$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft File: 95AFB4515D628A1186D20869CFEAF47D559D5337.mft (raw, json) Hash identifier: E7Wb2tUBwcw29Uzwg1WO2r7XPAd/IgB6JfP1/FC8/uE= Subject key identifier: 2D:64:3F:D4:B5:13:BC:A5:FC:28:A9:E7:F4:92:7E:10:6D:13:55:42 Authority key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 Certificate issuer: /CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Certificate serial: 425F9FB20F59EAE898D0557D9D958979D9DF8635 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft Manifest number: 012B Signing time: Fri 28 Aug 2026 06:47:58 +0000 Manifest this update: Fri 28 Aug 2026 06:42:58 +0000 Manifest next update: Mon 31 Aug 2026 17:06:58 +0000 Files and hashes: 1: 3130332e3233362e35322e302f32322d3234203d3e2034383136.roa (hash: L/Cnxt0IMPqrkk567v66pELmHjh0mHTQ9LGRguxjotg=) 2: 3130332e3233362e36342e302f32322d3234203d3e2034383136.roa (hash: 9KFTHxz/y51ykUofxUnbpegbRUp/wwAex2kCfyHmCB0=) 3: 3130332e3130392e32302e302f32322d3234203d3e2034383136.roa (hash: Ir54i6mCJphe0tTKRNEplWXjiN5Eyqy0jZSjS9oxoak=) 4: 3231312e3136312e3232342e302f32302d3234203d3e2034383136.roa (hash: 7ESkoMdtrmm8SQWjAiVoIXlCHKhBj+bnSHyVsBLhiTg=) 5: 3130332e3233362e35362e302f32322d3234203d3e2034383136.roa (hash: nU9td8FSbjkxq8qr2OaWckCpycvpgcxXULdnzQhot1w=) 6: 3130332e3233362e36302e302f32322d3234203d3e2034383136.roa (hash: p2Lh6mSEt8F+Pz43e7M48ZQE8zJIT8aede1FEWphpKg=) 7: 3231312e3136312e3232372e302f32342d3234203d3e20323035353438.roa (hash: Ln2h1DObADPae64oImYFdKQ5uHj+DhkSUyON4jZ4kMU=) 8: 95AFB4515D628A1186D20869CFEAF47D559D5337.crl (hash: 2O+zDXYpH5LiWA8Zpb4c6X9HWtHMe1CVRoEjpiLdeSo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:5f:9f:b2:0f:59:ea:e8:98:d0:55:7d:9d:95:89:79:d9:df:86:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Validity Not Before: Aug 28 06:42:58 2026 GMT Not After : Aug 31 17:06:58 2026 GMT Subject: CN=2D643FD4B513BCA5FC28A9E7F4927E106D135542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:02:26:5f:5c:77:6e:b3:a2:62:38:6c:18:f4: 9a:22:6d:c5:f4:6f:75:11:47:b5:d3:12:3d:cf:2a: 13:43:e9:7b:8e:98:fc:85:dc:33:3c:93:f0:7e:af: fd:73:cf:9e:06:d5:ae:4b:cb:86:7f:06:0e:a1:a2: a0:f3:66:53:e8:7a:c3:eb:db:d3:fc:cc:08:06:f9: 9d:ea:d7:de:9a:e8:3f:a4:0a:2e:7a:21:15:b0:90: 47:42:cf:1b:08:27:0d:01:28:df:17:f7:18:92:87: da:73:4e:4a:76:4f:70:40:c1:c8:7e:be:9b:4e:6f: e2:d5:f3:e6:ef:a8:4e:41:c1:08:01:6e:9f:b8:8b: 17:2b:64:89:ce:b4:9b:81:3a:86:bb:bc:cb:5c:11: 46:c3:6f:23:20:83:87:73:24:16:c3:5c:e1:b3:65: 25:ee:e9:e4:81:2a:d0:94:7b:70:c3:4d:33:b4:cc: 18:23:4f:78:73:a7:3e:33:ce:78:dc:e5:6f:10:eb: 8a:32:9c:c4:5e:42:74:80:d3:b6:44:7b:45:73:5a: e7:c1:70:ad:8e:40:81:71:79:95:8c:21:b7:c1:89: 7e:22:20:3e:ed:df:50:e9:f7:8d:b8:e4:d7:12:cc: 52:fd:21:cd:0c:02:3a:9f:54:b2:70:36:b6:ee:94: 9e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:64:3F:D4:B5:13:BC:A5:FC:28:A9:E7:F4:92:7E:10:6D:13:55:42 X509v3 Authority Key Identifier: keyid:95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:15:46:7f:48:52:af:a5:bc:71:7f:17:28:ae:90:83:4f:be: eb:cb:65:49:ca:10:1c:3c:51:7e:e8:12:7a:ff:52:11:32:45: fd:43:78:eb:99:13:9a:0b:6b:1b:db:a3:1b:93:26:b8:07:14: e6:59:0c:36:55:97:74:68:72:54:85:b5:f7:9f:54:c0:2a:37: 97:d9:eb:d5:80:52:dc:f1:4c:bf:af:b5:4f:48:81:1b:8e:2f: df:29:79:f9:c8:a0:5c:63:0a:5c:12:75:ce:14:8f:97:ba:41: 62:ad:23:d9:73:ae:3b:20:71:62:0e:ba:68:8d:83:ff:f4:8b: 12:fb:f5:87:93:9e:2c:c4:79:e8:d2:ff:ba:10:84:67:1d:09: 31:f5:a9:25:94:b1:eb:cc:38:0f:54:00:05:c5:3f:51:d8:fd: e8:23:94:76:ab:ad:38:8f:89:d7:d5:64:1b:7e:86:ab:0e:76: 47:88:14:b7:74:51:19:22:6f:1b:d4:5f:91:77:03:08:cc:f8: ba:e6:ea:06:8c:db:c5:a2:38:e4:92:e6:1c:af:9e:d6:13:77: 4a:15:0c:2c:a0:f3:81:f4:74:77:c8:83:73:51:cd:25:44:78: d0:e7:a3:a4:0d:ea:cf:e4:27:df:9f:69:11:eb:c4:9d:f3:88: e5:08:a6:a9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQl+fsg9Z6uiY0FV9nZWJednfhjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1 NTlENTMzNzAeFw0yNjA4MjgwNjQyNThaFw0yNjA4MzExNzA2NThaMDMxMTAvBgNV BAMTKDJENjQzRkQ0QjUxM0JDQTVGQzI4QTlFN0Y0OTI3RTEwNkQxMzU1NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAiZfXHdus6JiOGwY9JoibcX0 b3URR7XTEj3PKhND6XuOmPyF3DM8k/B+r/1zz54G1a5Ly4Z/Bg6hoqDzZlPoesPr 29P8zAgG+Z3q196a6D+kCi56IRWwkEdCzxsIJw0BKN8X9xiSh9pzTkp2T3BAwch+ vptOb+LV8+bvqE5BwQgBbp+4ixcrZInOtJuBOoa7vMtcEUbDbyMgg4dzJBbDXOGz ZSXu6eSBKtCUe3DDTTO0zBgjT3hzpz4zznjc5W8Q64oynMReQnSA07ZEe0VzWufB cK2OQIFxeZWMIbfBiX4iID7t31Dp94245NcSzFL9Ic0MAjqfVLJwNrbulJ7HAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULWQ/1LUTvKX8KKnn9JJ+EG0TVUIwHwYDVR0j BBgwFoAUla+0UV1iihGG0ghpz+r0fVWdUzcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzUyMDY0My8wLzk1QUZCNDUxNUQ2MjhBMTE4NkQyMDg2OUNGRUFG NDdENTU5RDUzMzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1NTlENTMzNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1MjA2NDMvMC85NUFGQjQ1MTVENjI4 QTExODZEMjA4NjlDRkVBRjQ3RDU1OUQ1MzM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhVGf0hSr6W8 cX8XKK6Qg0++68tlScoQHDxRfugSev9SETJF/UN465kTmgtrG9ujG5MmuAcU5lkM NlWXdGhyVIW1959UwCo3l9nr1YBS3PFMv6+1T0iBG44v3yl5+cigXGMKXBJ1zhSP l7pBYq0j2XOuOyBxYg66aI2D//SLEvv1h5OeLMR56NL/uhCEZx0JMfWpJZSx68w4 D1QABcU/Udj96COUdqutOI+J19VkG36Gqw52R4gUt3RRGSJvG9RfkXcDCMz4uubq BozbxaI45JLmHK+e1hN3ShUMLKDzgfR0d8iDc1HNJUR40OejpA3qz+Qn359pEevE nfOI5QimqQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:44:53 2026 by rpki-client