$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft File: 644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft (raw, json) Hash identifier: BCote1K+jwf9ibJuLC/PRasHBagxGHsuI+Pc1Z23SE4= Subject key identifier: BF:48:3B:DE:7B:E2:E1:98:9D:E6:56:75:D4:37:1F:34:66:C5:17:89 Authority key identifier: 64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6 Certificate issuer: /CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6 Certificate serial: 6B91F7814BBE565B942C64DAB1EAA2A57ACCDF23 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft Manifest number: 51 Signing time: Mon 27 Jul 2026 02:08:07 +0000 Manifest this update: Mon 27 Jul 2026 02:03:07 +0000 Manifest next update: Tue 28 Jul 2026 02:14:07 +0000 Files and hashes: 1: 644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl (hash: 8Tf3KnLzWRPiD0m3LaNrTrC92QGaHCnvl5r3Dea9LFY=) 2: 3132322e302e3132342e302f32342d3234203d3e203234343232.roa (hash: 8PgxQbJwnWj6d/MVr+J3Rd58a7g5hDpd/1pB4+5nU5E=) 3: 3131392e38382e3132382e302f31382d3138203d3e2034383337.roa (hash: s7ONdLbyx9xQsrQ4Lye/nZu3RvQlrmjfhRjgPWRb3Bs=) 4: 3132322e302e39362e302f32302d3230203d3e203234343232.roa (hash: Ja8cOr88YvnZATrU28wxxZEEKg9qD+UwbHDMP26tZ0Q=) 5: 3131392e38382e3139322e302f31382d3138203d3e2034383337.roa (hash: c5E7LGs12ir5P6gUV8HgQNTR9L1tAEDuGDXK3LZDoYQ=) 6: 3132322e302e36342e302f31382d3138203d3e203234343232.roa (hash: c9brsSufQtw0FK/fNiFh2NqrrZfDT7KUZt+wNN3tcNY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 02:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:91:f7:81:4b:be:56:5b:94:2c:64:da:b1:ea:a2:a5:7a:cc:df:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=644DEF11BE48198BC5CBDC05F25E712AB41AE3B6 Validity Not Before: Jul 27 02:03:07 2026 GMT Not After : Jul 28 02:14:07 2026 GMT Subject: CN=BF483BDE7BE2E1989DE65675D4371F3466C51789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b8:ab:b9:2f:06:ea:a8:c2:92:4f:72:fc:45: 2d:dc:1e:94:ad:69:cf:28:63:0a:9b:7a:1b:8d:9d: aa:14:4d:c9:11:ce:9c:5a:a1:a8:6a:4f:b8:e8:a1: d2:7f:89:d1:8d:54:51:48:fe:c4:db:e5:bb:0a:cc: f3:ae:28:a6:02:bc:dc:e2:88:dd:10:94:9b:99:c9: 89:c0:27:e0:bf:99:33:54:77:3b:15:28:a0:95:fa: c8:6c:a7:0c:25:18:f3:da:20:d0:4b:0c:9b:3e:7a: e9:df:3e:0d:c6:4f:12:ef:bf:84:d2:8f:5e:4f:4d: 6c:6c:7f:27:11:24:b3:d7:95:72:b6:2d:c0:a8:2b: 2c:04:e9:da:6c:e3:8f:30:00:fe:db:94:e2:d6:15: 8e:86:aa:3c:5f:84:a8:0e:e1:8e:90:fb:24:1b:70: a0:25:87:76:bd:b7:ea:1a:28:5b:85:30:34:3f:9e: b3:89:72:30:5b:44:3d:5c:eb:6a:6c:13:ac:63:4a: 81:e5:ee:de:91:c4:5f:2f:74:f4:34:a4:50:e2:65: 4d:18:bd:90:ed:1c:77:b8:1c:5e:ea:16:3d:9b:c0: c4:fe:5b:44:04:2c:fd:f1:b7:c4:4f:c0:1c:52:7c: 06:9b:3f:9b:25:1c:40:4e:cb:97:50:6d:15:3b:c9: c5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:48:3B:DE:7B:E2:E1:98:9D:E6:56:75:D4:37:1F:34:66:C5:17:89 X509v3 Authority Key Identifier: keyid:64:4D:EF:11:BE:48:19:8B:C5:CB:DC:05:F2:5E:71:2A:B4:1A:E3:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1113606036054343699/0/644DEF11BE48198BC5CBDC05F25E712AB41AE3B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:15:ca:64:cf:8f:b5:63:6d:e3:c8:5f:fb:35:74:33:79:e5: 5d:dd:c5:d8:49:e6:94:18:37:3b:58:09:32:98:56:20:3e:dc: 7b:6e:4d:ed:dc:bb:39:e4:39:43:11:90:e8:55:7f:1d:45:a9: ca:81:61:40:61:cc:3a:4c:d3:b9:ce:78:d7:5f:4d:65:39:47: 22:de:07:98:b8:b5:05:1b:c1:17:14:df:e2:44:df:3e:56:4b: a9:ce:6d:1c:15:20:1e:8d:74:2b:27:4f:c7:b8:4c:e4:dc:99: 64:06:48:11:ea:3c:03:8c:9b:d5:50:5d:82:88:35:c4:20:0d: 90:26:bb:11:92:38:32:1e:f2:c9:ee:cc:09:70:94:51:4f:80: 8b:f8:0b:0b:21:43:f7:f2:c6:00:73:d7:26:44:c3:ee:03:69: ed:5f:9c:b1:17:2e:ee:4e:c5:7c:28:ab:f9:70:22:03:4f:a2: d2:93:05:ea:82:26:ad:c3:6f:35:1a:c6:69:ac:30:64:ca:01: 43:32:7f:ae:db:b1:ef:f1:98:d0:4b:37:68:f7:cc:df:5c:e1: ef:a0:e3:50:9c:28:d4:03:68:46:12:60:08:99:84:f4:0e:5a: 76:2f:3a:5e:6a:96:6e:08:2d:c0:71:2a:18:f7:da:ab:1a:2e: 37:36:25:54 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUa5H3gUu+VluULGTaseqipXrM3yMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjQ0REVGMTFCRTQ4MTk4QkM1Q0JEQzA1RjI1RTcxMkFC NDFBRTNCNjAeFw0yNjA3MjcwMjAzMDdaFw0yNjA3MjgwMjE0MDdaMDMxMTAvBgNV BAMTKEJGNDgzQkRFN0JFMkUxOTg5REU2NTY3NUQ0MzcxRjM0NjZDNTE3ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLuKu5LwbqqMKST3L8RS3cHpSt ac8oYwqbehuNnaoUTckRzpxaoahqT7joodJ/idGNVFFI/sTb5bsKzPOuKKYCvNzi iN0QlJuZyYnAJ+C/mTNUdzsVKKCV+shspwwlGPPaINBLDJs+eunfPg3GTxLvv4TS j15PTWxsfycRJLPXlXK2LcCoKywE6dps448wAP7blOLWFY6GqjxfhKgO4Y6Q+yQb cKAlh3a9t+oaKFuFMDQ/nrOJcjBbRD1c62psE6xjSoHl7t6RxF8vdPQ0pFDiZU0Y vZDtHHe4HF7qFj2bwMT+W0QELP3xt8RPwBxSfAabP5slHEBOy5dQbRU7ycUZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUv0g73nvi4Zid5lZ11DcfNGbFF4kwHwYDVR0j BBgwFoAUZE3vEb5IGYvFy9wF8l5xKrQa47YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MzYwNjAzNjA1NDM0MzY5OS8wLzY0NERFRjExQkU0ODE5OEJDNUNCREMwNUYyNUU3 MTJBQjQxQUUzQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjQ0REVGMTFCRTQ4MTk4QkM1Q0JEQzA1RjI1RTcxMkFCNDFBRTNCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTM2MDYwMzYwNTQzNDM2OTkvMC82NDRERUYxMUJFNDgx OThCQzVDQkRDMDVGMjVFNzEyQUI0MUFFM0I2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtBXKZM+PtWNt 48hf+zV0M3nlXd3F2EnmlBg3O1gJMphWID7ce25N7dy7OeQ5QxGQ6FV/HUWpyoFh QGHMOkzTuc54119NZTlHIt4HmLi1BRvBFxTf4kTfPlZLqc5tHBUgHo10KydPx7hM 5NyZZAZIEeo8A4yb1VBdgog1xCANkCa7EZI4Mh7yye7MCXCUUU+Ai/gLCyFD9/LG AHPXJkTD7gNp7V+csRcu7k7FfCir+XAiA0+i0pMF6oImrcNvNRrGaawwZMoBQzJ/ rtux7/GY0Es3aPfM31zh76DjUJwo1ANoRhJgCJmE9A5adi86XmqWbggtwHEqGPfa qxouNzYlVA== -----END CERTIFICATE-----Generated at Mon Jul 27 15:48:37 2026 by rpki-client