$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft File: 95AFB4515D628A1186D20869CFEAF47D559D5337.mft (raw, json) Hash identifier: 4i6+nnPEEMmbtunD3u6IUgsKdOW+FvfzTYirocJA4WY= Subject key identifier: 3B:44:4C:93:0A:7E:86:33:EE:A8:49:F5:D6:7D:7A:A2:14:FB:8F:FF Authority key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 Certificate issuer: /CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Certificate serial: 72C8813C909B4282A9510922D6772892A1215FF6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft Manifest number: 6F Signing time: Sun 12 Apr 2026 17:39:16 +0000 Manifest this update: Sun 12 Apr 2026 17:34:16 +0000 Manifest next update: Mon 13 Apr 2026 18:56:16 +0000 Files and hashes: 1: 95AFB4515D628A1186D20869CFEAF47D559D5337.crl (hash: 8hgWF165rqbTC6grkzTZXZ5qgosh17ef0TVV5sOj7aI=) 2: 3130332e3130392e32302e302f32322d3234203d3e2034383136.roa (hash: Ir54i6mCJphe0tTKRNEplWXjiN5Eyqy0jZSjS9oxoak=) 3: 3130332e3233362e35362e302f32322d3234203d3e2034383136.roa (hash: nU9td8FSbjkxq8qr2OaWckCpycvpgcxXULdnzQhot1w=) 4: 3130332e3233362e36302e302f32322d3234203d3e2034383136.roa (hash: p2Lh6mSEt8F+Pz43e7M48ZQE8zJIT8aede1FEWphpKg=) 5: 3130332e3233362e36342e302f32322d3234203d3e2034383136.roa (hash: 9KFTHxz/y51ykUofxUnbpegbRUp/wwAex2kCfyHmCB0=) 6: 3130332e3233362e35322e302f32322d3234203d3e2034383136.roa (hash: L/Cnxt0IMPqrkk567v66pELmHjh0mHTQ9LGRguxjotg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 18:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c8:81:3c:90:9b:42:82:a9:51:09:22:d6:77:28:92:a1:21:5f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Validity Not Before: Apr 12 17:34:16 2026 GMT Not After : Apr 13 18:56:16 2026 GMT Subject: CN=3B444C930A7E8633EEA849F5D67D7AA214FB8FFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:53:23:d4:5f:35:91:2d:bc:e3:54:bf:f4:03: ed:5b:82:38:f1:e2:70:9b:4a:5c:bf:86:b6:d4:5f: 82:71:65:49:77:9f:33:ea:c0:1d:c6:cd:69:00:69: f7:b5:45:49:f1:f6:04:27:36:f5:51:28:62:0d:3b: 9c:f9:4f:73:91:4d:f0:cb:13:2e:cf:b6:24:b3:e6: 12:e6:41:f4:bf:a9:cf:49:88:78:34:b7:b1:e1:92: 33:18:76:8c:f6:7c:3a:de:f6:ca:06:00:e4:1b:fc: d7:dc:8c:84:a8:18:5c:37:d2:c8:f2:89:77:3d:51: d3:e4:77:f4:a5:77:84:fe:5b:15:01:a0:53:5b:28: 3d:57:88:b8:d6:b4:02:f4:18:af:7c:0d:8b:d0:81: 8a:b2:ce:b5:17:bb:7e:53:8d:ac:f3:b4:09:76:6e: 09:67:b1:86:21:37:ab:8b:3e:f7:f8:fb:0e:85:bc: a3:70:24:3f:f0:db:59:10:cd:a3:11:b6:9a:e1:03: fc:32:4a:05:98:13:86:f3:3b:66:ef:21:ea:c7:3c: fc:80:f2:13:0c:9e:54:0d:a3:71:dd:07:fc:b7:2d: 03:f5:04:3f:83:d9:e8:00:9f:c4:42:cb:e9:a7:af: a1:45:8a:55:fc:a8:21:35:93:02:f5:20:31:18:e6: f2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:44:4C:93:0A:7E:86:33:EE:A8:49:F5:D6:7D:7A:A2:14:FB:8F:FF X509v3 Authority Key Identifier: keyid:95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:d5:b6:6f:07:4a:af:9f:03:18:62:5f:f2:8e:0f:55:20:f1: 1d:5b:d9:ba:df:34:d1:05:f3:00:6a:ef:b6:99:c3:9c:b8:84: 90:80:8c:08:46:22:62:84:cc:cd:87:4e:e5:43:4e:d8:30:c2: 70:61:2a:5b:87:79:36:ef:39:84:d3:ae:f3:05:33:b0:5e:16: d4:be:6b:66:6b:54:96:0a:4e:84:25:61:b4:f8:02:53:7e:a7: 0c:5b:68:a9:64:5e:bc:0c:20:a9:ce:81:7b:9b:a9:e4:0d:91: e9:f0:a4:09:b9:ec:b6:af:c5:08:ec:86:d6:5a:f2:a6:a6:64: 4e:71:0d:7b:2e:7d:17:c6:08:de:c8:b8:62:2f:ab:be:83:52: 51:46:5a:fe:42:40:48:c0:d9:f5:79:4c:31:6a:87:47:66:13: 11:c1:7c:5e:83:f6:8e:08:29:ab:a3:1e:15:62:cb:e3:b6:29: 9c:2a:da:5b:10:ad:68:14:0f:9e:4d:85:59:36:c1:ba:29:fa: e6:c7:e2:2f:8b:df:47:c4:7b:c2:72:fa:fd:b1:31:a2:3f:ae: c9:f9:81:8e:38:0c:ec:88:5b:f4:a0:66:d2:0b:5a:cf:4a:53: 4c:02:08:7b:dd:3e:2f:0c:14:3f:f7:e5:d6:08:27:e5:fb:2b: ec:e4:83:3f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcsiBPJCbQoKpUQki1ncokqEhX/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1 NTlENTMzNzAeFw0yNjA0MTIxNzM0MTZaFw0yNjA0MTMxODU2MTZaMDMxMTAvBgNV BAMTKDNCNDQ0QzkzMEE3RTg2MzNFRUE4NDlGNUQ2N0Q3QUEyMTRGQjhGRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFUyPUXzWRLbzjVL/0A+1bgjjx 4nCbSly/hrbUX4JxZUl3nzPqwB3GzWkAafe1RUnx9gQnNvVRKGINO5z5T3ORTfDL Ey7PtiSz5hLmQfS/qc9JiHg0t7HhkjMYdoz2fDre9soGAOQb/NfcjISoGFw30sjy iXc9UdPkd/Sld4T+WxUBoFNbKD1XiLjWtAL0GK98DYvQgYqyzrUXu35TjazztAl2 bglnsYYhN6uLPvf4+w6FvKNwJD/w21kQzaMRtprhA/wySgWYE4bzO2bvIerHPPyA 8hMMnlQNo3HdB/y3LQP1BD+D2egAn8RCy+mnr6FFilX8qCE1kwL1IDEY5vLbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUO0RMkwp+hjPuqEn11n16ohT7j/8wHwYDVR0j BBgwFoAUla+0UV1iihGG0ghpz+r0fVWdUzcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzUyMDY0My8wLzk1QUZCNDUxNUQ2MjhBMTE4NkQyMDg2OUNGRUFG NDdENTU5RDUzMzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1NTlENTMzNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1MjA2NDMvMC85NUFGQjQ1MTVENjI4 QTExODZEMjA4NjlDRkVBRjQ3RDU1OUQ1MzM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArtW2bwdKr58D GGJf8o4PVSDxHVvZut800QXzAGrvtpnDnLiEkICMCEYiYoTMzYdO5UNO2DDCcGEq W4d5Nu85hNOu8wUzsF4W1L5rZmtUlgpOhCVhtPgCU36nDFtoqWRevAwgqc6Be5up 5A2R6fCkCbnstq/FCOyG1lrypqZkTnENey59F8YI3si4Yi+rvoNSUUZa/kJASMDZ 9XlMMWqHR2YTEcF8XoP2jggpq6MeFWLL47YpnCraWxCtaBQPnk2FWTbBuin65sfi L4vfR8R7wnL6/bExoj+uyfmBjjgM7Ihb9KBm0gtaz0pTTAIIe90+LwwUP/fl1ggn 5fsr7OSDPw== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:39 2026 by rpki-client