$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft File: 95AFB4515D628A1186D20869CFEAF47D559D5337.mft (raw, json) Hash identifier: uaFTOdebguUyqPKGlZIWAonpgqLj0S1DMtOnqpvVvSE= Subject key identifier: A6:B9:BF:4D:CC:16:4B:56:5D:FC:08:D9:46:DA:E0:1B:62:48:87:29 Authority key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 Certificate issuer: /CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Certificate serial: 77407150B4C543669F474E4CE51794F356540C81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft Manifest number: 38 Signing time: Mon 02 Mar 2026 01:03:16 +0000 Manifest this update: Mon 02 Mar 2026 00:58:16 +0000 Manifest next update: Tue 03 Mar 2026 04:19:16 +0000 Files and hashes: 1: 95AFB4515D628A1186D20869CFEAF47D559D5337.crl (hash: BXXBdWNgPtDYSzIG+QDr2yELrPSMLi0OpKoGxtXuUWM=) 2: 3130332e3233362e36302e302f32322d3234203d3e2034383136.roa (hash: p2Lh6mSEt8F+Pz43e7M48ZQE8zJIT8aede1FEWphpKg=) 3: 3130332e3233362e36342e302f32322d3234203d3e2034383136.roa (hash: 9KFTHxz/y51ykUofxUnbpegbRUp/wwAex2kCfyHmCB0=) 4: 3130332e3130392e32302e302f32322d3234203d3e2034383136.roa (hash: Ir54i6mCJphe0tTKRNEplWXjiN5Eyqy0jZSjS9oxoak=) 5: 3130332e3233362e35322e302f32322d3234203d3e2034383136.roa (hash: L/Cnxt0IMPqrkk567v66pELmHjh0mHTQ9LGRguxjotg=) 6: 3130332e3233362e35362e302f32322d3234203d3e2034383136.roa (hash: nU9td8FSbjkxq8qr2OaWckCpycvpgcxXULdnzQhot1w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:40:71:50:b4:c5:43:66:9f:47:4e:4c:e5:17:94:f3:56:54:0c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Validity Not Before: Mar 2 00:58:16 2026 GMT Not After : Mar 3 04:19:16 2026 GMT Subject: CN=A6B9BF4DCC164B565DFC08D946DAE01B62488729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:e6:60:09:f7:b7:16:a4:ca:15:f5:a6:82: 0e:7b:67:a3:1a:86:8d:e1:06:e2:35:3f:0e:91:df: 4c:d0:6d:fa:75:56:92:b4:17:e8:04:3d:a3:f3:88: 7d:bf:4d:a0:3b:22:5c:c2:33:97:dc:72:ad:07:ce: 30:cf:bc:e8:93:dc:d5:93:69:03:2f:4f:aa:0b:d0: 58:dd:c4:bf:c7:7a:02:6f:46:31:7d:77:56:d5:6d: be:1e:58:c5:58:d2:be:2d:fb:fe:e2:23:a6:ac:90: 5f:06:19:e9:ce:46:58:10:21:73:cd:58:0c:43:1c: 4d:14:6d:88:54:c5:76:9c:1d:ee:ee:18:a1:38:78: 48:f4:61:cf:60:e5:04:19:55:af:b2:d9:6e:5c:ec: c3:dc:54:c4:0b:01:6a:e3:f7:d2:67:ce:32:66:63: 02:08:b9:f0:3e:14:04:8f:02:62:b9:3b:e9:a7:af: 77:74:d9:b2:3f:19:8c:f4:f3:71:01:da:b9:59:60: fd:98:1a:33:c3:47:ae:d9:d5:f1:b1:29:81:53:c9: ad:ee:bd:c2:16:7c:b9:fc:3d:af:e3:c7:20:a0:ac: 9b:e5:79:0b:3b:62:d3:99:c8:b7:f8:d4:eb:0b:82: 4b:f2:30:75:a5:03:73:73:8e:f9:1d:75:a0:2f:29: a9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B9:BF:4D:CC:16:4B:56:5D:FC:08:D9:46:DA:E0:1B:62:48:87:29 X509v3 Authority Key Identifier: keyid:95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:42:3c:49:b0:ad:da:59:d9:a2:f8:cf:6d:b9:8d:82:6f:74: 23:91:6c:53:b1:be:61:c7:14:cd:d5:2d:f2:c6:db:68:b6:15: bc:5f:95:36:b7:62:ff:5f:1a:61:3c:b5:9b:95:62:3b:6a:03: c9:e4:73:38:db:65:26:ba:4b:6f:45:87:ce:b4:51:82:b8:98: f8:b0:87:f2:31:85:ef:63:31:c2:b5:c6:e5:fa:f8:ed:4f:f4: ab:04:d1:57:9d:5a:19:5b:b0:f7:93:1f:92:c9:78:18:52:6b: 33:b2:f1:f9:d4:dc:01:f3:af:d2:0c:28:62:78:ed:01:73:12: 59:0c:47:5f:99:a8:0c:4a:64:8f:05:18:d0:be:27:5b:7f:8a: d1:5a:96:cd:b5:db:7e:fc:ff:2f:74:48:ec:90:c0:70:b0:40: b5:c5:a8:b8:50:db:b0:81:51:66:e2:46:8c:df:34:92:70:c4: bd:3a:0f:da:0b:e0:b6:3b:b2:97:37:fc:31:c4:8c:19:0c:1d: 88:9e:4e:33:0f:8d:43:a9:e5:73:b6:71:a4:51:c5:d5:ee:a9: 7b:5d:1c:15:4a:5d:a8:dc:7d:ef:35:37:e2:26:ee:98:26:83: 83:04:23:0a:26:51:5c:cc:40:bd:e9:6c:72:94:11:c7:79:b1: 65:10:41:54 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUd0BxULTFQ2afR05M5ReU81ZUDIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1 NTlENTMzNzAeFw0yNjAzMDIwMDU4MTZaFw0yNjAzMDMwNDE5MTZaMDMxMTAvBgNV BAMTKEE2QjlCRjREQ0MxNjRCNTY1REZDMDhEOTQ2REFFMDFCNjI0ODg3MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCut+ZgCfe3FqTKFfWmgg57Z6Ma ho3hBuI1Pw6R30zQbfp1VpK0F+gEPaPziH2/TaA7IlzCM5fccq0HzjDPvOiT3NWT aQMvT6oL0FjdxL/HegJvRjF9d1bVbb4eWMVY0r4t+/7iI6askF8GGenORlgQIXPN WAxDHE0UbYhUxXacHe7uGKE4eEj0Yc9g5QQZVa+y2W5c7MPcVMQLAWrj99JnzjJm YwIIufA+FASPAmK5O+mnr3d02bI/GYz083EB2rlZYP2YGjPDR67Z1fGxKYFTya3u vcIWfLn8Pa/jxyCgrJvleQs7YtOZyLf41OsLgkvyMHWlA3NzjvkddaAvKanxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUprm/TcwWS1Zd/AjZRtrgG2JIhykwHwYDVR0j BBgwFoAUla+0UV1iihGG0ghpz+r0fVWdUzcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzUyMDY0My8wLzk1QUZCNDUxNUQ2MjhBMTE4NkQyMDg2OUNGRUFG NDdENTU5RDUzMzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1NTlENTMzNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1MjA2NDMvMC85NUFGQjQ1MTVENjI4 QTExODZEMjA4NjlDRkVBRjQ3RDU1OUQ1MzM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkI8SbCt2lnZ ovjPbbmNgm90I5FsU7G+YccUzdUt8sbbaLYVvF+VNrdi/18aYTy1m5ViO2oDyeRz ONtlJrpLb0WHzrRRgriY+LCH8jGF72MxwrXG5fr47U/0qwTRV51aGVuw95Mfksl4 GFJrM7Lx+dTcAfOv0gwoYnjtAXMSWQxHX5moDEpkjwUY0L4nW3+K0VqWzbXbfvz/ L3RI7JDAcLBAtcWouFDbsIFRZuJGjN80knDEvToP2gvgtjuylzf8McSMGQwdiJ5O Mw+NQ6nlc7ZxpFHF1e6pe10cFUpdqNx97zU34ibumCaDgwQjCiZRXMxAvelscpQR x3mxZRBBVA== -----END CERTIFICATE-----Generated at Mon Mar 2 12:54:23 2026 by rpki-client