$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft File: 64CE724CC33744853B20D6E7922A2F808B8C300C.mft (raw, json) Hash identifier: +8z4VeSbVvTwoIU9DsVqpd0+dPvh8vVjqGyMybpK/Mk= Subject key identifier: 63:47:32:37:A0:8B:7B:62:5D:B8:EE:78:42:E6:23:91:67:D9:02:03 Authority key identifier: 64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C Certificate issuer: /CN=64CE724CC33744853B20D6E7922A2F808B8C300C Certificate serial: 7917B91F93223B014DB34B79822AC1C62E50D19E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft Manifest number: 77 Signing time: Tue 14 Jul 2026 09:15:56 +0000 Manifest this update: Tue 14 Jul 2026 09:10:56 +0000 Manifest next update: Wed 15 Jul 2026 13:07:56 +0000 Files and hashes: 1: 64CE724CC33744853B20D6E7922A2F808B8C300C.crl (hash: bfvTkslqKBqM1eylHXtnMpa0GplGx7D227tnZUng4uk=) 2: 3130332e3234352e3132382e302f32322d3232203d3e203535393832.roa (hash: Md4+IrPlN/VFjDo9GOcLPihi6j6Vf2NSeSyN1+Jh1x8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.crl rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 13:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:17:b9:1f:93:22:3b:01:4d:b3:4b:79:82:2a:c1:c6:2e:50:d1:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64CE724CC33744853B20D6E7922A2F808B8C300C Validity Not Before: Jul 14 09:10:56 2026 GMT Not After : Jul 15 13:07:56 2026 GMT Subject: CN=63473237A08B7B625DB8EE7842E6239167D90203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:22:8b:da:80:d1:5d:03:38:d6:20:16:57:ca: 70:f9:f1:65:10:f5:fb:9e:9d:95:55:13:ce:ab:27: 5a:37:28:56:e8:1b:63:f8:a5:f8:86:0a:f5:e9:13: ec:1c:43:74:8b:c9:75:18:a6:f4:08:ee:e5:e6:cb: 87:7b:08:c8:96:a6:61:af:5a:96:cd:1a:f7:f2:f9: 47:92:9c:9f:86:bb:d9:d1:cd:f3:e0:0d:ae:a0:e6: 97:39:54:f6:94:29:c7:3d:d7:c2:73:a1:ed:b1:9d: 34:a0:a0:89:01:f4:9a:27:42:37:e6:ed:cc:b7:a8: 9b:4d:22:89:0d:05:63:7f:90:78:f0:71:81:50:db: 6a:a7:ef:b6:80:54:b3:1e:7c:ea:a0:ea:4e:57:d5: 25:ce:25:f1:b6:1d:0b:c6:58:91:e7:3c:52:e7:17: 0f:ee:6e:bd:7a:7d:85:eb:da:da:d7:01:f8:32:71: 0f:19:d4:5f:30:22:5e:f0:21:e0:7a:b9:27:3c:43: f7:0d:a2:60:37:98:a9:26:3d:95:e8:20:4c:ba:51: 4f:e9:16:95:cc:c7:04:65:d9:06:b4:b8:d0:93:fd: cb:25:20:53:ac:a7:8c:d4:ec:51:50:d0:c8:45:90: 8b:8d:50:64:98:2b:e6:14:1d:d6:d6:c4:ff:cc:5c: ce:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:47:32:37:A0:8B:7B:62:5D:B8:EE:78:42:E6:23:91:67:D9:02:03 X509v3 Authority Key Identifier: keyid:64:CE:72:4C:C3:37:44:85:3B:20:D6:E7:92:2A:2F:80:8B:8C:30:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/64CE724CC33744853B20D6E7922A2F808B8C300C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096989114063912963/0/64CE724CC33744853B20D6E7922A2F808B8C300C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:9b:9e:0a:68:7f:d4:66:52:70:62:40:82:46:72:c1:b8:12: 8c:d0:75:9a:c3:c3:43:7a:ad:de:1f:be:48:c1:29:fc:7a:fe: 5e:35:bd:cd:00:14:53:29:60:eb:af:c6:83:94:33:45:1b:78: d5:ca:70:15:52:c3:6b:65:15:fa:22:91:e4:39:22:98:fd:6e: 9b:7d:9c:b4:de:77:95:d6:b2:f0:f0:d0:52:cd:7d:a3:6f:6a: 3a:98:72:7e:c5:77:d7:5a:c8:9d:f8:a0:d1:45:e3:87:17:e5: 82:9d:71:7a:93:f8:7d:12:8f:6f:59:a4:a9:a0:a9:49:b4:96: ab:c9:c7:60:70:96:ca:7d:2a:f0:b0:1c:55:74:82:33:a1:ff: 45:a3:26:95:88:69:2d:6f:f7:44:50:08:5f:5b:61:27:a3:cf: 38:34:d6:c0:a1:1f:0d:bf:35:ce:c7:1e:65:83:79:d3:cd:d0: ac:46:16:cf:0e:34:eb:ab:51:e3:f5:15:bd:c5:5b:3a:ab:82: 4e:1b:6a:37:ff:d3:14:f3:42:8e:a6:50:3d:e8:69:1c:16:4b: 6b:84:71:0e:4b:8b:e7:4d:41:d6:cd:da:30:eb:84:53:ce:f2: a9:5c:74:5c:88:ea:4f:4e:2e:db:8b:73:7c:c9:97:bd:f5:70: 04:8f:a4:0d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeRe5H5MiOwFNs0t5girBxi5Q0Z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRDRTcyNENDMzM3NDQ4NTNCMjBENkU3OTIyQTJGODA4 QjhDMzAwQzAeFw0yNjA3MTQwOTEwNTZaFw0yNjA3MTUxMzA3NTZaMDMxMTAvBgNV BAMTKDYzNDczMjM3QTA4QjdCNjI1REI4RUU3ODQyRTYyMzkxNjdEOTAyMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0IovagNFdAzjWIBZXynD58WUQ 9fuenZVVE86rJ1o3KFboG2P4pfiGCvXpE+wcQ3SLyXUYpvQI7uXmy4d7CMiWpmGv WpbNGvfy+UeSnJ+Gu9nRzfPgDa6g5pc5VPaUKcc918Jzoe2xnTSgoIkB9JonQjfm 7cy3qJtNIokNBWN/kHjwcYFQ22qn77aAVLMefOqg6k5X1SXOJfG2HQvGWJHnPFLn Fw/ubr16fYXr2trXAfgycQ8Z1F8wIl7wIeB6uSc8Q/cNomA3mKkmPZXoIEy6UU/p FpXMxwRl2Qa0uNCT/cslIFOsp4zU7FFQ0MhFkIuNUGSYK+YUHdbWxP/MXM5JAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUY0cyN6CLe2JduO54QuYjkWfZAgMwHwYDVR0j BBgwFoAUZM5yTMM3RIU7INbnkiovgIuMMAwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk4OTExNDA2MzkxMjk2My8wLzY0Q0U3MjRDQzMzNzQ0ODUzQjIwRDZFNzkyMkEy RjgwOEI4QzMwMEMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjRDRTcyNENDMzM3NDQ4NTNCMjBENkU3OTIyQTJGODA4QjhDMzAwQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5ODkxMTQwNjM5MTI5NjMvMC82NENFNzI0Q0MzMzc0 NDg1M0IyMEQ2RTc5MjJBMkY4MDhCOEMzMDBDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzZueCmh/1GZS cGJAgkZywbgSjNB1msPDQ3qt3h++SMEp/Hr+XjW9zQAUUylg66/Gg5QzRRt41cpw FVLDa2UV+iKR5DkimP1um32ctN53lday8PDQUs19o29qOphyfsV311rInfig0UXj hxflgp1xepP4fRKPb1mkqaCpSbSWq8nHYHCWyn0q8LAcVXSCM6H/RaMmlYhpLW/3 RFAIX1thJ6PPODTWwKEfDb81zsceZYN5083QrEYWzw4066tR4/UVvcVbOquCThtq N//TFPNCjqZQPehpHBZLa4RxDkuL501B1s3aMOuEU87yqVx0XIjqT04u24tzfMmX vfVwBI+kDQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:08:07 2026 by rpki-client