
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft
File: 95AFB4515D628A1186D20869CFEAF47D559D5337.mft (raw, json)
Hash identifier: NZeS1hR7+iDNlqZdnHVoy2V1H+XH9HjyJt+Z4d8Jxzg=
Subject key identifier: BB:DA:F3:20:ED:53:B0:BD:B7:B5:A6:67:7E:D0:F7:DD:A4:7C:6B:06
Authority key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37
Certificate issuer: /CN=95AFB4515D628A1186D20869CFEAF47D559D5337
Certificate serial: 1B21DD5559EBDF3B0560595D58FB36A51872C5EA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft
Manifest number: 2E
Signing time: Sun 22 Feb 2026 06:17:30 +0000
Manifest this update: Sun 22 Feb 2026 06:12:30 +0000
Manifest next update: Mon 23 Feb 2026 09:31:30 +0000
Files and hashes: 1: 95AFB4515D628A1186D20869CFEAF47D559D5337.crl (hash: 5Cywuhsbf4QwLFIlaBnvqqKcKOmcQ+CC/QDF04mS7RM=)
2: 3130332e3233362e35362e302f32322d3234203d3e2034383136.roa (hash: nU9td8FSbjkxq8qr2OaWckCpycvpgcxXULdnzQhot1w=)
3: 3130332e3233362e36302e302f32322d3234203d3e2034383136.roa (hash: p2Lh6mSEt8F+Pz43e7M48ZQE8zJIT8aede1FEWphpKg=)
4: 3130332e3233362e36342e302f32322d3234203d3e2034383136.roa (hash: 9KFTHxz/y51ykUofxUnbpegbRUp/wwAex2kCfyHmCB0=)
5: 3130332e3233362e35322e302f32322d3234203d3e2034383136.roa (hash: L/Cnxt0IMPqrkk567v66pELmHjh0mHTQ9LGRguxjotg=)
6: 3130332e3130392e32302e302f32322d3234203d3e2034383136.roa (hash: Ir54i6mCJphe0tTKRNEplWXjiN5Eyqy0jZSjS9oxoak=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:21:dd:55:59:eb:df:3b:05:60:59:5d:58:fb:36:a5:18:72:c5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95AFB4515D628A1186D20869CFEAF47D559D5337
Validity
Not Before: Feb 22 06:12:30 2026 GMT
Not After : Feb 23 09:31:30 2026 GMT
Subject: CN=BBDAF320ED53B0BDB7B5A6677ED0F7DDA47C6B06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f8:15:66:a9:cb:8d:46:11:40:70:46:2a:37:
ce:e3:78:86:f8:56:c8:33:6a:02:a0:6d:7f:74:cb:
91:a9:c3:af:d3:66:8d:1e:64:30:a6:b0:61:8c:26:
d3:6c:4c:18:30:14:9a:43:e6:3b:b2:01:fb:c3:4f:
2e:70:53:09:b6:15:03:7b:aa:4c:5a:91:a0:58:b4:
34:c7:2a:95:37:71:74:12:2c:ee:4f:f8:ec:00:19:
fc:10:7b:97:95:ee:44:62:7f:fe:b0:ea:ae:8c:95:
1a:54:49:0a:e4:b1:93:1a:e5:bf:e9:79:15:52:99:
8f:7a:ea:90:b3:7b:7c:fb:29:9b:aa:45:a4:76:3d:
14:ab:0f:c8:49:4f:93:2d:60:d3:be:b3:83:c1:71:
88:f9:b1:10:c2:cb:fd:f5:eb:3b:6c:28:8c:2c:53:
1e:3d:82:c1:70:ae:1b:e0:ae:48:90:9c:ad:9b:81:
33:32:ed:88:2c:fd:79:c2:3c:ca:66:72:99:26:4a:
85:9d:ec:d5:9a:67:a0:26:e8:06:e9:83:b0:0f:de:
45:22:67:50:7b:bd:8d:64:65:3c:87:79:9a:60:42:
fc:35:b2:61:61:d6:59:c4:19:90:e2:90:96:cc:ba:
c8:45:b9:d8:88:b7:72:35:fd:d3:8f:73:17:bb:de:
69:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DA:F3:20:ED:53:B0:BD:B7:B5:A6:67:7E:D0:F7:DD:A4:7C:6B:06
X509v3 Authority Key Identifier:
keyid:95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ce:26:d0:88:2d:a5:7a:1f:93:cd:f9:ed:69:95:ce:cc:41:
8c:7e:0e:68:8d:2e:45:31:db:9c:ff:fc:7b:1c:7d:cb:21:cc:
e3:85:ce:eb:20:25:5f:84:03:1b:3c:91:e1:5a:55:82:83:19:
b9:1b:fc:ed:38:14:45:e2:68:c2:09:c4:a9:07:9c:e7:b2:e8:
db:87:39:9d:75:49:fc:9c:2b:72:04:18:31:56:93:60:ad:c4:
56:ea:c0:d6:ac:33:5f:e4:b0:b2:39:c2:cf:b5:5d:4b:ac:41:
9b:4b:b6:d1:f0:db:47:33:f9:8a:f8:50:c2:f9:92:ed:33:8c:
55:bb:f0:78:d6:72:f0:3c:93:b0:38:fb:fb:f4:d2:b7:1c:91:
76:89:76:08:c7:d8:5b:5b:f5:7f:34:e2:c9:05:f9:3f:7b:df:
af:27:37:b9:af:fb:6a:ff:18:95:56:c3:83:3d:6b:d5:9d:b7:
a0:0a:87:72:d8:a0:16:75:44:98:75:c3:9c:be:99:8b:35:ac:
24:71:ca:95:25:d3:92:44:50:6b:5a:4e:36:0d:0b:08:d6:95:
e4:96:fb:14:18:57:18:78:3c:a9:c4:d5:2a:d6:77:2d:14:74:
b6:10:c4:38:1b:01:f2:0f:2a:8e:36:30:57:33:fa:06:7c:b4:
7c:ef:6b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:06:13 2026 by rpki-client