$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft File: 995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft (raw, json) Hash identifier: Acmy4Y3jnyzuq+rymaWS+lhRvScSff4HJeGkOIOugnc= Subject key identifier: 06:BD:E9:9A:49:49:47:8B:93:04:D5:4C:FC:49:C2:1F:1A:90:D1:2C Authority key identifier: 99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C Certificate issuer: /CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Certificate serial: 25D0B434A095E50CD4CDE3A5FDEDE7F943777E4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft Manifest number: C7 Signing time: Sun 11 Oct 2026 17:35:46 +0000 Manifest this update: Sun 11 Oct 2026 17:30:46 +0000 Manifest next update: Wed 14 Oct 2026 20:07:46 +0000 Files and hashes: 1: 995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl (hash: dHHNt8ik1gSTAzGV5IH3A8hrNCZzhlgXTgxADNu/EJE=) 2: 3130332e3130382e3234372e302f32342d3234203d3e203137363231.roa (hash: s+D2jjcXHT/GQYsoTxwHVqiHduQEa+gXupnaABFCM4o=) 3: 3130332e3130382e3234342e302f32342d3234203d3e203137363231.roa (hash: 2vlfLeMmGPjeaZPUEbjFHqo4xA0gQau0xrYELgWA3GA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 20:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:d0:b4:34:a0:95:e5:0c:d4:cd:e3:a5:fd:ed:e7:f9:43:77:7e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Validity Not Before: Oct 11 17:30:46 2026 GMT Not After : Oct 14 20:07:46 2026 GMT Subject: CN=06BDE99A4949478B9304D54CFC49C21F1A90D12C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:eb:07:c4:0d:ee:5d:30:72:a5:33:09:6a: e1:f3:df:6a:8b:ba:1c:bc:82:54:1a:2d:0f:ec:c3: f1:e5:dc:4c:61:9c:b8:18:24:03:48:fe:03:d3:c1: b9:ae:d3:bb:00:32:46:1d:00:6e:08:35:08:ee:74: 53:39:d9:cd:e4:a9:da:d8:59:53:73:ff:7c:13:1d: b6:96:77:a4:1f:2e:83:72:af:cd:5b:29:ee:44:10: d4:88:5b:02:e4:df:84:a4:b7:45:97:21:55:8c:e3: 83:0f:d5:93:6a:a4:a8:8a:b8:1e:9e:ff:98:38:1f: 72:af:49:fe:97:ba:c0:31:a8:cc:aa:09:20:4c:81: 18:ba:a2:d7:ec:d2:7f:0f:24:15:81:c7:a3:06:c5: 5d:1c:1e:0d:e1:31:ef:86:c9:13:40:be:62:c6:82: df:b2:0e:41:c0:45:44:aa:38:8c:c9:28:92:47:1a: 84:97:57:49:a1:2c:65:a1:8b:e4:23:b3:d9:e7:a9: cc:6d:3c:55:04:e5:3b:9f:4a:cc:1f:61:76:19:9a: b8:43:07:6a:b8:2c:04:cb:fb:7e:87:70:86:f2:58: 09:ad:ce:60:20:7a:13:e0:99:aa:4c:4c:3c:ab:ca: ec:a2:03:77:49:27:d6:44:5c:9c:64:3e:02:ee:5a: 97:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BD:E9:9A:49:49:47:8B:93:04:D5:4C:FC:49:C2:1F:1A:90:D1:2C X509v3 Authority Key Identifier: keyid:99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:9f:66:f7:c9:16:51:7d:65:63:a1:d8:9e:37:21:17:ea:29: 00:16:3b:45:13:18:3c:cc:d4:4a:e5:d0:b7:ea:58:73:95:ac: ae:2e:90:f4:d7:23:51:e7:85:a1:91:79:dc:34:f2:e8:cb:71: 85:d8:fd:52:3e:c8:de:57:00:dc:fe:d8:16:43:96:02:be:58: df:4c:16:72:16:ec:4d:a8:29:8a:8e:f0:e5:77:e4:dd:21:5f: a2:56:38:e0:ec:71:19:97:7a:e5:8b:a9:91:47:2d:26:9b:34: 68:1c:45:d1:9e:a1:a3:ef:5b:69:ee:68:4c:2d:d1:91:01:03: 3d:88:8a:7c:01:4c:d5:29:7c:42:d7:31:d6:78:ba:27:cb:3c: 44:ec:f4:18:38:15:9d:e5:ff:85:c7:ea:d3:7c:89:6c:63:61: 77:33:34:ec:2a:38:f9:25:e6:49:36:d4:35:b5:5f:73:f2:3e: b3:54:29:4f:bd:d9:0d:e9:c7:ae:4c:a1:c6:31:57:55:67:31: 93:12:9a:46:37:3c:47:a4:a4:b0:db:2c:ed:0f:58:f8:9f:97: 64:3f:68:e7:20:1f:f6:88:f4:22:37:e3:b1:a1:1a:bb:7e:9f: 99:3c:0f:71:a8:56:fc:94:52:73:46:8b:cb:e9:3d:24:be:79: 50:be:89:e5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJdC0NKCV5QzUzeOl/e3n+UN3fk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMy RTBDNkY5QzAeFw0yNjEwMTExNzMwNDZaFw0yNjEwMTQyMDA3NDZaMDMxMTAvBgNV BAMTKDA2QkRFOTlBNDk0OTQ3OEI5MzA0RDU0Q0ZDNDlDMjFGMUE5MEQxMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC42esHxA3uXTBypTMJauHz32qL uhy8glQaLQ/sw/Hl3ExhnLgYJANI/gPTwbmu07sAMkYdAG4INQjudFM52c3kqdrY WVNz/3wTHbaWd6QfLoNyr81bKe5EENSIWwLk34Skt0WXIVWM44MP1ZNqpKiKuB6e /5g4H3KvSf6XusAxqMyqCSBMgRi6otfs0n8PJBWBx6MGxV0cHg3hMe+GyRNAvmLG gt+yDkHARUSqOIzJKJJHGoSXV0mhLGWhi+Qjs9nnqcxtPFUE5TufSswfYXYZmrhD B2q4LATL+36HcIbyWAmtzmAgehPgmapMTDyryuyiA3dJJ9ZEXJxkPgLuWpfHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBr3pmklJR4uTBNVM/EnCHxqQ0SwwHwYDVR0j BBgwFoAUmVugHAsJJXPK3VYjBYu7bC4Mb5wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODg2Njc0ODMyMjQ4MDEyOS8wLzk5NUJBMDFDMEIwOTI1NzNDQURENTYyMzA1OEJC QjZDMkUwQzZGOUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMyRTBDNkY5Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg4NjY3NDgzMjI0ODAxMjkvMC85OTVCQTAxQzBCMDky NTczQ0FERDU2MjMwNThCQkI2QzJFMEM2RjlDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJ9m98kWUX1l Y6HYnjchF+opABY7RRMYPMzUSuXQt+pYc5Wsri6Q9NcjUeeFoZF53DTy6Mtxhdj9 Uj7I3lcA3P7YFkOWAr5Y30wWchbsTagpio7w5Xfk3SFfolY44OxxGZd65YupkUct Jps0aBxF0Z6ho+9bae5oTC3RkQEDPYiKfAFM1Sl8Qtcx1ni6J8s8ROz0GDgVneX/ hcfq03yJbGNhdzM07Co4+SXmSTbUNbVfc/I+s1QpT73ZDenHrkyhxjFXVWcxkxKa Rjc8R6SksNss7Q9Y+J+XZD9o5yAf9oj0IjfjsaEau36fmTwPcahW/JRSc0aLy+k9 JL55UL6J5Q== -----END CERTIFICATE-----Generated at Tue Oct 13 00:04:09 2026 by rpki-client