$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft File: 644F9AE827627B0357D7972FE08D569A0CB97C31.mft (raw, json) Hash identifier: 4q43tfit2Yu1rcYfDXWjvnCDWzGU6U1b0sE4MCDdJMA= Subject key identifier: A8:28:4F:6A:79:07:29:6A:1E:12:70:FE:26:8F:18:15:4D:75:9C:19 Authority key identifier: 64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31 Certificate issuer: /CN=644F9AE827627B0357D7972FE08D569A0CB97C31 Certificate serial: 774A3F9FE61E5E43C631768025BBFD61462E013A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft Manifest number: 6A Signing time: Wed 29 Jul 2026 19:45:05 +0000 Manifest this update: Wed 29 Jul 2026 19:40:05 +0000 Manifest next update: Thu 30 Jul 2026 22:45:05 +0000 Files and hashes: 1: 644F9AE827627B0357D7972FE08D569A0CB97C31.crl (hash: rJwsynyaJvQY1S6YM1r2lIxorLYfLKM6Kd79vji/OaU=) 2: 323430303a616530303a313938313a3a2f34382d3438203d3e203338333637.roa (hash: QKXGlT0gawntujhSrweVLVCzEtXKFPE949OqugYMNTI=) 3: 3131392e33382e3139322e302f32302d3230203d3e203338333637.roa (hash: niXTpol86vmz6DcPKGxvQoGJAvpzazIgo8KhQW4C54k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 22:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:4a:3f:9f:e6:1e:5e:43:c6:31:76:80:25:bb:fd:61:46:2e:01:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644F9AE827627B0357D7972FE08D569A0CB97C31 Validity Not Before: Jul 29 19:40:05 2026 GMT Not After : Jul 30 22:45:05 2026 GMT Subject: CN=A8284F6A7907296A1E1270FE268F18154D759C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:86:87:00:87:69:ec:8e:38:42:6c:a0:be:69: cc:17:af:23:bd:3e:24:12:6c:68:57:26:a8:f4:23: 00:c3:a3:7b:cc:56:1f:cb:e3:8c:12:c3:f9:3c:ce: d6:c8:ad:14:3f:df:0e:82:db:52:e2:d1:af:08:19: de:b9:3d:da:7b:91:9b:13:27:cb:67:2a:79:56:c0: b7:5f:b6:c1:fb:d8:01:b7:01:ae:30:5d:c3:18:cb: e0:2c:76:7f:94:fc:3f:04:6f:b6:8a:24:5b:23:ad: f6:e6:3f:9e:4c:85:df:c9:51:d5:64:04:98:65:c6: 18:37:21:4c:68:e5:bc:d0:a3:97:9b:09:13:23:b1: ae:71:c9:94:2d:e6:2d:59:6b:9e:ae:66:91:29:03: 02:51:d8:87:d2:34:ab:a2:42:3d:e0:b8:92:90:91: f5:b9:e2:4b:08:92:ed:42:7c:7b:72:87:50:61:b1: 9c:a4:4b:64:59:b7:b6:5f:66:fe:67:46:6b:0a:13: 9d:e3:e1:10:30:11:82:2f:3a:e4:9b:e4:67:6a:81: 85:15:c4:e3:a5:eb:0d:9f:e1:3e:2a:eb:cd:ec:ce: 4b:b5:e0:d2:2b:e9:89:ae:87:7a:4c:9d:ed:d2:30: cb:b7:c7:c7:e3:66:d3:fb:7d:fa:8d:56:af:12:ea: 82:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:28:4F:6A:79:07:29:6A:1E:12:70:FE:26:8F:18:15:4D:75:9C:19 X509v3 Authority Key Identifier: keyid:64:4F:9A:E8:27:62:7B:03:57:D7:97:2F:E0:8D:56:9A:0C:B9:7C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644F9AE827627B0357D7972FE08D569A0CB97C31.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106871076220043283/0/644F9AE827627B0357D7972FE08D569A0CB97C31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:72:a2:e6:83:d6:88:c8:53:0e:76:13:29:e2:43:b2:85:d0: 1b:3c:b5:cf:57:09:35:bb:51:f8:e3:d9:41:76:7f:f1:cd:b2: ae:5f:1b:66:3b:45:83:0f:b7:57:59:d0:8a:69:17:ab:c6:46: 8c:cd:8a:f7:28:98:4b:26:35:56:86:26:7b:02:60:68:59:af: db:ca:54:52:05:6d:4e:b0:81:c2:27:38:a5:96:06:c6:fb:e5: 10:a6:e3:34:cf:5f:cf:9c:c0:62:c7:60:31:9f:f3:fd:7d:3e: 3e:e5:99:d9:d9:a8:16:ad:fc:25:5e:ab:b0:38:91:f4:30:35: d9:a3:4c:43:b3:9a:11:55:45:74:4e:3c:da:da:f4:3a:01:2a: 8c:d2:d4:6a:33:a9:47:77:21:49:52:ed:57:f8:95:58:c3:8f: 86:0a:f6:2d:2e:b2:2c:c5:a8:c8:53:72:fa:61:63:b8:aa:2b: 26:f1:62:9a:89:09:ec:24:a4:32:72:14:72:23:d4:31:7e:37: a6:4e:9d:32:7c:43:36:9f:4e:db:42:b3:5f:c8:3b:26:b5:55: 5b:e8:06:a6:5b:24:f1:0f:81:a5:98:cd:85:d9:99:1d:db:9d: be:dc:43:9a:6c:c0:9f:49:86:7c:8b:53:e6:c5:42:0e:00:64: 43:8a:37:cd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUd0o/n+YeXkPGMXaAJbv9YUYuATowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0RjlBRTgyNzYyN0IwMzU3RDc5NzJGRTA4RDU2OUEw Q0I5N0MzMTAeFw0yNjA3MjkxOTQwMDVaFw0yNjA3MzAyMjQ1MDVaMDMxMTAvBgNV BAMTKEE4Mjg0RjZBNzkwNzI5NkExRTEyNzBGRTI2OEYxODE1NEQ3NTlDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqhocAh2nsjjhCbKC+acwXryO9 PiQSbGhXJqj0IwDDo3vMVh/L44wSw/k8ztbIrRQ/3w6C21Li0a8IGd65Pdp7kZsT J8tnKnlWwLdftsH72AG3Aa4wXcMYy+Asdn+U/D8Eb7aKJFsjrfbmP55Mhd/JUdVk BJhlxhg3IUxo5bzQo5ebCRMjsa5xyZQt5i1Za56uZpEpAwJR2IfSNKuiQj3guJKQ kfW54ksIku1CfHtyh1BhsZykS2RZt7ZfZv5nRmsKE53j4RAwEYIvOuSb5GdqgYUV xOOl6w2f4T4q683szku14NIr6Ymuh3pMne3SMMu3x8fjZtP7ffqNVq8S6oJtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqChPankHKWoeEnD+Jo8YFU11nBkwHwYDVR0j BBgwFoAUZE+a6CdiewNX15cv4I1Wmgy5fDEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg3MTA3NjIyMDA0MzI4My8wLzY0NEY5QUU4Mjc2MjdCMDM1N0Q3OTcyRkUwOEQ1 NjlBMENCOTdDMzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjQ0RjlBRTgyNzYyN0IwMzU3RDc5NzJGRTA4RDU2OUEwQ0I5N0MzMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDY4NzEwNzYyMjAwNDMyODMvMC82NDRGOUFFODI3NjI3 QjAzNTdENzk3MkZFMDhENTY5QTBDQjk3QzMxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXKi5oPWiMhT DnYTKeJDsoXQGzy1z1cJNbtR+OPZQXZ/8c2yrl8bZjtFgw+3V1nQimkXq8ZGjM2K 9yiYSyY1VoYmewJgaFmv28pUUgVtTrCBwic4pZYGxvvlEKbjNM9fz5zAYsdgMZ/z /X0+PuWZ2dmoFq38JV6rsDiR9DA12aNMQ7OaEVVFdE482tr0OgEqjNLUajOpR3ch SVLtV/iVWMOPhgr2LS6yLMWoyFNy+mFjuKorJvFimokJ7CSkMnIUciPUMX43pk6d MnxDNp9O20KzX8g7JrVVW+gGplsk8Q+BpZjNhdmZHdudvtxDmmzAn0mGfItT5sVC DgBkQ4o3zQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:07:47 2026 by rpki-client