$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft File: 95B08F18D0CF8E4AFAD49A08A907521317F19024.mft (raw, json) Hash identifier: FAPyGBgLIJZh5zMFZm8SuVoh20Q+Im7vwDR94d17Wu4= Subject key identifier: 01:78:51:5C:A7:47:5D:30:44:0A:69:F5:F9:FC:CA:85:5C:82:C8:FE Authority key identifier: 95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24 Certificate issuer: /CN=95B08F18D0CF8E4AFAD49A08A907521317F19024 Certificate serial: 7648834E9DF724C9DAC9B13DF9861E0386F83D54 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft Manifest number: 2A Signing time: Fri 29 May 2026 04:17:32 +0000 Manifest this update: Fri 29 May 2026 04:12:32 +0000 Manifest next update: Sat 30 May 2026 07:28:32 +0000 Files and hashes: 1: 3231392e3233322e3139322e302f31392d3139203d3e203138323339.roa (hash: 6aMfWBMMpDCsBJHesJ1xnjHna6IScpfcDFlRpDnwQ5U=) 2: 3231382e3234362e36342e302f31392d3139203d3e203138323339.roa (hash: B7eJVbgoaXaPfuwKdMj7UsIXp2ZukioE6XwEh82GLZM=) 3: 3231302e37332e36342e302f31392d3139203d3e203138323339.roa (hash: 1GDwncPlsYPbeW8okel7zSVV3jafsi0ew/0QpyVkPsc=) 4: 3230322e3134382e39362e302f31392d3139203d3e203138323339.roa (hash: JWBK8+Rdiy6uwBsyhbapdOBX2mjcYjJT67ezz3rHKhE=) 5: 3231312e3134372e3132382e302f31392d3139203d3e203138323339.roa (hash: LeMAOm4N8qhxkJ0uj/f0hKHJGXu+NKUzYhGKp2R3aPc=) 6: 323430333a366130303a3a2f33322d3332203d3e203138323339.roa (hash: JEINhMzkfauQueWUMSFYFDuvhgsd11LfjopwxXAxKZc=) 7: 95B08F18D0CF8E4AFAD49A08A907521317F19024.crl (hash: xtQtlvaWDf+U47zaw2pCcsxQWZUl3vMbTB8VtCWb/Nc=) 8: 3231302e37352e3139322e302f31392d3139203d3e203138323339.roa (hash: 027EUoyERWAO9UGugZNEma8D4f9DTdiu6kJNHKsmx4Y=) 9: 3131352e38342e302e302f31382d3138203d3e203138323339.roa (hash: rOCdXiX+Hr0W66yY0r2Q2lSMIrzkgSFIIyFV6UfYgTg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 07:28:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:48:83:4e:9d:f7:24:c9:da:c9:b1:3d:f9:86:1e:03:86:f8:3d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95B08F18D0CF8E4AFAD49A08A907521317F19024 Validity Not Before: May 29 04:12:32 2026 GMT Not After : May 30 07:28:32 2026 GMT Subject: CN=0178515CA7475D30440A69F5F9FCCA855C82C8FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a0:46:5e:d4:39:d3:0e:f1:0d:a3:17:30:d3: b5:f1:36:c1:08:f6:68:b5:2c:be:02:75:5a:0d:fb: e4:b8:ef:e0:b1:38:fb:82:5a:57:c1:c3:b6:0d:31: bb:88:67:62:14:72:b2:0f:12:8c:b4:ff:a6:72:2b: 99:66:7c:29:e1:28:4c:e4:08:2c:d7:b7:af:68:13: 4c:89:81:41:12:4a:a1:14:e4:e1:95:74:42:b2:bd: 00:c3:e5:b4:32:96:f3:94:9f:40:e0:bb:15:33:3a: 09:d6:e8:7b:a9:2f:6c:51:46:cd:d5:4f:5a:c3:60: 9c:5d:f6:8d:a2:a8:49:b6:1b:ee:3e:42:06:1e:45: df:68:ee:2f:20:aa:45:37:24:5f:6f:de:d4:55:75: 01:b1:84:bd:39:32:0f:8f:6a:ff:1f:2f:5b:fb:bf: cd:65:f4:d6:37:dc:46:ad:0c:12:fb:b3:49:af:01: 36:ad:d4:15:67:87:4e:31:f5:0b:1d:c1:0c:25:8c: 4f:00:8f:bc:d9:4a:cf:58:8e:f8:33:9c:70:8f:95: d7:12:e4:08:b4:86:c9:b4:a9:92:ac:7e:13:a9:e4: bd:d7:ae:b9:e6:84:5a:7b:9d:ff:30:dd:93:27:df: f5:c1:7e:3d:1d:02:68:d1:ec:fe:e5:de:8e:99:5b: 2e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:78:51:5C:A7:47:5D:30:44:0A:69:F5:F9:FC:CA:85:5C:82:C8:FE X509v3 Authority Key Identifier: keyid:95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:b1:d1:61:70:57:e0:36:a9:3d:bf:74:d5:38:f2:6f:d5:32: c3:9f:cb:a8:be:42:9c:30:7e:fc:d3:b4:0c:4d:56:54:34:93: af:e4:21:5b:7d:97:46:fc:35:3d:62:ba:ac:3d:5c:87:0e:04: c1:cc:a4:73:81:11:db:c1:4e:e2:1d:b9:21:f3:eb:7f:e4:8c: f9:bb:b4:91:ef:e4:82:13:10:80:e0:aa:bc:58:59:6b:a5:27: 3c:f7:61:9d:a5:d6:ee:61:fa:51:eb:c3:d6:c4:b3:7d:b4:6c: 48:2b:90:ba:05:68:b4:8b:c7:50:7e:c3:42:42:29:b4:fe:06: 00:90:0e:9a:1f:ab:c1:e9:f0:42:fc:fe:84:55:45:e4:52:5c: 8a:a6:89:f0:e4:40:6c:ec:4f:3c:66:a4:6a:ea:e3:a4:4e:fc: 83:06:7f:4b:18:f4:15:6a:b3:10:68:7e:fb:54:aa:22:f6:30: 52:45:68:44:e5:f2:1f:9d:34:27:40:24:31:f8:77:3a:e7:b2: 59:2e:e7:0d:00:71:52:0a:99:e3:33:d7:15:98:15:66:be:f2: 4d:c8:f9:7b:a5:80:2a:c3:da:59:d6:ba:8b:39:ee:18:9c:a4: 9f:cf:a0:dd:a3:7a:77:9b:04:df:27:62:82:c8:67:cb:7e:f8: bb:b9:6a:c3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdkiDTp33JMnaybE9+YYeA4b4PVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVCMDhGMThEMENGOEU0QUZBRDQ5QTA4QTkwNzUyMTMx N0YxOTAyNDAeFw0yNjA1MjkwNDEyMzJaFw0yNjA1MzAwNzI4MzJaMDMxMTAvBgNV BAMTKDAxNzg1MTVDQTc0NzVEMzA0NDBBNjlGNUY5RkNDQTg1NUM4MkM4RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWoEZe1DnTDvENoxcw07XxNsEI 9mi1LL4CdVoN++S47+CxOPuCWlfBw7YNMbuIZ2IUcrIPEoy0/6ZyK5lmfCnhKEzk CCzXt69oE0yJgUESSqEU5OGVdEKyvQDD5bQylvOUn0DguxUzOgnW6HupL2xRRs3V T1rDYJxd9o2iqEm2G+4+QgYeRd9o7i8gqkU3JF9v3tRVdQGxhL05Mg+Pav8fL1v7 v81l9NY33EatDBL7s0mvATat1BVnh04x9QsdwQwljE8Aj7zZSs9YjvgznHCPldcS 5Ai0hsm0qZKsfhOp5L3XrrnmhFp7nf8w3ZMn3/XBfj0dAmjR7P7l3o6ZWy6bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAXhRXKdHXTBECmn1+fzKhVyCyP4wHwYDVR0j BBgwFoAUlbCPGNDPjkr61JoIqQdSExfxkCQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTY4OTcwNDU1MTU0Njg4Ny8wLzk1QjA4RjE4RDBDRjhFNEFGQUQ0OUEwOEE5MDc1 MjEzMTdGMTkwMjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVCMDhGMThEMENGOEU0QUZBRDQ5QTA4QTkwNzUyMTMxN0YxOTAyNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDE2ODk3MDQ1NTE1NDY4ODcvMC85NUIwOEYxOEQwQ0Y4 RTRBRkFENDlBMDhBOTA3NTIxMzE3RjE5MDI0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAErHRYXBX4Dap Pb901Tjyb9Uyw5/LqL5CnDB+/NO0DE1WVDSTr+QhW32XRvw1PWK6rD1chw4Ewcyk c4ER28FO4h25IfPrf+SM+bu0ke/kghMQgOCqvFhZa6UnPPdhnaXW7mH6UevD1sSz fbRsSCuQugVotIvHUH7DQkIptP4GAJAOmh+rwenwQvz+hFVF5FJciqaJ8ORAbOxP PGakaurjpE78gwZ/Sxj0FWqzEGh++1SqIvYwUkVoROXyH500J0AkMfh3OueyWS7n DQBxUgqZ4zPXFZgVZr7yTcj5e6WAKsPaWda6iznuGJykn8+g3aN6d5sE3ydigshn y374u7lqww== -----END CERTIFICATE-----Generated at Fri May 29 22:02:59 2026 by rpki-client