$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft File: 995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft (raw, json) Hash identifier: QBvuI8rmTDYwhqJ77b34L0bvXtkdFu7zSRTxXPGirJQ= Subject key identifier: 8A:76:B6:3E:04:14:E3:B1:A7:78:02:34:4C:6F:A0:46:E0:C9:3C:D1 Authority key identifier: 99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C Certificate issuer: /CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Certificate serial: 601A3BB44F7A86ED137CDBFB8F5B73E18D24AE84 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft Manifest number: 8A Signing time: Wed 29 Jul 2026 08:43:54 +0000 Manifest this update: Wed 29 Jul 2026 08:38:54 +0000 Manifest next update: Thu 30 Jul 2026 10:07:54 +0000 Files and hashes: 1: 995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl (hash: tYqTeqUhW5yE+Y3GKrNUug6YbElUitC9YMRN6vLBVdc=) 2: 3130332e3130382e3234342e302f32342d3234203d3e203137363231.roa (hash: 2vlfLeMmGPjeaZPUEbjFHqo4xA0gQau0xrYELgWA3GA=) 3: 3130332e3130382e3234372e302f32342d3234203d3e203137363231.roa (hash: s+D2jjcXHT/GQYsoTxwHVqiHduQEa+gXupnaABFCM4o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:1a:3b:b4:4f:7a:86:ed:13:7c:db:fb:8f:5b:73:e1:8d:24:ae:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Validity Not Before: Jul 29 08:38:54 2026 GMT Not After : Jul 30 10:07:54 2026 GMT Subject: CN=8A76B63E0414E3B1A77802344C6FA046E0C93CD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:2c:8a:80:98:c5:54:b4:c9:75:e2:92:c7:46: 01:24:39:34:c5:4e:88:56:a4:e0:50:94:66:92:56: 32:3f:17:95:43:c2:a7:1a:29:18:5d:45:2b:24:9d: 31:b8:e1:a7:ce:5e:c2:2d:2f:88:c3:b2:86:16:f2: a8:a3:be:ff:65:56:67:02:7d:8c:60:27:ba:e6:8f: da:6b:3c:7d:44:70:f8:ce:5d:b2:c4:09:76:5c:9c: ca:39:87:c7:58:af:ca:78:0c:20:0d:63:41:0b:5b: 01:5a:f8:24:3e:69:b7:94:11:35:d7:39:09:3f:66: b1:dd:48:bb:04:66:85:46:82:1c:c3:9f:90:ba:52: 56:b4:65:d7:4c:e1:25:a9:49:d8:3e:45:4a:67:d4: 51:03:7a:61:89:b0:94:c4:e8:18:a0:ca:39:3c:7a: 7b:16:36:e4:24:e1:3f:e8:79:71:54:ee:d3:26:da: cb:06:eb:fd:55:51:0f:be:f0:a7:0d:9b:62:09:b9: 85:14:ee:2d:dc:50:14:6f:d0:67:27:da:24:7f:d3: db:71:8a:01:a4:95:41:3b:0c:9d:72:a0:4f:b0:ca: 3c:f1:f8:d6:b7:0e:00:5c:ad:fd:b0:e8:55:b1:59: 89:08:7f:6f:6a:e4:22:02:73:a8:c9:b5:da:97:e9: 82:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:76:B6:3E:04:14:E3:B1:A7:78:02:34:4C:6F:A0:46:E0:C9:3C:D1 X509v3 Authority Key Identifier: keyid:99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:5a:64:1e:84:6c:50:10:e4:bf:da:3e:ff:17:f5:dd:ae:84: 35:4a:e6:30:a3:86:70:4d:f7:37:d7:0d:ab:ef:24:82:aa:e6: 5b:c3:11:fd:11:fa:2a:8a:39:e2:7f:0a:71:c1:fd:4a:0b:a7: d4:3b:62:9d:14:de:d2:b1:6f:4b:e0:67:58:5d:d8:54:01:9a: d5:d2:ef:44:d1:8d:c0:4a:29:db:15:86:a9:6f:d7:4d:ff:d4: b4:6e:28:20:b1:2e:c9:84:cd:39:78:2a:6d:78:2d:29:41:79: bd:a4:6f:8b:98:79:8f:de:5c:dc:d1:5c:f8:5a:a4:01:93:b9: 20:61:76:89:22:b5:87:cb:20:bd:7b:a5:0a:0b:dd:f3:8c:d0: aa:71:ec:c7:91:de:d0:93:b7:f5:45:f8:4f:89:98:47:11:6a: 94:1d:1b:80:a0:f4:61:45:e7:c7:de:f8:b3:59:c6:4d:2c:9d: d3:e8:4b:be:18:66:37:97:78:77:8f:33:bc:55:95:52:46:0e: 88:e3:2c:03:48:52:a3:bf:a9:4f:7b:fb:fd:03:05:32:ea:72: ca:d7:b4:3e:b0:b8:e6:18:22:6b:df:3b:79:38:bd:b5:f3:44: 95:9e:4a:7c:07:aa:5b:70:6e:e2:4a:a1:c6:2c:c5:84:bb:51: a2:49:a1:4a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYBo7tE96hu0TfNv7j1tz4Y0kroQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMy RTBDNkY5QzAeFw0yNjA3MjkwODM4NTRaFw0yNjA3MzAxMDA3NTRaMDMxMTAvBgNV BAMTKDhBNzZCNjNFMDQxNEUzQjFBNzc4MDIzNDRDNkZBMDQ2RTBDOTNDRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtLIqAmMVUtMl14pLHRgEkOTTF TohWpOBQlGaSVjI/F5VDwqcaKRhdRSsknTG44afOXsItL4jDsoYW8qijvv9lVmcC fYxgJ7rmj9prPH1EcPjOXbLECXZcnMo5h8dYr8p4DCANY0ELWwFa+CQ+abeUETXX OQk/ZrHdSLsEZoVGghzDn5C6Ula0ZddM4SWpSdg+RUpn1FEDemGJsJTE6Bigyjk8 ensWNuQk4T/oeXFU7tMm2ssG6/1VUQ++8KcNm2IJuYUU7i3cUBRv0Gcn2iR/09tx igGklUE7DJ1yoE+wyjzx+Na3DgBcrf2w6FWxWYkIf29q5CICc6jJtdqX6YLVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUina2PgQU47GneAI0TG+gRuDJPNEwHwYDVR0j BBgwFoAUmVugHAsJJXPK3VYjBYu7bC4Mb5wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODg2Njc0ODMyMjQ4MDEyOS8wLzk5NUJBMDFDMEIwOTI1NzNDQURENTYyMzA1OEJC QjZDMkUwQzZGOUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMyRTBDNkY5Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg4NjY3NDgzMjI0ODAxMjkvMC85OTVCQTAxQzBCMDky NTczQ0FERDU2MjMwNThCQkI2QzJFMEM2RjlDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlpkHoRsUBDk v9o+/xf13a6ENUrmMKOGcE33N9cNq+8kgqrmW8MR/RH6Koo54n8KccH9Sgun1Dti nRTe0rFvS+BnWF3YVAGa1dLvRNGNwEop2xWGqW/XTf/UtG4oILEuyYTNOXgqbXgt KUF5vaRvi5h5j95c3NFc+FqkAZO5IGF2iSK1h8sgvXulCgvd84zQqnHsx5He0JO3 9UX4T4mYRxFqlB0bgKD0YUXnx974s1nGTSyd0+hLvhhmN5d4d48zvFWVUkYOiOMs A0hSo7+pT3v7/QMFMupyyte0PrC45hgia987eTi9tfNElZ5KfAeqW3Bu4kqhxizF hLtRokmhSg== -----END CERTIFICATE-----Generated at Wed Jul 29 11:25:49 2026 by rpki-client