$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft File: 95B08F18D0CF8E4AFAD49A08A907521317F19024.mft (raw, json) Hash identifier: T7en9+V6mRT0tHC5ARPpH0pfm/oGbIkj15X2tp+j0yA= Subject key identifier: FC:90:CC:BD:FE:45:AF:EA:D5:DA:05:D4:67:1B:85:52:33:D4:5A:33 Authority key identifier: 95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24 Certificate issuer: /CN=95B08F18D0CF8E4AFAD49A08A907521317F19024 Certificate serial: 6C9B4A8F7AD14DCAF56868D72324C25A5EC28E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft Manifest number: 3F Signing time: Sun 14 Jun 2026 00:17:28 +0000 Manifest this update: Sun 14 Jun 2026 00:12:28 +0000 Manifest next update: Mon 15 Jun 2026 01:07:28 +0000 Files and hashes: 1: 95B08F18D0CF8E4AFAD49A08A907521317F19024.crl (hash: UCx5PFeqaQpFrt7BhouBAed3JTwhRuLrTgTCXJBaD/I=) 2: 323430333a366130303a3a2f33322d3332203d3e203138323339.roa (hash: JEINhMzkfauQueWUMSFYFDuvhgsd11LfjopwxXAxKZc=) 3: 3131352e38342e302e302f31382d3138203d3e203138323339.roa (hash: rOCdXiX+Hr0W66yY0r2Q2lSMIrzkgSFIIyFV6UfYgTg=) 4: 3231312e3134372e3132382e302f31392d3139203d3e203138323339.roa (hash: LeMAOm4N8qhxkJ0uj/f0hKHJGXu+NKUzYhGKp2R3aPc=) 5: 3231382e3234362e36342e302f31392d3139203d3e203138323339.roa (hash: B7eJVbgoaXaPfuwKdMj7UsIXp2ZukioE6XwEh82GLZM=) 6: 3231302e37332e36342e302f31392d3139203d3e203138323339.roa (hash: 1GDwncPlsYPbeW8okel7zSVV3jafsi0ew/0QpyVkPsc=) 7: 3231392e3233322e3139322e302f31392d3139203d3e203138323339.roa (hash: 6aMfWBMMpDCsBJHesJ1xnjHna6IScpfcDFlRpDnwQ5U=) 8: 3230322e3134382e39362e302f31392d3139203d3e203138323339.roa (hash: JWBK8+Rdiy6uwBsyhbapdOBX2mjcYjJT67ezz3rHKhE=) 9: 3231302e37352e3139322e302f31392d3139203d3e203138323339.roa (hash: 027EUoyERWAO9UGugZNEma8D4f9DTdiu6kJNHKsmx4Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:9b:4a:8f:7a:d1:4d:ca:f5:68:68:d7:23:24:c2:5a:5e:c2:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95B08F18D0CF8E4AFAD49A08A907521317F19024 Validity Not Before: Jun 14 00:12:28 2026 GMT Not After : Jun 15 01:07:28 2026 GMT Subject: CN=FC90CCBDFE45AFEAD5DA05D4671B855233D45A33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:82:ac:00:d9:a4:b4:88:d2:df:18:67:ff:d9: 75:03:fb:48:56:d4:51:c4:c0:e6:52:73:b2:e1:59: 42:8b:2d:29:2a:bb:44:6a:b7:00:01:4c:5c:5b:c4: f5:93:c2:0f:dc:57:ba:f1:c3:e3:ae:f2:42:1c:47: ae:c9:2a:4b:90:8b:d6:dc:66:56:3f:eb:04:13:db: 6c:72:3b:bd:e4:5b:7c:d8:21:a3:57:d4:34:be:0a: 2a:9a:7e:93:eb:ef:ac:84:bb:be:33:19:2b:28:25: 50:b4:ac:06:fd:d6:1a:81:42:97:eb:fb:dc:4d:e2: c4:53:d5:2b:6c:32:72:98:ac:b9:55:97:70:71:72: 5b:47:c1:08:71:26:74:de:bf:5f:8c:e8:64:72:75: 3f:4d:b1:97:bf:c4:22:21:2c:46:9d:7b:d3:5c:57: d3:3f:fb:e9:69:fa:32:d8:13:f3:69:ff:ec:48:d9: 8a:f0:33:a6:a0:f3:85:a5:a1:82:7e:13:4d:c3:b8: 5d:8b:b8:87:40:1f:a1:a0:36:7a:92:b5:93:f0:3d: 82:ac:7c:2b:87:c2:89:cf:ed:9b:67:22:02:92:a7: 5a:f4:40:ea:bf:5b:07:28:5f:1f:c1:8c:99:b4:1b: d0:a3:c2:40:68:52:11:ce:39:0e:be:9d:e2:e3:a4: 9d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:90:CC:BD:FE:45:AF:EA:D5:DA:05:D4:67:1B:85:52:33:D4:5A:33 X509v3 Authority Key Identifier: keyid:95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:fc:ad:5e:75:f3:ef:7b:b3:b5:b0:ce:88:21:85:39:80:30: 13:5c:79:a6:e8:98:ba:b9:2e:08:a3:1c:77:d1:d5:1b:12:88: 3a:ce:38:5d:91:8a:47:42:95:3f:4a:80:c1:ff:bd:66:b4:a9: dc:7c:cf:53:33:f5:c7:dc:7c:c2:0a:20:09:18:05:2a:7e:d9: e2:05:90:bd:cd:b2:7a:a7:22:05:6c:86:5f:09:5e:3b:38:aa: ee:57:76:b8:91:ab:fe:61:16:31:27:cf:5f:05:3b:5f:0a:f6: c2:6a:57:78:54:45:bc:f4:ad:c9:19:9a:74:4a:b4:eb:9e:15: ec:8d:8a:2a:6e:67:9b:7c:6e:2e:ee:ca:a6:6c:b2:2d:24:ad: 0f:22:dd:c7:28:e2:80:2e:5a:6e:5a:72:e5:f9:d6:2f:c2:5f: 47:9f:b4:f4:2f:a8:b0:1d:85:1d:6d:d4:25:8f:05:e6:d2:74: 9e:2e:bb:01:34:5d:28:96:df:54:bd:dd:a4:6e:35:2b:12:a5: e3:61:26:13:aa:aa:fa:2c:c0:e7:8f:bd:a7:a0:00:f7:8f:06: cf:a6:ed:45:82:74:3d:4f:b5:db:1e:5a:2b:46:7b:04:88:92: 6b:db:85:06:e1:db:83:bd:35:8e:4d:ce:f4:c2:5f:43:5b:64: ae:f0:d8:df -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgITbJtKj3rRTcr1aGjXIyTCWl7CjjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg5NUIwOEYxOEQwQ0Y4RTRBRkFENDlBMDhBOTA3NTIxMzE3 RjE5MDI0MB4XDTI2MDYxNDAwMTIyOFoXDTI2MDYxNTAxMDcyOFowMzExMC8GA1UE AxMoRkM5MENDQkRGRTQ1QUZFQUQ1REEwNUQ0NjcxQjg1NTIzM0Q0NUEzMzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKyCrADZpLSI0t8YZ//ZdQP7SFbU UcTA5lJzsuFZQostKSq7RGq3AAFMXFvE9ZPCD9xXuvHD467yQhxHrskqS5CL1txm Vj/rBBPbbHI7veRbfNgho1fUNL4KKpp+k+vvrIS7vjMZKyglULSsBv3WGoFCl+v7 3E3ixFPVK2wycpisuVWXcHFyW0fBCHEmdN6/X4zoZHJ1P02xl7/EIiEsRp1701xX 0z/76Wn6MtgT82n/7EjZivAzpqDzhaWhgn4TTcO4XYu4h0AfoaA2epK1k/A9gqx8 K4fCic/tm2ciApKnWvRA6r9bByhfH8GMmbQb0KPCQGhSEc45Dr6d4uOknb0CAwEA AaOCAh0wggIZMB0GA1UdDgQWBBT8kMy9/kWv6tXaBdRnG4VSM9RaMzAfBgNVHSME GDAWgBSVsI8Y0M+OSvrUmgipB1ITF/GQJDAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTAx Njg5NzA0NTUxNTQ2ODg3LzAvOTVCMDhGMThEMENGOEU0QUZBRDQ5QTA4QTkwNzUy MTMxN0YxOTAyNC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv MS85NUIwOEYxOEQwQ0Y4RTRBRkFENDlBMDhBOTA3NTIxMzE3RjE5MDI0LmNlcjB+ BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS1ycHMuY25u aWMuY24vcmVwby9BMTEwMTY4OTcwNDU1MTU0Njg4Ny8wLzk1QjA4RjE4RDBDRjhF NEFGQUQ0OUEwOEE5MDc1MjEzMTdGMTkwMjQubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCO/K1edfPve7O1 sM6IIYU5gDATXHmm6Ji6uS4Ioxx30dUbEog6zjhdkYpHQpU/SoDB/71mtKncfM9T M/XH3HzCCiAJGAUqftniBZC9zbJ6pyIFbIZfCV47OKruV3a4kav+YRYxJ89fBTtf CvbCald4VEW89K3JGZp0SrTrnhXsjYoqbmebfG4u7sqmbLItJK0PIt3HKOKALlpu WnLl+dYvwl9Hn7T0L6iwHYUdbdQljwXm0nSeLrsBNF0olt9Uvd2kbjUrEqXjYSYT qqr6LMDnj72noAD3jwbPpu1FgnQ9T7XbHlorRnsEiJJr24UG4duDvTWOTc70wl9D W2Su8Njf -----END CERTIFICATE-----Generated at Sun Jun 14 07:06:05 2026 by rpki-client