$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft File: 644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft (raw, json) Hash identifier: MkmQj5tDlHlidvlyfs3y22NlTfWfkqm6Qqq48UQYE/s= Subject key identifier: B1:C1:48:73:25:8D:F6:46:B1:1C:EE:C8:68:37:BC:93:86:70:36:21 Authority key identifier: 64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6 Certificate issuer: /CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6 Certificate serial: 5A0CC903136C74A834D572E30BB3AF56D86457E7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft Manifest number: 17 Signing time: Sat 13 Jun 2026 22:22:20 +0000 Manifest this update: Sat 13 Jun 2026 22:17:20 +0000 Manifest next update: Sun 14 Jun 2026 22:46:20 +0000 Files and hashes: 1: 3132322e302e36342e302f31382d3138203d3e203234343232.roa (hash: c9brsSufQtw0FK/fNiFh2NqrrZfDT7KUZt+wNN3tcNY=) 2: 3131392e38382e3132382e302f31382d3138203d3e2034383337.roa (hash: s7ONdLbyx9xQsrQ4Lye/nZu3RvQlrmjfhRjgPWRb3Bs=) 3: 3132322e302e39362e302f32302d3230203d3e203234343232.roa (hash: Ja8cOr88YvnZATrU28wxxZEEKg9qD+UwbHDMP26tZ0Q=) 4: 644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl (hash: GMxEjvdX5dmJlursjyH8XgiWYKB0Ey2lwAHvYq0wnAw=) 5: 3131392e38382e3139322e302f31382d3138203d3e2034383337.roa (hash: c5E7LGs12ir5P6gUV8HgQNTR9L1tAEDuGDXK3LZDoYQ=) 6: 3132322e302e3132342e302f32342d3234203d3e203234343232.roa (hash: 8PgxQbJwnWj6d/MVr+J3Rd58a7g5hDpd/1pB4+5nU5E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:0c:c9:03:13:6c:74:a8:34:d5:72:e3:0b:b3:af:56:d8:64:57:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6 Validity Not Before: Jun 13 22:17:20 2026 GMT Not After : Jun 14 22:46:20 2026 GMT Subject: CN=B1C14873258DF646B11CEEC86837BC9386703621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:89:6f:8c:f2:d6:8d:84:84:fc:d5:a7:4a:6d: 71:1d:c6:18:44:59:e2:5f:60:db:47:07:e7:fc:22: 8b:68:f5:0e:26:1a:df:70:b3:dd:f4:24:16:0d:56: e3:c0:b5:d7:b7:93:98:20:24:7c:05:14:aa:c8:89: f6:6f:b1:cd:6a:49:9a:a2:7a:73:30:9a:f2:12:39: 21:e2:fd:ed:10:40:18:e1:bc:63:8d:0b:d4:d3:6e: f2:a2:a5:74:7e:28:20:e0:b7:97:90:26:2a:14:55: 4e:54:c0:7c:e6:84:28:e0:87:14:8b:19:16:1b:12: 11:5f:f4:5a:64:12:ab:42:fe:ed:0d:bd:02:45:89: d0:61:78:68:45:8d:0c:28:11:84:ae:8d:1b:43:89: da:40:9c:6f:46:14:f9:95:81:4e:bd:f5:99:63:28: e9:ef:66:0d:9e:50:8f:e2:43:d1:f9:fe:64:bc:f8: 48:82:fa:90:22:c8:83:c7:78:c6:ed:12:9c:ef:f8: 5e:1c:2c:1c:fc:48:cd:72:95:4d:c1:d0:0d:68:f5: 86:dc:96:98:a3:a1:54:ea:dd:6e:43:c4:fd:bf:bc: f6:d4:2c:25:62:cc:b3:5a:18:3d:c4:0b:0d:7c:d7: 3a:d4:7c:1c:06:61:79:50:36:c6:f1:82:f4:bf:81: d0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C1:48:73:25:8D:F6:46:B1:1C:EE:C8:68:37:BC:93:86:70:36:21 X509v3 Authority Key Identifier: keyid:64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:62:bb:50:df:12:6d:f0:14:ad:af:64:5e:47:24:6e:ec:ee: 3d:7e:56:29:ed:59:7b:ca:1c:b4:60:b7:b8:98:dd:44:8d:53: b8:69:a1:2d:71:70:9c:11:a2:7c:b3:ab:ad:9f:8f:41:14:b8: 36:d4:af:1b:98:ce:ff:bc:c9:f1:b2:58:6e:0d:14:91:5c:0a: b1:92:b5:01:8d:50:38:f5:6d:0e:b5:4a:0b:cf:1d:c1:d8:7e: 5a:dd:f8:78:85:bf:68:33:72:3b:63:67:f2:34:9d:46:9f:3d: 04:7b:a8:80:ef:59:e2:31:b6:f3:df:f8:76:89:ac:d1:43:58: da:6c:bf:d3:aa:ef:1f:8a:dc:61:2f:35:83:d0:30:d9:2d:8b: 4b:6e:8a:c5:96:78:2d:60:4c:70:f1:f4:7f:11:3b:c3:97:5f: 3d:94:8a:23:19:15:b9:81:90:1e:e8:3a:c2:d8:e1:82:84:8d: 23:ec:13:7b:35:5c:38:16:e7:11:f9:92:20:56:55:c5:4d:4b: b5:f2:9e:2f:c6:04:ad:09:6c:30:2a:69:bd:5e:3c:eb:a8:59: 74:1f:89:c2:5f:8e:03:43:bf:2e:07:20:87:f1:85:9e:e6:1d: 82:34:9e:a2:27:43:ca:7d:e5:be:5b:1d:18:89:d0:75:a1:98: 8b:da:62:6b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWgzJAxNsdKg01XLjC7OvVthkV+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0REVGMTFCRTQ4MTk4QkM1Q0JEQzA1RjI1RTcxMkFC NDFBRTNCNjAeFw0yNjA2MTMyMjE3MjBaFw0yNjA2MTQyMjQ2MjBaMDMxMTAvBgNV BAMTKEIxQzE0ODczMjU4REY2NDZCMTFDRUVDODY4MzdCQzkzODY3MDM2MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjiW+M8taNhIT81adKbXEdxhhE WeJfYNtHB+f8Ioto9Q4mGt9ws930JBYNVuPAtde3k5ggJHwFFKrIifZvsc1qSZqi enMwmvISOSHi/e0QQBjhvGONC9TTbvKipXR+KCDgt5eQJioUVU5UwHzmhCjghxSL GRYbEhFf9FpkEqtC/u0NvQJFidBheGhFjQwoEYSujRtDidpAnG9GFPmVgU699Zlj KOnvZg2eUI/iQ9H5/mS8+EiC+pAiyIPHeMbtEpzv+F4cLBz8SM1ylU3B0A1o9Ybc lpijoVTq3W5DxP2/vPbULCVizLNaGD3ECw181zrUfBwGYXlQNsbxgvS/gdBnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUscFIcyWN9kaxHO7IaDe8k4ZwNiEwHwYDVR0j BBgwFoAUZE3vEb5IGYvFy9wF8l5xKrQa47YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MzYwNjAzNjA1NDM0MzY5OS8wLzY0NERFRjExQkU0ODE5OEJDNUNCREMwNUYyNUU3 MTJBQjQxQUUzQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjQ0REVGMTFCRTQ4MTk4QkM1Q0JEQzA1RjI1RTcxMkFCNDFBRTNCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTM2MDYwMzYwNTQzNDM2OTkvMC82NDRERUYxMUJFNDgx OThCQzVDQkRDMDVGMjVFNzEyQUI0MUFFM0I2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGK7UN8SbfAU ra9kXkckbuzuPX5WKe1Ze8octGC3uJjdRI1TuGmhLXFwnBGifLOrrZ+PQRS4NtSv G5jO/7zJ8bJYbg0UkVwKsZK1AY1QOPVtDrVKC88dwdh+Wt34eIW/aDNyO2Nn8jSd Rp89BHuogO9Z4jG289/4doms0UNY2my/06rvH4rcYS81g9Aw2S2LS26KxZZ4LWBM cPH0fxE7w5dfPZSKIxkVuYGQHug6wtjhgoSNI+wTezVcOBbnEfmSIFZVxU1LtfKe L8YErQlsMCppvV4866hZdB+Jwl+OA0O/Lgcgh/GFnuYdgjSeoidDyn3lvlsdGInQ daGYi9piaw== -----END CERTIFICATE-----Generated at Sun Jun 14 07:06:04 2026 by rpki-client