$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft File: 995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft (raw, json) Hash identifier: X7VL2OIcfDFG4bNzM1FQE/BVLpDiyBYe73mjtop4fdM= Subject key identifier: 6D:6B:64:79:92:9A:8F:EB:BB:83:68:E3:53:E8:BE:14:41:68:7A:23 Authority key identifier: 99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C Certificate issuer: /CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Certificate serial: 287415367F5C94FFC224AE796C3EBFCC93D6F36E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft Manifest number: 87 Signing time: Mon 27 Jul 2026 06:03:31 +0000 Manifest this update: Mon 27 Jul 2026 05:58:31 +0000 Manifest next update: Tue 28 Jul 2026 06:19:31 +0000 Files and hashes: 1: 3130332e3130382e3234342e302f32342d3234203d3e203137363231.roa (hash: 2vlfLeMmGPjeaZPUEbjFHqo4xA0gQau0xrYELgWA3GA=) 2: 3130332e3130382e3234372e302f32342d3234203d3e203137363231.roa (hash: s+D2jjcXHT/GQYsoTxwHVqiHduQEa+gXupnaABFCM4o=) 3: 995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl (hash: /5Ba2XFQ8Dlu65YfMVotegTkSnZwXYDTHNULEvEDitQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 06:19:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:74:15:36:7f:5c:94:ff:c2:24:ae:79:6c:3e:bf:cc:93:d6:f3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Validity Not Before: Jul 27 05:58:31 2026 GMT Not After : Jul 28 06:19:31 2026 GMT Subject: CN=6D6B6479929A8FEBBB8368E353E8BE1441687A23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d9:d4:2b:53:7d:72:d7:b7:6b:f9:e7:f9:d2: 38:c5:75:f8:1b:02:2e:50:62:d9:4c:4f:28:7b:ff: 6b:9f:95:23:d7:32:e3:29:d2:ff:f4:d1:66:31:2b: 1f:ff:ba:44:92:eb:97:99:47:ee:45:b1:fd:6f:49: 33:8f:43:95:0f:43:c6:37:dd:d7:7f:98:2a:e2:74: f0:b1:cc:78:ed:53:25:cd:a8:35:b9:a7:9f:21:76: dc:0f:67:33:33:dd:ff:4d:46:d9:81:7d:e4:ff:a4: c4:ca:1d:b0:b7:81:01:10:c4:f2:01:07:be:b3:c5: 7d:3d:fe:8e:97:c2:bf:da:d3:8b:92:5d:14:c4:27: be:a5:6d:90:95:45:d1:bd:d4:5d:0e:61:ae:11:3c: 76:a4:ee:b1:e9:26:25:80:48:57:24:82:82:75:1a: 7b:e5:de:74:ec:de:46:86:50:34:15:53:88:1e:9e: 80:6b:b1:95:37:58:3d:d6:0d:05:fb:08:51:10:89: 2c:a2:aa:dc:5c:19:81:8c:43:90:92:b7:4b:41:ec: ae:0c:f4:54:e1:4e:75:9f:9e:a8:07:48:e0:c2:32: a0:41:bb:6f:a5:4c:5f:0d:ca:09:1f:37:4e:46:c2: 05:64:28:b5:ba:50:82:48:cc:19:3a:33:1e:68:3b: 38:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6B:64:79:92:9A:8F:EB:BB:83:68:E3:53:E8:BE:14:41:68:7A:23 X509v3 Authority Key Identifier: keyid:99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:3a:13:ef:8c:0a:bf:42:e6:1d:9a:b8:3a:3a:6b:ee:21:14: 86:0e:9b:f5:71:54:04:16:3f:6c:51:ef:34:a4:3c:dd:f3:43: 7d:12:a3:95:fd:ef:ab:17:58:16:86:11:c6:e1:86:65:60:e4: 7a:8d:15:67:0e:95:0a:50:2f:25:fa:9b:2a:35:67:fd:33:36: 6b:39:1a:3f:04:59:41:79:28:12:f5:a3:e6:aa:9b:63:78:9b: 65:11:00:1b:8d:a7:28:9b:64:41:45:9c:6a:de:06:4a:29:45: 81:f5:06:b2:ef:73:61:5a:59:c8:48:37:70:61:ac:fc:cc:77: 38:29:00:50:d5:84:af:d6:6f:3b:95:dc:43:df:85:ea:1f:ca: ab:db:79:0d:97:e6:c2:53:cf:7c:92:4b:99:ce:6c:95:e7:36: 03:df:ad:86:1b:ec:2c:10:96:a1:b9:b1:7f:b5:97:09:d7:be: af:91:9c:58:1c:3c:a6:9a:1c:52:83:eb:23:97:a5:e3:5a:48: 60:20:21:b7:e9:ee:a6:e5:2b:a5:eb:da:44:36:c5:cf:87:84: aa:57:30:e8:bf:2d:01:0b:49:e5:62:e9:93:6d:1c:61:78:19: 40:dd:5b:4a:e5:b6:b3:32:8e:7d:e9:13:d6:f9:ee:b1:25:34: e5:82:d1:fa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKHQVNn9clP/CJK55bD6/zJPW824wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMy RTBDNkY5QzAeFw0yNjA3MjcwNTU4MzFaFw0yNjA3MjgwNjE5MzFaMDMxMTAvBgNV BAMTKDZENkI2NDc5OTI5QThGRUJCQjgzNjhFMzUzRThCRTE0NDE2ODdBMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj2dQrU31y17dr+ef50jjFdfgb Ai5QYtlMTyh7/2uflSPXMuMp0v/00WYxKx//ukSS65eZR+5Fsf1vSTOPQ5UPQ8Y3 3dd/mCridPCxzHjtUyXNqDW5p58hdtwPZzMz3f9NRtmBfeT/pMTKHbC3gQEQxPIB B76zxX09/o6Xwr/a04uSXRTEJ76lbZCVRdG91F0OYa4RPHak7rHpJiWASFckgoJ1 Gnvl3nTs3kaGUDQVU4genoBrsZU3WD3WDQX7CFEQiSyiqtxcGYGMQ5CSt0tB7K4M 9FThTnWfnqgHSODCMqBBu2+lTF8NygkfN05GwgVkKLW6UIJIzBk6Mx5oOzghAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbWtkeZKaj+u7g2jjU+i+FEFoeiMwHwYDVR0j BBgwFoAUmVugHAsJJXPK3VYjBYu7bC4Mb5wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODg2Njc0ODMyMjQ4MDEyOS8wLzk5NUJBMDFDMEIwOTI1NzNDQURENTYyMzA1OEJC QjZDMkUwQzZGOUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMyRTBDNkY5Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg4NjY3NDgzMjI0ODAxMjkvMC85OTVCQTAxQzBCMDky NTczQ0FERDU2MjMwNThCQkI2QzJFMEM2RjlDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWToT74wKv0Lm HZq4Ojpr7iEUhg6b9XFUBBY/bFHvNKQ83fNDfRKjlf3vqxdYFoYRxuGGZWDkeo0V Zw6VClAvJfqbKjVn/TM2azkaPwRZQXkoEvWj5qqbY3ibZREAG42nKJtkQUWcat4G SilFgfUGsu9zYVpZyEg3cGGs/Mx3OCkAUNWEr9ZvO5XcQ9+F6h/Kq9t5DZfmwlPP fJJLmc5slec2A9+thhvsLBCWobmxf7WXCde+r5GcWBw8ppocUoPrI5el41pIYCAh t+nupuUrpevaRDbFz4eEqlcw6L8tAQtJ5WLpk20cYXgZQN1bSuW2szKOfekT1vnu sSU05YLR+g== -----END CERTIFICATE-----Generated at Mon Jul 27 11:37:10 2026 by rpki-client