$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft File: 644F9AE827627B0357D7972FE08D569A0CB97C31.mft (raw, json) Hash identifier: RI3S9f2s2lJ8xHv2PJFlU66C1hdKgVZCHYSmTG9JxpY= Subject key identifier: 28:6B:02:A0:C2:BB:65:DE:59:F4:5D:14:6E:81:02:CD:92:02:10:FD Authority key identifier: 64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31 Certificate issuer: /CN=644F9AE827627B0357D7972FE08D569A0CB97C31 Certificate serial: 5CE069C16D30F3C1F566B9979F66C487EB4C22D0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft Manifest number: 63 Signing time: Fri 24 Jul 2026 10:00:57 +0000 Manifest this update: Fri 24 Jul 2026 09:55:57 +0000 Manifest next update: Sat 25 Jul 2026 10:36:57 +0000 Files and hashes: 1: 323430303a616530303a313938313a3a2f34382d3438203d3e203338333637.roa (hash: QKXGlT0gawntujhSrweVLVCzEtXKFPE949OqugYMNTI=) 2: 644F9AE827627B0357D7972FE08D569A0CB97C31.crl (hash: WDzTMHbKc1kZpguYYP/EFpRcyBN/LZEpTh0k1p4sGws=) 3: 3131392e33382e3139322e302f32302d3230203d3e203338333637.roa (hash: niXTpol86vmz6DcPKGxvQoGJAvpzazIgo8KhQW4C54k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e0:69:c1:6d:30:f3:c1:f5:66:b9:97:9f:66:c4:87:eb:4c:22:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644F9AE827627B0357D7972FE08D569A0CB97C31 Validity Not Before: Jul 24 09:55:57 2026 GMT Not After : Jul 25 10:36:57 2026 GMT Subject: CN=286B02A0C2BB65DE59F45D146E8102CD920210FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d1:6f:d9:c7:50:07:f7:c2:9e:a3:2c:53:23: d9:f2:ee:70:8b:ba:de:f4:61:27:30:34:9c:c0:c3: ae:44:10:c0:f9:10:e8:db:6a:a8:e0:22:71:07:cd: d6:0d:4c:76:ae:7a:e5:15:8e:40:b0:22:81:ea:01: 30:a8:94:63:04:ea:f8:29:71:ef:02:df:d4:74:bd: 45:d2:55:95:9e:2c:88:26:e0:7c:c8:66:a9:ef:0e: 1e:88:52:c0:0d:41:81:dc:9d:18:43:bd:8a:2d:82: 25:c6:b9:f1:0d:b3:10:05:b6:55:b8:72:a7:77:75: cd:8b:95:3f:7c:f8:99:6b:89:72:31:42:f2:42:51: 2a:87:b4:b5:eb:cd:09:d0:7d:6b:c1:e2:c2:99:26: 24:1e:d9:74:3b:82:ff:35:bf:1f:77:80:c4:b0:f9: 9d:8d:17:f5:f6:49:42:19:1f:9d:bc:d6:b5:85:76: e6:35:93:de:38:68:24:89:83:b5:96:9e:7e:6a:81: 99:aa:3a:3d:ba:5a:6c:26:5b:8d:bf:86:4c:e8:e7: 61:18:5d:dd:cb:67:58:6e:bc:55:5b:ef:a8:f2:99: 59:46:04:30:85:1e:38:7f:71:37:64:c2:32:1f:78: c4:03:8c:21:25:a8:a6:4f:21:dc:4a:24:61:0d:ad: 01:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6B:02:A0:C2:BB:65:DE:59:F4:5D:14:6E:81:02:CD:92:02:10:FD X509v3 Authority Key Identifier: keyid:64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:ea:08:8d:e3:6a:10:56:6a:84:28:11:5b:ee:11:46:92:be: 5a:f6:92:c1:d5:04:25:13:ce:62:6f:fc:a7:15:81:b0:9c:c7: 17:a7:3e:75:81:b2:3b:4f:a4:8a:b8:55:2b:c7:1a:8b:68:1d: 13:da:94:0b:4e:65:07:ca:4d:fe:6c:8f:12:d7:59:a1:3d:ee: 0e:f0:c2:80:5a:af:d7:22:69:fb:bb:ef:81:6e:1c:a9:d9:0b: 88:29:5d:ad:40:b9:f2:3c:47:03:f6:db:82:47:67:5c:ab:c4: c3:56:62:e0:21:dc:13:2c:05:54:05:4d:98:87:03:e6:52:c3: 94:90:e9:a2:68:a8:c3:33:7f:4e:84:a4:3c:ab:3f:6f:f8:11: cc:09:e8:38:fb:9a:62:f0:82:74:70:a4:eb:65:87:89:04:6c: 66:97:18:10:82:2e:66:b6:bb:db:7a:35:42:d4:1d:77:30:fe: 9d:ae:a8:9a:90:f8:55:ba:be:e7:3a:cb:4e:10:1c:1e:6c:0a: 77:e3:a4:b4:30:02:b1:5d:cf:70:78:c4:6a:df:40:97:82:57: 8d:6a:a5:17:da:7e:8a:1b:db:5a:bc:cf:49:f6:1b:0e:0d:89: 8f:0f:7b:ce:42:94:f5:36:18:f0:13:12:15:d4:f4:27:17:84: d4:d8:36:e3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXOBpwW0w88H1ZrmXn2bEh+tMItAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0RjlBRTgyNzYyN0IwMzU3RDc5NzJGRTA4RDU2OUEw Q0I5N0MzMTAeFw0yNjA3MjQwOTU1NTdaFw0yNjA3MjUxMDM2NTdaMDMxMTAvBgNV BAMTKDI4NkIwMkEwQzJCQjY1REU1OUY0NUQxNDZFODEwMkNEOTIwMjEwRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf0W/Zx1AH98KeoyxTI9ny7nCL ut70YScwNJzAw65EEMD5EOjbaqjgInEHzdYNTHaueuUVjkCwIoHqATColGME6vgp ce8C39R0vUXSVZWeLIgm4HzIZqnvDh6IUsANQYHcnRhDvYotgiXGufENsxAFtlW4 cqd3dc2LlT98+JlriXIxQvJCUSqHtLXrzQnQfWvB4sKZJiQe2XQ7gv81vx93gMSw +Z2NF/X2SUIZH5281rWFduY1k944aCSJg7WWnn5qgZmqOj26WmwmW42/hkzo52EY Xd3LZ1huvFVb76jymVlGBDCFHjh/cTdkwjIfeMQDjCElqKZPIdxKJGENrQHdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKGsCoMK7Zd5Z9F0UboECzZICEP0wHwYDVR0j BBgwFoAUZE+a6CdiewNX15cv4I1Wmgy5fDEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg3MTA3NjIyMDA0MzI4My8wLzY0NEY5QUU4Mjc2MjdCMDM1N0Q3OTcyRkUwOEQ1 NjlBMENCOTdDMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjQ0RjlBRTgyNzYyN0IwMzU3RDc5NzJGRTA4RDU2OUEwQ0I5N0MzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NzEwNzYyMjAwNDMyODMvMC82NDRGOUFFODI3NjI3 QjAzNTdENzk3MkZFMDhENTY5QTBDQjk3QzMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsuoIjeNqEFZq hCgRW+4RRpK+WvaSwdUEJRPOYm/8pxWBsJzHF6c+dYGyO0+kirhVK8cai2gdE9qU C05lB8pN/myPEtdZoT3uDvDCgFqv1yJp+7vvgW4cqdkLiCldrUC58jxHA/bbgkdn XKvEw1Zi4CHcEywFVAVNmIcD5lLDlJDpomiowzN/ToSkPKs/b/gRzAnoOPuaYvCC dHCk62WHiQRsZpcYEIIuZra723o1QtQddzD+na6ompD4Vbq+5zrLThAcHmwKd+Ok tDACsV3PcHjEat9Al4JXjWqlF9p+ihvbWrzPSfYbDg2Jjw97zkKU9TYY8BMSFdT0 JxeE1Ng24w== -----END CERTIFICATE-----Generated at Fri Jul 24 21:06:35 2026 by rpki-client