$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft File: 644F9AE827627B0357D7972FE08D569A0CB97C31.mft (raw, json) Hash identifier: aL3gvVY4UeVQaHNKgeNk8JRf5+oZmDi9Ngh4p1EC+0I= Subject key identifier: 4E:91:E9:23:2C:23:C8:0F:0A:9D:9B:3E:5D:B8:73:72:9E:92:FE:85 Authority key identifier: 64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31 Certificate issuer: /CN=644F9AE827627B0357D7972FE08D569A0CB97C31 Certificate serial: 538ADE2B2C1848008E4FFBE1CEE86C0CBEB59935 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft Manifest number: A5 Signing time: Sun 11 Oct 2026 18:00:48 +0000 Manifest this update: Sun 11 Oct 2026 17:55:48 +0000 Manifest next update: Wed 14 Oct 2026 19:02:48 +0000 Files and hashes: 1: 3131392e33382e3139322e302f32302d3230203d3e203338333637.roa (hash: niXTpol86vmz6DcPKGxvQoGJAvpzazIgo8KhQW4C54k=) 2: 323430303a616530303a313938313a3a2f34382d3438203d3e203338333637.roa (hash: QKXGlT0gawntujhSrweVLVCzEtXKFPE949OqugYMNTI=) 3: 644F9AE827627B0357D7972FE08D569A0CB97C31.crl (hash: MD8YqnFJWiwqE1r1cWV62VI3ZAyenVWP5mtsfK1VYDI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 19:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:8a:de:2b:2c:18:48:00:8e:4f:fb:e1:ce:e8:6c:0c:be:b5:99:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644F9AE827627B0357D7972FE08D569A0CB97C31 Validity Not Before: Oct 11 17:55:48 2026 GMT Not After : Oct 14 19:02:48 2026 GMT Subject: CN=4E91E9232C23C80F0A9D9B3E5DB873729E92FE85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:a7:fd:7d:f1:9a:b8:b0:8f:6b:d3:88:4d: c7:e3:fe:ea:ef:21:16:20:d5:aa:4e:0f:4f:e7:37: e2:86:42:dc:9b:50:e7:96:ef:71:65:b3:ab:a7:de: fd:21:93:ef:1f:a4:82:1f:1f:c5:2a:bc:02:3b:3d: 1f:25:72:35:87:51:80:23:0d:5f:4f:6e:8e:8f:0a: b6:a7:a7:2d:50:8b:50:72:8c:4e:5e:f9:8b:d7:1e: c9:fa:e4:2a:89:78:77:9e:30:50:d4:1c:72:94:42: 27:ef:2c:07:cf:34:64:da:d8:5b:15:f2:12:ac:0e: b9:a4:5c:9f:4e:2d:c8:a7:d6:1b:6b:7a:bc:a6:30: ee:09:28:47:67:d7:62:0b:f1:f6:d0:3e:17:5e:bc: 9d:04:5f:ad:bd:09:ed:29:d6:5b:10:d4:48:fa:db: ee:ba:6e:86:08:d9:58:3e:ba:7e:e8:a3:b9:10:0f: fd:98:ec:f5:2b:41:42:c0:8e:c7:d2:89:a3:f0:d1: 39:ab:3d:31:49:a5:12:3e:c5:41:b9:7e:93:89:eb: 59:d2:a4:22:a6:25:6c:36:e9:53:4b:52:79:49:8a: 3a:eb:fc:21:26:7e:70:6d:8f:84:f6:9e:c7:90:24: 17:9b:62:16:81:4b:fb:a1:20:c9:64:91:46:50:e0: eb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:91:E9:23:2C:23:C8:0F:0A:9D:9B:3E:5D:B8:73:72:9E:92:FE:85 X509v3 Authority Key Identifier: keyid:64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:67:1d:40:0d:13:94:ab:2c:20:aa:2b:6b:4c:c9:d7:2e:b0: 12:58:8f:0b:13:be:ce:37:44:65:22:65:30:10:fe:6e:46:65: 3a:e1:05:e6:74:4b:89:fc:17:f0:7f:ce:de:50:33:33:47:33: da:cc:0c:a1:0d:4d:88:1f:76:56:f6:5e:c4:5b:25:01:9a:6c: ad:13:9a:5a:ba:01:80:5f:36:9f:e0:34:93:00:77:7c:fb:15: e5:63:db:fb:89:8a:1d:a9:07:e6:16:61:62:4c:a6:9b:68:93: ca:7d:13:0f:d9:be:74:c2:fb:88:9c:35:67:5b:c1:92:c8:3b: e6:76:7b:5e:a4:47:a3:57:31:68:fd:3d:1e:c8:e5:fb:ea:ce: 88:92:41:7f:91:24:4f:6c:18:98:14:6d:7f:ab:b5:a2:1d:68: 1e:5d:83:77:f0:d9:a0:2d:0c:cc:54:2e:e6:8c:60:ff:19:59: 9b:14:69:67:95:8f:2b:a9:5d:7e:54:6a:44:95:1e:6b:d2:c7: 9a:2e:73:cf:ff:7d:d2:b5:f6:69:b2:b8:41:27:1a:cb:01:08: e2:3b:74:c6:c1:5c:b7:3c:4b:b7:ff:a7:16:b9:4d:a3:05:da: 29:d6:ce:79:61:75:29:26:c8:47:f6:b9:6a:85:30:d0:6c:89: ac:c5:fc:88 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUU4reKywYSACOT/vhzuhsDL61mTUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0RjlBRTgyNzYyN0IwMzU3RDc5NzJGRTA4RDU2OUEw Q0I5N0MzMTAeFw0yNjEwMTExNzU1NDhaFw0yNjEwMTQxOTAyNDhaMDMxMTAvBgNV BAMTKDRFOTFFOTIzMkMyM0M4MEYwQTlEOUIzRTVEQjg3MzcyOUU5MkZFODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7nqf9ffGauLCPa9OITcfj/urv IRYg1apOD0/nN+KGQtybUOeW73Fls6un3v0hk+8fpIIfH8UqvAI7PR8lcjWHUYAj DV9Pbo6PCranpy1Qi1ByjE5e+YvXHsn65CqJeHeeMFDUHHKUQifvLAfPNGTa2FsV 8hKsDrmkXJ9OLcin1htrerymMO4JKEdn12IL8fbQPhdevJ0EX629Ce0p1lsQ1Ej6 2+66boYI2Vg+un7oo7kQD/2Y7PUrQULAjsfSiaPw0TmrPTFJpRI+xUG5fpOJ61nS pCKmJWw26VNLUnlJijrr/CEmfnBtj4T2nseQJBebYhaBS/uhIMlkkUZQ4OuFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTpHpIywjyA8KnZs+Xbhzcp6S/oUwHwYDVR0j BBgwFoAUZE+a6CdiewNX15cv4I1Wmgy5fDEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg3MTA3NjIyMDA0MzI4My8wLzY0NEY5QUU4Mjc2MjdCMDM1N0Q3OTcyRkUwOEQ1 NjlBMENCOTdDMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjQ0RjlBRTgyNzYyN0IwMzU3RDc5NzJGRTA4RDU2OUEwQ0I5N0MzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NzEwNzYyMjAwNDMyODMvMC82NDRGOUFFODI3NjI3 QjAzNTdENzk3MkZFMDhENTY5QTBDQjk3QzMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtmcdQA0TlKss IKora0zJ1y6wEliPCxO+zjdEZSJlMBD+bkZlOuEF5nRLifwX8H/O3lAzM0cz2swM oQ1NiB92VvZexFslAZpsrROaWroBgF82n+A0kwB3fPsV5WPb+4mKHakH5hZhYkym m2iTyn0TD9m+dML7iJw1Z1vBksg75nZ7XqRHo1cxaP09Hsjl++rOiJJBf5EkT2wY mBRtf6u1oh1oHl2Dd/DZoC0MzFQu5oxg/xlZmxRpZ5WPK6ldflRqRJUea9LHmi5z z/990rX2abK4QScaywEI4jt0xsFctzxLt/+nFrlNowXaKdbOeWF1KSbIR/a5aoUw 0GyJrMX8iA== -----END CERTIFICATE-----Generated at Tue Oct 13 17:52:46 2026 by rpki-client