$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft File: 644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft (raw, json) Hash identifier: ZGlv4CrJbzfI7VYQiRNWX9IYbVX5dU3YOxxQoeVyJ8s= Subject key identifier: 19:80:A2:BF:E2:EC:3E:B9:49:BC:54:6B:DB:31:CA:5F:3C:98:9C:04 Authority key identifier: 64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6 Certificate issuer: /CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6 Certificate serial: 7D1DF85284300607ABEA9D032A111DC7A5D67BE9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft Manifest number: 14 Signing time: Thu 11 Jun 2026 17:34:06 +0000 Manifest this update: Thu 11 Jun 2026 17:29:06 +0000 Manifest next update: Fri 12 Jun 2026 18:08:06 +0000 Files and hashes: 1: 3132322e302e39362e302f32302d3230203d3e203234343232.roa (hash: Ja8cOr88YvnZATrU28wxxZEEKg9qD+UwbHDMP26tZ0Q=) 2: 3132322e302e36342e302f31382d3138203d3e203234343232.roa (hash: c9brsSufQtw0FK/fNiFh2NqrrZfDT7KUZt+wNN3tcNY=) 3: 3131392e38382e3139322e302f31382d3138203d3e2034383337.roa (hash: c5E7LGs12ir5P6gUV8HgQNTR9L1tAEDuGDXK3LZDoYQ=) 4: 3131392e38382e3132382e302f31382d3138203d3e2034383337.roa (hash: s7ONdLbyx9xQsrQ4Lye/nZu3RvQlrmjfhRjgPWRb3Bs=) 5: 3132322e302e3132342e302f32342d3234203d3e203234343232.roa (hash: 8PgxQbJwnWj6d/MVr+J3Rd58a7g5hDpd/1pB4+5nU5E=) 6: 644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl (hash: YIjWPn4OJaZVdXgOR4Dsxm/78uea1B7JH7dn/TXxz/w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 18:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:1d:f8:52:84:30:06:07:ab:ea:9d:03:2a:11:1d:c7:a5:d6:7b:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6 Validity Not Before: Jun 11 17:29:06 2026 GMT Not After : Jun 12 18:08:06 2026 GMT Subject: CN=1980A2BFE2EC3EB949BC546BDB31CA5F3C989C04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a0:2e:67:d7:9a:e9:34:6c:4b:ef:1e:47:e2: 2c:9e:0d:da:7f:61:da:00:0b:81:c7:02:46:79:c9: 57:55:40:97:23:4b:aa:7e:80:9c:12:95:a4:25:55: 58:5a:e0:a9:d6:2e:f1:78:e1:37:d5:1b:84:1f:e7: cd:47:5e:48:96:33:ff:12:1b:17:13:61:12:ba:f6: 6a:de:90:fb:c3:a2:89:6d:e3:ee:f4:f1:a3:8c:59: 4a:21:a3:14:4f:b1:c6:31:96:c8:51:3e:bc:6b:15: 19:3e:1c:a9:73:13:bb:1c:ad:ba:f1:5f:01:6e:12: de:d0:91:83:32:82:1c:a2:8f:40:a3:c1:be:b8:80: 9a:b2:47:bb:63:db:d7:d4:a1:ac:45:a4:27:18:01: e8:1b:db:86:81:05:da:a0:0d:c4:80:c2:9c:4d:3e: b6:92:3c:41:99:c0:66:f8:4d:b2:79:05:88:36:a4: a5:64:b6:fe:ed:3d:66:4b:d6:a8:97:29:b4:46:6b: 9d:c8:ce:47:1c:fb:31:8f:f6:a0:4b:ca:eb:55:32: 89:b5:68:7c:c6:61:5c:70:a0:ff:7a:ad:ac:cf:27: f2:0e:2d:57:4b:65:bc:54:f2:7f:95:01:62:dd:01: d3:b2:f8:6a:d5:19:6a:cc:89:ee:8b:77:e5:42:ff: 0f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:80:A2:BF:E2:EC:3E:B9:49:BC:54:6B:DB:31:CA:5F:3C:98:9C:04 X509v3 Authority Key Identifier: keyid:64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:86:63:ac:63:67:b0:e6:3e:bc:b4:f8:f2:3a:1e:d3:83:72: 4e:02:c5:b9:34:9b:5f:2a:2b:ab:05:a4:06:f8:38:de:62:36: cd:61:d3:b5:e1:6a:94:f9:5c:41:80:6f:93:fc:9e:c1:11:d9: c2:ea:e2:5c:6d:f3:ef:a0:af:3e:f5:67:9a:13:be:4a:57:48: b1:88:fc:76:f4:94:24:58:1a:1a:28:2d:b9:33:87:fd:a7:49: 35:06:08:66:f3:9d:43:88:74:37:2a:42:03:84:06:a0:2e:ab: c5:bf:86:11:0a:fa:a4:5d:81:1b:86:43:47:b5:1e:da:88:2d: 13:dd:ff:2c:83:78:0c:07:12:ea:38:32:01:92:82:b7:bf:0b: 03:cc:1a:8f:85:73:e1:29:68:3f:06:26:c4:bf:d9:1b:27:62: f0:86:86:f7:fb:3e:e5:c5:7d:c9:98:28:0a:23:80:ed:7a:c9: 08:87:8a:77:ec:0c:a9:98:6f:fe:2b:40:4c:8f:14:55:d9:25: f0:75:b9:52:e3:79:01:50:ba:3f:c2:d6:72:98:18:24:71:9b: 42:5f:d7:91:4d:db:56:3f:69:9b:1e:75:b9:5b:27:91:6c:0f: 6f:e3:0b:3b:f6:bf:3b:46:cb:bc:3d:7c:5f:90:44:23:4f:6f: f6:86:cf:7f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfR34UoQwBger6p0DKhEdx6XWe+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0REVGMTFCRTQ4MTk4QkM1Q0JEQzA1RjI1RTcxMkFC NDFBRTNCNjAeFw0yNjA2MTExNzI5MDZaFw0yNjA2MTIxODA4MDZaMDMxMTAvBgNV BAMTKDE5ODBBMkJGRTJFQzNFQjk0OUJDNTQ2QkRCMzFDQTVGM0M5ODlDMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxoC5n15rpNGxL7x5H4iyeDdp/ YdoAC4HHAkZ5yVdVQJcjS6p+gJwSlaQlVVha4KnWLvF44TfVG4Qf581HXkiWM/8S GxcTYRK69mrekPvDoolt4+708aOMWUohoxRPscYxlshRPrxrFRk+HKlzE7scrbrx XwFuEt7QkYMyghyij0Cjwb64gJqyR7tj29fUoaxFpCcYAegb24aBBdqgDcSAwpxN PraSPEGZwGb4TbJ5BYg2pKVktv7tPWZL1qiXKbRGa53Izkcc+zGP9qBLyutVMom1 aHzGYVxwoP96razPJ/IOLVdLZbxU8n+VAWLdAdOy+GrVGWrMie6Ld+VC/w/5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUGYCiv+LsPrlJvFRr2zHKXzyYnAQwHwYDVR0j BBgwFoAUZE3vEb5IGYvFy9wF8l5xKrQa47YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MzYwNjAzNjA1NDM0MzY5OS8wLzY0NERFRjExQkU0ODE5OEJDNUNCREMwNUYyNUU3 MTJBQjQxQUUzQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjQ0REVGMTFCRTQ4MTk4QkM1Q0JEQzA1RjI1RTcxMkFCNDFBRTNCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTM2MDYwMzYwNTQzNDM2OTkvMC82NDRERUYxMUJFNDgx OThCQzVDQkRDMDVGMjVFNzEyQUI0MUFFM0I2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYZjrGNnsOY+ vLT48joe04NyTgLFuTSbXyorqwWkBvg43mI2zWHTteFqlPlcQYBvk/yewRHZwuri XG3z76CvPvVnmhO+SldIsYj8dvSUJFgaGigtuTOH/adJNQYIZvOdQ4h0NypCA4QG oC6rxb+GEQr6pF2BG4ZDR7Ue2ogtE93/LIN4DAcS6jgyAZKCt78LA8waj4Vz4Slo PwYmxL/ZGydi8IaG9/s+5cV9yZgoCiOA7XrJCIeKd+wMqZhv/itATI8UVdkl8HW5 UuN5AVC6P8LWcpgYJHGbQl/XkU3bVj9pmx51uVsnkWwPb+MLO/a/O0bLvD18X5BE I09v9obPfw== -----END CERTIFICATE-----Generated at Fri Jun 12 07:48:27 2026 by rpki-client