$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft File: 95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft (raw, json) Hash identifier: DNGJEGZSQPPUVaZq7v6qG6XKrT0NP2xYNd5UmuyOki0= Subject key identifier: DD:16:56:11:AC:12:50:74:20:24:10:35:1B:A6:6B:9F:24:F4:12:78 Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 Certificate issuer: /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Certificate serial: 4541D9C0BC4249A94282A756F5F7AC694986D3A2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft Manifest number: 4F Signing time: Tue 14 Jul 2026 08:30:51 +0000 Manifest this update: Tue 14 Jul 2026 08:25:51 +0000 Manifest next update: Wed 15 Jul 2026 11:17:51 +0000 Files and hashes: 1: 323430313a336238303a3a2f33322d3332203d3e203539303136.roa (hash: BoT0BkuMQMjkrkhKJtwZepcOx6+TP+AJ/fdiDyAwVI0=) 2: 323430313a343238303a3a2f33322d3332203d3e203539303136.roa (hash: wvGE2b5TSnKIY0jATltop2J3jnvexdzdvqHvS8nfqoc=) 3: 3130332e3233372e3234302e302f32312d3234203d3e203539303136.roa (hash: dVO/5l2P8SLtHbMGokjm4j5F0UAo9VepYQjfk/K44Lk=) 4: 3130332e3233372e3232342e302f32302d3234203d3e203539303136.roa (hash: 6b/8l+Uh6nKe1lChpPD2qoAHroOaap5ZOEDgUWycvko=) 5: 323430313a343038303a3a2f33322d3332203d3e203539303136.roa (hash: iDdse9Ls6yfGVdjhkQRk57LbL20OKYaIkbT6DLWWFss=) 6: 95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl (hash: TwLDkMe1R0CYIdNjWCp7nh4iAMz3EvnwZcxRI+5xbZw=) 7: 3130332e3233372e3139322e302f31392d3234203d3e203539303136.roa (hash: GyFDLjhmzslpLAkxLQMKXf73yrWrvHv9QN2FG7CWGMg=) 8: 323430313a333838303a3a2f33322d3332203d3e203539303136.roa (hash: nIUpPle9V8mZQDvkQEuy67ZE77I4TcZ0g8BdblFs/40=) 9: 323430313a343338303a3a2f33322d3332203d3e203539303136.roa (hash: vu/T9HfTgNGQsuDixmS4B1wmKEiY+xqCh70hJ2TmJE4=) 10: 323430313a346138303a3a2f33322d3332203d3e203539303136.roa (hash: TA9sNJg7is21RvuqNvlhYmi7s0BOFgm0l6CxlSd3k3E=) 11: 323430313a343738303a3a2f33322d3332203d3e203539303136.roa (hash: Iyb1KGBqBHdVxysl3Ic3fe6dw60fKYWZn5LRMnbYIEg=) 12: 323430313a343538303a3a2f33322d3332203d3e203539303136.roa (hash: 4SF8Pp3L2TEVYRT22za3SayHJbSFtZ5mUY5kMm8lMLE=) 13: 323430313a343838303a3a2f33322d3332203d3e203539303136.roa (hash: L3uEhrRZb8f4yuEifKGAUDh5wDZ3Fi8QViYq2N6q/6w=) 14: 323430313a333938303a3a2f33322d3332203d3e203539303136.roa (hash: bTUMqZDoaHrSxBkNQJ8uuKsEF6Z9jgMuGDUhgCcaTtc=) 15: 323430313a343438303a3a2f33322d3332203d3e203539303136.roa (hash: tijXdtP2aEYodGJFVcP655ov9AvFTQq/eg3860Iq/s8=) 16: 323430313a336638303a3a2f33322d3332203d3e203539303136.roa (hash: ucjz/dlhV3ok/6hDmWxU2mJ+pwi0UxkJY3B5u/KGHYU=) 17: 3130332e3233372e3137362e302f32302d3234203d3e203539303136.roa (hash: F6kjKUL9Cuh7q/O+3aOPpPcOXiPPLNq3m8dj5BQeoJw=) 18: 323430313a343138303a3a2f33322d3332203d3e203539303136.roa (hash: OSFQ0l/OO8+SL8jJPJmY4WFRjU1QPttWYeUk5dMi/6I=) 19: 323430313a336138303a3a2f33322d3332203d3e203539303136.roa (hash: u0/hBW5D7s2jYfYBv53rUbNvjfHmSGPr9Qius6arWjQ=) 20: 323430313a336438303a3a2f33322d3332203d3e203539303136.roa (hash: DbLTFeOIezLKCvvhDSZf0uP4appQbtTjeFlkdxoCVo4=) 21: 323430313a336338303a3a2f33322d3332203d3e203539303136.roa (hash: bilHjyNG8k1Ew4Jg5iP3JCfreUTY5fsiIjRCV50N4d4=) 22: 323430313a336538303a3a2f33322d3332203d3e203539303136.roa (hash: 10u8/tQ0bj2m7WAt3d3KZeYYZx3ooQ6ech4KzfSDNOQ=) 23: 323430313a343638303a3a2f33322d3332203d3e203539303136.roa (hash: v55q9HAun0RdcyFLU8631U5FHjTmdXNRLzVCguNt9C8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 11:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:41:d9:c0:bc:42:49:a9:42:82:a7:56:f5:f7:ac:69:49:86:d3:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Validity Not Before: Jul 14 08:25:51 2026 GMT Not After : Jul 15 11:17:51 2026 GMT Subject: CN=DD165611AC125074202410351BA66B9F24F41278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:33:83:d7:fa:1b:0d:be:ae:58:03:22:bf:b1: 84:3b:75:90:10:be:61:63:0c:01:ed:18:47:37:cf: ab:c5:aa:02:aa:66:f2:03:be:e1:4e:ba:56:50:09: cb:81:b0:db:09:1d:bc:5b:90:96:78:19:89:5e:04: 55:94:f4:fc:87:99:45:58:39:af:de:35:ba:7b:7b: 9c:78:a5:95:bd:f0:77:17:64:7b:b5:0b:cb:3b:da: 57:4a:c7:e2:af:62:dc:07:81:56:1a:30:bc:cc:20: d2:1d:e6:20:bd:c4:95:94:ba:11:49:1a:77:2e:cb: 27:f7:51:46:6a:d3:97:19:94:0b:5f:3f:49:52:73: fc:f9:2b:93:8f:65:7e:f6:65:5a:01:49:c9:8f:40: 3c:c5:aa:9d:c4:23:75:ef:64:63:89:3e:cd:b6:c2: af:3b:ca:59:18:aa:69:fc:a3:91:4f:5f:a6:ff:f8: ca:38:84:72:44:cf:cb:64:02:47:c5:0f:85:99:5f: a8:bc:b1:36:c0:6c:29:c3:52:34:9a:70:af:cb:30: bb:33:80:5c:a8:2c:3e:da:5e:71:c1:d8:07:20:55: b4:a3:a4:62:3b:0c:1a:27:6b:7f:8a:cc:36:a9:dc: 31:c6:53:56:cd:d7:de:28:77:31:f3:eb:37:a4:11: f3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:16:56:11:AC:12:50:74:20:24:10:35:1B:A6:6B:9F:24:F4:12:78 X509v3 Authority Key Identifier: keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:03:8c:61:39:3c:f5:cc:b8:52:97:44:6f:80:77:f7:f7:8c: c8:59:f9:64:27:eb:55:ec:06:51:33:5e:ee:02:59:4f:72:fb: 18:f1:3e:1c:6f:72:9b:32:05:82:32:ce:6f:4d:8a:00:d0:a0: 91:aa:f1:72:3b:19:34:a2:37:44:6e:d5:de:44:f8:b7:19:a9: c3:a3:e8:57:16:f6:14:50:a0:73:1a:b7:f8:51:53:34:cd:46: 6c:60:d5:2b:44:54:3b:93:2b:2c:e1:dc:77:3f:fb:31:44:1c: f5:b4:e7:bd:10:da:60:f9:5f:3a:5e:26:35:ea:44:22:0f:4a: e6:ec:8e:a8:1a:4a:77:5f:a1:ee:6d:af:e4:f9:fb:b9:4d:ff: 47:fe:d3:03:fc:cd:79:c0:cb:9e:d5:37:52:c1:c7:92:69:c4: 70:da:51:be:dd:63:f1:1e:07:e3:05:7a:be:93:15:0f:7d:44: e2:8f:87:1d:7f:f9:c0:69:37:89:f4:6d:a1:86:68:ce:e6:59: fd:c1:e7:82:c8:d1:54:78:53:0d:bc:75:87:a5:de:a5:71:21: 74:d2:2f:78:9a:79:13:b0:96:5a:b6:a4:04:54:b7:10:22:0d: c1:86:e6:2e:d6:02:8e:0e:8e:ce:fb:70:e3:e1:2a:22:b9:ea: e1:56:56:a4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURUHZwLxCSalCgqdW9fesaUmG06IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZE RjQ3RENEMzAeFw0yNjA3MTQwODI1NTFaFw0yNjA3MTUxMTE3NTFaMDMxMTAvBgNV BAMTKEREMTY1NjExQUMxMjUwNzQyMDI0MTAzNTFCQTY2QjlGMjRGNDEyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAM4PX+hsNvq5YAyK/sYQ7dZAQ vmFjDAHtGEc3z6vFqgKqZvIDvuFOulZQCcuBsNsJHbxbkJZ4GYleBFWU9PyHmUVY Oa/eNbp7e5x4pZW98HcXZHu1C8s72ldKx+KvYtwHgVYaMLzMINId5iC9xJWUuhFJ Gncuyyf3UUZq05cZlAtfP0lSc/z5K5OPZX72ZVoBScmPQDzFqp3EI3XvZGOJPs22 wq87ylkYqmn8o5FPX6b/+Mo4hHJEz8tkAkfFD4WZX6i8sTbAbCnDUjSacK/LMLsz gFyoLD7aXnHB2AcgVbSjpGI7DBona3+KzDap3DHGU1bN194odzHz6zekEfMVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3RZWEawSUHQgJBA1G6ZrnyT0EngwHwYDVR0j BBgwFoAUlTJe36uJnt+cauUUMviX/99H3NMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTY1NzYyOTI1ODQxNjE0OS8wLzk1MzI1RURGQUI4OTlFREY5QzZBRTUxNDMyRjg5 N0ZGREY0N0RDRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZERjQ3RENEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDk2NTc2MjkyNTg0MTYxNDkvMC85NTMyNUVERkFCODk5 RURGOUM2QUU1MTQzMkY4OTdGRkRGNDdEQ0QzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAOMYTk89cy4 UpdEb4B39/eMyFn5ZCfrVewGUTNe7gJZT3L7GPE+HG9ymzIFgjLOb02KANCgkarx cjsZNKI3RG7V3kT4txmpw6PoVxb2FFCgcxq3+FFTNM1GbGDVK0RUO5MrLOHcdz/7 MUQc9bTnvRDaYPlfOl4mNepEIg9K5uyOqBpKd1+h7m2v5Pn7uU3/R/7TA/zNecDL ntU3UsHHkmnEcNpRvt1j8R4H4wV6vpMVD31E4o+HHX/5wGk3ifRtoYZozuZZ/cHn gsjRVHhTDbx1h6XepXEhdNIveJp5E7CWWrakBFS3ECINwYbmLtYCjg6Ozvtw4+Eq Irnq4VZWpA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:02:47 2026 by rpki-client