$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft File: 95AFB4515D628A1186D20869CFEAF47D559D5337.mft (raw, json) Hash identifier: bqdmT3jI2MsjzM6BDF0lxlzdjyxlCnexMzud8O4Nq3k= Subject key identifier: 7F:69:6E:9A:9C:12:9C:BB:03:A8:35:4A:67:9D:22:C7:D3:A3:FF:C9 Authority key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 Certificate issuer: /CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Certificate serial: 412DAF2AFA00AE5C45823EF69F322324E1640E9D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft Manifest number: EB Signing time: Tue 14 Jul 2026 18:01:49 +0000 Manifest this update: Tue 14 Jul 2026 17:56:49 +0000 Manifest next update: Wed 15 Jul 2026 18:10:49 +0000 Files and hashes: 1: 3231312e3136312e3232342e302f32302d3234203d3e2034383136.roa (hash: 7ESkoMdtrmm8SQWjAiVoIXlCHKhBj+bnSHyVsBLhiTg=) 2: 3130332e3233362e36302e302f32322d3234203d3e2034383136.roa (hash: p2Lh6mSEt8F+Pz43e7M48ZQE8zJIT8aede1FEWphpKg=) 3: 3130332e3233362e36342e302f32322d3234203d3e2034383136.roa (hash: 9KFTHxz/y51ykUofxUnbpegbRUp/wwAex2kCfyHmCB0=) 4: 3130332e3130392e32302e302f32322d3234203d3e2034383136.roa (hash: Ir54i6mCJphe0tTKRNEplWXjiN5Eyqy0jZSjS9oxoak=) 5: 3130332e3233362e35322e302f32322d3234203d3e2034383136.roa (hash: L/Cnxt0IMPqrkk567v66pELmHjh0mHTQ9LGRguxjotg=) 6: 95AFB4515D628A1186D20869CFEAF47D559D5337.crl (hash: FyUDlu4VrF3CyoClJ/u9ECOKoRBzSwQLlRSa1t1/0UM=) 7: 3130332e3233362e35362e302f32322d3234203d3e2034383136.roa (hash: nU9td8FSbjkxq8qr2OaWckCpycvpgcxXULdnzQhot1w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 18:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:2d:af:2a:fa:00:ae:5c:45:82:3e:f6:9f:32:23:24:e1:64:0e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Validity Not Before: Jul 14 17:56:49 2026 GMT Not After : Jul 15 18:10:49 2026 GMT Subject: CN=7F696E9A9C129CBB03A8354A679D22C7D3A3FFC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:68:97:0e:dd:45:16:c8:a2:5e:4c:03:a9:1b: f4:44:19:cc:dc:7f:b3:c3:da:9b:97:ed:41:aa:16: ef:36:86:9a:ea:89:aa:91:c9:cd:38:ac:77:b1:0f: 6c:7b:b4:5f:54:c0:cc:1a:dd:cf:79:b9:bc:3b:b9: 37:1b:26:0d:60:18:3e:97:f9:06:26:7a:97:b7:a9: e7:f4:b5:a4:5e:29:db:3f:05:66:f5:29:17:9a:b9: 67:50:cb:26:98:11:b5:2e:af:38:d7:9c:04:cb:74: db:38:08:09:83:87:ae:e2:38:ff:23:33:3c:03:7c: 41:d1:c1:8b:60:6e:e9:b7:65:cd:06:30:b7:f6:d3: 37:b2:db:2f:42:f4:80:93:1f:e7:de:bf:55:ef:30: be:20:d8:1b:40:11:34:91:07:0d:a6:83:1f:5a:b0: e2:66:d6:c5:f9:8c:fe:04:03:39:f2:27:ce:0b:da: 68:dc:85:8e:de:30:b4:d5:20:68:52:3a:ce:e1:a4: 45:68:ae:d9:c1:78:98:f4:49:0b:0c:8c:41:5c:7e: 08:3a:42:03:ea:4f:5b:bc:a2:bb:9a:6e:01:80:38: 3a:d6:2e:6c:e9:f2:a3:95:4a:b1:e8:59:f3:39:3d: 1f:11:4d:6a:8e:48:b7:dd:8f:50:b5:ac:1c:d3:ff: c5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:69:6E:9A:9C:12:9C:BB:03:A8:35:4A:67:9D:22:C7:D3:A3:FF:C9 X509v3 Authority Key Identifier: keyid:95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:9e:b8:33:52:ee:5f:32:b2:8f:fc:81:c4:f8:3d:fd:10:bd: 55:35:8e:67:9c:93:09:3a:02:1d:c1:43:fd:64:7e:8f:95:42: 77:d5:1d:fe:f1:2d:49:e6:4b:56:c6:c4:fc:59:f0:d3:d2:0c: a9:bd:a2:14:10:84:a8:4c:84:81:b2:ef:c6:f4:18:e6:95:e6: e0:5e:f9:37:c7:0f:78:1e:80:cf:95:78:3b:87:79:25:85:9b: 9f:58:28:7a:b0:f8:28:90:e6:0f:0c:0a:3b:32:f2:2c:a9:21: 3b:fc:5e:aa:9b:a4:10:1d:f7:a0:ea:ac:9b:b1:ab:9f:c6:14: f4:20:f9:d8:b4:94:f1:dd:ec:e7:e8:ca:7a:44:a1:c9:1b:b1: 72:21:d7:84:e6:14:8a:b4:68:8c:80:63:56:13:38:f7:73:f2: f3:c0:55:f1:29:92:d9:69:70:db:1c:2d:b5:60:8a:33:b1:dd: 45:4e:f6:99:2e:01:72:fa:ac:ce:6c:46:51:01:6e:84:1b:bc: a4:73:be:20:be:31:bd:ac:0c:ab:b4:32:9b:18:47:0c:c2:e4: dc:3d:17:41:6b:0e:15:fd:72:98:e9:56:5d:0a:a2:95:4b:76: fa:13:88:3c:9b:36:9a:17:3f:05:da:2b:88:90:0b:96:4d:9e: 38:86:49:f7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQS2vKvoArlxFgj72nzIjJOFkDp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1 NTlENTMzNzAeFw0yNjA3MTQxNzU2NDlaFw0yNjA3MTUxODEwNDlaMDMxMTAvBgNV BAMTKDdGNjk2RTlBOUMxMjlDQkIwM0E4MzU0QTY3OUQyMkM3RDNBM0ZGQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEaJcO3UUWyKJeTAOpG/REGczc f7PD2puX7UGqFu82hprqiaqRyc04rHexD2x7tF9UwMwa3c95ubw7uTcbJg1gGD6X +QYmepe3qef0taReKds/BWb1KReauWdQyyaYEbUurzjXnATLdNs4CAmDh67iOP8j MzwDfEHRwYtgbum3Zc0GMLf20zey2y9C9ICTH+fev1XvML4g2BtAETSRBw2mgx9a sOJm1sX5jP4EAznyJ84L2mjchY7eMLTVIGhSOs7hpEVortnBeJj0SQsMjEFcfgg6 QgPqT1u8oruabgGAODrWLmzp8qOVSrHoWfM5PR8RTWqOSLfdj1C1rBzT/8VnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUf2lumpwSnLsDqDVKZ50ix9Oj/8kwHwYDVR0j BBgwFoAUla+0UV1iihGG0ghpz+r0fVWdUzcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzUyMDY0My8wLzk1QUZCNDUxNUQ2MjhBMTE4NkQyMDg2OUNGRUFG NDdENTU5RDUzMzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1NTlENTMzNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1MjA2NDMvMC85NUFGQjQ1MTVENjI4 QTExODZEMjA4NjlDRkVBRjQ3RDU1OUQ1MzM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVp64M1LuXzKy j/yBxPg9/RC9VTWOZ5yTCToCHcFD/WR+j5VCd9Ud/vEtSeZLVsbE/Fnw09IMqb2i FBCEqEyEgbLvxvQY5pXm4F75N8cPeB6Az5V4O4d5JYWbn1goerD4KJDmDwwKOzLy LKkhO/xeqpukEB33oOqsm7Grn8YU9CD52LSU8d3s5+jKekShyRuxciHXhOYUirRo jIBjVhM493Py88BV8SmS2Wlw2xwttWCKM7HdRU72mS4BcvqszmxGUQFuhBu8pHO+ IL4xvawMq7QymxhHDMLk3D0XQWsOFf1ymOlWXQqilUt2+hOIPJs2mhc/BdoriJAL lk2eOIZJ9w== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:33 2026 by rpki-client