$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft File: 995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft (raw, json) Hash identifier: ARwQEhoZmF9NFYN1awg1XB7OWo4NCSNnAbg6BrLrX9Q= Subject key identifier: 2A:51:56:B3:38:A0:36:E0:38:34:A7:B1:9C:C4:8E:B5:89:0E:1B:22 Authority key identifier: 99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C Certificate issuer: /CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Certificate serial: 7675FFCF3E38B17BBCC8A922FE75BA8486450353 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft Manifest number: B9 Signing time: Thu 10 Sep 2026 11:56:31 +0000 Manifest this update: Thu 10 Sep 2026 11:51:31 +0000 Manifest next update: Sun 13 Sep 2026 18:49:31 +0000 Files and hashes: 1: 995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl (hash: n2z1JBT8GT6yrc8RqNWM3d1ijRTtuaQvW8His/Sa1xg=) 2: 3130332e3130382e3234372e302f32342d3234203d3e203137363231.roa (hash: s+D2jjcXHT/GQYsoTxwHVqiHduQEa+gXupnaABFCM4o=) 3: 3130332e3130382e3234342e302f32342d3234203d3e203137363231.roa (hash: 2vlfLeMmGPjeaZPUEbjFHqo4xA0gQau0xrYELgWA3GA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:75:ff:cf:3e:38:b1:7b:bc:c8:a9:22:fe:75:ba:84:86:45:03:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Validity Not Before: Sep 10 11:51:31 2026 GMT Not After : Sep 13 18:49:31 2026 GMT Subject: CN=2A5156B338A036E03834A7B19CC48EB5890E1B22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:2e:79:63:d2:3e:18:aa:f1:62:4a:d6:a6: e7:f8:b9:50:e6:18:97:12:c7:a0:8d:d7:2a:f9:da: f1:a6:24:20:ff:ee:5e:5c:40:f0:c0:cb:ad:76:8d: 47:78:92:fb:f8:73:d5:68:9a:08:7c:ca:2f:8a:54: 11:43:6d:e1:28:f1:ae:f9:16:82:21:7e:48:d9:51: 2b:df:fd:9f:12:87:3d:e5:b0:2a:6a:8b:91:51:a1: 28:61:99:65:eb:21:3c:b1:fc:a1:86:6e:3c:02:e5: bd:e2:15:68:20:e3:a0:47:96:8c:d8:1c:d6:67:7b: 6d:3a:a9:be:12:c0:d5:3e:df:fe:6a:8a:d0:07:ca: 39:be:f6:f4:a0:18:24:7f:b0:da:f0:a1:2a:99:9b: 92:41:f0:02:f7:57:11:1d:b7:82:67:11:37:6f:86: c6:69:a9:09:bc:89:17:13:e5:7a:4b:dd:e9:ea:b9: d2:a7:cd:35:ed:d8:29:02:99:f4:43:c1:b8:6b:dd: ca:23:16:d4:8b:d6:c3:e9:65:bd:51:1d:41:93:a2: a0:8e:b9:36:fd:2f:d0:98:a8:3a:eb:99:a1:16:bb: a1:0e:75:09:ac:48:f5:4e:45:05:e6:a1:3f:d3:a2: 59:fe:61:6e:53:4d:7b:49:5d:9f:d6:3f:40:77:e1: 36:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:51:56:B3:38:A0:36:E0:38:34:A7:B1:9C:C4:8E:B5:89:0E:1B:22 X509v3 Authority Key Identifier: keyid:99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a5:a0:c9:e0:8d:25:0f:f1:cc:21:8b:dd:dd:86:43:ba:36: 20:79:10:eb:9a:7a:38:22:5a:7b:49:86:e8:0a:eb:42:42:db: 05:a0:27:d9:08:09:4d:43:a6:61:ef:93:84:6b:3e:ad:63:5d: c6:4c:59:af:e4:7d:bd:b8:a3:36:8d:47:37:8e:8e:3c:af:2d: 9f:f9:6c:01:44:5a:85:bb:b3:f7:82:cd:57:bc:e8:a0:6a:94: a5:67:dd:68:09:cf:04:59:3f:66:6d:36:e4:81:d5:19:7d:ea: 1e:5a:c6:c7:79:f4:2e:c3:66:5f:7e:36:d1:29:e2:fa:49:e2: 98:43:9c:f8:dd:d3:3d:79:44:af:66:5e:7d:1a:85:f4:a4:91: 99:6e:60:be:54:24:cd:bc:9f:01:c5:33:6b:e2:cb:35:43:20: a0:7e:78:19:1e:d1:d1:9f:f9:55:c1:7d:e1:a7:fc:49:c1:3e: 67:03:3c:e6:8e:99:06:f1:88:38:f1:b6:f2:64:9c:03:35:48: 2e:49:6b:af:91:8a:f4:1b:c8:5d:ee:24:07:33:ca:45:9c:a5: 75:b3:2f:9c:a4:9e:a3:5c:66:14:cc:3f:73:3e:7d:19:1d:57: 50:bb:21:32:e2:a0:9e:df:15:59:ac:6a:e7:35:6b:11:52:f0: 9e:b9:37:a2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdnX/zz44sXu8yKki/nW6hIZFA1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMy RTBDNkY5QzAeFw0yNjA5MTAxMTUxMzFaFw0yNjA5MTMxODQ5MzFaMDMxMTAvBgNV BAMTKDJBNTE1NkIzMzhBMDM2RTAzODM0QTdCMTlDQzQ4RUI1ODkwRTFCMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4AS55Y9I+GKrxYkrWpuf4uVDm GJcSx6CN1yr52vGmJCD/7l5cQPDAy612jUd4kvv4c9Vomgh8yi+KVBFDbeEo8a75 FoIhfkjZUSvf/Z8Shz3lsCpqi5FRoShhmWXrITyx/KGGbjwC5b3iFWgg46BHlozY HNZne206qb4SwNU+3/5qitAHyjm+9vSgGCR/sNrwoSqZm5JB8AL3VxEdt4JnETdv hsZpqQm8iRcT5XpL3enqudKnzTXt2CkCmfRDwbhr3cojFtSL1sPpZb1RHUGToqCO uTb9L9CYqDrrmaEWu6EOdQmsSPVORQXmoT/Toln+YW5TTXtJXZ/WP0B34Ta3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKlFWszigNuA4NKexnMSOtYkOGyIwHwYDVR0j BBgwFoAUmVugHAsJJXPK3VYjBYu7bC4Mb5wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODg2Njc0ODMyMjQ4MDEyOS8wLzk5NUJBMDFDMEIwOTI1NzNDQURENTYyMzA1OEJC QjZDMkUwQzZGOUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMyRTBDNkY5Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg4NjY3NDgzMjI0ODAxMjkvMC85OTVCQTAxQzBCMDky NTczQ0FERDU2MjMwNThCQkI2QzJFMEM2RjlDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6WgyeCNJQ/x zCGL3d2GQ7o2IHkQ65p6OCJae0mG6ArrQkLbBaAn2QgJTUOmYe+ThGs+rWNdxkxZ r+R9vbijNo1HN46OPK8tn/lsAURahbuz94LNV7zooGqUpWfdaAnPBFk/Zm025IHV GX3qHlrGx3n0LsNmX3420Sni+knimEOc+N3TPXlEr2ZefRqF9KSRmW5gvlQkzbyf AcUza+LLNUMgoH54GR7R0Z/5VcF94af8ScE+ZwM85o6ZBvGIOPG28mScAzVILklr r5GK9BvIXe4kBzPKRZyldbMvnKSeo1xmFMw/cz59GR1XULshMuKgnt8VWaxq5zVr EVLwnrk3og== -----END CERTIFICATE-----Generated at Thu Sep 10 15:38:39 2026 by rpki-client