$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft File: 95B08F18D0CF8E4AFAD49A08A907521317F19024.mft (raw, json) Hash identifier: Y/aHIaN7KkeGslTnV853nmSrgbpIBK1YmmjdSynG7k0= Subject key identifier: 52:97:68:96:02:9E:62:7C:FB:AA:42:25:D4:96:C4:A3:E2:ED:88:8F Authority key identifier: 95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24 Certificate issuer: /CN=95B08F18D0CF8E4AFAD49A08A907521317F19024 Certificate serial: 318D00A8F97C9A4AEFD60168BF0ADEB655A41C14 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft Manifest number: BB Signing time: Sun 18 Oct 2026 23:40:20 +0000 Manifest this update: Sun 18 Oct 2026 23:35:20 +0000 Manifest next update: Thu 22 Oct 2026 07:07:20 +0000 Files and hashes: 1: 3131352e38342e302e302f31382d3138203d3e203138323339.roa (hash: rOCdXiX+Hr0W66yY0r2Q2lSMIrzkgSFIIyFV6UfYgTg=) 2: 3230322e3134382e39362e302f31392d3139203d3e203138323339.roa (hash: JWBK8+Rdiy6uwBsyhbapdOBX2mjcYjJT67ezz3rHKhE=) 3: 323430333a366130303a3a2f33322d3332203d3e203138323339.roa (hash: JEINhMzkfauQueWUMSFYFDuvhgsd11LfjopwxXAxKZc=) 4: 3231312e3134372e3132382e302f31392d3139203d3e203138323339.roa (hash: LeMAOm4N8qhxkJ0uj/f0hKHJGXu+NKUzYhGKp2R3aPc=) 5: 95B08F18D0CF8E4AFAD49A08A907521317F19024.crl (hash: VIXI+uetqnepqWZ6Ew8/bpDUJ5Jwohocwr6z87J6BQI=) 6: 3231302e37332e36342e302f31392d3139203d3e203138323339.roa (hash: 1GDwncPlsYPbeW8okel7zSVV3jafsi0ew/0QpyVkPsc=) 7: 3231392e3233322e3139322e302f31392d3139203d3e203138323339.roa (hash: 6aMfWBMMpDCsBJHesJ1xnjHna6IScpfcDFlRpDnwQ5U=) 8: 3231302e37352e3139322e302f31392d3139203d3e203138323339.roa (hash: 027EUoyERWAO9UGugZNEma8D4f9DTdiu6kJNHKsmx4Y=) 9: 3231382e3234362e36342e302f31392d3139203d3e203138323339.roa (hash: B7eJVbgoaXaPfuwKdMj7UsIXp2ZukioE6XwEh82GLZM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 07:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:8d:00:a8:f9:7c:9a:4a:ef:d6:01:68:bf:0a:de:b6:55:a4:1c:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95B08F18D0CF8E4AFAD49A08A907521317F19024 Validity Not Before: Oct 18 23:35:20 2026 GMT Not After : Oct 22 07:07:20 2026 GMT Subject: CN=52976896029E627CFBAA4225D496C4A3E2ED888F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f0:4f:95:03:18:33:21:d2:11:67:89:89:91: a1:1b:2b:1c:1a:b3:de:53:20:9c:35:a9:63:77:c6: 44:d2:0b:8a:60:3a:d4:d6:0a:82:02:3b:4d:91:76: 70:d6:70:9e:e3:fa:fe:06:b6:a9:ce:c8:32:24:85: 1b:a0:2e:85:21:c1:30:cb:fb:c3:a9:2d:31:00:79: 6b:45:d5:21:0a:0a:af:a4:dc:99:5e:6a:b7:d4:d6: 88:19:59:b7:fa:b4:c0:47:c5:54:6a:c6:2f:7f:57: 79:ad:00:e6:28:a3:c8:48:41:11:c3:16:8a:5a:6e: 75:08:02:29:c1:8b:a2:ea:c5:ad:7f:49:a1:02:0e: 84:ad:a1:17:25:79:9d:b9:31:85:1a:8e:b1:22:63: 4f:65:7d:0b:3e:b2:87:8a:fe:5d:d2:ff:6c:ad:eb: 1c:f2:0a:1d:5e:db:7d:8d:d1:95:4a:e8:2a:62:d7: fa:20:dc:bb:b9:81:08:b4:da:d5:be:f1:36:96:db: c3:75:fa:49:c9:dc:40:b8:de:b4:6c:54:8d:56:f4: 90:b7:54:f8:79:57:69:6f:9c:e1:3e:2d:44:c6:5f: 3b:3f:3a:b2:fe:dd:dd:e6:14:ae:9a:95:f7:f9:2b: 63:d8:88:20:e6:c2:5c:8f:4b:90:6d:09:03:c2:c4: 32:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:97:68:96:02:9E:62:7C:FB:AA:42:25:D4:96:C4:A3:E2:ED:88:8F X509v3 Authority Key Identifier: keyid:95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:76:6e:5a:0c:f5:30:0b:b6:12:0b:9c:85:d3:37:08:3e:f1: a8:2c:eb:e0:3b:2e:77:e9:69:75:a5:f2:e7:f5:bc:72:44:f0: db:bc:d2:64:d1:78:12:c6:ce:6e:f7:d8:57:10:51:0e:4e:58: dc:a3:e0:ee:50:f8:54:ed:c3:f5:ed:7d:f2:c7:69:32:00:8c: 44:c3:98:ec:34:1d:4a:c0:a5:69:a1:9d:ca:8f:68:01:1d:8d: ad:cf:df:6f:99:54:1a:5e:0f:86:64:92:e3:92:92:8b:39:4a: 7d:c3:d1:29:96:23:dc:1e:b9:72:b7:52:75:d1:3c:b8:4a:38: 6e:00:59:96:22:b1:db:37:11:45:65:7b:c2:d6:86:29:a4:38: 3d:7c:bf:81:59:d4:9c:e7:81:c1:ce:f8:52:8d:f1:6b:5d:e6: 22:be:0d:44:fb:5c:01:45:e5:c0:a3:09:5d:7c:b3:98:fe:85: b7:e3:1f:20:0b:b2:81:07:3a:2c:a4:15:21:36:bb:c0:a6:16: f6:41:da:e8:fb:5e:16:66:8e:ca:a2:c7:6e:69:46:91:26:31: 62:a0:93:48:b3:c3:5e:29:92:b2:77:28:ad:4c:8d:27:61:b6: 78:08:67:a1:76:4a:9d:38:e3:62:24:ae:82:77:e7:2e:92:44: d2:20:a5:4e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMY0AqPl8mkrv1gFovwretlWkHBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVCMDhGMThEMENGOEU0QUZBRDQ5QTA4QTkwNzUyMTMx N0YxOTAyNDAeFw0yNjEwMTgyMzM1MjBaFw0yNjEwMjIwNzA3MjBaMDMxMTAvBgNV BAMTKDUyOTc2ODk2MDI5RTYyN0NGQkFBNDIyNUQ0OTZDNEEzRTJFRDg4OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO8E+VAxgzIdIRZ4mJkaEbKxwa s95TIJw1qWN3xkTSC4pgOtTWCoICO02RdnDWcJ7j+v4GtqnOyDIkhRugLoUhwTDL +8OpLTEAeWtF1SEKCq+k3JlearfU1ogZWbf6tMBHxVRqxi9/V3mtAOYoo8hIQRHD FopabnUIAinBi6Lqxa1/SaECDoStoRcleZ25MYUajrEiY09lfQs+soeK/l3S/2yt 6xzyCh1e232N0ZVK6Cpi1/og3Lu5gQi02tW+8TaW28N1+knJ3EC43rRsVI1W9JC3 VPh5V2lvnOE+LUTGXzs/OrL+3d3mFK6alff5K2PYiCDmwlyPS5BtCQPCxDIHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUpdolgKeYnz7qkIl1JbEo+LtiI8wHwYDVR0j BBgwFoAUlbCPGNDPjkr61JoIqQdSExfxkCQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTY4OTcwNDU1MTU0Njg4Ny8wLzk1QjA4RjE4RDBDRjhFNEFGQUQ0OUEwOEE5MDc1 MjEzMTdGMTkwMjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVCMDhGMThEMENGOEU0QUZBRDQ5QTA4QTkwNzUyMTMxN0YxOTAyNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDE2ODk3MDQ1NTE1NDY4ODcvMC85NUIwOEYxOEQwQ0Y4 RTRBRkFENDlBMDhBOTA3NTIxMzE3RjE5MDI0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHZuWgz1MAu2 EguchdM3CD7xqCzr4Dsud+lpdaXy5/W8ckTw27zSZNF4EsbObvfYVxBRDk5Y3KPg 7lD4VO3D9e198sdpMgCMRMOY7DQdSsClaaGdyo9oAR2Nrc/fb5lUGl4PhmSS45KS izlKfcPRKZYj3B65crdSddE8uEo4bgBZliKx2zcRRWV7wtaGKaQ4PXy/gVnUnOeB wc74Uo3xa13mIr4NRPtcAUXlwKMJXXyzmP6Ft+MfIAuygQc6LKQVITa7wKYW9kHa 6PteFmaOyqLHbmlGkSYxYqCTSLPDXimSsncorUyNJ2G2eAhnoXZKnTjjYiSugnfn LpJE0iClTg== -----END CERTIFICATE-----Generated at Tue Oct 20 05:10:09 2026 by rpki-client