$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft File: 644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft (raw, json) Hash identifier: e5Y3m45c3Cdlin+3FYuWFHMSYi2wizVralsRCP4ko4s= Subject key identifier: BA:E9:3C:70:DE:B0:A0:2F:66:01:7B:39:CB:41:29:40:3D:E1:D7:FC Authority key identifier: 64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6 Certificate issuer: /CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6 Certificate serial: 6528579C4F44BD3B0A998C41B26410617D7C9F0D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft Manifest number: 96 Signing time: Mon 26 Oct 2026 01:28:07 +0000 Manifest this update: Mon 26 Oct 2026 01:23:07 +0000 Manifest next update: Thu 29 Oct 2026 09:11:07 +0000 Files and hashes: 1: 3132322e302e3132342e302f32342d3234203d3e203234343232.roa (hash: 8PgxQbJwnWj6d/MVr+J3Rd58a7g5hDpd/1pB4+5nU5E=) 2: 3132322e302e36342e302f31382d3138203d3e203234343232.roa (hash: c9brsSufQtw0FK/fNiFh2NqrrZfDT7KUZt+wNN3tcNY=) 3: 644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl (hash: pu166Hm6N98Xr5ysiUnQHtdt40QKMGbj3vKUxcZ7dRs=) 4: 3131392e38382e3132382e302f31382d3138203d3e2034383337.roa (hash: s7ONdLbyx9xQsrQ4Lye/nZu3RvQlrmjfhRjgPWRb3Bs=) 5: 3132322e302e39362e302f32302d3230203d3e203234343232.roa (hash: Ja8cOr88YvnZATrU28wxxZEEKg9qD+UwbHDMP26tZ0Q=) 6: 3131392e38382e3139322e302f31382d3138203d3e2034383337.roa (hash: c5E7LGs12ir5P6gUV8HgQNTR9L1tAEDuGDXK3LZDoYQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 03:49:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:28:57:9c:4f:44:bd:3b:0a:99:8c:41:b2:64:10:61:7d:7c:9f:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6 Validity Not Before: Oct 26 01:23:07 2026 GMT Not After : Oct 29 09:11:07 2026 GMT Subject: CN=BAE93C70DEB0A02F66017B39CB4129403DE1D7FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f2:c9:c2:51:57:d1:45:98:82:41:9d:48:ee: e7:b3:18:ea:00:d6:d8:87:1b:98:7a:64:d7:72:88: 6f:21:6c:53:69:75:ad:87:a2:97:34:99:62:d7:0b: 5f:d0:7e:ff:0e:0d:81:66:c6:c1:90:af:64:a0:04: 09:3b:04:e6:a6:00:05:5d:b5:6e:16:f9:c4:68:78: f0:cd:c4:8b:e4:a5:25:80:b7:c4:b9:a7:47:31:84: 97:d6:16:32:0f:4b:04:43:a6:d4:11:e9:98:43:09: 17:51:d5:da:ac:e4:bb:53:54:ad:90:1d:bd:41:93: bc:aa:d6:4d:34:68:fe:67:3e:8e:56:6d:a1:91:7f: 60:13:11:4c:2c:6b:6d:34:c7:74:c9:eb:de:5a:1d: bf:b0:ba:20:a8:9f:94:f0:bd:3e:c0:ae:7e:d7:a0: 07:82:26:98:9d:84:78:3b:69:d7:f8:8f:e3:35:c4: b0:d0:2a:2c:83:7b:a8:62:9d:b2:61:af:2a:50:be: 98:de:23:85:8e:ec:74:6e:d2:25:ff:0f:3c:b6:5b: 8d:b7:72:8c:23:92:ac:21:b6:5e:38:c8:5d:aa:31: f5:6e:89:ba:07:b9:8b:02:04:c3:43:35:b5:56:7f: cd:c2:0e:31:e8:29:19:5b:63:aa:3e:3a:d5:9b:7b: 2d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E9:3C:70:DE:B0:A0:2F:66:01:7B:39:CB:41:29:40:3D:E1:D7:FC X509v3 Authority Key Identifier: keyid:64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:23:0e:3b:fe:3f:c6:52:81:2e:97:87:3e:e6:a0:f4:2a:99: a4:50:e1:12:a2:52:f2:ab:c2:c3:5c:d7:99:1d:3a:ec:a3:59: c5:9b:eb:22:99:66:41:70:16:4d:1e:4d:7f:af:7b:39:b3:92: 7e:e1:58:a1:6e:6b:c4:71:4b:f7:dc:1b:4b:b3:f5:c2:02:8e: ab:e2:db:e1:0f:a4:30:d4:20:ee:9b:0e:23:be:b0:58:29:8f: 1a:bc:11:33:b4:14:3e:7c:49:df:04:3b:53:46:e9:ca:1e:50: 2e:53:cb:1c:28:16:94:23:d1:c6:fa:41:1d:be:36:75:f8:61: e4:21:42:e2:03:43:65:b2:69:9b:3f:00:b0:09:d3:27:fb:d9: 76:7c:de:f6:c6:c1:a4:16:dd:b7:03:52:2c:e2:90:9a:51:ae: 67:2f:3f:40:1f:61:e4:88:d7:b1:d3:56:12:a7:6b:b9:b5:03: 57:d3:58:c9:71:d1:c1:89:cb:a6:45:c4:3c:13:65:39:c6:16: 83:11:03:f6:3b:89:97:df:98:38:8b:e0:69:6a:e8:af:24:bf: c8:20:3d:22:1e:02:52:4b:b3:1d:54:19:4c:04:99:09:ab:0f: 15:8a:60:fc:7a:70:8d:61:21:e1:21:25:5d:e7:c1:52:53:5a: 0e:72:ee:0b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZShXnE9EvTsKmYxBsmQQYX18nw0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0REVGMTFCRTQ4MTk4QkM1Q0JEQzA1RjI1RTcxMkFC NDFBRTNCNjAeFw0yNjEwMjYwMTIzMDdaFw0yNjEwMjkwOTExMDdaMDMxMTAvBgNV BAMTKEJBRTkzQzcwREVCMEEwMkY2NjAxN0IzOUNCNDEyOTQwM0RFMUQ3RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV8snCUVfRRZiCQZ1I7uezGOoA 1tiHG5h6ZNdyiG8hbFNpda2Hopc0mWLXC1/Qfv8ODYFmxsGQr2SgBAk7BOamAAVd tW4W+cRoePDNxIvkpSWAt8S5p0cxhJfWFjIPSwRDptQR6ZhDCRdR1dqs5LtTVK2Q Hb1Bk7yq1k00aP5nPo5WbaGRf2ATEUwsa200x3TJ695aHb+wuiCon5TwvT7Arn7X oAeCJpidhHg7adf4j+M1xLDQKiyDe6hinbJhrypQvpjeI4WO7HRu0iX/Dzy2W423 cowjkqwhtl44yF2qMfVuiboHuYsCBMNDNbVWf83CDjHoKRlbY6o+OtWbey3lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuuk8cN6woC9mAXs5y0EpQD3h1/wwHwYDVR0j BBgwFoAUZE3vEb5IGYvFy9wF8l5xKrQa47YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MzYwNjAzNjA1NDM0MzY5OS8wLzY0NERFRjExQkU0ODE5OEJDNUNCREMwNUYyNUU3 MTJBQjQxQUUzQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjQ0REVGMTFCRTQ4MTk4QkM1Q0JEQzA1RjI1RTcxMkFCNDFBRTNCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTM2MDYwMzYwNTQzNDM2OTkvMC82NDRERUYxMUJFNDgx OThCQzVDQkRDMDVGMjVFNzEyQUI0MUFFM0I2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAViMOO/4/xlKB LpeHPuag9CqZpFDhEqJS8qvCw1zXmR067KNZxZvrIplmQXAWTR5Nf697ObOSfuFY oW5rxHFL99wbS7P1wgKOq+Lb4Q+kMNQg7psOI76wWCmPGrwRM7QUPnxJ3wQ7U0bp yh5QLlPLHCgWlCPRxvpBHb42dfhh5CFC4gNDZbJpmz8AsAnTJ/vZdnze9sbBpBbd twNSLOKQmlGuZy8/QB9h5IjXsdNWEqdrubUDV9NYyXHRwYnLpkXEPBNlOcYWgxED 9juJl9+YOIvgaWroryS/yCA9Ih4CUkuzHVQZTASZCasPFYpg/HpwjWEh4SElXefB UlNaDnLuCw== -----END CERTIFICATE-----Generated at Tue Oct 27 01:09:15 2026 by rpki-client