:43: a8:cc:ae:93:30:de:1e:2b:12:28:64:a6:ad:29:ae: b1:29:18:22:d9:f9:f2:54:2f:50:c2:3b:7a:ac:91: 4f:b3:2f:b1:df:d4:a5:c7:4a:9c:de:ef:85:73:fc: 93:7e:8a:52:52:c2:75:0a:53:98:75:42:5c:24:e9: b9:04:df:50:13:ac:3b:19:f0:e9:4b:5d:12:ce:b7: 93:92:2c:41:54:52:42:e2:4f:1d:d2:cc:77:c6:24: 58:81:ef:d8:2d:ef:a2:45:35:0c:5d:fb:d6:67:19: 1c:78:35:5e:7e:ca:15:15:70:a8:16:3c:f2:7d:1c: ff:61:6e:e9:03:75:81:26:78:2e:38:5d:c7:90:6d: 53:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B2:C4:8F:D5:24:20:EA:19:43:9A:ED:13:23:02:4E:5B:56:25:5B X509v3 Authority Key Identifier: keyid:64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:1b:51:fd:a2:b7:0b:30:a5:13:0e:45:86:fc:77:f7:29:14: c7:52:65:bd:0f:e7:0e:1d:22:e0:3e:b4:50:a7:91:b4:45:95: 08:c4:dc:45:bf:b9:d3:13:92:c2:0b:ff:1f:66:2e:1c:1a:f1: e0:e2:61:c9:dc:71:33:6b:9d:49:cc:f6:a0:1b:e0:83:6c:e0: 70:d3:f9:3d:7c:0d:c2:4d:63:53:ac:63:ef:06:96:db:c8:41: 3d:4f:6f:da:e2:d1:d8:f1:e3:95:3b:ea:a9:9b:aa:bf:eb:84: 0c:67:0c:b8:4b:04:ba:e3:9a:78:bd:70:b7:91:0a:12:b6:08: 59:fb:cf:ac:eb:18:6e:05:eb:1f:1a:18:8b:90:0c:e9:7d:29: 46:28:55:c7:0c:c2:47:78:bc:0c:be:5e:a7:2b:e2:07:27:91: 46:3e:00:09:4a:42:6d:b0:a1:e7:6d:46:81:f8:a7:a6:f4:98: a0:93:08:3d:6d:ae:18:5a:b4:41:66:24:bd:51:8c:c1:9e:2e: 51:66:61:e3:60:66:84:9b:c2:0e:ee:da:86:d2:87:30:35:f7: 2a:f7:19:e1:37:a3:d7:10:01:4e:46:5c:16:a1:68:7b:8a:f9: 64:0a:d8:7c:b6:17:e4:3f:21:6c:ee:c8:2b:58:22:22:c1:aa: 7b:f3:ee:c2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKKaLzOaBllzn5VoLETPQxDI7R1swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRDRTcyNENDMzM3NDQ4NTNCMjBENkU3OTIyQTJGODA4 QjhDMzAwQzAeFw0yNjA3MjQxNzUxNDlaFw0yNjA3MjUyMDQ2NDlaMDMxMTAvBgNV BAMTKDkxQjJDNDhGRDUyNDIwRUExOTQzOUFFRDEzMjMwMjRFNUI1NjI1NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0/5xQiXSibZ226+alV1yAAcoe H5ELgvc7rc6DmrneF5AK4dPSw6gcIrscDnDL/Z2+2vMMAWRNbEP3gtvPbJ35ztK2 CEOD52aSGr6ylFmRSlnRsE9+12TNy0OlBJDg6HVedZpIVKyF+qOUDdssCnD5RtHE V/h+Q6jMrpMw3h4rEihkpq0prrEpGCLZ+fJUL1DCO3qskU+zL7Hf1KXHSpze74Vz /JN+ilJSwnUKU5h1Qlwk6bkE31ATrDsZ8OlLXRLOt5OSLEFUUkLiTx3SzHfGJFiB 79gt76JFNQxd+9ZnGRx4NV5+yhUVcKgWPPJ9HP9hbukDdYEmeC44XceQbVP1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkbLEj9UkIOoZQ5rtEyMCTltWJVswHwYDVR0j BBgwFoAUZM5yTMM3RIU7INbnkiovgIuMMAwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk4OTExNDA2MzkxMjk2My8wLzY0Q0U3MjRDQzMzNzQ0ODUzQjIwRDZFNzkyMkEy RjgwOEI4QzMwMEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjRDRTcyNENDMzM3NDQ4NTNCMjBENkU3OTIyQTJGODA4QjhDMzAwQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5ODkxMTQwNjM5MTI5NjMvMC82NENFNzI0Q0MzMzc0 NDg1M0IyMEQ2RTc5MjJBMkY4MDhCOEMzMDBDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1xtR/aK3CzCl Ew5Fhvx39ykUx1JlvQ/nDh0i4D60UKeRtEWVCMTcRb+50xOSwgv/H2YuHBrx4OJh ydxxM2udScz2oBvgg2zgcNP5PXwNwk1jU6xj7waW28hBPU9v2uLR2PHjlTvqqZuq v+uEDGcMuEsEuuOaeL1wt5EKErYIWfvPrOsYbgXrHxoYi5AM6X0pRihVxwzCR3i8 DL5epyviByeRRj4ACUpCbbCh521GgfinpvSYoJMIPW2uGFq0QWYkvVGMwZ4uUWZh 42BmhJvCDu7ahtKHMDX3KvcZ4Tej1xABTkZcFqFoe4r5ZArYfLYX5D8hbO7IK1gi IsGqe/Puwg== -----END CERTIFICATE-----Generated at Fri Jul 24 19:53:43 2026 by rpki-client