$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft File: 644F9AE827627B0357D7972FE08D569A0CB97C31.mft (raw, json) Hash identifier: 9px0jtsNLhcAUwKv2rhSdlMGXC1ocdHiyIssZm6wptY= Subject key identifier: C4:39:BE:C5:A4:F9:73:23:FD:C7:64:D5:14:0C:57:C1:4F:BA:9B:76 Authority key identifier: 64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31 Certificate issuer: /CN=644F9AE827627B0357D7972FE08D569A0CB97C31 Certificate serial: 3AF0CDFF48AE32EDD9EB42D15E8897B95DB38A1C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft Manifest number: 03 Signing time: Wed 13 May 2026 09:14:26 +0000 Manifest this update: Wed 13 May 2026 09:09:26 +0000 Manifest next update: Thu 14 May 2026 12:59:26 +0000 Files and hashes: 1: 644F9AE827627B0357D7972FE08D569A0CB97C31.crl (hash: XBWPpDYQv7y6X9DXqGem/8/RtxQbdHy9bt4J38alDL4=) 2: 3131392e33382e3139322e302f32302d3230203d3e203338333637.roa (hash: niXTpol86vmz6DcPKGxvQoGJAvpzazIgo8KhQW4C54k=) 3: 323430303a616530303a313938313a3a2f34382d3438203d3e203338333637.roa (hash: QKXGlT0gawntujhSrweVLVCzEtXKFPE949OqugYMNTI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:f0:cd:ff:48:ae:32:ed:d9:eb:42:d1:5e:88:97:b9:5d:b3:8a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644F9AE827627B0357D7972FE08D569A0CB97C31 Validity Not Before: May 13 09:09:26 2026 GMT Not After : May 14 12:59:26 2026 GMT Subject: CN=C439BEC5A4F97323FDC764D5140C57C14FBA9B76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:68:56:e3:38:29:3b:53:c4:21:b7:18:03:fd: a4:0e:0e:8f:86:7f:fe:71:ce:fd:06:03:b8:04:bd: 7f:72:f9:6e:a1:f5:b3:33:3e:d0:5a:db:66:c3:f1: 5f:d2:3d:40:fd:12:03:7c:23:80:e7:ca:57:1b:0a: 29:0a:89:13:8e:30:05:7f:39:7d:00:e3:d1:38:4f: b3:20:f8:12:d6:f3:1f:a3:04:1d:dc:1c:8f:4f:c8: 97:d5:40:9d:c3:37:0a:44:96:7c:ed:40:46:83:1d: 03:9b:3b:b5:74:2f:45:23:ac:23:43:78:42:b7:0a: 86:31:94:bf:92:35:a0:83:55:87:2b:89:4e:25:7d: dd:04:82:a0:64:d7:61:d6:8a:4d:1e:fe:1d:ec:b6: bc:23:cb:62:c0:ec:61:77:5d:69:41:2f:1c:75:79: c8:29:75:7b:d3:c3:a0:b0:b9:c7:df:41:82:9d:29: b0:44:7c:66:19:20:17:b3:0b:b5:60:86:26:6b:ab: e5:50:c9:b6:d7:17:22:33:56:7c:70:11:78:75:0d: b4:ab:0a:72:86:f8:c9:f6:69:04:69:38:32:01:6b: d4:9a:3b:69:5c:e3:10:44:b2:90:28:1a:0e:af:ed: f8:0c:ba:a4:30:11:94:db:e6:3a:a3:81:e9:b2:27: 31:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:39:BE:C5:A4:F9:73:23:FD:C7:64:D5:14:0C:57:C1:4F:BA:9B:76 X509v3 Authority Key Identifier: keyid:64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:13:81:cb:d3:eb:ad:5e:9a:e5:6c:22:4a:f8:4e:7d:eb:4b: 90:6b:f5:f5:7e:0f:fe:10:f4:f8:8e:09:85:7e:2f:e1:50:5d: c4:8a:7b:c6:31:4d:47:9d:a0:77:91:1f:fa:f6:16:24:ff:27: 7e:6b:4d:33:ab:ea:6a:df:6e:00:e7:ab:81:a1:d9:4a:26:6b: d2:04:d5:e9:a9:22:f9:4f:bc:5f:2e:23:82:54:b1:30:3b:2c: 50:44:26:39:1b:00:ac:da:bc:08:6b:1c:f4:87:16:00:23:ea: fc:10:e4:b4:c7:1d:f4:9a:fe:f7:96:e4:7d:f5:aa:53:b2:c4: bc:88:c1:97:4d:05:ba:a1:2c:11:c1:34:5e:08:19:01:24:81: 4c:e6:33:08:38:43:4e:26:30:da:4d:7f:7d:4b:e6:ae:e5:09: d7:06:f0:c6:81:85:1e:95:5e:81:2d:3e:73:64:fd:1c:0e:0d: 61:f1:4b:b3:2e:5b:d2:0a:05:b4:aa:06:20:25:d8:70:3e:0b: cb:1d:80:20:ed:54:1b:fa:03:ef:83:a3:3b:7f:80:98:b6:95: b6:07:37:2e:0c:93:53:56:9c:6e:6a:52:33:c6:48:b8:c8:53: 6e:02:4c:12:df:9f:cc:5d:08:61:54:d7:c6:36:a6:c1:3c:70: 85:71:9f:23 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOvDN/0iuMu3Z60LRXoiXuV2zihwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0RjlBRTgyNzYyN0IwMzU3RDc5NzJGRTA4RDU2OUEw Q0I5N0MzMTAeFw0yNjA1MTMwOTA5MjZaFw0yNjA1MTQxMjU5MjZaMDMxMTAvBgNV BAMTKEM0MzlCRUM1QTRGOTczMjNGREM3NjRENTE0MEM1N0MxNEZCQTlCNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzaFbjOCk7U8QhtxgD/aQODo+G f/5xzv0GA7gEvX9y+W6h9bMzPtBa22bD8V/SPUD9EgN8I4DnylcbCikKiROOMAV/ OX0A49E4T7Mg+BLW8x+jBB3cHI9PyJfVQJ3DNwpElnztQEaDHQObO7V0L0UjrCND eEK3CoYxlL+SNaCDVYcriU4lfd0EgqBk12HWik0e/h3strwjy2LA7GF3XWlBLxx1 ecgpdXvTw6CwucffQYKdKbBEfGYZIBezC7VghiZrq+VQybbXFyIzVnxwEXh1DbSr CnKG+Mn2aQRpODIBa9SaO2lc4xBEspAoGg6v7fgMuqQwEZTb5jqjgemyJzH1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxDm+xaT5cyP9x2TVFAxXwU+6m3YwHwYDVR0j BBgwFoAUZE+a6CdiewNX15cv4I1Wmgy5fDEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg3MTA3NjIyMDA0MzI4My8wLzY0NEY5QUU4Mjc2MjdCMDM1N0Q3OTcyRkUwOEQ1 NjlBMENCOTdDMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjQ0RjlBRTgyNzYyN0IwMzU3RDc5NzJGRTA4RDU2OUEwQ0I5N0MzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NzEwNzYyMjAwNDMyODMvMC82NDRGOUFFODI3NjI3 QjAzNTdENzk3MkZFMDhENTY5QTBDQjk3QzMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThOBy9PrrV6a 5WwiSvhOfetLkGv19X4P/hD0+I4JhX4v4VBdxIp7xjFNR52gd5Ef+vYWJP8nfmtN M6vqat9uAOergaHZSiZr0gTV6aki+U+8Xy4jglSxMDssUEQmORsArNq8CGsc9IcW ACPq/BDktMcd9Jr+95bkffWqU7LEvIjBl00FuqEsEcE0XggZASSBTOYzCDhDTiYw 2k1/fUvmruUJ1wbwxoGFHpVegS0+c2T9HA4NYfFLsy5b0goFtKoGICXYcD4Lyx2A IO1UG/oD74OjO3+AmLaVtgc3LgyTU1acbmpSM8ZIuMhTbgJMEt+fzF0IYVTXxjam wTxwhXGfIw== -----END CERTIFICATE-----Generated at Wed May 13 20:55:01 2026 by rpki-client