$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft File: 64CE724CC33744853B20D6E7922A2F808B8C300C.mft (raw, json) Hash identifier: b4u7y0h0rF5lKkvnJ4mlGwInHhZRlqyU19k8hIHwWdM= Subject key identifier: 58:2E:AE:A7:DC:29:88:D6:94:B0:9C:E9:94:CF:83:AF:CF:98:76:DA Authority key identifier: 64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C Certificate issuer: /CN=64CE724CC33744853B20D6E7922A2F808B8C300C Certificate serial: 036B990346FDD26CFFF86D3E737C498CF4DAE3BD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft Manifest number: B4 Signing time: Fri 28 Aug 2026 07:48:35 +0000 Manifest this update: Fri 28 Aug 2026 07:43:35 +0000 Manifest next update: Mon 31 Aug 2026 11:01:35 +0000 Files and hashes: 1: 64CE724CC33744853B20D6E7922A2F808B8C300C.crl (hash: mBvVV68ykowOQ0d+4a97BrYzSoYbCtReK37aT1BxB2k=) 2: 3130332e3234352e3132382e302f32322d3232203d3e203535393832.roa (hash: Md4+IrPlN/VFjDo9GOcLPihi6j6Vf2NSeSyN1+Jh1x8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.crl rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6b:99:03:46:fd:d2:6c:ff:f8:6d:3e:73:7c:49:8c:f4:da:e3:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64CE724CC33744853B20D6E7922A2F808B8C300C Validity Not Before: Aug 28 07:43:35 2026 GMT Not After : Aug 31 11:01:35 2026 GMT Subject: CN=582EAEA7DC2988D694B09CE994CF83AFCF9876DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:18:0e:6f:b0:b7:4b:71:c9:f2:f0:9c:f9:a7: 45:80:5e:27:58:e5:5f:b3:e8:18:27:cd:96:e0:c5: fa:80:e7:9b:ff:bb:3d:c1:4e:56:2e:78:87:0a:d6: 09:99:2e:1c:d7:ed:98:38:4c:3d:69:f8:0b:88:71: 35:f5:05:58:c0:6a:30:51:96:68:8f:73:03:d5:99: 71:52:b7:f8:2b:29:25:37:82:22:92:d8:2b:ea:30: d3:bc:ab:5f:a6:58:8e:41:51:bd:85:04:0c:9e:bf: 0c:c1:8c:d5:84:a7:4e:51:35:0d:81:19:d3:9b:7f: 4d:7e:1f:ec:84:e0:b1:08:74:71:a9:c3:06:b7:14: 37:c7:9b:63:97:7a:7e:b4:d4:45:ec:17:3e:2e:50: 83:6f:9a:d7:0e:ee:1d:5c:f8:d0:9d:06:59:7f:25: 18:1f:9a:67:c2:78:70:d6:1d:46:41:4c:bf:ca:18: f5:78:95:f0:99:1e:4b:e8:e9:e8:6c:68:f5:ed:f0: b8:ba:92:74:88:4c:39:bb:10:4e:d6:cc:24:bd:a3: 3e:4d:2c:21:57:a5:a7:0f:cc:37:03:a3:83:aa:39: da:76:9b:3a:d0:a2:5e:2b:59:5c:e4:db:39:ae:de: 35:85:b7:3b:af:ed:12:42:22:b0:fa:06:03:ab:3c: 96:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2E:AE:A7:DC:29:88:D6:94:B0:9C:E9:94:CF:83:AF:CF:98:76:DA X509v3 Authority Key Identifier: keyid:64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ab:27:4a:96:7c:c5:21:cd:29:d8:7a:a2:c6:f8:91:01:01: 02:bb:ac:ea:7b:23:08:79:80:bf:b7:d1:38:16:55:65:de:e2: be:2c:3a:38:90:f8:43:0c:e1:df:29:d4:3e:62:49:bc:9d:4d: dd:0d:9c:49:c8:52:7f:7d:e2:00:be:7c:25:be:d2:3b:65:94: 2d:5f:01:b9:0a:08:74:6a:1a:ac:df:b8:01:99:4d:e2:03:23: 11:ec:26:f5:02:ff:dc:08:87:d1:e6:ed:82:42:d6:94:87:da: f9:71:ba:af:04:e3:57:f9:e8:16:ad:12:4a:5f:e7:6a:0b:57: 33:1c:02:ad:6f:26:8b:f3:fe:87:e6:b2:3a:e6:5c:e1:ae:28: 08:3c:e8:96:bd:ef:b4:c2:f9:30:a9:46:e6:c0:29:13:ae:e1: c9:c8:3d:de:55:86:d8:72:72:aa:85:02:a2:9b:de:3e:ec:a5: 5e:e3:36:c1:af:78:ca:ce:b5:01:06:16:13:f8:ef:ea:93:b2: f8:b5:c1:0a:10:cb:81:07:f7:8b:4b:6a:d8:b2:ec:83:07:a9: ab:20:f8:55:b2:df:cb:1b:c2:3a:bc:62:76:9f:93:f4:81:4f: 0a:85:2e:c4:b5:32:39:ee:92:ad:43:3d:04:38:b2:ba:0a:23: d2:93:25:00 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUA2uZA0b90mz/+G0+c3xJjPTa470wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRDRTcyNENDMzM3NDQ4NTNCMjBENkU3OTIyQTJGODA4 QjhDMzAwQzAeFw0yNjA4MjgwNzQzMzVaFw0yNjA4MzExMTAxMzVaMDMxMTAvBgNV BAMTKDU4MkVBRUE3REMyOTg4RDY5NEIwOUNFOTk0Q0Y4M0FGQ0Y5ODc2REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsGA5vsLdLccny8Jz5p0WAXidY 5V+z6BgnzZbgxfqA55v/uz3BTlYueIcK1gmZLhzX7Zg4TD1p+AuIcTX1BVjAajBR lmiPcwPVmXFSt/grKSU3giKS2CvqMNO8q1+mWI5BUb2FBAyevwzBjNWEp05RNQ2B GdObf01+H+yE4LEIdHGpwwa3FDfHm2OXen601EXsFz4uUINvmtcO7h1c+NCdBll/ JRgfmmfCeHDWHUZBTL/KGPV4lfCZHkvo6ehsaPXt8Li6knSITDm7EE7WzCS9oz5N LCFXpacPzDcDo4OqOdp2mzrQol4rWVzk2zmu3jWFtzuv7RJCIrD6BgOrPJZ5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWC6up9wpiNaUsJzplM+Dr8+YdtowHwYDVR0j BBgwFoAUZM5yTMM3RIU7INbnkiovgIuMMAwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk4OTExNDA2MzkxMjk2My8wLzY0Q0U3MjRDQzMzNzQ0ODUzQjIwRDZFNzkyMkEy RjgwOEI4QzMwMEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjRDRTcyNENDMzM3NDQ4NTNCMjBENkU3OTIyQTJGODA4QjhDMzAwQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5ODkxMTQwNjM5MTI5NjMvMC82NENFNzI0Q0MzMzc0 NDg1M0IyMEQ2RTc5MjJBMkY4MDhCOEMzMDBDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUasnSpZ8xSHN Kdh6osb4kQEBArus6nsjCHmAv7fROBZVZd7iviw6OJD4Qwzh3ynUPmJJvJ1N3Q2c SchSf33iAL58Jb7SO2WULV8BuQoIdGoarN+4AZlN4gMjEewm9QL/3AiH0ebtgkLW lIfa+XG6rwTjV/noFq0SSl/nagtXMxwCrW8mi/P+h+ayOuZc4a4oCDzolr3vtML5 MKlG5sApE67hycg93lWG2HJyqoUCopvePuylXuM2wa94ys61AQYWE/jv6pOy+LXB ChDLgQf3i0tq2LLsgwepqyD4VbLfyxvCOrxidp+T9IFPCoUuxLUyOe6SrUM9BDiy ugoj0pMlAA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:06:59 2026 by rpki-client