$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft File: C95DC06ABAF176962C0E90D36D939FA729AAC050.mft (raw, json) Hash identifier: 2ydtef9aAQeTZpYX3vjT2Dfo/p1XgXBEWnFxX0gxgks= Subject key identifier: 55:19:7B:85:B2:FD:30:77:95:6A:50:A4:76:7B:FD:93:24:33:8D:54 Authority key identifier: C9:5D:C0:6A:BA:F1:76:96:2C:0E:90:D3:6D:93:9F:A7:29:AA:C0:50 Certificate issuer: /CN=C95DC06ABAF176962C0E90D36D939FA729AAC050 Certificate serial: 39CA4F4922CF6D0451A794E074F3CF8BF9D48A8A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C95DC06ABAF176962C0E90D36D939FA729AAC050.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft Manifest number: 09 Signing time: Wed 04 Mar 2026 10:38:20 +0000 Manifest this update: Wed 04 Mar 2026 10:33:20 +0000 Manifest next update: Thu 05 Mar 2026 13:14:20 +0000 Files and hashes: 1: C95DC06ABAF176962C0E90D36D939FA729AAC050.crl (hash: LUny9Ffa3JTv83BCvjoR9WZ1Pvgt7XUttJozxjI60tQ=) 2: 3134342e37392e3134382e302f32332d3234203d3e20313337373731.roa (hash: SAeCRFVxu1ERGhOcXkGGGkwcAEAXwuDqhIvQaUGtLYA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.crl rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C95DC06ABAF176962C0E90D36D939FA729AAC050.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 13:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ca:4f:49:22:cf:6d:04:51:a7:94:e0:74:f3:cf:8b:f9:d4:8a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C95DC06ABAF176962C0E90D36D939FA729AAC050 Validity Not Before: Mar 4 10:33:20 2026 GMT Not After : Mar 5 13:14:20 2026 GMT Subject: CN=55197B85B2FD3077956A50A4767BFD9324338D54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2d:2c:ad:69:b3:0c:e0:ab:52:71:1a:66:ba: a1:7e:fe:b4:79:22:f0:38:39:dd:e0:56:de:20:eb: 34:18:15:a7:4c:69:53:c5:06:3d:b1:9f:25:a4:51: dc:7b:34:73:8b:1e:31:40:47:bc:24:03:db:32:fd: 3e:f4:2a:b7:bf:10:ec:c3:95:56:25:65:30:7b:b6: 4c:2f:47:fd:b5:40:4d:8a:f9:7f:0d:c6:76:cf:5a: 93:4a:3a:46:a1:e9:b6:03:a5:36:fd:e8:ce:e9:5e: 62:2b:43:75:0c:5b:ac:f7:6c:3e:4c:c0:dc:46:79: c6:bb:0a:fb:1f:7b:55:f6:40:b6:ae:2a:e7:d7:c6: d9:92:90:a1:39:74:52:2f:91:83:8b:c4:98:65:be: aa:61:ba:7f:94:b1:fb:c0:e5:a4:2a:10:c4:4c:38: b7:c7:0f:a7:23:e1:6c:89:17:66:9e:f4:4e:66:45: bf:8d:72:53:9a:e4:c9:c6:ec:18:98:73:82:fd:42: a7:37:ff:e6:06:89:5f:43:2a:50:5d:ef:9b:e7:96: d8:24:83:a2:0f:24:23:cd:3c:94:a1:2d:89:9c:9c: 14:1d:f6:71:e0:ce:6a:a7:ee:8f:b8:b4:56:73:f1: 8c:55:c4:13:d1:16:b5:7c:e4:95:52:9b:9d:34:4e: 3d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:19:7B:85:B2:FD:30:77:95:6A:50:A4:76:7B:FD:93:24:33:8D:54 X509v3 Authority Key Identifier: keyid:C9:5D:C0:6A:BA:F1:76:96:2C:0E:90:D3:6D:93:9F:A7:29:AA:C0:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/C95DC06ABAF176962C0E90D36D939FA729AAC050.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1079616203099471874/1/C95DC06ABAF176962C0E90D36D939FA729AAC050.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:cc:c7:48:9f:da:5f:b3:12:1b:5f:c3:ef:09:e8:32:43:c5: 2d:0b:cd:d7:5d:4f:4d:1b:1d:34:1f:92:be:54:73:6a:a1:4f: 92:aa:5f:0c:a1:56:be:67:9e:41:20:1f:4e:40:3b:e6:f3:06: cc:cd:16:66:f8:cb:e6:3e:4f:bf:5a:14:76:07:43:ea:eb:e0: 3f:e7:02:87:39:1f:d9:4d:99:63:35:69:d3:25:65:fc:0c:e3: e8:68:f1:88:fb:b5:98:23:9b:56:e6:fd:54:ac:3b:da:6e:7f: 28:da:ab:3a:d0:6f:b3:da:7d:85:6b:c2:3f:2e:38:54:87:dd: c3:22:a5:81:2b:08:52:95:9e:5b:25:35:90:2f:b4:23:b2:5a: 5f:c6:09:01:c5:8a:04:a4:c8:22:b8:64:0a:8b:83:ad:b2:42: 6f:78:c1:53:24:a3:02:d1:db:b3:c0:cb:15:5b:3f:5a:26:bf: e6:c2:1a:e9:e2:0c:13:46:b7:fc:8b:89:ee:9d:ac:61:ea:81: c0:07:19:50:c2:5e:6f:76:67:16:23:7e:64:e0:89:a3:1d:30: 00:3d:ae:d7:9e:a1:5e:25:7c:89:04:a6:be:d6:44:67:8b:f9: bf:22:20:07:6f:5b:3e:d0:e0:bc:ec:29:97:aa:e1:60:f3:d3: 3f:61:ac:02 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOcpPSSLPbQRRp5TgdPPPi/nUioowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk1REMwNkFCQUYxNzY5NjJDMEU5MEQzNkQ5MzlGQTcy OUFBQzA1MDAeFw0yNjAzMDQxMDMzMjBaFw0yNjAzMDUxMzE0MjBaMDMxMTAvBgNV BAMTKDU1MTk3Qjg1QjJGRDMwNzc5NTZBNTBBNDc2N0JGRDkzMjQzMzhENTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDULSytabMM4KtScRpmuqF+/rR5 IvA4Od3gVt4g6zQYFadMaVPFBj2xnyWkUdx7NHOLHjFAR7wkA9sy/T70Kre/EOzD lVYlZTB7tkwvR/21QE2K+X8NxnbPWpNKOkah6bYDpTb96M7pXmIrQ3UMW6z3bD5M wNxGeca7Cvsfe1X2QLauKufXxtmSkKE5dFIvkYOLxJhlvqphun+UsfvA5aQqEMRM OLfHD6cj4WyJF2ae9E5mRb+NclOa5MnG7BiYc4L9Qqc3/+YGiV9DKlBd75vnltgk g6IPJCPNPJShLYmcnBQd9nHgzmqn7o+4tFZz8YxVxBPRFrV85JVSm500Tj27AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVRl7hbL9MHeValCkdnv9kyQzjVQwHwYDVR0j BBgwFoAUyV3AarrxdpYsDpDTbZOfpymqwFAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 OTYxNjIwMzA5OTQ3MTg3NC8xL0M5NURDMDZBQkFGMTc2OTYyQzBFOTBEMzZEOTM5 RkE3MjlBQUMwNTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQzk1REMwNkFCQUYxNzY5NjJDMEU5MEQzNkQ5MzlGQTcyOUFBQzA1MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzk2MTYyMDMwOTk0NzE4NzQvMS9DOTVEQzA2QUJBRjE3 Njk2MkMwRTkwRDM2RDkzOUZBNzI5QUFDMDUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJszHSJ/aX7MS G1/D7wnoMkPFLQvN111PTRsdNB+SvlRzaqFPkqpfDKFWvmeeQSAfTkA75vMGzM0W ZvjL5j5Pv1oUdgdD6uvgP+cChzkf2U2ZYzVp0yVl/Azj6GjxiPu1mCObVub9VKw7 2m5/KNqrOtBvs9p9hWvCPy44VIfdwyKlgSsIUpWeWyU1kC+0I7JaX8YJAcWKBKTI IrhkCouDrbJCb3jBUySjAtHbs8DLFVs/Wia/5sIa6eIME0a3/IuJ7p2sYeqBwAcZ UMJeb3ZnFiN+ZOCJox0wAD2u156hXiV8iQSmvtZEZ4v5vyIgB29bPtDgvOwpl6rh YPPTP2GsAg== -----END CERTIFICATE-----Generated at Wed Mar 4 13:10:33 2026 by rpki-client