$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft File: 644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft (raw, json) Hash identifier: 6ypIcLpPVKQy6PiJ1PLFtSthWmlqJfQRv00oTD1pv6k= Subject key identifier: 18:DC:E4:4F:00:04:40:08:1B:2B:BA:43:CA:E7:76:E4:6D:31:F2:3D Authority key identifier: 64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6 Certificate issuer: /CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6 Certificate serial: 6287AB5F6476DA5BC39C2A6995F2B140D6791A05 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft Manifest number: 54 Signing time: Wed 29 Jul 2026 04:53:28 +0000 Manifest this update: Wed 29 Jul 2026 04:48:28 +0000 Manifest next update: Thu 30 Jul 2026 05:57:28 +0000 Files and hashes: 1: 644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl (hash: sNUb2uMd/BA+kZ6N830i5RhuP3x866ofeslyqUEHjUU=) 2: 3131392e38382e3132382e302f31382d3138203d3e2034383337.roa (hash: s7ONdLbyx9xQsrQ4Lye/nZu3RvQlrmjfhRjgPWRb3Bs=) 3: 3132322e302e39362e302f32302d3230203d3e203234343232.roa (hash: Ja8cOr88YvnZATrU28wxxZEEKg9qD+UwbHDMP26tZ0Q=) 4: 3131392e38382e3139322e302f31382d3138203d3e2034383337.roa (hash: c5E7LGs12ir5P6gUV8HgQNTR9L1tAEDuGDXK3LZDoYQ=) 5: 3132322e302e36342e302f31382d3138203d3e203234343232.roa (hash: c9brsSufQtw0FK/fNiFh2NqrrZfDT7KUZt+wNN3tcNY=) 6: 3132322e302e3132342e302f32342d3234203d3e203234343232.roa (hash: 8PgxQbJwnWj6d/MVr+J3Rd58a7g5hDpd/1pB4+5nU5E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:87:ab:5f:64:76:da:5b:c3:9c:2a:69:95:f2:b1:40:d6:79:1a:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6 Validity Not Before: Jul 29 04:48:28 2026 GMT Not After : Jul 30 05:57:28 2026 GMT Subject: CN=18DCE44F000440081B2BBA43CAE776E46D31F23D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a9:36:b1:ce:bb:69:18:95:a9:96:cd:15:13: 57:db:23:fa:fc:af:61:d2:4f:2f:75:8b:4c:a7:e3: 3e:03:80:16:cc:4f:34:31:b6:3d:f3:20:42:32:61: a0:9d:f3:f8:df:6b:9f:23:26:10:c1:3b:3b:8b:84: 03:77:e8:58:bd:b9:9f:be:a1:fa:98:9a:23:2d:9a: 2f:f5:49:47:6c:61:d9:c8:03:ba:cb:42:e9:7f:0a: 17:00:43:1c:23:89:bf:b8:9d:26:0a:ae:92:f2:ca: 67:83:e9:55:a7:96:66:40:4d:95:8b:c3:8a:f6:34: b0:9c:0e:b7:af:87:f6:c7:ca:3b:99:a3:0b:dd:5a: e4:85:26:83:71:b6:8a:8a:94:8d:87:eb:25:48:ee: 9f:6d:8c:ba:e3:6f:b9:9d:ec:f4:5a:e1:d8:bd:ef: 08:ff:b2:fe:a1:5e:b6:33:3b:c1:36:66:a4:d5:fa: 94:73:fb:87:85:e7:50:ae:a0:f0:0f:aa:e0:9f:10: 05:10:4e:48:4f:0a:71:bb:37:8b:db:b0:e7:a5:8f: da:5e:df:1c:af:0b:8e:7b:d2:77:e7:c2:76:4b:7b: 1a:be:dd:81:8a:dc:39:c0:cd:e1:8e:18:41:09:3a: ba:1c:de:dd:3f:ba:da:f9:e0:33:de:b1:21:60:3f: 4d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:DC:E4:4F:00:04:40:08:1B:2B:BA:43:CA:E7:76:E4:6D:31:F2:3D X509v3 Authority Key Identifier: keyid:64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c4:9c:d0:e7:2b:f0:60:8d:97:fd:a6:1e:0f:43:91:13:9a: a1:7b:3f:db:92:42:87:64:a9:66:17:a1:ec:d4:2b:d4:ac:c7: 45:85:cc:07:8c:0b:fc:d6:dd:de:8d:71:32:6f:cc:bb:1d:f2: dd:8b:e4:c2:f1:ff:2b:09:59:cd:12:2f:b9:5e:c6:e9:0c:c2: cb:f1:47:20:1d:92:f6:39:e1:e4:3d:3f:67:5f:e5:de:27:3a: a5:8c:9e:6e:3e:6a:f8:48:46:73:8a:0e:67:3c:58:f9:d8:49: 70:e6:19:80:99:cb:16:cc:69:0e:34:47:8d:57:58:47:d9:fc: f7:1c:5f:9c:07:77:40:5c:a9:c1:f1:d0:22:43:5b:8c:77:fb: b6:ae:32:93:e7:d6:88:5b:17:1f:fd:2b:68:f4:07:92:f8:39: cd:a1:e1:6b:2c:2e:50:4e:46:a3:de:e4:9e:45:3d:4f:bd:c9: 48:13:cf:c3:d4:e2:87:cc:38:80:6e:ee:72:7e:38:2b:3f:1f: 5d:1e:cb:ff:c8:a3:6b:15:fe:e1:65:05:91:fe:b4:c5:99:66: 84:05:99:58:f3:bb:bb:1b:14:5a:da:e0:bb:f2:d0:ea:97:78: 42:88:7e:24:3a:85:90:f5:ec:4b:c1:d6:c6:eb:ce:0c:31:2d: 66:b7:f0:01 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYoerX2R22lvDnCpplfKxQNZ5GgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0REVGMTFCRTQ4MTk4QkM1Q0JEQzA1RjI1RTcxMkFC NDFBRTNCNjAeFw0yNjA3MjkwNDQ4MjhaFw0yNjA3MzAwNTU3MjhaMDMxMTAvBgNV BAMTKDE4RENFNDRGMDAwNDQwMDgxQjJCQkE0M0NBRTc3NkU0NkQzMUYyM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBqTaxzrtpGJWpls0VE1fbI/r8 r2HSTy91i0yn4z4DgBbMTzQxtj3zIEIyYaCd8/jfa58jJhDBOzuLhAN36Fi9uZ++ ofqYmiMtmi/1SUdsYdnIA7rLQul/ChcAQxwjib+4nSYKrpLyymeD6VWnlmZATZWL w4r2NLCcDrevh/bHyjuZowvdWuSFJoNxtoqKlI2H6yVI7p9tjLrjb7md7PRa4di9 7wj/sv6hXrYzO8E2ZqTV+pRz+4eF51CuoPAPquCfEAUQTkhPCnG7N4vbsOelj9pe 3xyvC4570nfnwnZLexq+3YGK3DnAzeGOGEEJOroc3t0/utr54DPesSFgP003AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGNzkTwAEQAgbK7pDyud25G0x8j0wHwYDVR0j BBgwFoAUZE3vEb5IGYvFy9wF8l5xKrQa47YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MzYwNjAzNjA1NDM0MzY5OS8wLzY0NERFRjExQkU0ODE5OEJDNUNCREMwNUYyNUU3 MTJBQjQxQUUzQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjQ0REVGMTFCRTQ4MTk4QkM1Q0JEQzA1RjI1RTcxMkFCNDFBRTNCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTM2MDYwMzYwNTQzNDM2OTkvMC82NDRERUYxMUJFNDgx OThCQzVDQkRDMDVGMjVFNzEyQUI0MUFFM0I2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsSc0Ocr8GCN l/2mHg9DkROaoXs/25JCh2SpZheh7NQr1KzHRYXMB4wL/Nbd3o1xMm/Mux3y3Yvk wvH/KwlZzRIvuV7G6QzCy/FHIB2S9jnh5D0/Z1/l3ic6pYyebj5q+EhGc4oOZzxY +dhJcOYZgJnLFsxpDjRHjVdYR9n89xxfnAd3QFypwfHQIkNbjHf7tq4yk+fWiFsX H/0raPQHkvg5zaHhaywuUE5Go97knkU9T73JSBPPw9Tih8w4gG7ucn44Kz8fXR7L /8ijaxX+4WUFkf60xZlmhAWZWPO7uxsUWtrgu/LQ6pd4Qoh+JDqFkPXsS8HWxuvO DDEtZrfwAQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:07:34 2026 by rpki-client