$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft File: 95AFB4515D628A1186D20869CFEAF47D559D5337.mft (raw, json) Hash identifier: LTO63dTib6p5WvP9eDKBPOKO6/7PYJr515ge2HdSd8Y= Subject key identifier: 14:3E:E4:61:40:8D:E0:B8:FD:07:47:7F:15:85:22:B6:90:B6:CF:2E Authority key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 Certificate issuer: /CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Certificate serial: 458B7F494524F13E7C8BF882FC939B5894DEF781 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft Manifest number: 013F Signing time: Mon 12 Oct 2026 03:11:22 +0000 Manifest this update: Mon 12 Oct 2026 03:06:22 +0000 Manifest next update: Thu 15 Oct 2026 07:27:22 +0000 Files and hashes: 1: 3130332e3233362e36342e302f32322d3234203d3e2034383136.roa (hash: 9KFTHxz/y51ykUofxUnbpegbRUp/wwAex2kCfyHmCB0=) 2: 3130332e3233362e35362e302f32322d3234203d3e2034383136.roa (hash: nU9td8FSbjkxq8qr2OaWckCpycvpgcxXULdnzQhot1w=) 3: 3130332e3233362e35322e302f32322d3234203d3e2034383136.roa (hash: L/Cnxt0IMPqrkk567v66pELmHjh0mHTQ9LGRguxjotg=) 4: 95AFB4515D628A1186D20869CFEAF47D559D5337.crl (hash: sbWkG7rFuHB+3Za66mtntGpjNsw0G73FLnIpEqh5Hxs=) 5: 3231312e3136312e3232342e302f32302d3234203d3e2034383136.roa (hash: 7ESkoMdtrmm8SQWjAiVoIXlCHKhBj+bnSHyVsBLhiTg=) 6: 3231312e3136312e3232372e302f32342d3234203d3e20323035353438.roa (hash: Ln2h1DObADPae64oImYFdKQ5uHj+DhkSUyON4jZ4kMU=) 7: 3130332e3130392e32302e302f32322d3234203d3e2034383136.roa (hash: Ir54i6mCJphe0tTKRNEplWXjiN5Eyqy0jZSjS9oxoak=) 8: 3130332e3233362e36302e302f32322d3234203d3e2034383136.roa (hash: p2Lh6mSEt8F+Pz43e7M48ZQE8zJIT8aede1FEWphpKg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:8b:7f:49:45:24:f1:3e:7c:8b:f8:82:fc:93:9b:58:94:de:f7:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Validity Not Before: Oct 12 03:06:22 2026 GMT Not After : Oct 15 07:27:22 2026 GMT Subject: CN=143EE461408DE0B8FD07477F158522B690B6CF2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1e:2a:88:01:07:6a:23:70:3a:12:6d:1d:b5: 79:e5:9b:1a:c7:c4:dc:4c:2f:b3:ef:1e:43:6d:4c: 69:24:61:2d:73:96:21:08:58:08:c4:e3:51:80:3f: 45:f7:ee:7c:59:50:c3:3b:28:c1:3a:f2:36:34:c7: ed:43:98:38:ad:a8:12:9e:5c:c2:6f:7d:5a:7b:4f: 2c:97:9e:87:1b:90:96:96:6e:3c:05:e7:95:be:35: 75:2d:a9:d6:9b:3d:21:91:4a:af:84:ce:32:e8:76: c2:52:a4:68:17:a5:49:cf:8d:c4:5a:dc:55:46:15: e4:8d:98:6d:55:d3:4b:af:5e:8e:68:9f:ab:04:ac: cf:9b:5c:5e:02:4c:e1:cf:26:f6:8a:ee:cc:f3:f8: a4:b9:50:3c:06:d6:6f:6a:56:c0:7b:e9:98:e6:20: b1:98:5e:89:a1:2e:70:2c:08:a8:dc:a2:5a:c2:1b: 47:be:84:20:c1:ea:36:b6:40:96:40:95:19:c1:29: f6:16:d9:dd:3a:55:82:f4:7d:4a:cb:d3:2e:74:22: e1:a9:13:30:47:e3:58:dc:5b:50:1d:b6:31:db:b9: b5:35:2f:c0:98:8f:02:fc:fc:7e:69:c0:65:ad:dd: 8c:44:74:76:71:0e:b0:0c:a4:cd:aa:01:61:70:31: 53:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3E:E4:61:40:8D:E0:B8:FD:07:47:7F:15:85:22:B6:90:B6:CF:2E X509v3 Authority Key Identifier: keyid:95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1d:ff:b2:0b:f7:ff:7b:49:2e:dd:e2:3d:e1:4e:ef:57:03: 2a:62:87:03:70:66:bb:b9:27:89:e5:95:2b:31:1d:c2:3f:0c: 6d:82:f2:fd:a6:55:f0:8f:34:0b:a1:f9:f7:25:68:3c:d8:de: f5:b9:10:0d:be:79:c5:3e:2f:41:a7:7c:46:96:aa:8c:c3:b2: 01:db:22:d8:50:84:56:d9:14:c6:ce:cc:f6:cb:17:a3:d4:88: a1:f4:2a:c9:9e:ef:1b:4e:66:f2:6a:c9:c9:9d:8c:a0:c5:85: 95:e2:98:3a:d8:2b:d4:3a:45:e3:b0:e1:5f:63:e4:ba:09:18: 2c:5b:c4:9b:3c:11:f3:96:1d:45:dd:93:0d:87:a9:e2:b9:3b: 98:0f:ea:29:fb:e8:a6:cd:cd:c3:69:c8:2f:93:bb:9c:10:d1: 65:46:62:d1:00:fc:de:da:07:47:d0:27:73:89:6d:e7:3f:de: 7e:20:b7:f7:df:cd:32:e7:e1:01:8b:62:e6:43:68:12:8e:1c: 01:fb:5b:b8:2a:5a:a6:32:d5:51:ce:fa:6b:87:6b:e4:78:f0: 51:9f:a4:6e:5b:85:b4:6b:58:b3:1f:e1:3a:f9:44:6f:c7:ec: 76:5c:e6:56:85:4e:9b:6b:7b:29:67:d1:d7:c0:c8:d7:04:ad: 82:97:4d:9b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURYt/SUUk8T58i/iC/JObWJTe94EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1 NTlENTMzNzAeFw0yNjEwMTIwMzA2MjJaFw0yNjEwMTUwNzI3MjJaMDMxMTAvBgNV BAMTKDE0M0VFNDYxNDA4REUwQjhGRDA3NDc3RjE1ODUyMkI2OTBCNkNGMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYHiqIAQdqI3A6Em0dtXnlmxrH xNxML7PvHkNtTGkkYS1zliEIWAjE41GAP0X37nxZUMM7KME68jY0x+1DmDitqBKe XMJvfVp7TyyXnocbkJaWbjwF55W+NXUtqdabPSGRSq+EzjLodsJSpGgXpUnPjcRa 3FVGFeSNmG1V00uvXo5on6sErM+bXF4CTOHPJvaK7szz+KS5UDwG1m9qVsB76Zjm ILGYXomhLnAsCKjcolrCG0e+hCDB6ja2QJZAlRnBKfYW2d06VYL0fUrL0y50IuGp EzBH41jcW1AdtjHbubU1L8CYjwL8/H5pwGWt3YxEdHZxDrAMpM2qAWFwMVMDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFD7kYUCN4Lj9B0d/FYUitpC2zy4wHwYDVR0j BBgwFoAUla+0UV1iihGG0ghpz+r0fVWdUzcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzUyMDY0My8wLzk1QUZCNDUxNUQ2MjhBMTE4NkQyMDg2OUNGRUFG NDdENTU5RDUzMzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1NTlENTMzNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1MjA2NDMvMC85NUFGQjQ1MTVENjI4 QTExODZEMjA4NjlDRkVBRjQ3RDU1OUQ1MzM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfB3/sgv3/3tJ Lt3iPeFO71cDKmKHA3Bmu7knieWVKzEdwj8MbYLy/aZV8I80C6H59yVoPNje9bkQ Db55xT4vQad8RpaqjMOyAdsi2FCEVtkUxs7M9ssXo9SIofQqyZ7vG05m8mrJyZ2M oMWFleKYOtgr1DpF47DhX2PkugkYLFvEmzwR85YdRd2TDYep4rk7mA/qKfvops3N w2nIL5O7nBDRZUZi0QD83toHR9Anc4lt5z/efiC399/NMufhAYti5kNoEo4cAftb uCpapjLVUc76a4dr5HjwUZ+kbluFtGtYsx/hOvlEb8fsdlzmVoVOm2t7KWfR18DI 1wStgpdNmw== -----END CERTIFICATE-----Generated at Tue Oct 13 22:49:41 2026 by rpki-client