$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft File: 644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft (raw, json) Hash identifier: 4ZBo9Pihzi22230u1Mhli1njrBmaTEwTonublE6eznA= Subject key identifier: 24:8E:F2:0C:97:D3:1B:2E:D5:8F:88:31:EC:80:31:E2:52:72:6F:C5 Authority key identifier: 64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6 Certificate issuer: /CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6 Certificate serial: 2001169B05305C9BEA190318B9F0B324CA123CA4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft Manifest number: 8B Signing time: Thu 01 Oct 2026 06:54:20 +0000 Manifest this update: Thu 01 Oct 2026 06:49:20 +0000 Manifest next update: Sun 04 Oct 2026 07:22:20 +0000 Files and hashes: 1: 3131392e38382e3139322e302f31382d3138203d3e2034383337.roa (hash: c5E7LGs12ir5P6gUV8HgQNTR9L1tAEDuGDXK3LZDoYQ=) 2: 3132322e302e39362e302f32302d3230203d3e203234343232.roa (hash: Ja8cOr88YvnZATrU28wxxZEEKg9qD+UwbHDMP26tZ0Q=) 3: 3132322e302e36342e302f31382d3138203d3e203234343232.roa (hash: c9brsSufQtw0FK/fNiFh2NqrrZfDT7KUZt+wNN3tcNY=) 4: 3131392e38382e3132382e302f31382d3138203d3e2034383337.roa (hash: s7ONdLbyx9xQsrQ4Lye/nZu3RvQlrmjfhRjgPWRb3Bs=) 5: 3132322e302e3132342e302f32342d3234203d3e203234343232.roa (hash: 8PgxQbJwnWj6d/MVr+J3Rd58a7g5hDpd/1pB4+5nU5E=) 6: 644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl (hash: Tqt2bhFy+LWsbmXIwMoEzw7X4naqY/q/NK1yDyzyOI0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 05:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:01:16:9b:05:30:5c:9b:ea:19:03:18:b9:f0:b3:24:ca:12:3c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6 Validity Not Before: Oct 1 06:49:20 2026 GMT Not After : Oct 4 07:22:20 2026 GMT Subject: CN=248EF20C97D31B2ED58F8831EC8031E252726FC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:57:22:b5:3f:ee:b0:19:d5:12:5f:de:22:b2: 82:ac:4d:69:3c:68:34:52:25:74:36:9b:2c:07:4d: b5:27:84:85:36:78:e0:e1:ea:00:1c:14:e2:9d:bc: 13:21:7c:d9:93:de:34:28:51:6d:c5:c4:36:79:32: e6:09:19:2b:0f:2e:24:78:ed:bd:1a:e0:4b:74:dd: 42:b6:1f:c6:ad:dc:d2:94:36:dd:d0:83:03:92:8a: 49:4c:10:fd:f9:ef:f5:14:e9:00:51:00:29:c7:bb: eb:13:86:06:c4:20:cd:a6:18:2d:20:c7:81:39:7d: 2d:6a:21:b0:c6:9e:f6:d6:53:b1:14:d1:5c:35:55: 82:7d:83:73:d9:56:dc:4a:c3:1d:f8:77:c0:b0:8a: 07:9d:59:bd:f7:89:4e:61:a5:43:33:62:10:79:cb: a9:4c:13:55:bb:37:98:87:07:fc:94:5e:6f:79:14: b0:a0:ab:d8:fb:bd:e5:0d:6c:52:a0:d3:ce:75:20: 7e:04:95:3f:45:3c:f2:92:95:f0:38:05:42:b5:a1: 34:3e:50:b5:12:c2:e3:8a:79:c9:b9:93:69:d7:20: 56:05:93:74:32:bf:da:08:d6:4c:a7:87:a4:5d:83: f0:0b:11:30:0a:f7:ca:7d:e2:33:e2:df:50:99:43: 40:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8E:F2:0C:97:D3:1B:2E:D5:8F:88:31:EC:80:31:E2:52:72:6F:C5 X509v3 Authority Key Identifier: keyid:64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ac:ae:5a:bc:f1:ac:1c:f3:04:3e:7d:46:36:21:df:65:31: 4c:b9:6d:63:21:76:43:ea:6e:98:83:9f:e2:bd:15:f9:d6:10: b4:97:30:81:b1:a9:ec:d8:78:83:ca:6b:00:0a:b8:96:70:3a: 5e:6f:7c:c1:ec:27:0c:17:26:04:b8:9f:5c:d5:ac:60:1e:ad: eb:52:41:15:34:c9:98:c6:d7:39:65:92:9d:a8:fb:9a:f6:6a: 2f:55:88:0f:df:2a:ab:a5:7b:4d:df:e0:65:e9:77:41:9c:30: 8b:50:3e:2e:00:c7:e1:5a:a8:79:02:88:c3:06:09:d7:2c:9f: 5c:9b:cf:6b:f3:b5:bd:1b:d6:6e:a3:52:b7:db:30:db:c9:8a: 78:61:6c:bb:e8:21:89:f0:6f:be:ad:03:c0:e8:94:da:e8:bd: a2:14:9a:07:06:b5:d6:b5:50:fa:69:65:4d:3c:65:af:7f:52: 8a:00:26:1e:ae:b8:20:39:e4:21:c8:f7:43:eb:a4:48:9b:ae: 98:d2:01:1e:8a:e1:36:29:74:af:85:79:0e:8e:2f:25:88:3b: 77:48:0e:f6:ed:f0:5f:22:ee:93:95:61:31:53:20:77:91:43: 30:d2:ee:ba:4f:b3:26:c4:e6:43:19:3d:72:31:95:23:36:ee: 91:91:77:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIAEWmwUwXJvqGQMYufCzJMoSPKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0REVGMTFCRTQ4MTk4QkM1Q0JEQzA1RjI1RTcxMkFC NDFBRTNCNjAeFw0yNjEwMDEwNjQ5MjBaFw0yNjEwMDQwNzIyMjBaMDMxMTAvBgNV BAMTKDI0OEVGMjBDOTdEMzFCMkVENThGODgzMUVDODAzMUUyNTI3MjZGQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMVyK1P+6wGdUSX94isoKsTWk8 aDRSJXQ2mywHTbUnhIU2eODh6gAcFOKdvBMhfNmT3jQoUW3FxDZ5MuYJGSsPLiR4 7b0a4Et03UK2H8at3NKUNt3QgwOSiklMEP357/UU6QBRACnHu+sThgbEIM2mGC0g x4E5fS1qIbDGnvbWU7EU0Vw1VYJ9g3PZVtxKwx34d8CwigedWb33iU5hpUMzYhB5 y6lME1W7N5iHB/yUXm95FLCgq9j7veUNbFKg0851IH4ElT9FPPKSlfA4BUK1oTQ+ ULUSwuOKecm5k2nXIFYFk3Qyv9oI1kynh6Rdg/ALETAK98p94jPi31CZQ0BXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJI7yDJfTGy7Vj4gx7IAx4lJyb8UwHwYDVR0j BBgwFoAUZE3vEb5IGYvFy9wF8l5xKrQa47YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MzYwNjAzNjA1NDM0MzY5OS8wLzY0NERFRjExQkU0ODE5OEJDNUNCREMwNUYyNUU3 MTJBQjQxQUUzQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjQ0REVGMTFCRTQ4MTk4QkM1Q0JEQzA1RjI1RTcxMkFCNDFBRTNCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTM2MDYwMzYwNTQzNDM2OTkvMC82NDRERUYxMUJFNDgx OThCQzVDQkRDMDVGMjVFNzEyQUI0MUFFM0I2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKyuWrzxrBzz BD59RjYh32UxTLltYyF2Q+pumIOf4r0V+dYQtJcwgbGp7Nh4g8prAAq4lnA6Xm98 wewnDBcmBLifXNWsYB6t61JBFTTJmMbXOWWSnaj7mvZqL1WID98qq6V7Td/gZel3 QZwwi1A+LgDH4VqoeQKIwwYJ1yyfXJvPa/O1vRvWbqNSt9sw28mKeGFsu+ghifBv vq0DwOiU2ui9ohSaBwa11rVQ+mllTTxlr39SigAmHq64IDnkIcj3Q+ukSJuumNIB HorhNil0r4V5Do4vJYg7d0gO9u3wXyLuk5VhMVMgd5FDMNLuuk+zJsTmQxk9cjGV IzbukZF38Q== -----END CERTIFICATE-----Generated at Thu Oct 1 20:58:10 2026 by rpki-client