$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft File: 64CE724CC33744853B20D6E7922A2F808B8C300C.mft (raw, json) Hash identifier: JqHLZAImYVLgYCHRAnPpBuV4jPM7n6NlXtvGOSrM3pI= Subject key identifier: 06:BF:4F:A5:9D:E7:F0:68:8C:76:BD:C9:31:0F:5B:C3:5D:09:29:D3 Authority key identifier: 64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C Certificate issuer: /CN=64CE724CC33744853B20D6E7922A2F808B8C300C Certificate serial: 26012C6D6747BE0E33E40FB73E200202F3FE3CB5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft Manifest number: CB Signing time: Sun 18 Oct 2026 22:40:18 +0000 Manifest this update: Sun 18 Oct 2026 22:35:18 +0000 Manifest next update: Thu 22 Oct 2026 00:55:18 +0000 Files and hashes: 1: 64CE724CC33744853B20D6E7922A2F808B8C300C.crl (hash: YWMXa/5852QkoKBcqihWFS4MB02Y9CK6a5uwvCkeWSQ=) 2: 3130332e3234352e3132382e302f32322d3232203d3e203535393832.roa (hash: Md4+IrPlN/VFjDo9GOcLPihi6j6Vf2NSeSyN1+Jh1x8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.crl rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 00:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:01:2c:6d:67:47:be:0e:33:e4:0f:b7:3e:20:02:02:f3:fe:3c:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64CE724CC33744853B20D6E7922A2F808B8C300C Validity Not Before: Oct 18 22:35:18 2026 GMT Not After : Oct 22 00:55:18 2026 GMT Subject: CN=06BF4FA59DE7F0688C76BDC9310F5BC35D0929D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3e:bb:09:b9:e6:51:a7:0b:1d:8b:d1:e9:8b: d2:a2:3a:bc:69:90:4e:8b:6a:71:b7:30:a1:cd:9a: 84:4f:d1:f2:70:a9:c1:17:05:e0:7e:f7:aa:56:03: 5b:9f:6d:18:b6:72:4a:48:e4:b8:9c:0e:53:fb:49: 91:33:c3:76:f6:a9:b2:e1:f7:87:c5:f6:1c:41:58: 6b:4e:b8:d8:67:ba:a4:d8:7c:c4:33:72:7d:0d:fa: e5:d6:44:67:f2:4a:04:dd:b6:78:57:10:02:3a:8d: 40:58:7f:c4:cd:78:bb:5b:7a:73:a1:fa:d7:93:c0: 7a:7c:a0:57:62:2c:aa:e1:16:f9:a7:15:eb:bd:08: bb:f4:90:d8:80:f8:70:39:89:1e:c5:22:e9:65:16: 92:2b:bd:ea:96:6f:bc:d1:71:f7:1e:1b:80:46:98: 1b:b2:4d:0e:aa:4a:68:4f:77:a1:f9:02:37:1f:95: 38:50:19:81:4a:0f:a1:64:0c:87:84:af:40:7e:3f: 5f:83:86:e9:d6:b2:42:eb:00:67:c1:c1:d1:0a:a0: 03:a4:6b:8c:5b:ad:ff:e5:f8:ec:39:c0:30:85:5a: 7e:4c:0d:7f:fe:0c:fe:14:d5:4d:da:5f:db:45:3b: d7:fc:60:52:0a:b1:8f:da:32:a1:ae:b4:c4:78:74: 46:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BF:4F:A5:9D:E7:F0:68:8C:76:BD:C9:31:0F:5B:C3:5D:09:29:D3 X509v3 Authority Key Identifier: keyid:64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:44:88:95:03:13:57:c2:b4:2e:ba:3f:df:a5:82:5e:3a:3a: 5e:4a:19:6a:91:94:e6:4e:d0:ac:8e:66:40:27:0d:5c:a0:a5: 77:8d:8c:d8:d5:42:64:c5:3c:92:31:3d:bb:d7:41:13:ff:38: a7:e4:c0:88:4a:e9:d3:e2:d9:8c:ce:e9:45:60:ab:a0:e9:8c: 1b:a4:fc:51:a2:fb:84:84:d9:3b:c4:99:75:2a:74:9b:92:4d: 7f:89:f9:48:d9:1a:c0:fc:eb:6e:38:e7:f9:89:67:e9:4b:e6: 5d:0f:3e:4f:4f:c9:8f:26:cb:57:0f:d3:e5:2f:53:ff:ec:db: 63:ac:60:a6:cd:7e:ab:fa:8f:0e:a1:7b:22:bd:55:c1:39:f7: 3a:b1:a5:7d:65:1f:4d:22:ac:4a:a9:ab:90:26:5e:20:96:4b: 57:13:e6:92:55:36:d6:5c:6e:92:45:54:95:d5:7d:14:57:d0: 83:d4:79:5e:e7:62:de:cb:ad:ab:b0:b8:40:85:87:a2:73:3f: c3:ed:09:39:d1:d3:dc:6d:f6:91:e3:90:0f:1e:8e:7c:20:9d: 9b:14:2a:44:1a:2b:7c:c1:05:79:e8:d4:da:4d:dd:f6:69:bd: 50:e5:a8:d2:2e:b7:7d:e4:02:10:8e:39:67:80:b0:bf:27:0e: 66:ab:ad:0f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJgEsbWdHvg4z5A+3PiACAvP+PLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRDRTcyNENDMzM3NDQ4NTNCMjBENkU3OTIyQTJGODA4 QjhDMzAwQzAeFw0yNjEwMTgyMjM1MThaFw0yNjEwMjIwMDU1MThaMDMxMTAvBgNV BAMTKDA2QkY0RkE1OURFN0YwNjg4Qzc2QkRDOTMxMEY1QkMzNUQwOTI5RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnPrsJueZRpwsdi9Hpi9KiOrxp kE6LanG3MKHNmoRP0fJwqcEXBeB+96pWA1ufbRi2ckpI5LicDlP7SZEzw3b2qbLh 94fF9hxBWGtOuNhnuqTYfMQzcn0N+uXWRGfySgTdtnhXEAI6jUBYf8TNeLtbenOh +teTwHp8oFdiLKrhFvmnFeu9CLv0kNiA+HA5iR7FIullFpIrveqWb7zRcfceG4BG mBuyTQ6qSmhPd6H5AjcflThQGYFKD6FkDIeEr0B+P1+DhunWskLrAGfBwdEKoAOk a4xbrf/l+Ow5wDCFWn5MDX/+DP4U1U3aX9tFO9f8YFIKsY/aMqGutMR4dEZpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBr9PpZ3n8GiMdr3JMQ9bw10JKdMwHwYDVR0j BBgwFoAUZM5yTMM3RIU7INbnkiovgIuMMAwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk4OTExNDA2MzkxMjk2My8wLzY0Q0U3MjRDQzMzNzQ0ODUzQjIwRDZFNzkyMkEy RjgwOEI4QzMwMEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjRDRTcyNENDMzM3NDQ4NTNCMjBENkU3OTIyQTJGODA4QjhDMzAwQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5ODkxMTQwNjM5MTI5NjMvMC82NENFNzI0Q0MzMzc0 NDg1M0IyMEQ2RTc5MjJBMkY4MDhCOEMzMDBDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo0SIlQMTV8K0 Lro/36WCXjo6XkoZapGU5k7QrI5mQCcNXKCld42M2NVCZMU8kjE9u9dBE/84p+TA iErp0+LZjM7pRWCroOmMG6T8UaL7hITZO8SZdSp0m5JNf4n5SNkawPzrbjjn+Yln 6UvmXQ8+T0/JjybLVw/T5S9T/+zbY6xgps1+q/qPDqF7Ir1VwTn3OrGlfWUfTSKs SqmrkCZeIJZLVxPmklU21lxukkVUldV9FFfQg9R5Xudi3sutq7C4QIWHonM/w+0J OdHT3G32keOQDx6OfCCdmxQqRBorfMEFeejU2k3d9mm9UOWo0i63feQCEI45Z4Cw vycOZqutDw== -----END CERTIFICATE-----Generated at Mon Oct 19 22:18:27 2026 by rpki-client