$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft File: 95B08F18D0CF8E4AFAD49A08A907521317F19024.mft (raw, json) Hash identifier: NiuO2ir7hV7W/1JfldHDQPWfmuF6Yq+VpwMIcUgUVos= Subject key identifier: 3B:9A:1A:E7:CA:35:3F:81:9E:38:D1:34:C8:88:5E:EB:93:85:58:3F Authority key identifier: 95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24 Certificate issuer: /CN=95B08F18D0CF8E4AFAD49A08A907521317F19024 Certificate serial: 09CE0338ED901496A40CE32DAE223E0E714131E9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft Manifest number: A4 Signing time: Fri 28 Aug 2026 07:48:36 +0000 Manifest this update: Fri 28 Aug 2026 07:43:36 +0000 Manifest next update: Mon 31 Aug 2026 15:56:36 +0000 Files and hashes: 1: 95B08F18D0CF8E4AFAD49A08A907521317F19024.crl (hash: HJLKwutZ26FqSHudnnjpchIlO5suNb2vCf50bQqqmzw=) 2: 323430333a366130303a3a2f33322d3332203d3e203138323339.roa (hash: JEINhMzkfauQueWUMSFYFDuvhgsd11LfjopwxXAxKZc=) 3: 3231392e3233322e3139322e302f31392d3139203d3e203138323339.roa (hash: 6aMfWBMMpDCsBJHesJ1xnjHna6IScpfcDFlRpDnwQ5U=) 4: 3230322e3134382e39362e302f31392d3139203d3e203138323339.roa (hash: JWBK8+Rdiy6uwBsyhbapdOBX2mjcYjJT67ezz3rHKhE=) 5: 3231312e3134372e3132382e302f31392d3139203d3e203138323339.roa (hash: LeMAOm4N8qhxkJ0uj/f0hKHJGXu+NKUzYhGKp2R3aPc=) 6: 3131352e38342e302e302f31382d3138203d3e203138323339.roa (hash: rOCdXiX+Hr0W66yY0r2Q2lSMIrzkgSFIIyFV6UfYgTg=) 7: 3231382e3234362e36342e302f31392d3139203d3e203138323339.roa (hash: B7eJVbgoaXaPfuwKdMj7UsIXp2ZukioE6XwEh82GLZM=) 8: 3231302e37332e36342e302f31392d3139203d3e203138323339.roa (hash: 1GDwncPlsYPbeW8okel7zSVV3jafsi0ew/0QpyVkPsc=) 9: 3231302e37352e3139322e302f31392d3139203d3e203138323339.roa (hash: 027EUoyERWAO9UGugZNEma8D4f9DTdiu6kJNHKsmx4Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:ce:03:38:ed:90:14:96:a4:0c:e3:2d:ae:22:3e:0e:71:41:31:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95B08F18D0CF8E4AFAD49A08A907521317F19024 Validity Not Before: Aug 28 07:43:36 2026 GMT Not After : Aug 31 15:56:36 2026 GMT Subject: CN=3B9A1AE7CA353F819E38D134C8885EEB9385583F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f2:56:f7:29:13:91:7e:87:e4:a8:81:78:1b: ba:cd:81:a5:83:62:2e:8a:19:96:8c:f7:c8:d6:af: 13:0a:ac:31:68:75:e8:eb:a6:3c:ca:52:89:8a:d2: c1:b8:a6:e6:6e:8f:13:83:6e:1d:5a:84:b2:00:97: 96:61:a2:5d:a5:62:bb:0e:54:56:8d:ed:27:a9:d1: 44:53:5a:9d:67:ab:ed:9d:99:3e:16:c0:7b:97:55: 71:50:f8:44:f3:b8:dd:39:37:26:fa:bb:ea:47:a4: 85:ba:f4:71:a8:b2:25:f5:05:26:f8:01:9b:b5:62: d5:4f:b0:bc:25:1a:09:3a:05:46:04:02:9f:00:6b: a0:b6:9f:14:ca:f2:05:5d:85:5e:dc:52:e8:18:44: fb:39:f9:dd:79:50:59:95:71:28:89:c5:a5:80:29: 4b:9d:8a:9c:f7:a8:d3:15:4d:58:8e:be:4d:84:24: 8f:a2:4f:81:3e:6e:53:75:76:e1:0b:f3:b9:cc:59: 92:ab:a7:f1:4b:76:c9:56:06:9e:4a:a9:80:01:98: 63:bc:01:fa:f2:15:80:6f:0f:d9:de:88:61:5c:a5: ee:f4:82:3e:30:26:bd:b7:ee:a3:ba:06:9d:7c:74: 8d:19:e5:e3:dd:ff:84:6d:d3:e4:b6:ef:6f:0c:17: 51:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9A:1A:E7:CA:35:3F:81:9E:38:D1:34:C8:88:5E:EB:93:85:58:3F X509v3 Authority Key Identifier: keyid:95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:b9:f8:f7:fc:12:f2:b8:16:72:3a:f0:7c:28:7c:6c:77:73: 35:ea:13:f3:08:1d:e5:c4:fa:5d:e3:e9:0a:76:e7:74:e4:ba: 8c:6e:14:fc:8c:76:1f:30:53:d5:59:dd:fb:fb:a2:5a:cc:16: 94:56:8f:ae:48:66:78:09:0e:2f:a5:f5:52:42:24:8b:30:7f: 4d:cd:31:1f:ad:58:dc:7b:fe:45:aa:92:82:95:9e:ed:a2:29: 86:25:f4:2e:a6:ba:47:74:e8:2a:c3:98:8e:af:c8:1f:ba:d6: 31:ad:af:23:2f:39:d7:79:be:4b:59:0b:bf:43:62:00:67:9b: 58:9b:95:71:5f:fa:0b:c2:1f:e8:f6:0d:54:f0:8d:99:10:fe: 99:2e:25:10:cc:27:3a:ef:9c:15:54:3b:5c:7d:91:87:e3:e6: 9c:68:04:45:de:cf:b9:bf:44:04:78:a6:ae:e7:a8:8c:0a:d0: 89:76:44:71:8d:4d:00:d0:ff:77:94:f5:c7:08:c5:ea:53:79: 57:ab:16:e1:e7:a3:5a:04:12:db:8f:fc:13:9d:35:c1:4f:2b: 9b:e2:c7:9a:59:9f:b4:de:6c:02:54:da:c4:7d:2b:28:ca:2b: cc:34:c0:11:19:6d:bb:c4:a2:9d:85:1c:27:fa:70:3d:df:13: bf:c7:03:03 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCc4DOO2QFJakDOMtriI+DnFBMekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVCMDhGMThEMENGOEU0QUZBRDQ5QTA4QTkwNzUyMTMx N0YxOTAyNDAeFw0yNjA4MjgwNzQzMzZaFw0yNjA4MzExNTU2MzZaMDMxMTAvBgNV BAMTKDNCOUExQUU3Q0EzNTNGODE5RTM4RDEzNEM4ODg1RUVCOTM4NTU4M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX8lb3KRORfofkqIF4G7rNgaWD Yi6KGZaM98jWrxMKrDFodejrpjzKUomK0sG4puZujxODbh1ahLIAl5Zhol2lYrsO VFaN7Sep0URTWp1nq+2dmT4WwHuXVXFQ+ETzuN05Nyb6u+pHpIW69HGosiX1BSb4 AZu1YtVPsLwlGgk6BUYEAp8Aa6C2nxTK8gVdhV7cUugYRPs5+d15UFmVcSiJxaWA KUudipz3qNMVTViOvk2EJI+iT4E+blN1duEL87nMWZKrp/FLdslWBp5KqYABmGO8 AfryFYBvD9neiGFcpe70gj4wJr237qO6Bp18dI0Z5ePd/4Rt0+S2728MF1GnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUO5oa58o1P4GeONE0yIhe65OFWD8wHwYDVR0j BBgwFoAUlbCPGNDPjkr61JoIqQdSExfxkCQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTY4OTcwNDU1MTU0Njg4Ny8wLzk1QjA4RjE4RDBDRjhFNEFGQUQ0OUEwOEE5MDc1 MjEzMTdGMTkwMjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVCMDhGMThEMENGOEU0QUZBRDQ5QTA4QTkwNzUyMTMxN0YxOTAyNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDE2ODk3MDQ1NTE1NDY4ODcvMC85NUIwOEYxOEQwQ0Y4 RTRBRkFENDlBMDhBOTA3NTIxMzE3RjE5MDI0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfbn49/wS8rgW cjrwfCh8bHdzNeoT8wgd5cT6XePpCnbndOS6jG4U/Ix2HzBT1Vnd+/uiWswWlFaP rkhmeAkOL6X1UkIkizB/Tc0xH61Y3Hv+RaqSgpWe7aIphiX0Lqa6R3ToKsOYjq/I H7rWMa2vIy8513m+S1kLv0NiAGebWJuVcV/6C8If6PYNVPCNmRD+mS4lEMwnOu+c FVQ7XH2Rh+PmnGgERd7Pub9EBHimrueojArQiXZEcY1NAND/d5T1xwjF6lN5V6sW 4eejWgQS24/8E501wU8rm+LHmlmftN5sAlTaxH0rKMorzDTAERltu8SinYUcJ/pw Pd8Tv8cDAw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:15 2026 by rpki-client