$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft File: 95AFB4515D628A1186D20869CFEAF47D559D5337.mft (raw, json) Hash identifier: hRSUeMbHbcmaBJAwgMUnEiohKQ8iFztbGyi8/izT9Q0= Subject key identifier: 1C:1D:DC:5D:12:7F:69:4B:63:21:DB:4A:EA:09:B6:93:E6:AF:18:53 Authority key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 Certificate issuer: /CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Certificate serial: 712154470576A6CB2D420B33711F1FB615B1485B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft Manifest number: 0102 Signing time: Tue 28 Jul 2026 20:37:43 +0000 Manifest this update: Tue 28 Jul 2026 20:32:43 +0000 Manifest next update: Wed 29 Jul 2026 22:18:43 +0000 Files and hashes: 1: 95AFB4515D628A1186D20869CFEAF47D559D5337.crl (hash: ecyh337KubG4CeHhdkPMcco8vDnjUY/k+RL8w6kiFNk=) 2: 3130332e3130392e32302e302f32322d3234203d3e2034383136.roa (hash: Ir54i6mCJphe0tTKRNEplWXjiN5Eyqy0jZSjS9oxoak=) 3: 3130332e3233362e36342e302f32322d3234203d3e2034383136.roa (hash: 9KFTHxz/y51ykUofxUnbpegbRUp/wwAex2kCfyHmCB0=) 4: 3231312e3136312e3232372e302f32342d3234203d3e20323035353438.roa (hash: Ln2h1DObADPae64oImYFdKQ5uHj+DhkSUyON4jZ4kMU=) 5: 3130332e3233362e35322e302f32322d3234203d3e2034383136.roa (hash: L/Cnxt0IMPqrkk567v66pELmHjh0mHTQ9LGRguxjotg=) 6: 3130332e3233362e35362e302f32322d3234203d3e2034383136.roa (hash: nU9td8FSbjkxq8qr2OaWckCpycvpgcxXULdnzQhot1w=) 7: 3231312e3136312e3232342e302f32302d3234203d3e2034383136.roa (hash: 7ESkoMdtrmm8SQWjAiVoIXlCHKhBj+bnSHyVsBLhiTg=) 8: 3130332e3233362e36302e302f32322d3234203d3e2034383136.roa (hash: p2Lh6mSEt8F+Pz43e7M48ZQE8zJIT8aede1FEWphpKg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:18:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:21:54:47:05:76:a6:cb:2d:42:0b:33:71:1f:1f:b6:15:b1:48:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Validity Not Before: Jul 28 20:32:43 2026 GMT Not After : Jul 29 22:18:43 2026 GMT Subject: CN=1C1DDC5D127F694B6321DB4AEA09B693E6AF1853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6d:ff:0d:f8:dc:29:df:5d:e6:32:69:99:ce: 09:35:32:43:6d:fd:5c:59:0d:0f:0a:78:fd:ec:4d: c3:3a:75:fc:4f:9a:83:35:5c:a2:bd:6d:a7:37:5d: 30:0d:1f:c2:78:d6:6f:21:16:bb:d3:27:c8:cd:e4: 39:d9:fd:e5:87:bd:4a:a0:c2:22:6a:74:2d:44:13: 10:3a:5a:c0:f3:71:d9:37:76:b6:60:7e:ee:da:bb: 5f:15:ab:af:88:7b:11:ae:3f:73:9e:d6:47:d0:e7: 15:83:dd:39:93:19:1e:9d:c8:81:57:aa:0b:75:6d: 1d:5e:ab:71:b1:98:3a:56:62:dd:44:a6:ef:1c:a6: ff:d7:6e:b2:40:d2:fd:1c:6a:e1:74:e0:7a:68:36: 50:69:b7:0b:6c:78:6c:b1:12:eb:45:72:da:87:c1: 83:51:2f:59:6c:50:d9:48:91:83:92:b3:d1:23:35: ad:95:df:b6:9d:55:99:08:32:63:1e:8e:ad:ec:83: 60:d3:ca:ce:db:3e:d5:c7:47:c5:4b:f9:3c:1b:fd: 1e:d2:1d:4c:a5:95:85:ae:b4:93:8a:d9:01:9b:ff: 46:aa:19:63:d8:e1:6b:8d:79:b9:b0:27:ce:95:7b: e3:43:5d:d8:e1:32:89:90:d8:a2:d0:73:0f:6c:ec: 20:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1D:DC:5D:12:7F:69:4B:63:21:DB:4A:EA:09:B6:93:E6:AF:18:53 X509v3 Authority Key Identifier: keyid:95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:d3:03:83:5d:02:f7:a4:1a:9b:62:96:73:42:51:6c:6b:5b: 3c:e6:be:e6:0a:7c:d8:51:c8:8b:38:95:e3:a7:78:6f:5f:f2: e3:d5:5f:88:4c:c3:11:55:3d:47:a8:46:a5:c3:1a:50:eb:b2: db:b2:10:d3:bd:08:42:c9:07:64:d2:a5:12:48:01:5d:64:f2: f1:b7:c1:1f:c8:ff:2f:f3:c7:56:ef:73:23:32:82:bc:20:79: ea:d9:02:38:b8:77:65:68:09:4c:d9:dd:f3:a7:e3:86:6e:3a: 9c:7e:1b:09:d3:34:12:06:aa:31:04:69:d6:73:aa:f9:b6:6b: b2:d0:ec:96:50:8c:9b:b0:ee:57:65:77:cc:97:0b:dd:3c:b4: 54:fd:a1:3f:f6:1b:79:50:b7:e0:23:99:e1:5a:0b:c6:46:c6: 2b:38:2a:22:26:b5:c2:2e:ed:4d:cc:0f:b6:a1:e2:d4:44:12: be:52:84:7a:99:b8:ae:f6:5c:e2:3c:30:df:2d:8c:d9:54:4c: 6f:5e:6e:bf:84:e1:ff:af:d7:c1:0b:b1:d7:5e:79:b9:aa:26: 92:79:0a:fe:a2:35:bb:fd:00:e2:b1:2f:9c:f8:b7:ce:29:cc: 03:f4:c2:c8:32:ef:97:4b:85:b8:ab:c6:21:8d:0f:91:07:c7: 23:e3:41:f2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcSFURwV2psstQgszcR8fthWxSFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1 NTlENTMzNzAeFw0yNjA3MjgyMDMyNDNaFw0yNjA3MjkyMjE4NDNaMDMxMTAvBgNV BAMTKDFDMUREQzVEMTI3RjY5NEI2MzIxREI0QUVBMDlCNjkzRTZBRjE4NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDObf8N+Nwp313mMmmZzgk1MkNt /VxZDQ8KeP3sTcM6dfxPmoM1XKK9bac3XTANH8J41m8hFrvTJ8jN5DnZ/eWHvUqg wiJqdC1EExA6WsDzcdk3drZgfu7au18Vq6+IexGuP3Oe1kfQ5xWD3TmTGR6dyIFX qgt1bR1eq3GxmDpWYt1Epu8cpv/XbrJA0v0cauF04HpoNlBptwtseGyxEutFctqH wYNRL1lsUNlIkYOSs9EjNa2V37adVZkIMmMejq3sg2DTys7bPtXHR8VL+Twb/R7S HUyllYWutJOK2QGb/0aqGWPY4WuNebmwJ86Ve+NDXdjhMomQ2KLQcw9s7CC7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHB3cXRJ/aUtjIdtK6gm2k+avGFMwHwYDVR0j BBgwFoAUla+0UV1iihGG0ghpz+r0fVWdUzcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzUyMDY0My8wLzk1QUZCNDUxNUQ2MjhBMTE4NkQyMDg2OUNGRUFG NDdENTU5RDUzMzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1NTlENTMzNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1MjA2NDMvMC85NUFGQjQ1MTVENjI4 QTExODZEMjA4NjlDRkVBRjQ3RDU1OUQ1MzM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNMDg10C96Qa m2KWc0JRbGtbPOa+5gp82FHIiziV46d4b1/y49VfiEzDEVU9R6hGpcMaUOuy27IQ 070IQskHZNKlEkgBXWTy8bfBH8j/L/PHVu9zIzKCvCB56tkCOLh3ZWgJTNnd86fj hm46nH4bCdM0EgaqMQRp1nOq+bZrstDsllCMm7DuV2V3zJcL3Ty0VP2hP/YbeVC3 4COZ4VoLxkbGKzgqIia1wi7tTcwPtqHi1EQSvlKEepm4rvZc4jww3y2M2VRMb15u v4Th/6/XwQux1155uaomknkK/qI1u/0A4rEvnPi3zinMA/TCyDLvl0uFuKvGIY0P kQfHI+NB8g== -----END CERTIFICATE-----Generated at Wed Jul 29 08:32:44 2026 by rpki-client