$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft File: 95B08F18D0CF8E4AFAD49A08A907521317F19024.mft (raw, json) Hash identifier: HQDRh72xL1Ym3lS4cqrQ0PHFi/pcycUWAtOGGlyZQJ0= Subject key identifier: 28:20:EE:05:D7:2E:8E:00:DF:59:2C:7B:63:00:B3:B3:58:C0:37:47 Authority key identifier: 95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24 Certificate issuer: /CN=95B08F18D0CF8E4AFAD49A08A907521317F19024 Certificate serial: 4F2A369BB30B018CC6A9DCC08681229AC218BDC6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft Manifest number: 67 Signing time: Tue 14 Jul 2026 07:05:39 +0000 Manifest this update: Tue 14 Jul 2026 07:00:39 +0000 Manifest next update: Wed 15 Jul 2026 09:53:39 +0000 Files and hashes: 1: 323430333a366130303a3a2f33322d3332203d3e203138323339.roa (hash: JEINhMzkfauQueWUMSFYFDuvhgsd11LfjopwxXAxKZc=) 2: 3231312e3134372e3132382e302f31392d3139203d3e203138323339.roa (hash: LeMAOm4N8qhxkJ0uj/f0hKHJGXu+NKUzYhGKp2R3aPc=) 3: 3231392e3233322e3139322e302f31392d3139203d3e203138323339.roa (hash: 6aMfWBMMpDCsBJHesJ1xnjHna6IScpfcDFlRpDnwQ5U=) 4: 3231302e37352e3139322e302f31392d3139203d3e203138323339.roa (hash: 027EUoyERWAO9UGugZNEma8D4f9DTdiu6kJNHKsmx4Y=) 5: 95B08F18D0CF8E4AFAD49A08A907521317F19024.crl (hash: UjQvFYArx6/6N7w1Im8qti6/3LovArUBeGyw83v/Fmw=) 6: 3230322e3134382e39362e302f31392d3139203d3e203138323339.roa (hash: JWBK8+Rdiy6uwBsyhbapdOBX2mjcYjJT67ezz3rHKhE=) 7: 3231302e37332e36342e302f31392d3139203d3e203138323339.roa (hash: 1GDwncPlsYPbeW8okel7zSVV3jafsi0ew/0QpyVkPsc=) 8: 3131352e38342e302e302f31382d3138203d3e203138323339.roa (hash: rOCdXiX+Hr0W66yY0r2Q2lSMIrzkgSFIIyFV6UfYgTg=) 9: 3231382e3234362e36342e302f31392d3139203d3e203138323339.roa (hash: B7eJVbgoaXaPfuwKdMj7UsIXp2ZukioE6XwEh82GLZM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:2a:36:9b:b3:0b:01:8c:c6:a9:dc:c0:86:81:22:9a:c2:18:bd:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95B08F18D0CF8E4AFAD49A08A907521317F19024 Validity Not Before: Jul 14 07:00:39 2026 GMT Not After : Jul 15 09:53:39 2026 GMT Subject: CN=2820EE05D72E8E00DF592C7B6300B3B358C03747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:4b:f2:20:34:0e:bd:97:84:df:4e:fe:99:31: c1:20:a6:1a:f4:0a:c9:9a:e0:8b:8b:dc:8b:69:ec: e3:40:58:fc:ee:a0:34:82:0a:ae:05:77:d4:09:85: 02:75:2f:27:12:de:20:5b:c8:a4:8e:03:64:fb:19: 18:dd:86:c3:d5:4f:a4:34:5d:d5:1b:c0:3d:d3:fb: 95:23:c8:22:2b:ff:cc:8e:71:19:34:cd:2a:d2:22: b8:62:d7:c2:f3:05:84:92:05:eb:fc:ad:b2:80:18: bb:ab:2c:57:52:c2:bd:af:8a:47:88:41:80:c3:9e: 8e:83:b5:47:1f:04:82:5e:dc:24:76:7e:57:f2:93: 67:87:37:bf:1d:c5:db:f2:41:af:79:54:26:a0:3f: a9:14:7e:d8:7e:af:68:43:8b:9a:a1:05:80:2b:41: 9f:08:b8:00:21:3d:b2:0d:4c:fa:12:44:79:00:ad: 30:9c:b7:fb:58:3d:a5:c1:57:b5:89:a7:58:92:30: 65:38:7b:78:fd:50:91:c5:64:34:8a:aa:23:66:5e: 3f:96:91:ba:ac:42:eb:7c:96:44:1f:37:28:5a:8c: 9c:3d:41:a7:5d:94:90:14:92:d2:79:fd:5c:63:ed: 94:d2:ad:96:1b:08:84:e3:cb:49:42:50:30:73:5f: d3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:20:EE:05:D7:2E:8E:00:DF:59:2C:7B:63:00:B3:B3:58:C0:37:47 X509v3 Authority Key Identifier: keyid:95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:fd:2b:40:92:cf:1f:d7:98:fd:c6:86:df:9c:ec:5d:09:08: 5d:44:70:08:36:df:a4:4e:27:d1:9d:3b:a1:38:9e:21:c5:42: fb:f1:a6:25:cf:bd:9d:56:9a:d3:e2:20:c6:ce:16:54:8f:11: 5c:65:90:b6:49:2a:a1:53:29:71:06:59:2d:07:8c:11:1b:98: 6d:43:fd:b6:4d:48:d5:79:84:e8:4d:7d:d8:51:51:0d:c0:9d: e4:99:e5:f8:92:05:96:f6:e8:b8:05:9a:31:f1:46:a6:77:e0: f8:e3:35:d2:7f:5f:f7:8d:00:69:0d:83:e5:2e:52:c1:74:1e: d7:73:7b:0b:54:91:27:11:8d:20:c9:c3:8e:ec:8d:ac:fc:7f: b9:0a:4c:fe:c0:d4:ed:cb:48:d8:f2:2b:de:1e:d0:01:c3:48: 85:58:90:a3:10:88:7e:50:ea:1f:2a:00:2a:8a:cc:93:61:70: 73:41:66:e2:07:f9:04:7f:88:c4:1f:f9:95:4a:d5:ea:a8:7e: 61:e0:79:43:f0:e1:29:aa:fa:10:6e:7c:5e:73:04:fb:bc:45: 6b:aa:04:f5:18:dd:ff:83:14:ec:13:0f:6f:30:67:5f:f9:62: a4:9d:e8:5a:0e:12:82:1a:f2:f3:39:27:ab:a0:4a:e3:8c:cb: 39:0d:08:23 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTyo2m7MLAYzGqdzAhoEimsIYvcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVCMDhGMThEMENGOEU0QUZBRDQ5QTA4QTkwNzUyMTMx N0YxOTAyNDAeFw0yNjA3MTQwNzAwMzlaFw0yNjA3MTUwOTUzMzlaMDMxMTAvBgNV BAMTKDI4MjBFRTA1RDcyRThFMDBERjU5MkM3QjYzMDBCM0IzNThDMDM3NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUS/IgNA69l4TfTv6ZMcEgphr0 Csma4IuL3Itp7ONAWPzuoDSCCq4Fd9QJhQJ1LycS3iBbyKSOA2T7GRjdhsPVT6Q0 XdUbwD3T+5UjyCIr/8yOcRk0zSrSIrhi18LzBYSSBev8rbKAGLurLFdSwr2vikeI QYDDno6DtUcfBIJe3CR2flfyk2eHN78dxdvyQa95VCagP6kUfth+r2hDi5qhBYAr QZ8IuAAhPbINTPoSRHkArTCct/tYPaXBV7WJp1iSMGU4e3j9UJHFZDSKqiNmXj+W kbqsQut8lkQfNyhajJw9QaddlJAUktJ5/Vxj7ZTSrZYbCITjy0lCUDBzX9P3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKCDuBdcujgDfWSx7YwCzs1jAN0cwHwYDVR0j BBgwFoAUlbCPGNDPjkr61JoIqQdSExfxkCQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTY4OTcwNDU1MTU0Njg4Ny8wLzk1QjA4RjE4RDBDRjhFNEFGQUQ0OUEwOEE5MDc1 MjEzMTdGMTkwMjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVCMDhGMThEMENGOEU0QUZBRDQ5QTA4QTkwNzUyMTMxN0YxOTAyNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDE2ODk3MDQ1NTE1NDY4ODcvMC85NUIwOEYxOEQwQ0Y4 RTRBRkFENDlBMDhBOTA3NTIxMzE3RjE5MDI0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbv0rQJLPH9eY /caG35zsXQkIXURwCDbfpE4n0Z07oTieIcVC+/GmJc+9nVaa0+Igxs4WVI8RXGWQ tkkqoVMpcQZZLQeMERuYbUP9tk1I1XmE6E192FFRDcCd5Jnl+JIFlvbouAWaMfFG pnfg+OM10n9f940AaQ2D5S5SwXQe13N7C1SRJxGNIMnDjuyNrPx/uQpM/sDU7ctI 2PIr3h7QAcNIhViQoxCIflDqHyoAKorMk2Fwc0Fm4gf5BH+IxB/5lUrV6qh+YeB5 Q/DhKar6EG58XnME+7xFa6oE9Rjd/4MU7BMPbzBnX/lipJ3oWg4Sghry8zknq6BK 44zLOQ0IIw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:17 2026 by rpki-client