$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft File: 95AFB4515D628A1186D20869CFEAF47D559D5337.mft (raw, json) Hash identifier: aOVcgDRmaJiqSy2FxKMilgXhS5Re/DLkV+3tiR1mdX8= Subject key identifier: 1D:EC:6D:0B:C4:93:1E:DC:D5:75:B0:C0:4F:A5:F2:49:8E:BE:99:73 Authority key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 Certificate issuer: /CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Certificate serial: 67037E64B7181BC3B39BD711D95B57A889703019 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft Manifest number: AE Signing time: Fri 29 May 2026 19:58:18 +0000 Manifest this update: Fri 29 May 2026 19:53:18 +0000 Manifest next update: Sat 30 May 2026 23:26:18 +0000 Files and hashes: 1: 95AFB4515D628A1186D20869CFEAF47D559D5337.crl (hash: q0YB1IYEHVQgVKtFiLO5QozbMyA0hByQy1nxTMPW/LM=) 2: 3130332e3233362e36342e302f32322d3234203d3e2034383136.roa (hash: 9KFTHxz/y51ykUofxUnbpegbRUp/wwAex2kCfyHmCB0=) 3: 3130332e3233362e35322e302f32322d3234203d3e2034383136.roa (hash: L/Cnxt0IMPqrkk567v66pELmHjh0mHTQ9LGRguxjotg=) 4: 3130332e3130392e32302e302f32322d3234203d3e2034383136.roa (hash: Ir54i6mCJphe0tTKRNEplWXjiN5Eyqy0jZSjS9oxoak=) 5: 3231312e3136312e3232342e302f32302d3234203d3e2034383136.roa (hash: 7ESkoMdtrmm8SQWjAiVoIXlCHKhBj+bnSHyVsBLhiTg=) 6: 3130332e3233362e36302e302f32322d3234203d3e2034383136.roa (hash: p2Lh6mSEt8F+Pz43e7M48ZQE8zJIT8aede1FEWphpKg=) 7: 3130332e3233362e35362e302f32322d3234203d3e2034383136.roa (hash: nU9td8FSbjkxq8qr2OaWckCpycvpgcxXULdnzQhot1w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:03:7e:64:b7:18:1b:c3:b3:9b:d7:11:d9:5b:57:a8:89:70:30:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Validity Not Before: May 29 19:53:18 2026 GMT Not After : May 30 23:26:18 2026 GMT Subject: CN=1DEC6D0BC4931EDCD575B0C04FA5F2498EBE9973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:86:d3:24:16:e6:bd:99:56:db:21:7b:90:ad: 9e:28:c9:83:b7:11:03:8a:6b:a5:82:16:78:54:fb: 14:cb:c3:68:14:8c:36:5e:26:33:37:5e:83:b6:b2: a6:4f:30:80:1b:2e:d8:df:dd:64:08:d3:e0:0f:2c: 61:c6:b1:15:b1:69:33:0c:91:7d:f8:9a:84:de:a9: 59:4e:48:d0:99:3d:71:5e:c6:94:76:ba:a1:54:e3: fb:3c:f5:ed:0b:8f:28:6c:5c:d7:02:30:25:5c:2d: 0a:cf:e6:f2:08:44:d6:86:85:0f:df:22:54:91:f0: 12:63:00:0a:f2:ea:cc:f0:4b:a8:84:2d:ed:32:4e: 87:15:11:c6:48:8d:89:eb:74:f1:f4:99:f8:c3:9f: 98:5f:67:71:8d:fe:9a:ce:b1:43:9c:6f:da:fb:b2: de:c9:6e:c8:c7:00:e5:4f:f1:b8:90:e9:63:58:3e: e1:66:e5:2e:03:ca:7b:2c:b8:cf:e9:35:81:4d:6e: 25:82:1c:43:3d:3d:85:d1:ee:dc:6d:55:f5:fe:71: 2c:83:7d:1f:d6:13:07:00:86:48:5c:88:ae:6d:d5: 05:46:79:0c:99:2a:7a:8b:2f:4f:ba:6e:8c:ed:9a: ae:6d:fa:37:08:33:74:fe:fe:c9:96:b4:84:4c:3d: cb:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:EC:6D:0B:C4:93:1E:DC:D5:75:B0:C0:4F:A5:F2:49:8E:BE:99:73 X509v3 Authority Key Identifier: keyid:95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:68:ae:df:58:61:b9:52:b2:a5:41:d7:7f:f3:78:20:ae:0e: 0b:49:4c:7e:21:ab:60:b9:a6:07:40:f4:1c:9a:97:08:ea:b5: 7b:29:ec:9d:f7:86:8d:bd:8e:b6:99:3e:7a:4c:11:0d:37:7d: 40:ee:7e:09:ad:2c:1d:d7:d9:e1:a4:f3:dd:b4:aa:29:0e:62: 45:28:c3:7b:10:ed:f7:bb:8e:26:c5:4e:99:1c:9c:9c:4a:80: 7d:30:0d:d0:eb:20:95:31:b6:08:3b:73:4b:fb:1a:26:33:a6: 71:b6:98:71:77:d9:33:97:06:dd:9a:89:29:d2:1b:f8:c9:74: d3:a7:9a:9d:75:77:6c:c4:98:7c:b4:74:12:ed:93:59:cb:e0: 93:94:d3:cb:7c:45:e8:99:81:3f:90:17:bf:c1:48:e7:de:c4: 86:15:6e:7d:76:8e:e3:c9:19:57:a4:56:7b:ad:9f:53:d8:e2: b5:05:14:03:d8:45:d3:aa:35:1b:86:0b:e3:ec:f2:44:8a:98: 43:4a:b2:b5:55:35:02:db:d4:0a:72:cc:67:67:29:5b:9c:ff: 14:84:fa:f2:ac:91:da:70:44:0c:b2:7e:19:61:f0:1f:93:13: 48:c7:5a:59:d3:83:a9:1a:6a:fc:7c:91:51:2d:38:09:bf:ad: 8b:7d:62:e3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZwN+ZLcYG8Ozm9cR2VtXqIlwMBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1 NTlENTMzNzAeFw0yNjA1MjkxOTUzMThaFw0yNjA1MzAyMzI2MThaMDMxMTAvBgNV BAMTKDFERUM2RDBCQzQ5MzFFRENENTc1QjBDMDRGQTVGMjQ5OEVCRTk5NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDahtMkFua9mVbbIXuQrZ4oyYO3 EQOKa6WCFnhU+xTLw2gUjDZeJjM3XoO2sqZPMIAbLtjf3WQI0+APLGHGsRWxaTMM kX34moTeqVlOSNCZPXFexpR2uqFU4/s89e0LjyhsXNcCMCVcLQrP5vIIRNaGhQ/f IlSR8BJjAAry6szwS6iELe0yTocVEcZIjYnrdPH0mfjDn5hfZ3GN/prOsUOcb9r7 st7JbsjHAOVP8biQ6WNYPuFm5S4DynssuM/pNYFNbiWCHEM9PYXR7txtVfX+cSyD fR/WEwcAhkhciK5t1QVGeQyZKnqLL0+6boztmq5t+jcIM3T+/smWtIRMPctrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHextC8STHtzVdbDAT6XySY6+mXMwHwYDVR0j BBgwFoAUla+0UV1iihGG0ghpz+r0fVWdUzcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzUyMDY0My8wLzk1QUZCNDUxNUQ2MjhBMTE4NkQyMDg2OUNGRUFG NDdENTU5RDUzMzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1NTlENTMzNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1MjA2NDMvMC85NUFGQjQ1MTVENjI4 QTExODZEMjA4NjlDRkVBRjQ3RDU1OUQ1MzM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWiu31hhuVKy pUHXf/N4IK4OC0lMfiGrYLmmB0D0HJqXCOq1eynsnfeGjb2Otpk+ekwRDTd9QO5+ Ca0sHdfZ4aTz3bSqKQ5iRSjDexDt97uOJsVOmRycnEqAfTAN0OsglTG2CDtzS/sa JjOmcbaYcXfZM5cG3ZqJKdIb+Ml006eanXV3bMSYfLR0Eu2TWcvgk5TTy3xF6JmB P5AXv8FI597EhhVufXaO48kZV6RWe62fU9jitQUUA9hF06o1G4YL4+zyRIqYQ0qy tVU1AtvUCnLMZ2cpW5z/FIT68qyR2nBEDLJ+GWHwH5MTSMdaWdODqRpq/HyRUS04 Cb+ti31i4w== -----END CERTIFICATE-----Generated at Fri May 29 22:05:23 2026 by rpki-client