$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft File: 634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft (raw, json) Hash identifier: KpU8Km7njLGN46fCOT6bUKCTw167LyQW7EHFvHbVHE8= Subject key identifier: 65:ED:95:70:21:61:A3:C2:8C:35:E0:AA:D6:71:95:CD:A5:16:37:1B Authority key identifier: 63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63 Certificate issuer: /CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63 Certificate serial: 6625CE1DB2ECA35074B4A3E33F67135A57899AC7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft Manifest number: BC Signing time: Thu 10 Sep 2026 06:35:54 +0000 Manifest this update: Thu 10 Sep 2026 06:30:54 +0000 Manifest next update: Sun 13 Sep 2026 12:18:54 +0000 Files and hashes: 1: 3130312e3235312e3134342e302f32312d3231203d3e2034383337.roa (hash: /ox/S6ojTw7NTUHT+hZP9w5PkDnUqJXtTCGiGwolLCk=) 2: 3132312e35322e3232342e302f31392d3139203d3e2034383337.roa (hash: Du8DABN3Kd+HaS5bybrAvOEm0gL7RUVR+bQMHp9DzjM=) 3: 634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl (hash: kzV8FznoVzZ6svC/+BxAKkFH8xcwyBDpR5gpT6VGFn0=) 4: 3130312e3235312e3134342e302f32302d3230203d3e2034383337.roa (hash: xoRs3FL3HieKEqrqewNhwvKSZqMvWnRJadRDQ7hi73M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:25:ce:1d:b2:ec:a3:50:74:b4:a3:e3:3f:67:13:5a:57:89:9a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=634581F1B95FBA204B1C8D0271BB81C7A7A08F63 Validity Not Before: Sep 10 06:30:54 2026 GMT Not After : Sep 13 12:18:54 2026 GMT Subject: CN=65ED95702161A3C28C35E0AAD67195CDA516371B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d3:42:67:1b:c9:1b:70:e8:12:6e:c5:2e:ac: 99:6c:29:8d:75:db:af:f1:03:ea:3e:16:12:5d:e6: aa:d2:54:bd:30:d7:e5:9f:2d:08:a1:c0:43:27:4b: 5c:b2:fd:5d:3d:a9:c9:04:9d:00:2a:b8:f8:44:3f: 6a:a6:79:31:6b:1f:75:66:4f:00:9b:13:db:d9:38: 2c:ea:05:02:69:c7:da:f8:65:3d:b8:75:86:3e:69: bb:ce:ba:d6:6b:4a:b4:a0:d2:64:04:e0:00:41:82: 46:f7:d9:64:64:1d:f6:47:b6:ac:1f:77:1c:46:5d: 6e:e4:38:5b:84:f7:42:2d:a9:35:a6:7a:30:27:9e: 23:2b:e6:f6:44:39:9c:46:f5:f4:b7:aa:fa:89:0f: 02:ea:cc:bc:f2:11:b2:8c:29:65:42:50:6a:5e:14: ac:53:0f:0f:ac:f0:df:09:23:27:7b:0d:85:66:6b: 8a:9c:1d:b8:cb:5b:cb:54:13:e6:e1:3b:8a:bf:2b: 99:c0:b2:b7:8e:3c:f5:39:aa:b0:b0:40:74:93:80: 36:18:49:7f:03:be:5a:60:5c:30:9f:ca:b4:8b:b7: 67:97:f9:e7:c9:c5:8b:c2:ce:07:bf:fc:1e:e6:10: 32:85:0f:69:23:ea:26:ec:15:1c:2c:cc:95:9e:43: 57:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:ED:95:70:21:61:A3:C2:8C:35:E0:AA:D6:71:95:CD:A5:16:37:1B X509v3 Authority Key Identifier: keyid:63:45:81:F1:B9:5F:BA:20:4B:1C:8D:02:71:BB:81:C7:A7:A0:8F:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632003199041538/0/634581F1B95FBA204B1C8D0271BB81C7A7A08F63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:e3:77:13:6c:38:86:a7:9f:d6:62:a9:8d:59:6c:99:aa:e9: 9f:81:0e:8f:cf:89:87:0d:b3:4b:e4:f7:77:61:d6:27:ef:34: 72:af:6d:79:d1:ee:bc:df:ad:60:a7:92:c9:2c:97:7e:99:9c: 8d:69:b7:cd:c7:8d:6a:76:33:5d:6f:dd:53:cc:04:e6:bb:53: fc:2b:e8:42:e4:8f:31:15:34:69:6d:96:14:35:be:61:d8:b4: d6:bd:de:4b:6f:b6:7c:73:65:00:fb:49:de:73:f0:8f:89:a3: 80:f5:a2:35:f3:8d:cf:d7:74:c8:9d:c8:fd:85:d4:81:46:4e: b1:bd:3d:44:c8:f5:64:80:3c:d2:5b:44:8b:b0:ca:de:b9:6c: 08:6c:95:76:d8:6e:6a:bc:39:c5:69:05:ec:2b:1d:e0:a9:56: 09:e4:be:5c:56:1e:7d:55:68:3f:7d:dd:6c:9c:ab:0c:fd:c5: d5:95:9e:18:01:39:4e:a9:3e:df:cc:52:2d:e1:a4:dc:30:4f: 55:da:f8:b6:55:17:30:2d:95:c7:50:32:9a:01:76:83:1b:e4: 6c:e3:75:06:b6:af:b8:0b:b6:fe:70:af:19:53:73:6f:2b:a0: 73:6a:4a:4c:11:b0:9a:ac:05:3d:d5:1f:1c:a4:62:28:45:7e: 0e:bf:30:16 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZiXOHbLso1B0tKPjP2cTWleJmscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjM0NTgxRjFCOTVGQkEyMDRCMUM4RDAyNzFCQjgxQzdB N0EwOEY2MzAeFw0yNjA5MTAwNjMwNTRaFw0yNjA5MTMxMjE4NTRaMDMxMTAvBgNV BAMTKDY1RUQ5NTcwMjE2MUEzQzI4QzM1RTBBQUQ2NzE5NUNEQTUxNjM3MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ00JnG8kbcOgSbsUurJlsKY11 26/xA+o+FhJd5qrSVL0w1+WfLQihwEMnS1yy/V09qckEnQAquPhEP2qmeTFrH3Vm TwCbE9vZOCzqBQJpx9r4ZT24dYY+abvOutZrSrSg0mQE4ABBgkb32WRkHfZHtqwf dxxGXW7kOFuE90ItqTWmejAnniMr5vZEOZxG9fS3qvqJDwLqzLzyEbKMKWVCUGpe FKxTDw+s8N8JIyd7DYVma4qcHbjLW8tUE+bhO4q/K5nAsreOPPU5qrCwQHSTgDYY SX8DvlpgXDCfyrSLt2eX+efJxYvCzge//B7mEDKFD2kj6ibsFRwszJWeQ1cFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUZe2VcCFho8KMNeCq1nGVzaUWNxswHwYDVR0j BBgwFoAUY0WB8blfuiBLHI0CcbuBx6egj2MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzMjAwMzE5OTA0MTUzOC8wLzYzNDU4MUYxQjk1RkJBMjA0QjFDOEQwMjcxQkI4 MUM3QTdBMDhGNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjM0NTgxRjFCOTVGQkEyMDRCMUM4RDAyNzFCQjgxQzdBN0EwOEY2My5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2MzIwMDMxOTkwNDE1MzgvMC82MzQ1ODFGMUI5NUZC QTIwNEIxQzhEMDI3MUJCODFDN0E3QTA4RjYzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAreN3E2w4hqef 1mKpjVlsmarpn4EOj8+Jhw2zS+T3d2HWJ+80cq9tedHuvN+tYKeSySyXfpmcjWm3 zceNanYzXW/dU8wE5rtT/CvoQuSPMRU0aW2WFDW+Ydi01r3eS2+2fHNlAPtJ3nPw j4mjgPWiNfONz9d0yJ3I/YXUgUZOsb09RMj1ZIA80ltEi7DK3rlsCGyVdthuarw5 xWkF7Csd4KlWCeS+XFYefVVoP33dbJyrDP3F1ZWeGAE5Tqk+38xSLeGk3DBPVdr4 tlUXMC2Vx1AymgF2gxvkbON1BravuAu2/nCvGVNzbyugc2pKTBGwmqwFPdUfHKRi KEV+Dr8wFg== -----END CERTIFICATE-----Generated at Fri Sep 11 05:08:32 2026 by rpki-client