$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft File: 644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft (raw, json) Hash identifier: IoXqEyW3dhKsJrhueqbVtHIgonyV8XLj82am/qu7FEk= Subject key identifier: 05:51:80:5A:1D:82:D6:E2:A6:99:5E:FA:A7:0B:BC:17:BA:E7:24:D4 Authority key identifier: 64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6 Certificate issuer: /CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6 Certificate serial: 3E12F165883909B64F056B689E4C96DDD4F73674 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft Manifest number: 81 Signing time: Tue 08 Sep 2026 11:59:11 +0000 Manifest this update: Tue 08 Sep 2026 11:54:11 +0000 Manifest next update: Fri 11 Sep 2026 19:38:11 +0000 Files and hashes: 1: 3131392e38382e3139322e302f31382d3138203d3e2034383337.roa (hash: c5E7LGs12ir5P6gUV8HgQNTR9L1tAEDuGDXK3LZDoYQ=) 2: 644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl (hash: CAeCLD1y15Y2QnzB0nHhbGAJGG4kn9zvnl0y3fvcVkM=) 3: 3132322e302e36342e302f31382d3138203d3e203234343232.roa (hash: c9brsSufQtw0FK/fNiFh2NqrrZfDT7KUZt+wNN3tcNY=) 4: 3131392e38382e3132382e302f31382d3138203d3e2034383337.roa (hash: s7ONdLbyx9xQsrQ4Lye/nZu3RvQlrmjfhRjgPWRb3Bs=) 5: 3132322e302e39362e302f32302d3230203d3e203234343232.roa (hash: Ja8cOr88YvnZATrU28wxxZEEKg9qD+UwbHDMP26tZ0Q=) 6: 3132322e302e3132342e302f32342d3234203d3e203234343232.roa (hash: 8PgxQbJwnWj6d/MVr+J3Rd58a7g5hDpd/1pB4+5nU5E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 19:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:12:f1:65:88:39:09:b6:4f:05:6b:68:9e:4c:96:dd:d4:f7:36:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6 Validity Not Before: Sep 8 11:54:11 2026 GMT Not After : Sep 11 19:38:11 2026 GMT Subject: CN=0551805A1D82D6E2A6995EFAA70BBC17BAE724D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:73:49:61:67:81:38:f6:1c:c8:ea:ba:5f:34: 04:c8:cd:3d:78:a5:2b:6c:5d:90:6f:83:09:66:ac: 53:97:d9:c3:7f:62:a3:aa:d0:de:3f:d3:42:5a:e0: 0c:63:28:8f:4d:57:cc:5b:dc:04:1d:e6:80:90:80: 80:02:16:fd:e4:09:4c:ac:50:8e:86:a7:7e:2b:cc: d6:03:18:af:6d:9e:e6:05:09:0a:1b:dd:97:1d:54: 12:84:df:ba:17:39:fc:7e:68:86:84:83:75:d7:48: 8f:17:5a:12:94:c5:43:b1:3c:d8:e4:ef:e4:b0:3d: ef:e6:2e:38:11:30:66:15:38:d1:8f:71:78:31:fe: fd:74:d1:59:6e:7a:86:bc:1b:dd:d0:81:53:8d:1c: fd:15:e3:0b:20:b5:aa:28:00:52:ab:11:3a:dd:0b: c6:28:53:c7:5e:d8:9f:e4:82:9c:8d:62:53:9e:1a: 84:74:b8:5c:5a:d5:fa:fd:d3:3c:e9:c2:cf:85:2c: 1b:f7:5e:06:41:5f:ea:5b:71:24:96:11:9b:f3:31: 80:7a:97:20:52:f4:92:78:6b:01:f2:06:a7:65:58: b4:4f:80:f0:f1:80:38:0f:eb:28:14:82:11:12:ae: fb:ad:6b:fd:4d:06:a6:f2:4c:43:f4:ca:36:9b:42: 5d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:51:80:5A:1D:82:D6:E2:A6:99:5E:FA:A7:0B:BC:17:BA:E7:24:D4 X509v3 Authority Key Identifier: keyid:64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:6a:a7:29:e7:19:02:90:03:68:85:38:e6:82:5e:86:48:1a: 67:0d:5d:4f:96:1e:ba:b6:09:68:84:3a:84:aa:7b:7a:ee:3d: ec:6f:6e:e9:60:c0:45:e3:56:8b:dc:7d:9b:44:a0:29:67:6c: 2e:a6:19:7d:fc:bf:d9:fb:ac:52:d6:dd:08:1c:ef:9f:f8:ae: 2d:99:57:3c:c4:68:0a:ea:e3:b9:e2:a5:23:6e:8d:ab:5c:38: e3:95:95:8a:c8:ed:be:d7:3b:6c:f0:f4:b3:e1:12:b9:01:a5: 8d:5b:c5:3f:47:15:b0:64:25:33:3b:78:e0:55:92:be:31:39: 48:7f:36:e1:53:8f:e6:ef:71:73:b6:02:9b:84:b7:9a:03:69: 70:0c:d1:08:d4:93:2c:ad:73:4d:81:2d:7b:18:72:12:85:ca: ba:27:08:18:55:f0:14:ac:57:01:f0:18:90:7a:d8:78:8d:9a: e7:5f:59:c4:8c:a0:40:7d:d0:4c:56:fd:1c:74:9c:2c:34:9d: 68:82:e6:0b:7e:14:fd:cf:9b:f6:f3:e1:78:37:ac:59:f2:00: e2:ff:64:00:1f:9d:72:ea:b3:5e:9b:e3:60:b0:42:b5:ab:e7: 2d:9f:a4:e3:a3:0f:80:2a:89:e1:8b:f3:02:d5:33:0a:a6:6e: e7:01:70:fe -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPhLxZYg5CbZPBWtonkyW3dT3NnQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0REVGMTFCRTQ4MTk4QkM1Q0JEQzA1RjI1RTcxMkFC NDFBRTNCNjAeFw0yNjA5MDgxMTU0MTFaFw0yNjA5MTExOTM4MTFaMDMxMTAvBgNV BAMTKDA1NTE4MDVBMUQ4MkQ2RTJBNjk5NUVGQUE3MEJCQzE3QkFFNzI0RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/c0lhZ4E49hzI6rpfNATIzT14 pStsXZBvgwlmrFOX2cN/YqOq0N4/00Ja4AxjKI9NV8xb3AQd5oCQgIACFv3kCUys UI6Gp34rzNYDGK9tnuYFCQob3ZcdVBKE37oXOfx+aIaEg3XXSI8XWhKUxUOxPNjk 7+SwPe/mLjgRMGYVONGPcXgx/v100Vlueoa8G93QgVONHP0V4wsgtaooAFKrETrd C8YoU8de2J/kgpyNYlOeGoR0uFxa1fr90zzpws+FLBv3XgZBX+pbcSSWEZvzMYB6 lyBS9JJ4awHyBqdlWLRPgPDxgDgP6ygUghESrvuta/1NBqbyTEP0yjabQl3rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBVGAWh2C1uKmmV76pwu8F7rnJNQwHwYDVR0j BBgwFoAUZE3vEb5IGYvFy9wF8l5xKrQa47YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MzYwNjAzNjA1NDM0MzY5OS8wLzY0NERFRjExQkU0ODE5OEJDNUNCREMwNUYyNUU3 MTJBQjQxQUUzQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjQ0REVGMTFCRTQ4MTk4QkM1Q0JEQzA1RjI1RTcxMkFCNDFBRTNCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTM2MDYwMzYwNTQzNDM2OTkvMC82NDRERUYxMUJFNDgx OThCQzVDQkRDMDVGMjVFNzEyQUI0MUFFM0I2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArmqnKecZApAD aIU45oJehkgaZw1dT5YeurYJaIQ6hKp7eu497G9u6WDAReNWi9x9m0SgKWdsLqYZ ffy/2fusUtbdCBzvn/iuLZlXPMRoCurjueKlI26Nq1w445WVisjtvtc7bPD0s+ES uQGljVvFP0cVsGQlMzt44FWSvjE5SH824VOP5u9xc7YCm4S3mgNpcAzRCNSTLK1z TYEtexhyEoXKuicIGFXwFKxXAfAYkHrYeI2a519ZxIygQH3QTFb9HHScLDSdaILm C34U/c+b9vPheDesWfIA4v9kAB+dcuqzXpvjYLBCtavnLZ+k46MPgCqJ4YvzAtUz CqZu5wFw/g== -----END CERTIFICATE-----Generated at Thu Sep 10 19:19:35 2026 by rpki-client