$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft File: 644F9AE827627B0357D7972FE08D569A0CB97C31.mft (raw, json) Hash identifier: 5rGCRxWA9OjP7A1Gzzy6l+sAd5yxIlpfON3AVojEcLY= Subject key identifier: 4E:DB:A4:23:47:B2:3D:BB:D4:70:1B:72:DA:84:D8:D8:5D:5C:02:5D Authority key identifier: 64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31 Certificate issuer: /CN=644F9AE827627B0357D7972FE08D569A0CB97C31 Certificate serial: 5281B7B51F0996705F48119D0CC5386EB58BD416 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft Manifest number: 2D Signing time: Sat 13 Jun 2026 14:16:51 +0000 Manifest this update: Sat 13 Jun 2026 14:11:51 +0000 Manifest next update: Sun 14 Jun 2026 15:32:51 +0000 Files and hashes: 1: 644F9AE827627B0357D7972FE08D569A0CB97C31.crl (hash: Wti55vIgDnGW7hzJHuYbOId5knsBdtXxHyt6hpEkhN0=) 2: 323430303a616530303a313938313a3a2f34382d3438203d3e203338333637.roa (hash: QKXGlT0gawntujhSrweVLVCzEtXKFPE949OqugYMNTI=) 3: 3131392e33382e3139322e302f32302d3230203d3e203338333637.roa (hash: niXTpol86vmz6DcPKGxvQoGJAvpzazIgo8KhQW4C54k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 15:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:81:b7:b5:1f:09:96:70:5f:48:11:9d:0c:c5:38:6e:b5:8b:d4:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644F9AE827627B0357D7972FE08D569A0CB97C31 Validity Not Before: Jun 13 14:11:51 2026 GMT Not After : Jun 14 15:32:51 2026 GMT Subject: CN=4EDBA42347B23DBBD4701B72DA84D8D85D5C025D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:8a:b2:a8:3d:dc:b9:4f:ce:5d:60:fb:4b: 78:48:10:73:20:9f:5a:29:0d:7a:b8:98:10:00:c6: 2b:3d:b9:29:da:22:95:7a:0c:b7:c8:a0:b0:12:95: 64:e1:54:cb:83:ab:ed:93:2f:bf:60:66:f7:69:ea: f0:6f:67:5d:34:88:d2:a5:56:60:f6:3c:ea:3d:98: 79:46:f3:be:73:53:55:df:ea:db:e7:a4:42:ac:fd: 8a:2d:4e:65:13:da:ab:b0:7a:d8:49:65:9a:93:c6: 9b:a6:4e:a9:9d:02:de:fa:bc:0d:19:62:8d:e5:08: 9a:4b:51:6f:74:70:2e:ee:ad:8b:0b:6c:b4:70:e5: c3:3a:41:0a:fa:d8:e4:52:9d:54:ea:93:5a:d3:ea: 18:0b:8b:e0:ab:03:96:17:9e:75:c3:df:ed:cd:b2: 5a:70:23:0e:ae:e3:bf:d0:1e:ec:4c:17:52:9a:94: c7:4d:0f:a3:2b:3d:c4:1c:07:0f:56:20:f2:ae:a1: df:e7:4c:2e:f5:b3:25:34:2a:a0:f8:84:40:0e:50: 5b:19:04:f3:2f:fd:18:83:ef:89:bc:fd:06:be:08: e0:d6:06:46:ab:1f:0e:c4:05:ad:c3:77:d9:df:b7: 4d:4e:f7:34:b6:15:a0:d1:e2:b9:30:db:bc:00:76: e0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DB:A4:23:47:B2:3D:BB:D4:70:1B:72:DA:84:D8:D8:5D:5C:02:5D X509v3 Authority Key Identifier: keyid:64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:5a:54:b2:3d:9a:97:c9:96:31:c5:de:0b:03:67:1f:9c:55: 83:4d:70:23:e8:22:7d:45:d5:59:94:f7:62:9e:f6:91:30:41: d8:21:37:2d:9b:df:59:f3:f6:f4:4c:0e:43:f4:1a:cf:63:d4: 6a:e3:26:1e:81:32:ec:c6:1c:b2:9e:8d:2e:11:ff:ef:ce:b7: f8:57:ff:43:6c:5d:c3:0e:44:e2:ab:ff:d7:25:58:ff:dd:fd: 4a:fa:32:a3:b4:d6:25:95:9f:0c:e4:45:3b:79:b5:fa:b1:f8: 5f:94:44:02:8b:33:60:9a:57:0d:4f:b1:68:d6:b9:5b:28:bc: f7:a9:0b:57:c8:6b:9c:04:90:86:d0:78:86:58:42:97:9b:cb: bb:b9:0b:34:d1:b5:d6:64:ab:5d:be:fa:0c:f7:5a:28:81:65: f0:77:c5:1b:f6:d1:f0:b6:36:5b:7b:8e:54:6f:30:6b:47:7e: f5:7c:ee:db:07:5c:84:d7:aa:f2:2d:dd:64:78:89:29:dd:65: dc:e7:46:40:c6:8a:05:f8:9c:6e:17:50:72:b4:1d:b1:e9:3a: 4b:51:ab:48:38:b4:7c:1b:8d:cf:57:f2:17:4b:48:6f:ea:04: d3:d3:19:67:45:ae:03:64:91:e6:27:45:4d:23:ad:5b:94:d0: 30:01:82:57 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUoG3tR8JlnBfSBGdDMU4brWL1BYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0RjlBRTgyNzYyN0IwMzU3RDc5NzJGRTA4RDU2OUEw Q0I5N0MzMTAeFw0yNjA2MTMxNDExNTFaFw0yNjA2MTQxNTMyNTFaMDMxMTAvBgNV BAMTKDRFREJBNDIzNDdCMjNEQkJENDcwMUI3MkRBODREOEQ4NUQ1QzAyNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3q4qyqD3cuU/OXWD7S3hIEHMg n1opDXq4mBAAxis9uSnaIpV6DLfIoLASlWThVMuDq+2TL79gZvdp6vBvZ100iNKl VmD2POo9mHlG875zU1Xf6tvnpEKs/YotTmUT2quwethJZZqTxpumTqmdAt76vA0Z Yo3lCJpLUW90cC7urYsLbLRw5cM6QQr62ORSnVTqk1rT6hgLi+CrA5YXnnXD3+3N slpwIw6u47/QHuxMF1KalMdND6MrPcQcBw9WIPKuod/nTC71syU0KqD4hEAOUFsZ BPMv/RiD74m8/Qa+CODWBkarHw7EBa3Dd9nft01O9zS2FaDR4rkw27wAduAXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTtukI0eyPbvUcBty2oTY2F1cAl0wHwYDVR0j BBgwFoAUZE+a6CdiewNX15cv4I1Wmgy5fDEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg3MTA3NjIyMDA0MzI4My8wLzY0NEY5QUU4Mjc2MjdCMDM1N0Q3OTcyRkUwOEQ1 NjlBMENCOTdDMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjQ0RjlBRTgyNzYyN0IwMzU3RDc5NzJGRTA4RDU2OUEwQ0I5N0MzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NzEwNzYyMjAwNDMyODMvMC82NDRGOUFFODI3NjI3 QjAzNTdENzk3MkZFMDhENTY5QTBDQjk3QzMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFpUsj2al8mW McXeCwNnH5xVg01wI+gifUXVWZT3Yp72kTBB2CE3LZvfWfP29EwOQ/Qaz2PUauMm HoEy7MYcsp6NLhH/7863+Ff/Q2xdww5E4qv/1yVY/939Svoyo7TWJZWfDORFO3m1 +rH4X5REAoszYJpXDU+xaNa5Wyi896kLV8hrnASQhtB4hlhCl5vLu7kLNNG11mSr Xb76DPdaKIFl8HfFG/bR8LY2W3uOVG8wa0d+9Xzu2wdchNeq8i3dZHiJKd1l3OdG QMaKBficbhdQcrQdsek6S1GrSDi0fBuNz1fyF0tIb+oE09MZZ0WuA2SR5idFTSOt W5TQMAGCVw== -----END CERTIFICATE-----Generated at Sun Jun 14 07:06:04 2026 by rpki-client