$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft File: 95AFB4515D628A1186D20869CFEAF47D559D5337.mft (raw, json) Hash identifier: +LQ5wDwkghcZjFBUckDUi6lgUmeMmJ4M0hqFj/nOBh4= Subject key identifier: ED:10:72:64:95:CD:95:3F:56:50:9C:60:97:1D:FD:87:1B:98:9E:96 Authority key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 Certificate issuer: /CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Certificate serial: 5FA276404FE0B4B66D109B4E34BB697951CF4A02 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft Manifest number: C2 Signing time: Sat 13 Jun 2026 18:37:07 +0000 Manifest this update: Sat 13 Jun 2026 18:32:07 +0000 Manifest next update: Sun 14 Jun 2026 22:11:07 +0000 Files and hashes: 1: 3130332e3130392e32302e302f32322d3234203d3e2034383136.roa (hash: Ir54i6mCJphe0tTKRNEplWXjiN5Eyqy0jZSjS9oxoak=) 2: 3130332e3233362e36302e302f32322d3234203d3e2034383136.roa (hash: p2Lh6mSEt8F+Pz43e7M48ZQE8zJIT8aede1FEWphpKg=) 3: 3130332e3233362e35362e302f32322d3234203d3e2034383136.roa (hash: nU9td8FSbjkxq8qr2OaWckCpycvpgcxXULdnzQhot1w=) 4: 95AFB4515D628A1186D20869CFEAF47D559D5337.crl (hash: Shy2hGIm7inFhvcK9tnOC9FftGLAhjHaUwL1vYSPiqQ=) 5: 3231312e3136312e3232342e302f32302d3234203d3e2034383136.roa (hash: 7ESkoMdtrmm8SQWjAiVoIXlCHKhBj+bnSHyVsBLhiTg=) 6: 3130332e3233362e35322e302f32322d3234203d3e2034383136.roa (hash: L/Cnxt0IMPqrkk567v66pELmHjh0mHTQ9LGRguxjotg=) 7: 3130332e3233362e36342e302f32322d3234203d3e2034383136.roa (hash: 9KFTHxz/y51ykUofxUnbpegbRUp/wwAex2kCfyHmCB0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:a2:76:40:4f:e0:b4:b6:6d:10:9b:4e:34:bb:69:79:51:cf:4a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Validity Not Before: Jun 13 18:32:07 2026 GMT Not After : Jun 14 22:11:07 2026 GMT Subject: CN=ED10726495CD953F56509C60971DFD871B989E96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b6:98:98:7e:2a:c6:df:bf:46:ba:25:e2:d7: 23:36:9c:fe:09:49:a6:9a:d3:37:e4:12:e2:1c:a4: d7:4e:69:71:b5:8e:4d:78:38:0f:ed:72:84:dd:9d: 70:44:53:22:22:09:85:22:b7:18:9a:97:b4:1b:a0: 99:c3:71:10:6e:93:c5:f3:72:10:03:1c:a2:7f:b8: 70:02:14:10:e9:19:1f:08:ae:8d:e5:b0:67:60:57: 4c:32:93:24:bf:fc:f5:94:11:62:72:fb:95:a0:42: 18:78:8f:ab:e9:0d:e7:2c:bc:80:14:9b:66:2a:a0: 6d:55:48:c2:e1:d1:78:68:66:5b:8f:eb:3d:ea:67: ca:97:4d:b6:4f:43:17:58:bb:1d:ec:04:f6:1d:51: a7:6a:d6:b0:39:7b:8f:bb:8e:88:66:5c:ea:b2:84: db:d6:b0:70:c9:75:79:cc:82:d8:d4:a6:9d:27:5a: 5e:d2:36:a0:d2:0b:d8:92:8e:31:3b:9d:8e:1c:ee: 4c:1d:78:26:b9:23:3f:86:4f:5b:4e:1c:95:51:75: dd:36:cd:2d:a5:28:04:3e:47:2d:cd:6b:dd:db:ad: 5e:c5:3c:5e:be:cb:1f:4e:b0:f5:fc:bd:89:78:a8: e7:35:8e:cf:02:ee:a1:e5:02:9a:ad:d0:2f:75:b6: 4c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:10:72:64:95:CD:95:3F:56:50:9C:60:97:1D:FD:87:1B:98:9E:96 X509v3 Authority Key Identifier: keyid:95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b5:a9:3c:12:b7:8c:5a:c7:3f:69:be:c7:96:37:ac:ce:e6: 52:57:40:d0:62:17:6a:b4:48:85:e5:d1:d7:5d:32:17:d5:fb: b9:e2:73:5e:48:4a:f9:01:3b:7a:b4:5c:d4:c0:7e:80:e1:f0: 97:8e:c6:55:70:6e:45:02:3f:bf:c9:a1:73:7d:b2:1c:b6:4e: 8b:5c:36:5e:83:35:02:0b:32:69:8c:9a:10:c0:e0:5b:52:b9: 8b:60:e0:69:6d:cb:99:43:f5:3f:66:be:20:84:60:3a:e3:ba: b1:cf:3b:dc:04:1b:5b:41:92:07:da:dd:45:79:e6:33:40:03: b8:75:54:e7:fe:ea:10:01:9d:20:bc:45:93:e3:b3:c3:b5:f9: be:d3:e9:39:e4:78:c4:75:ba:e3:68:39:e2:3e:fa:81:98:ea: 1e:f9:3d:1b:89:b9:1e:4f:d9:78:74:f7:6d:c5:93:13:9f:3e: be:d5:88:0d:46:87:c3:87:91:00:ca:46:e6:25:58:18:35:3d: 38:4b:f7:e9:21:e3:06:76:77:71:e3:92:fb:27:53:72:0d:6c: 0d:6f:9e:44:0a:be:00:1a:fa:f2:ec:5f:a3:62:44:d4:5e:40: 79:a5:1b:16:af:13:9b:4b:f8:b4:2b:db:44:11:b7:fe:36:85: e6:6b:6f:2b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX6J2QE/gtLZtEJtONLtpeVHPSgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1 NTlENTMzNzAeFw0yNjA2MTMxODMyMDdaFw0yNjA2MTQyMjExMDdaMDMxMTAvBgNV BAMTKEVEMTA3MjY0OTVDRDk1M0Y1NjUwOUM2MDk3MURGRDg3MUI5ODlFOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOtpiYfirG379GuiXi1yM2nP4J Saaa0zfkEuIcpNdOaXG1jk14OA/tcoTdnXBEUyIiCYUitxial7QboJnDcRBuk8Xz chADHKJ/uHACFBDpGR8Iro3lsGdgV0wykyS//PWUEWJy+5WgQhh4j6vpDecsvIAU m2YqoG1VSMLh0XhoZluP6z3qZ8qXTbZPQxdYux3sBPYdUadq1rA5e4+7johmXOqy hNvWsHDJdXnMgtjUpp0nWl7SNqDSC9iSjjE7nY4c7kwdeCa5Iz+GT1tOHJVRdd02 zS2lKAQ+Ry3Na93brV7FPF6+yx9OsPX8vYl4qOc1js8C7qHlApqt0C91tkwvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7RByZJXNlT9WUJxglx39hxuYnpYwHwYDVR0j BBgwFoAUla+0UV1iihGG0ghpz+r0fVWdUzcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzUyMDY0My8wLzk1QUZCNDUxNUQ2MjhBMTE4NkQyMDg2OUNGRUFG NDdENTU5RDUzMzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1NTlENTMzNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1MjA2NDMvMC85NUFGQjQ1MTVENjI4 QTExODZEMjA4NjlDRkVBRjQ3RDU1OUQ1MzM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLWpPBK3jFrH P2m+x5Y3rM7mUldA0GIXarRIheXR110yF9X7ueJzXkhK+QE7erRc1MB+gOHwl47G VXBuRQI/v8mhc32yHLZOi1w2XoM1AgsyaYyaEMDgW1K5i2DgaW3LmUP1P2a+IIRg OuO6sc873AQbW0GSB9rdRXnmM0ADuHVU5/7qEAGdILxFk+Ozw7X5vtPpOeR4xHW6 42g54j76gZjqHvk9G4m5Hk/ZeHT3bcWTE58+vtWIDUaHw4eRAMpG5iVYGDU9OEv3 6SHjBnZ3ceOS+ydTcg1sDW+eRAq+ABr68uxfo2JE1F5AeaUbFq8Tm0v4tCvbRBG3 /jaF5mtvKw== -----END CERTIFICATE-----Generated at Sat Jun 13 22:31:58 2026 by rpki-client