$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft File: 995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft (raw, json) Hash identifier: JTsNKcu9Iv7YcFSuQ5VYMTkLRcRw+urIhzGYLhSQrQk= Subject key identifier: F7:52:4A:5A:59:C0:A2:B8:C6:FF:66:92:60:A8:1B:DD:64:3E:8B:91 Authority key identifier: 99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C Certificate issuer: /CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Certificate serial: 3742ACDB2C568699ECDF35B7C5963F4D67B926B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft Manifest number: 0E Signing time: Mon 27 Apr 2026 12:23:47 +0000 Manifest this update: Mon 27 Apr 2026 12:18:47 +0000 Manifest next update: Tue 28 Apr 2026 13:21:47 +0000 Files and hashes: 1: 3130332e3130382e3234372e302f32342d3234203d3e203137363231.roa (hash: s+D2jjcXHT/GQYsoTxwHVqiHduQEa+gXupnaABFCM4o=) 2: 995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl (hash: mtFzc3ICAJLMd1VjrrEHVSbJyoxNTftismPjNz5qdGU=) 3: 3130332e3130382e3234342e302f32342d3234203d3e203137363231.roa (hash: 2vlfLeMmGPjeaZPUEbjFHqo4xA0gQau0xrYELgWA3GA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:42:ac:db:2c:56:86:99:ec:df:35:b7:c5:96:3f:4d:67:b9:26:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Validity Not Before: Apr 27 12:18:47 2026 GMT Not After : Apr 28 13:21:47 2026 GMT Subject: CN=F7524A5A59C0A2B8C6FF669260A81BDD643E8B91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e8:06:3c:9a:d5:6f:c5:a6:90:75:dd:47:aa: 32:b2:97:50:5b:18:da:3e:06:d0:00:4e:24:a9:ae: 4b:09:35:e5:36:2a:40:6c:5a:2c:7a:04:a4:30:3d: 03:c6:e4:9d:b2:0e:7f:c1:1a:87:2b:93:b0:e2:31: 01:06:69:bd:87:83:c0:ff:cc:e5:40:64:a7:d3:50: 74:b8:a3:94:4f:60:27:0e:ed:76:ca:21:69:be:e0: 15:5b:00:33:5b:da:f0:26:e1:1e:8e:40:1c:fd:68: dc:8c:52:87:81:b1:5b:dc:ee:25:bb:34:08:1d:ec: f5:f6:ee:61:aa:3f:b9:5d:e7:1a:40:8b:63:9b:71: be:34:38:07:f8:31:0a:5e:45:4f:52:65:85:67:44: d5:e1:ec:8d:eb:93:6a:a2:a5:37:18:dd:3e:d3:dd: d8:f8:bf:b1:d6:ad:03:9e:61:82:fb:a8:e2:91:a1: 84:69:fe:a3:63:f3:52:11:b5:4e:1b:a9:c7:5a:8c: 32:d0:60:97:b6:df:07:d8:0b:97:e0:bc:ca:54:ff: 58:66:7f:cf:24:58:5a:58:a6:72:31:68:d9:cd:f1: 7b:ef:cb:6a:bf:2f:70:6e:56:61:6c:26:53:45:11: fe:f7:2d:57:22:f9:3a:cc:45:59:4e:7c:43:4a:92: 40:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:52:4A:5A:59:C0:A2:B8:C6:FF:66:92:60:A8:1B:DD:64:3E:8B:91 X509v3 Authority Key Identifier: keyid:99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:dc:c7:af:bf:3c:61:c1:8c:d7:e5:e6:8f:01:eb:f5:34:41: 1d:22:22:73:c4:f9:c6:26:c6:98:ec:ea:8b:4c:2c:85:a1:38: 4a:16:f1:1c:99:1f:f6:d9:9c:76:f2:6d:03:8c:3b:71:4b:e1: cf:d6:b7:45:fd:90:a9:46:ab:f9:48:4b:16:e1:5f:40:0b:6d: 1f:64:4f:64:9b:7a:cc:65:0c:e0:19:9a:5c:09:7b:4d:f5:5f: 89:89:2c:52:a3:27:0d:b8:56:ae:33:53:c5:1b:af:05:3d:48: 81:4a:6f:c5:0e:5d:16:cf:c1:1f:67:4a:b2:08:e9:3e:9a:b1: b1:84:8e:8b:c8:5d:57:e4:b3:5a:c6:0c:f6:72:95:b1:d7:18: 0b:c0:3f:91:6a:10:62:89:56:34:b3:4c:b5:a8:bd:b6:6c:b9: 7d:b7:dd:59:4c:de:46:9c:f7:bc:ee:f3:9d:34:58:4c:f7:3d: 74:fd:53:f5:8f:f9:ad:50:82:e4:25:b2:6b:13:8c:2b:d4:82: 55:0a:df:66:34:14:5d:99:e3:8f:e3:19:6b:40:eb:e0:9f:b2: d0:dc:4e:14:85:28:93:db:4e:4f:58:b0:8a:9a:7d:6a:46:c5: bb:43:b7:6d:3f:22:9f:db:36:16:25:a4:f2:35:9a:a5:d2:3e: 84:4c:c4:cb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUN0Ks2yxWhpns3zW3xZY/TWe5JrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMy RTBDNkY5QzAeFw0yNjA0MjcxMjE4NDdaFw0yNjA0MjgxMzIxNDdaMDMxMTAvBgNV BAMTKEY3NTI0QTVBNTlDMEEyQjhDNkZGNjY5MjYwQTgxQkRENjQzRThCOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ6AY8mtVvxaaQdd1HqjKyl1Bb GNo+BtAATiSprksJNeU2KkBsWix6BKQwPQPG5J2yDn/BGocrk7DiMQEGab2Hg8D/ zOVAZKfTUHS4o5RPYCcO7XbKIWm+4BVbADNb2vAm4R6OQBz9aNyMUoeBsVvc7iW7 NAgd7PX27mGqP7ld5xpAi2Obcb40OAf4MQpeRU9SZYVnRNXh7I3rk2qipTcY3T7T 3dj4v7HWrQOeYYL7qOKRoYRp/qNj81IRtU4bqcdajDLQYJe23wfYC5fgvMpU/1hm f88kWFpYpnIxaNnN8Xvvy2q/L3BuVmFsJlNFEf73LVci+TrMRVlOfENKkkC/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU91JKWlnAorjG/2aSYKgb3WQ+i5EwHwYDVR0j BBgwFoAUmVugHAsJJXPK3VYjBYu7bC4Mb5wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODg2Njc0ODMyMjQ4MDEyOS8wLzk5NUJBMDFDMEIwOTI1NzNDQURENTYyMzA1OEJC QjZDMkUwQzZGOUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMyRTBDNkY5Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg4NjY3NDgzMjI0ODAxMjkvMC85OTVCQTAxQzBCMDky NTczQ0FERDU2MjMwNThCQkI2QzJFMEM2RjlDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNzHr788YcGM 1+XmjwHr9TRBHSIic8T5xibGmOzqi0wshaE4ShbxHJkf9tmcdvJtA4w7cUvhz9a3 Rf2QqUar+UhLFuFfQAttH2RPZJt6zGUM4BmaXAl7TfVfiYksUqMnDbhWrjNTxRuv BT1IgUpvxQ5dFs/BH2dKsgjpPpqxsYSOi8hdV+SzWsYM9nKVsdcYC8A/kWoQYolW NLNMtai9tmy5fbfdWUzeRpz3vO7znTRYTPc9dP1T9Y/5rVCC5CWyaxOMK9SCVQrf ZjQUXZnjj+MZa0Dr4J+y0NxOFIUok9tOT1iwipp9akbFu0O3bT8in9s2FiWk8jWa pdI+hEzEyw== -----END CERTIFICATE-----Generated at Mon Apr 27 14:55:03 2026 by rpki-client