$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1155077214371315761/0/E95A4C6575A537BA764908DB55E8E20D56BCCFA4.mft File: E95A4C6575A537BA764908DB55E8E20D56BCCFA4.mft (raw, json) Hash identifier: t/VBaV++vkVV3by3eOWLMxWmn0yvTfRN0JGbWIdLNyM= Subject key identifier: 70:8C:21:CC:13:72:A4:14:04:BC:A9:33:A7:FC:07:91:92:70:5D:85 Authority key identifier: E9:5A:4C:65:75:A5:37:BA:76:49:08:DB:55:E8:E2:0D:56:BC:CF:A4 Certificate issuer: /CN=E95A4C6575A537BA764908DB55E8E20D56BCCFA4 Certificate serial: 0B1D0DB3C61CA37236E1BF290350D038AB0C17BC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E95A4C6575A537BA764908DB55E8E20D56BCCFA4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1155077214371315761/0/E95A4C6575A537BA764908DB55E8E20D56BCCFA4.mft Manifest number: 0B Signing time: Mon 12 Oct 2026 04:41:33 +0000 Manifest this update: Mon 12 Oct 2026 04:36:33 +0000 Manifest next update: Thu 15 Oct 2026 13:20:33 +0000 Files and hashes: 1: E95A4C6575A537BA764908DB55E8E20D56BCCFA4.crl (hash: fdrVcCVgqR6IAZNnHq/ARonwXXWC/N9fOlV0z4DHEqo=) 2: 3231382e3234372e33322e302f31392d3139203d3e203137383136.roa (hash: M6POzjS5Y8iX9b7vdVefKpmFgOACZsDLIpMy2YnfTeM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1155077214371315761/0/E95A4C6575A537BA764908DB55E8E20D56BCCFA4.crl rsync://rpki-rps.cnnic.cn/repo/A1155077214371315761/0/E95A4C6575A537BA764908DB55E8E20D56BCCFA4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E95A4C6575A537BA764908DB55E8E20D56BCCFA4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:1d:0d:b3:c6:1c:a3:72:36:e1:bf:29:03:50:d0:38:ab:0c:17:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E95A4C6575A537BA764908DB55E8E20D56BCCFA4 Validity Not Before: Oct 12 04:36:33 2026 GMT Not After : Oct 15 13:20:33 2026 GMT Subject: CN=708C21CC1372A41404BCA933A7FC079192705D85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:60:ba:9f:86:d1:64:a1:de:c4:14:79:13:ea: 38:9b:f3:7e:92:9e:cb:ec:ab:34:7a:b3:af:65:96: ab:69:d4:83:54:1e:e1:29:34:0b:27:67:df:e3:99: 2f:55:86:63:f5:dc:8d:fc:44:38:db:5b:06:23:fa: 98:ed:42:a2:c9:2e:d5:af:04:8a:65:de:69:a0:ed: 10:29:69:70:a7:e4:f7:11:4d:61:ce:3f:0f:20:a7: b5:1f:64:fe:8c:5b:35:c8:2f:3b:6f:44:c4:ca:79: a6:04:7c:27:16:27:8f:a4:26:f5:64:71:02:69:de: f4:a8:d5:a8:1e:d5:34:31:fa:a2:c4:2b:c3:97:dc: ee:f9:5f:23:d4:50:fe:76:22:1b:84:d9:bc:8d:1f: 79:65:f6:b1:f8:6a:70:89:fb:0e:a0:0d:81:45:e9: 3d:d1:6f:b8:80:ed:56:36:9b:93:97:e0:97:69:14: 74:b4:3c:da:d1:db:f8:4a:37:a3:55:27:96:f0:ca: 12:6f:f9:85:88:b6:f6:4e:18:92:f7:bd:14:48:ee: c5:d4:3a:d9:fd:a3:bd:8d:82:4d:93:7c:2e:25:6a: b0:29:ae:35:7a:91:47:17:c4:cd:36:94:23:e3:2b: 52:23:d2:6b:b9:97:c4:e2:6f:42:68:ff:86:24:f8: 14:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8C:21:CC:13:72:A4:14:04:BC:A9:33:A7:FC:07:91:92:70:5D:85 X509v3 Authority Key Identifier: keyid:E9:5A:4C:65:75:A5:37:BA:76:49:08:DB:55:E8:E2:0D:56:BC:CF:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1155077214371315761/0/E95A4C6575A537BA764908DB55E8E20D56BCCFA4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E95A4C6575A537BA764908DB55E8E20D56BCCFA4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1155077214371315761/0/E95A4C6575A537BA764908DB55E8E20D56BCCFA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:d2:ed:96:75:73:b5:6d:68:be:4d:01:97:20:3f:dc:f6:fe: 98:c7:3e:e4:d7:2d:b0:05:b8:3b:8e:77:90:f0:6c:47:2d:43: 67:62:32:34:a7:40:66:f3:77:0b:fa:3b:39:33:b0:75:f3:a8: 71:76:21:e2:98:2e:80:d8:3b:8e:34:01:0b:99:66:81:62:db: 6b:dc:46:92:4b:c4:ca:a8:54:95:f9:09:76:cb:12:a9:50:27: a1:e9:08:b5:5c:32:10:62:83:83:d0:37:0a:8a:ec:2f:46:93: 4f:c3:6a:c2:14:ef:17:06:16:be:4a:e1:7d:4a:e9:95:d0:2d: 5d:fb:ae:90:92:d4:c6:68:79:a3:ff:bd:31:8a:39:a4:8c:10: fa:32:62:a0:66:e7:14:74:d8:62:39:59:46:10:83:98:c8:2e: 72:55:36:a0:ad:b2:33:f2:ef:99:b2:50:a4:c1:15:08:97:ba: cb:71:fc:b9:8e:42:2c:2f:98:17:27:7f:3c:c1:7d:a8:f8:f8: 36:91:b0:c5:b5:17:e0:0b:ad:64:c1:b2:a5:52:0c:91:df:4c: fe:c3:3c:dc:18:d2:81:15:e5:d4:54:3b:2c:a1:d9:37:90:d4: b7:4c:86:94:54:83:89:22:93:b2:d5:a9:84:66:e0:22:92:da: 16:a7:b2:2f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCx0Ns8Yco3I24b8pA1DQOKsMF7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTk1QTRDNjU3NUE1MzdCQTc2NDkwOERCNTVFOEUyMEQ1 NkJDQ0ZBNDAeFw0yNjEwMTIwNDM2MzNaFw0yNjEwMTUxMzIwMzNaMDMxMTAvBgNV BAMTKDcwOEMyMUNDMTM3MkE0MTQwNEJDQTkzM0E3RkMwNzkxOTI3MDVEODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAYLqfhtFkod7EFHkT6jib836S nsvsqzR6s69llqtp1INUHuEpNAsnZ9/jmS9VhmP13I38RDjbWwYj+pjtQqLJLtWv BIpl3mmg7RApaXCn5PcRTWHOPw8gp7UfZP6MWzXILztvRMTKeaYEfCcWJ4+kJvVk cQJp3vSo1age1TQx+qLEK8OX3O75XyPUUP52IhuE2byNH3ll9rH4anCJ+w6gDYFF 6T3Rb7iA7VY2m5OX4JdpFHS0PNrR2/hKN6NVJ5bwyhJv+YWItvZOGJL3vRRI7sXU Otn9o72Ngk2TfC4larAprjV6kUcXxM02lCPjK1Ij0mu5l8Tib0Jo/4Yk+BRnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcIwhzBNypBQEvKkzp/wHkZJwXYUwHwYDVR0j BBgwFoAU6VpMZXWlN7p2SQjbVejiDVa8z6QwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTE1 NTA3NzIxNDM3MTMxNTc2MS8wL0U5NUE0QzY1NzVBNTM3QkE3NjQ5MDhEQjU1RThF MjBENTZCQ0NGQTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTk1QTRDNjU3NUE1MzdCQTc2NDkwOERCNTVFOEUyMEQ1NkJDQ0ZBNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExNTUwNzcyMTQzNzEzMTU3NjEvMC9FOTVBNEM2NTc1QTUz N0JBNzY0OTA4REI1NUU4RTIwRDU2QkNDRkE0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdLtlnVztW1o vk0BlyA/3Pb+mMc+5NctsAW4O453kPBsRy1DZ2IyNKdAZvN3C/o7OTOwdfOocXYh 4pgugNg7jjQBC5lmgWLba9xGkkvEyqhUlfkJdssSqVAnoekItVwyEGKDg9A3Cors L0aTT8NqwhTvFwYWvkrhfUrpldAtXfuukJLUxmh5o/+9MYo5pIwQ+jJioGbnFHTY YjlZRhCDmMguclU2oK2yM/LvmbJQpMEVCJe6y3H8uY5CLC+YFyd/PMF9qPj4NpGw xbUX4AutZMGypVIMkd9M/sM83BjSgRXl1FQ7LKHZN5DUt0yGlFSDiSKTstWphGbg IpLaFqeyLw== -----END CERTIFICATE-----Generated at Tue Oct 13 21:22:38 2026 by rpki-client