$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft File: 995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft (raw, json) Hash identifier: U+Al9NJqVRlcoXFVN9C/DrzZ61y+XrU3Od9VlcKnPEQ= Subject key identifier: D8:8D:26:75:E4:1A:A0:20:8C:E9:A8:09:72:3E:EE:AE:A1:93:EF:36 Authority key identifier: 99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C Certificate issuer: /CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Certificate serial: 3640EF84B02E6F39D61B5114D3DDBE971E4AE422 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft Manifest number: 4D Signing time: Sat 13 Jun 2026 20:52:13 +0000 Manifest this update: Sat 13 Jun 2026 20:47:13 +0000 Manifest next update: Sun 14 Jun 2026 23:21:13 +0000 Files and hashes: 1: 3130332e3130382e3234372e302f32342d3234203d3e203137363231.roa (hash: s+D2jjcXHT/GQYsoTxwHVqiHduQEa+gXupnaABFCM4o=) 2: 995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl (hash: skSBsUdvQBsVPwkg3K2f0pBHvJewpnndCWcMXOaKVfI=) 3: 3130332e3130382e3234342e302f32342d3234203d3e203137363231.roa (hash: 2vlfLeMmGPjeaZPUEbjFHqo4xA0gQau0xrYELgWA3GA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:40:ef:84:b0:2e:6f:39:d6:1b:51:14:d3:dd:be:97:1e:4a:e4:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Validity Not Before: Jun 13 20:47:13 2026 GMT Not After : Jun 14 23:21:13 2026 GMT Subject: CN=D88D2675E41AA0208CE9A809723EEEAEA193EF36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:ea:9f:fa:19:7b:5e:62:bf:78:b1:fd:38: 29:ca:fe:24:71:9b:a9:08:65:97:0d:41:7c:ab:f7: 5b:0d:79:98:58:7d:f1:e2:0e:d1:44:e0:88:67:b6: ca:b6:40:32:2d:f4:f2:f0:20:04:a1:76:b1:1f:60: a7:cf:c8:c3:9f:df:8d:41:8a:07:0a:66:4b:a4:31: 3c:00:a4:78:68:51:68:2f:f6:8b:07:21:dd:2b:15: 69:7b:e7:4d:af:65:6c:c9:76:21:bb:1e:e2:6a:61: 57:e6:f8:e1:fb:89:6a:8b:31:dc:d5:e9:b0:c2:ee: cb:b9:81:25:18:55:6f:ef:bf:2f:1b:7a:96:dc:f6: 1e:a3:66:45:ca:56:fa:12:ff:2c:14:1a:a0:4a:7f: 50:37:46:0c:64:1e:88:f0:96:7c:62:83:8d:e2:83: 54:1e:f6:e6:01:3d:3a:14:43:98:03:82:84:08:a2: 36:b2:ad:30:23:77:bc:30:4b:e8:e1:da:d0:75:00: 6c:28:64:3f:5a:b1:03:f6:c8:af:78:b8:51:5b:18: ff:88:0d:b9:91:2d:88:51:6f:dd:c0:c1:b9:30:c4: 67:8e:0c:5f:2b:0c:e2:11:b2:ff:1a:b1:ae:4a:a1: f9:ec:ae:24:02:78:07:fe:08:c4:c9:06:6a:fe:09: d0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:8D:26:75:E4:1A:A0:20:8C:E9:A8:09:72:3E:EE:AE:A1:93:EF:36 X509v3 Authority Key Identifier: keyid:99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:2e:0d:5f:1d:d7:d5:9b:c4:0d:50:b9:c5:a9:01:36:91:a9: 96:35:a1:41:16:56:d6:00:8f:ee:07:0a:fd:17:65:b6:2b:02: 62:97:fc:d9:83:94:8a:ca:72:02:e1:ea:0e:30:67:00:11:32: 8e:ce:68:eb:f4:4d:7a:36:b2:7c:4d:b6:eb:b4:65:6b:c7:bf: c3:1b:10:a8:ed:4b:88:72:3a:42:8c:98:1b:dd:5e:25:57:c3: 65:7a:51:01:c1:a7:47:05:88:ec:fa:77:00:18:f5:f9:61:a2: 3e:ed:24:05:af:91:d2:47:a9:96:86:58:71:78:07:d0:be:cf: f1:9f:ad:36:07:b6:06:44:77:d1:e0:02:53:36:b9:87:b6:c5: 6a:db:85:d2:09:b1:e1:6b:ff:d8:58:7a:03:de:65:7c:d8:c3: 7c:67:72:ab:79:64:4c:98:15:06:a3:a6:c2:3a:00:fd:54:00: d2:01:85:7c:00:3d:3f:e9:6a:bc:b9:e6:f4:28:14:23:06:70: 5f:21:53:12:bb:b4:26:1a:03:2a:df:9c:e1:98:a0:09:94:c4: b9:80:24:af:35:e5:4e:12:c7:0f:a5:be:27:77:85:46:85:5c: 00:49:22:bd:51:f8:14:4b:81:68:65:75:a2:2e:2b:b3:59:67: 20:09:bb:bb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNkDvhLAubznWG1EU092+lx5K5CIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMy RTBDNkY5QzAeFw0yNjA2MTMyMDQ3MTNaFw0yNjA2MTQyMzIxMTNaMDMxMTAvBgNV BAMTKEQ4OEQyNjc1RTQxQUEwMjA4Q0U5QTgwOTcyM0VFRUFFQTE5M0VGMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Nuqf+hl7XmK/eLH9OCnK/iRx m6kIZZcNQXyr91sNeZhYffHiDtFE4Ihntsq2QDIt9PLwIAShdrEfYKfPyMOf341B igcKZkukMTwApHhoUWgv9osHId0rFWl7502vZWzJdiG7HuJqYVfm+OH7iWqLMdzV 6bDC7su5gSUYVW/vvy8bepbc9h6jZkXKVvoS/ywUGqBKf1A3RgxkHojwlnxig43i g1Qe9uYBPToUQ5gDgoQIojayrTAjd7wwS+jh2tB1AGwoZD9asQP2yK94uFFbGP+I DbmRLYhRb93AwbkwxGeODF8rDOIRsv8asa5KofnsriQCeAf+CMTJBmr+CdArAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2I0mdeQaoCCM6agJcj7urqGT7zYwHwYDVR0j BBgwFoAUmVugHAsJJXPK3VYjBYu7bC4Mb5wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODg2Njc0ODMyMjQ4MDEyOS8wLzk5NUJBMDFDMEIwOTI1NzNDQURENTYyMzA1OEJC QjZDMkUwQzZGOUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMyRTBDNkY5Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg4NjY3NDgzMjI0ODAxMjkvMC85OTVCQTAxQzBCMDky NTczQ0FERDU2MjMwNThCQkI2QzJFMEM2RjlDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMi4NXx3X1ZvE DVC5xakBNpGpljWhQRZW1gCP7gcK/RdltisCYpf82YOUispyAuHqDjBnABEyjs5o 6/RNejayfE2267Rla8e/wxsQqO1LiHI6QoyYG91eJVfDZXpRAcGnRwWI7Pp3ABj1 +WGiPu0kBa+R0keploZYcXgH0L7P8Z+tNge2BkR30eACUza5h7bFatuF0gmx4Wv/ 2Fh6A95lfNjDfGdyq3lkTJgVBqOmwjoA/VQA0gGFfAA9P+lqvLnm9CgUIwZwXyFT Eru0JhoDKt+c4ZigCZTEuYAkrzXlThLHD6W+J3eFRoVcAEkivVH4FEuBaGV1oi4r s1lnIAm7uw== -----END CERTIFICATE-----Generated at Sun Jun 14 06:31:38 2026 by rpki-client