$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft File: 644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft (raw, json) Hash identifier: Ps4mL9usdZOae93s5IWTSHR17+4kNbT5b8iBIB11eCc= Subject key identifier: 2B:A5:16:6C:0F:D4:3F:B7:52:DC:7D:CF:F3:3A:67:3B:FF:3B:F5:16 Authority key identifier: 64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6 Certificate issuer: /CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6 Certificate serial: 44796ABA6E18FBFFF9C781AA01E985C87F63F1E0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft Manifest number: 4D Signing time: Fri 24 Jul 2026 03:55:19 +0000 Manifest this update: Fri 24 Jul 2026 03:50:19 +0000 Manifest next update: Sat 25 Jul 2026 03:55:19 +0000 Files and hashes: 1: 644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl (hash: +RjRfQTZZVEWV/n3XmlMtywZt30a6ASElaOrtGeButk=) 2: 3131392e38382e3132382e302f31382d3138203d3e2034383337.roa (hash: s7ONdLbyx9xQsrQ4Lye/nZu3RvQlrmjfhRjgPWRb3Bs=) 3: 3132322e302e39362e302f32302d3230203d3e203234343232.roa (hash: Ja8cOr88YvnZATrU28wxxZEEKg9qD+UwbHDMP26tZ0Q=) 4: 3131392e38382e3139322e302f31382d3138203d3e2034383337.roa (hash: c5E7LGs12ir5P6gUV8HgQNTR9L1tAEDuGDXK3LZDoYQ=) 5: 3132322e302e36342e302f31382d3138203d3e203234343232.roa (hash: c9brsSufQtw0FK/fNiFh2NqrrZfDT7KUZt+wNN3tcNY=) 6: 3132322e302e3132342e302f32342d3234203d3e203234343232.roa (hash: 8PgxQbJwnWj6d/MVr+J3Rd58a7g5hDpd/1pB4+5nU5E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:79:6a:ba:6e:18:fb:ff:f9:c7:81:aa:01:e9:85:c8:7f:63:f1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6 Validity Not Before: Jul 24 03:50:19 2026 GMT Not After : Jul 25 03:55:19 2026 GMT Subject: CN=2BA5166C0FD43FB752DC7DCFF33A673BFF3BF516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:12:34:cb:49:a4:96:9d:e5:26:a4:07:67:da: a6:10:ab:46:3e:ef:15:33:fa:50:f6:2a:96:67:35: 10:8f:b3:b9:5f:a5:6a:16:b4:cd:f7:48:e2:ee:94: ac:f0:03:b8:95:c0:99:9f:60:60:6d:da:d1:58:59: 64:fc:45:d3:17:d9:ec:f2:41:a5:4d:46:55:4a:ab: 52:a4:f9:c2:d8:ea:80:97:ea:a7:34:e1:f8:ab:b7: 1b:17:84:9f:bc:c4:2b:e3:3b:95:2f:06:96:61:e3: 41:f6:79:24:38:1f:84:fc:d0:73:81:8d:67:7e:d3: 9c:d4:a1:49:26:ff:74:81:da:75:9d:df:5a:72:c8: f3:03:52:06:e0:e2:b5:72:44:25:f0:f9:f9:12:8c: e0:10:25:2a:02:7f:d3:88:9f:45:bc:07:e1:a8:e4: 1a:9d:db:d0:a9:92:f2:73:1d:a8:ca:dc:ff:f3:6f: 16:f4:49:f0:56:6e:fc:6b:91:b1:d1:29:9a:5f:cb: f9:44:be:e7:6f:4b:7a:6d:94:42:50:8c:cb:e7:8f: e6:1c:88:82:80:45:3e:73:44:14:2f:ac:61:28:b5: 10:e8:7b:e6:87:b5:50:f2:d7:e0:6c:8a:ac:34:12: 42:4b:4c:b6:58:b9:f9:b7:ee:ec:7e:fe:56:1a:ed: 17:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A5:16:6C:0F:D4:3F:B7:52:DC:7D:CF:F3:3A:67:3B:FF:3B:F5:16 X509v3 Authority Key Identifier: keyid:64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:75:2a:1c:01:f0:92:13:8d:37:24:cc:cf:dc:58:91:4d:b0: 4a:20:24:ec:64:a5:85:d4:ac:e7:af:0d:57:25:f8:83:a8:6f: 91:f6:8c:95:23:78:1a:a8:65:1f:92:a5:8a:9a:69:76:f5:51: 54:f6:27:66:b8:df:ea:ab:fe:bd:ad:c3:22:91:21:73:72:3a: 46:64:ba:2b:e0:46:2b:2c:62:72:79:06:57:57:26:da:32:48: 45:d6:66:b4:6c:55:de:cc:3c:dd:0b:cd:b6:80:f2:48:32:27: c7:de:ff:4a:45:10:73:47:bb:e2:56:67:d1:3d:3e:97:40:46: ee:0f:a4:0c:0c:d2:28:ec:17:2b:95:87:08:fa:f2:17:cf:c9: 3f:73:85:09:16:70:cd:b8:26:de:6a:aa:eb:8a:4e:fc:34:84: 9d:f2:15:4d:f9:ff:73:87:5a:a2:a2:3c:94:f0:8f:f8:8f:a3: e9:42:3e:0e:b1:65:99:96:f4:58:ff:50:a1:d2:0f:e2:2c:a7: 71:87:a1:a2:aa:d5:67:b9:c3:ff:24:20:59:3b:19:44:d9:94: 66:09:ac:53:84:7d:aa:09:3c:20:2d:f4:3d:84:ac:73:b3:b0: 22:4b:9d:97:dc:e8:75:96:28:91:a4:b8:49:19:48:c5:f1:3d: 4e:09:12:6a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURHlqum4Y+//5x4GqAemFyH9j8eAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0REVGMTFCRTQ4MTk4QkM1Q0JEQzA1RjI1RTcxMkFC NDFBRTNCNjAeFw0yNjA3MjQwMzUwMTlaFw0yNjA3MjUwMzU1MTlaMDMxMTAvBgNV BAMTKDJCQTUxNjZDMEZENDNGQjc1MkRDN0RDRkYzM0E2NzNCRkYzQkY1MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8EjTLSaSWneUmpAdn2qYQq0Y+ 7xUz+lD2KpZnNRCPs7lfpWoWtM33SOLulKzwA7iVwJmfYGBt2tFYWWT8RdMX2ezy QaVNRlVKq1Kk+cLY6oCX6qc04firtxsXhJ+8xCvjO5UvBpZh40H2eSQ4H4T80HOB jWd+05zUoUkm/3SB2nWd31pyyPMDUgbg4rVyRCXw+fkSjOAQJSoCf9OIn0W8B+Go 5Bqd29CpkvJzHajK3P/zbxb0SfBWbvxrkbHRKZpfy/lEvudvS3ptlEJQjMvnj+Yc iIKART5zRBQvrGEotRDoe+aHtVDy1+Bsiqw0EkJLTLZYufm37ux+/lYa7RdvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUK6UWbA/UP7dS3H3P8zpnO/879RYwHwYDVR0j BBgwFoAUZE3vEb5IGYvFy9wF8l5xKrQa47YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MzYwNjAzNjA1NDM0MzY5OS8wLzY0NERFRjExQkU0ODE5OEJDNUNCREMwNUYyNUU3 MTJBQjQxQUUzQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjQ0REVGMTFCRTQ4MTk4QkM1Q0JEQzA1RjI1RTcxMkFCNDFBRTNCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTM2MDYwMzYwNTQzNDM2OTkvMC82NDRERUYxMUJFNDgx OThCQzVDQkRDMDVGMjVFNzEyQUI0MUFFM0I2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHUqHAHwkhON NyTMz9xYkU2wSiAk7GSlhdSs568NVyX4g6hvkfaMlSN4GqhlH5KlipppdvVRVPYn Zrjf6qv+va3DIpEhc3I6RmS6K+BGKyxicnkGV1cm2jJIRdZmtGxV3sw83QvNtoDy SDInx97/SkUQc0e74lZn0T0+l0BG7g+kDAzSKOwXK5WHCPryF8/JP3OFCRZwzbgm 3mqq64pO/DSEnfIVTfn/c4daoqI8lPCP+I+j6UI+DrFlmZb0WP9QodIP4iyncYeh oqrVZ7nD/yQgWTsZRNmUZgmsU4R9qgk8IC30PYSsc7OwIkudl9zodZYokaS4SRlI xfE9TgkSag== -----END CERTIFICATE-----Generated at Fri Jul 24 19:40:16 2026 by rpki-client