$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft File: 95AFB4515D628A1186D20869CFEAF47D559D5337.mft (raw, json) Hash identifier: h2Rz0DEqxvcKS2Tkr1iMwoZqqQPWRzVqszS25HgJeos= Subject key identifier: 4C:84:0C:79:02:8B:4F:3E:25:D7:A8:74:04:74:99:D2:80:E6:73:46 Authority key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 Certificate issuer: /CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Certificate serial: 7C84C12E4BFFA8555E378BCDC98BA539848C4304 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft Manifest number: 75 Signing time: Fri 17 Apr 2026 02:14:38 +0000 Manifest this update: Fri 17 Apr 2026 02:09:38 +0000 Manifest next update: Sat 18 Apr 2026 05:51:38 +0000 Files and hashes: 1: 3130332e3233362e35322e302f32322d3234203d3e2034383136.roa (hash: L/Cnxt0IMPqrkk567v66pELmHjh0mHTQ9LGRguxjotg=) 2: 3130332e3233362e36302e302f32322d3234203d3e2034383136.roa (hash: p2Lh6mSEt8F+Pz43e7M48ZQE8zJIT8aede1FEWphpKg=) 3: 95AFB4515D628A1186D20869CFEAF47D559D5337.crl (hash: yoRy1qWui8cTA8lulxPXeseMGOUSJLLe8X394wdPbAE=) 4: 3130332e3233362e35362e302f32322d3234203d3e2034383136.roa (hash: nU9td8FSbjkxq8qr2OaWckCpycvpgcxXULdnzQhot1w=) 5: 3130332e3130392e32302e302f32322d3234203d3e2034383136.roa (hash: Ir54i6mCJphe0tTKRNEplWXjiN5Eyqy0jZSjS9oxoak=) 6: 3130332e3233362e36342e302f32322d3234203d3e2034383136.roa (hash: 9KFTHxz/y51ykUofxUnbpegbRUp/wwAex2kCfyHmCB0=) 7: 3231312e3136312e3232342e302f32302d3234203d3e2034383136.roa (hash: 7ESkoMdtrmm8SQWjAiVoIXlCHKhBj+bnSHyVsBLhiTg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:84:c1:2e:4b:ff:a8:55:5e:37:8b:cd:c9:8b:a5:39:84:8c:43:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Validity Not Before: Apr 17 02:09:38 2026 GMT Not After : Apr 18 05:51:38 2026 GMT Subject: CN=4C840C79028B4F3E25D7A874047499D280E67346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c0:62:79:78:d0:e6:bb:55:f3:cb:05:55:8d: 21:8e:f0:4e:4a:6e:d6:d3:0d:8c:fd:8b:64:5d:cc: 21:c9:bb:2e:08:39:38:6b:d8:96:e7:70:5f:82:35: 9f:a3:be:ce:84:82:ce:6d:09:93:ae:25:0e:28:69: 04:2d:27:a3:fb:45:b1:e0:eb:49:48:5f:46:e2:9d: a6:ee:5f:cf:fa:1d:5e:d9:d3:27:00:e8:b7:a5:75: 8f:0d:bf:cc:d8:47:40:ed:2b:e9:69:0d:fd:fd:59: 75:67:dc:53:54:0f:2a:35:1f:8e:d2:68:58:85:70: b3:9d:45:bc:70:c3:6a:17:a4:93:8b:4a:3d:b1:f9: a0:a0:f2:4e:51:f2:15:8e:35:a5:9f:0c:3e:9f:4e: 07:48:51:d5:31:6d:9e:c2:c4:50:92:e9:19:c1:56: 5d:bf:b6:f3:54:a5:11:c1:ed:f1:10:aa:5e:e7:ff: 69:8d:e8:e0:bd:57:e2:49:9f:ed:c7:9e:3d:45:91: f5:e6:b1:ef:7b:56:93:b8:3c:b3:c5:c1:df:46:e3: dd:a4:ff:51:38:30:7b:0b:1a:a6:a9:99:6e:4d:4f: 83:3e:56:3f:44:79:bd:e9:1f:59:75:6d:e3:f8:00: 25:f1:d8:94:55:a5:84:3d:5d:c6:fb:03:32:8a:89: a6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:84:0C:79:02:8B:4F:3E:25:D7:A8:74:04:74:99:D2:80:E6:73:46 X509v3 Authority Key Identifier: keyid:95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:66:ad:39:92:de:86:2a:b0:aa:d1:cc:f6:9f:ab:c5:34:8b: b2:18:1a:5c:a3:03:4c:a9:f5:24:d7:bc:45:90:05:3d:07:cb: 88:95:c5:fd:a9:b1:63:46:c3:4a:f4:4c:40:3c:84:9f:67:f1: f5:d5:5b:dd:58:56:2b:ae:12:3a:32:44:32:29:62:6c:46:a8: 45:28:7d:98:b0:30:79:49:89:6b:2f:d5:fa:cc:00:c1:48:0e: 96:e8:5a:f5:dc:57:16:b6:cd:7a:e0:45:cf:8d:cb:0a:54:50: 8b:ba:b4:0a:c2:e5:65:fd:42:82:49:94:6a:2c:28:15:6e:d9: 53:20:78:14:2e:80:df:ad:86:76:c5:58:37:a6:b8:40:14:ca: 37:94:4f:ab:a3:e1:6a:41:6a:8c:e1:ef:29:40:49:51:27:a3: 5a:8e:4d:13:66:2a:de:d4:97:f5:06:34:27:25:76:c0:6b:00: 36:ac:5c:03:8d:39:7a:04:52:20:ea:af:7c:65:72:d9:6c:ad: cf:6e:35:47:1b:b9:43:77:10:74:9f:ce:96:59:e0:6c:f4:3d: ef:18:b8:e4:4b:94:a8:5a:5a:14:e0:14:d6:eb:92:ee:b4:8f: 2f:91:7a:4b:2e:45:21:77:f4:14:7e:00:73:9c:97:a7:11:4d: 2c:12:2d:9b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfITBLkv/qFVeN4vNyYulOYSMQwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1 NTlENTMzNzAeFw0yNjA0MTcwMjA5MzhaFw0yNjA0MTgwNTUxMzhaMDMxMTAvBgNV BAMTKDRDODQwQzc5MDI4QjRGM0UyNUQ3QTg3NDA0NzQ5OUQyODBFNjczNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPwGJ5eNDmu1XzywVVjSGO8E5K btbTDYz9i2RdzCHJuy4IOThr2JbncF+CNZ+jvs6Egs5tCZOuJQ4oaQQtJ6P7RbHg 60lIX0binabuX8/6HV7Z0ycA6LeldY8Nv8zYR0DtK+lpDf39WXVn3FNUDyo1H47S aFiFcLOdRbxww2oXpJOLSj2x+aCg8k5R8hWONaWfDD6fTgdIUdUxbZ7CxFCS6RnB Vl2/tvNUpRHB7fEQql7n/2mN6OC9V+JJn+3Hnj1FkfXmse97VpO4PLPFwd9G492k /1E4MHsLGqapmW5NT4M+Vj9Eeb3pH1l1beP4ACXx2JRVpYQ9Xcb7AzKKiablAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTIQMeQKLTz4l16h0BHSZ0oDmc0YwHwYDVR0j BBgwFoAUla+0UV1iihGG0ghpz+r0fVWdUzcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzUyMDY0My8wLzk1QUZCNDUxNUQ2MjhBMTE4NkQyMDg2OUNGRUFG NDdENTU5RDUzMzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1NTlENTMzNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1MjA2NDMvMC85NUFGQjQ1MTVENjI4 QTExODZEMjA4NjlDRkVBRjQ3RDU1OUQ1MzM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGatOZLehiqw qtHM9p+rxTSLshgaXKMDTKn1JNe8RZAFPQfLiJXF/amxY0bDSvRMQDyEn2fx9dVb 3VhWK64SOjJEMilibEaoRSh9mLAweUmJay/V+swAwUgOluha9dxXFrbNeuBFz43L ClRQi7q0CsLlZf1CgkmUaiwoFW7ZUyB4FC6A362GdsVYN6a4QBTKN5RPq6PhakFq jOHvKUBJUSejWo5NE2Yq3tSX9QY0JyV2wGsANqxcA405egRSIOqvfGVy2Wytz241 Rxu5Q3cQdJ/OllngbPQ97xi45EuUqFpaFOAU1uuS7rSPL5F6Sy5FIXf0FH4Ac5yX pxFNLBItmw== -----END CERTIFICATE-----Generated at Fri Apr 17 16:19:23 2026 by rpki-client