$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft File: 64CE724CC33744853B20D6E7922A2F808B8C300C.mft (raw, json) Hash identifier: HV4n8G1cCBxNGnFfmZYpdsShqSrLvTjYKjam+lyFQrE= Subject key identifier: 70:50:6F:C7:77:5D:0D:6D:AA:78:E8:15:F7:67:C2:A4:E0:17:99:F6 Authority key identifier: 64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C Certificate issuer: /CN=64CE724CC33744853B20D6E7922A2F808B8C300C Certificate serial: 2809C65C58C5D78E1DE351F52DFBC91CD2186FAF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft Manifest number: C8 Signing time: Mon 12 Oct 2026 11:16:54 +0000 Manifest this update: Mon 12 Oct 2026 11:11:54 +0000 Manifest next update: Thu 15 Oct 2026 17:44:54 +0000 Files and hashes: 1: 3130332e3234352e3132382e302f32322d3232203d3e203535393832.roa (hash: Md4+IrPlN/VFjDo9GOcLPihi6j6Vf2NSeSyN1+Jh1x8=) 2: 64CE724CC33744853B20D6E7922A2F808B8C300C.crl (hash: ZSVfojgjH5F0uQkgBqdsqViJNRXb1gUBZq10saAxOxw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.crl rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:09:c6:5c:58:c5:d7:8e:1d:e3:51:f5:2d:fb:c9:1c:d2:18:6f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64CE724CC33744853B20D6E7922A2F808B8C300C Validity Not Before: Oct 12 11:11:54 2026 GMT Not After : Oct 15 17:44:54 2026 GMT Subject: CN=70506FC7775D0D6DAA78E815F767C2A4E01799F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:00:2c:db:fd:01:60:2d:28:5d:25:47:94: aa:5c:ca:cf:37:64:a3:b6:29:15:67:43:b3:0e:bb: dd:79:fe:e0:3f:b7:e7:de:03:36:c9:28:91:dc:d4: 49:b3:f1:b6:bf:5b:44:1e:b0:21:86:e6:f3:dc:d1: 60:92:de:83:74:9f:5c:14:29:6a:9b:a9:fa:26:5b: f2:06:22:88:c4:cd:0e:5c:61:6c:d4:20:99:7f:80: 74:9d:ab:5a:61:40:55:d6:ba:6c:f0:71:86:04:51: a3:4d:e1:11:bc:b6:33:a7:9c:1a:50:ce:c1:ae:d5: fa:84:25:79:b6:6d:1b:db:33:0d:92:e8:9b:da:e3: af:3e:77:ea:02:9b:59:64:7a:60:05:ba:09:c0:b0: d0:d8:61:d2:73:36:c6:dd:59:4d:c4:91:9f:55:c0: e8:a9:31:72:de:b5:f7:c7:7f:6d:12:6a:e0:be:0e: 5e:35:d9:5f:6b:38:df:50:0a:02:ca:2b:2b:da:86: e6:bd:5a:23:a0:41:3a:47:47:68:8b:48:c6:2b:af: 48:06:87:ea:8c:66:9f:7c:c5:d0:52:99:8e:88:46: 37:47:b7:01:32:0f:29:ae:08:41:8b:88:80:9b:bc: f9:8a:a3:73:ad:45:32:5f:d1:cb:60:1b:a0:25:9c: 2b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:50:6F:C7:77:5D:0D:6D:AA:78:E8:15:F7:67:C2:A4:E0:17:99:F6 X509v3 Authority Key Identifier: keyid:64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:8b:07:61:82:29:db:5b:67:c2:71:0f:6c:b9:cf:a6:58:8e: 0d:1c:f2:0a:19:ef:e2:b1:0a:a0:cc:37:f1:16:6d:1e:62:ae: 3a:27:17:23:ff:a0:dd:47:a1:19:08:8d:55:c5:a6:7f:9d:4b: 4e:9b:cb:3e:9e:ad:d3:fb:dc:f0:84:ff:c5:97:08:40:76:59: be:e6:9f:a0:8f:91:ad:a1:20:3b:72:cd:c7:64:ec:47:5d:b6: 37:96:cf:70:cc:65:81:30:b6:24:ac:4a:bd:9d:fa:97:fb:6f: 82:55:0e:13:8c:83:c5:a7:82:54:ba:46:e7:b2:4e:e0:1e:ef: 2a:5f:7b:70:bd:1f:32:33:fc:e8:c3:5f:16:34:e6:d7:61:2c: b1:fb:bf:46:de:65:ee:13:89:bf:bf:75:e6:fa:13:74:cd:77: f0:fd:8e:f6:b4:cd:5e:22:fe:a1:bd:6b:f7:d1:1a:e8:28:ab: a3:47:d9:89:43:00:fc:6f:fa:b7:45:46:32:23:7d:d2:aa:01: 8b:5c:20:dc:b3:8f:17:d5:43:13:cf:a0:9c:a1:9c:0f:8b:83: 10:7b:d6:00:23:e9:15:f7:45:eb:58:79:44:a0:8a:23:3f:79: e4:d6:1c:eb:5f:bc:ee:e5:e1:a7:60:4d:4b:c6:d8:da:3c:3a: 4a:84:91:56 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKAnGXFjF144d41H1LfvJHNIYb68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRDRTcyNENDMzM3NDQ4NTNCMjBENkU3OTIyQTJGODA4 QjhDMzAwQzAeFw0yNjEwMTIxMTExNTRaFw0yNjEwMTUxNzQ0NTRaMDMxMTAvBgNV BAMTKDcwNTA2RkM3Nzc1RDBENkRBQTc4RTgxNUY3NjdDMkE0RTAxNzk5RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXAAs2/0BYC0oXSVHlKpcys83 ZKO2KRVnQ7MOu915/uA/t+feAzbJKJHc1Emz8ba/W0QesCGG5vPc0WCS3oN0n1wU KWqbqfomW/IGIojEzQ5cYWzUIJl/gHSdq1phQFXWumzwcYYEUaNN4RG8tjOnnBpQ zsGu1fqEJXm2bRvbMw2S6Jva468+d+oCm1lkemAFugnAsNDYYdJzNsbdWU3EkZ9V wOipMXLetffHf20SauC+Dl412V9rON9QCgLKKyvahua9WiOgQTpHR2iLSMYrr0gG h+qMZp98xdBSmY6IRjdHtwEyDymuCEGLiICbvPmKo3OtRTJf0ctgG6AlnCtnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcFBvx3ddDW2qeOgV92fCpOAXmfYwHwYDVR0j BBgwFoAUZM5yTMM3RIU7INbnkiovgIuMMAwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk4OTExNDA2MzkxMjk2My8wLzY0Q0U3MjRDQzMzNzQ0ODUzQjIwRDZFNzkyMkEy RjgwOEI4QzMwMEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjRDRTcyNENDMzM3NDQ4NTNCMjBENkU3OTIyQTJGODA4QjhDMzAwQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5ODkxMTQwNjM5MTI5NjMvMC82NENFNzI0Q0MzMzc0 NDg1M0IyMEQ2RTc5MjJBMkY4MDhCOEMzMDBDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv4sHYYIp21tn wnEPbLnPpliODRzyChnv4rEKoMw38RZtHmKuOicXI/+g3UehGQiNVcWmf51LTpvL Pp6t0/vc8IT/xZcIQHZZvuafoI+RraEgO3LNx2TsR122N5bPcMxlgTC2JKxKvZ36 l/tvglUOE4yDxaeCVLpG57JO4B7vKl97cL0fMjP86MNfFjTm12Essfu/Rt5l7hOJ v7915voTdM138P2O9rTNXiL+ob1r99Ea6Ciro0fZiUMA/G/6t0VGMiN90qoBi1wg 3LOPF9VDE8+gnKGcD4uDEHvWACPpFfdF61h5RKCKIz955NYc61+87uXhp2BNS8bY 2jw6SoSRVg== -----END CERTIFICATE-----Generated at Tue Oct 13 19:35:14 2026 by rpki-client