$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft File: 995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft (raw, json) Hash identifier: kIed8bAh/xyPyrJ3NybrPLZyuzA1PzR4X8L7nqVB8+0= Subject key identifier: A5:84:06:88:49:78:66:68:79:6F:AE:14:CA:8E:EB:68:A1:81:4F:D4 Authority key identifier: 99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C Certificate issuer: /CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Certificate serial: 0FA979BD9E81063E7EB2B5B3845D281E19926C95 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft Manifest number: CE Signing time: Tue 27 Oct 2026 00:09:10 +0000 Manifest this update: Tue 27 Oct 2026 00:04:10 +0000 Manifest next update: Fri 30 Oct 2026 05:20:10 +0000 Files and hashes: 1: 3130332e3130382e3234342e302f32342d3234203d3e203137363231.roa (hash: 2vlfLeMmGPjeaZPUEbjFHqo4xA0gQau0xrYELgWA3GA=) 2: 3130332e3130382e3234372e302f32342d3234203d3e203137363231.roa (hash: s+D2jjcXHT/GQYsoTxwHVqiHduQEa+gXupnaABFCM4o=) 3: 995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl (hash: g380bN4uvCQdEIABKJ6eUw7jSdbCFjClKM0b1MG1Oiw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 05:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a9:79:bd:9e:81:06:3e:7e:b2:b5:b3:84:5d:28:1e:19:92:6c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Validity Not Before: Oct 27 00:04:10 2026 GMT Not After : Oct 30 05:20:10 2026 GMT Subject: CN=A584068849786668796FAE14CA8EEB68A1814FD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:03:f1:05:ca:d4:6d:66:59:53:59:32:af:80: 5e:2c:a1:c7:18:75:06:25:55:9f:c2:4a:53:0c:d4: e1:53:94:3e:be:a4:44:5d:08:c3:27:68:a2:1c:5d: e4:7b:ae:6c:7b:19:bd:fd:3b:ed:8d:ed:91:40:36: 01:86:11:91:38:d6:69:6f:79:ce:2a:9e:00:a7:e5: 5c:51:97:87:05:b1:38:8c:45:34:83:36:a6:28:85: a0:18:92:37:49:57:2c:d7:21:7f:ee:b4:10:e2:78: c8:4e:02:19:8b:83:9e:fb:9a:54:7b:7b:c6:c1:8f: a4:75:ad:b6:92:72:38:d2:66:f7:4a:c3:de:54:f3: 04:4c:85:9f:8c:bf:f0:b8:87:ae:b2:8f:43:09:8b: ac:5b:5d:c6:fe:8f:7d:40:12:00:b8:cd:ce:6f:89: 0c:b5:fa:a2:8d:56:5a:17:34:5e:fa:46:9b:d2:8c: 68:4d:1c:fd:8c:3a:80:a8:43:b2:bd:d6:d9:0e:71: 49:10:c5:cf:5f:8c:47:87:af:b5:ea:bc:94:45:6c: 02:d1:6f:6f:1c:af:be:a5:7d:25:79:3a:fa:58:6e: d4:d2:6f:17:db:21:8e:d4:d6:01:80:7a:3d:58:21: 4b:c8:56:71:5f:8a:7c:83:d4:b5:11:93:a2:2b:dc: 27:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:84:06:88:49:78:66:68:79:6F:AE:14:CA:8E:EB:68:A1:81:4F:D4 X509v3 Authority Key Identifier: keyid:99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:82:83:a2:8f:8e:a4:4d:35:7e:f4:5b:e8:6f:9a:60:71:bc: 8c:0d:d0:0e:56:1b:67:20:46:ca:bb:62:d4:50:aa:6c:56:53: 69:49:fc:57:3d:d9:f0:67:04:d6:7e:55:d9:06:71:96:1b:f8: e9:d7:cb:4e:76:bb:7b:7c:b1:73:9e:e7:03:9d:ff:3d:8e:2d: 15:52:9c:fb:ef:01:9d:5d:6b:21:31:d3:86:c9:37:25:15:31: 11:7e:93:08:50:03:98:93:fb:44:bc:9d:bd:58:96:b4:1a:02: 26:d9:87:44:76:05:c0:f2:57:d5:69:4a:ab:b7:7c:2b:d0:32: 4c:0e:9c:cb:d4:6d:ab:a6:13:38:a0:91:2a:fa:32:34:bb:df: 96:28:f7:1f:a5:a2:a6:08:3f:d6:6f:3c:93:de:bd:99:9c:21: d0:c2:ad:b6:d1:0f:ca:ac:32:e8:19:74:8e:76:d3:71:69:08: 76:00:b6:0c:54:47:0d:55:9a:d7:1c:8b:a8:f3:9e:5a:32:8c: d1:55:af:7c:c7:86:cb:11:bd:fa:cb:40:9a:d9:51:fc:2a:57: 3c:ee:c7:84:ed:46:93:68:f1:8f:e1:15:8f:4a:fa:9d:f4:6a: 39:3c:6b:e7:48:16:09:24:62:ef:da:30:37:0d:37:92:b9:cc: 98:74:93:d4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUD6l5vZ6BBj5+srWzhF0oHhmSbJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMy RTBDNkY5QzAeFw0yNjEwMjcwMDA0MTBaFw0yNjEwMzAwNTIwMTBaMDMxMTAvBgNV BAMTKEE1ODQwNjg4NDk3ODY2Njg3OTZGQUUxNENBOEVFQjY4QTE4MTRGRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6A/EFytRtZllTWTKvgF4soccY dQYlVZ/CSlMM1OFTlD6+pERdCMMnaKIcXeR7rmx7Gb39O+2N7ZFANgGGEZE41mlv ec4qngCn5VxRl4cFsTiMRTSDNqYohaAYkjdJVyzXIX/utBDieMhOAhmLg577mlR7 e8bBj6R1rbaScjjSZvdKw95U8wRMhZ+Mv/C4h66yj0MJi6xbXcb+j31AEgC4zc5v iQy1+qKNVloXNF76RpvSjGhNHP2MOoCoQ7K91tkOcUkQxc9fjEeHr7XqvJRFbALR b28cr76lfSV5OvpYbtTSbxfbIY7U1gGAej1YIUvIVnFfinyD1LURk6Ir3CdrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpYQGiEl4Zmh5b64Uyo7raKGBT9QwHwYDVR0j BBgwFoAUmVugHAsJJXPK3VYjBYu7bC4Mb5wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODg2Njc0ODMyMjQ4MDEyOS8wLzk5NUJBMDFDMEIwOTI1NzNDQURENTYyMzA1OEJC QjZDMkUwQzZGOUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMyRTBDNkY5Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg4NjY3NDgzMjI0ODAxMjkvMC85OTVCQTAxQzBCMDky NTczQ0FERDU2MjMwNThCQkI2QzJFMEM2RjlDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4KDoo+OpE01 fvRb6G+aYHG8jA3QDlYbZyBGyrti1FCqbFZTaUn8Vz3Z8GcE1n5V2QZxlhv46dfL Tna7e3yxc57nA53/PY4tFVKc++8BnV1rITHThsk3JRUxEX6TCFADmJP7RLydvViW tBoCJtmHRHYFwPJX1WlKq7d8K9AyTA6cy9Rtq6YTOKCRKvoyNLvflij3H6Wipgg/ 1m88k969mZwh0MKtttEPyqwy6Bl0jnbTcWkIdgC2DFRHDVWa1xyLqPOeWjKM0VWv fMeGyxG9+stAmtlR/CpXPO7HhO1Gk2jxj+EVj0r6nfRqOTxr50gWCSRi79owNw03 krnMmHST1A== -----END CERTIFICATE-----Generated at Tue Oct 27 23:02:26 2026 by rpki-client