$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft File: 95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft (raw, json) Hash identifier: wgiHjuUoOzla4o0znhwsHPPKLIsKamxarKzYxnFSD7g= Subject key identifier: 13:4C:D5:68:FF:7E:E5:50:83:B0:DE:86:FD:7A:58:87:19:DB:82:92 Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 Certificate issuer: /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Certificate serial: 097819A87837A83E7DFF1A3F9C8C5FEB4ED8130A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft Manifest number: A0 Signing time: Tue 13 Oct 2026 15:03:08 +0000 Manifest this update: Tue 13 Oct 2026 14:58:08 +0000 Manifest next update: Fri 16 Oct 2026 21:23:08 +0000 Files and hashes: 1: 3130332e3233372e3139322e302f31392d3234203d3e203539303136.roa (hash: GyFDLjhmzslpLAkxLQMKXf73yrWrvHv9QN2FG7CWGMg=) 2: 323430313a343138303a3a2f33322d3332203d3e203539303136.roa (hash: OSFQ0l/OO8+SL8jJPJmY4WFRjU1QPttWYeUk5dMi/6I=) 3: 323430313a336538303a3a2f33322d3332203d3e203539303136.roa (hash: 10u8/tQ0bj2m7WAt3d3KZeYYZx3ooQ6ech4KzfSDNOQ=) 4: 3130332e3233372e3137362e302f32302d3234203d3e203539303136.roa (hash: F6kjKUL9Cuh7q/O+3aOPpPcOXiPPLNq3m8dj5BQeoJw=) 5: 95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl (hash: neJKSUbsE1xGA6X0EGsgg1Sckhu7W4qJuPD34Ony+aM=) 6: 323430313a343338303a3a2f33322d3332203d3e203539303136.roa (hash: vu/T9HfTgNGQsuDixmS4B1wmKEiY+xqCh70hJ2TmJE4=) 7: 3130332e3233372e3232342e302f32302d3234203d3e203539303136.roa (hash: 6b/8l+Uh6nKe1lChpPD2qoAHroOaap5ZOEDgUWycvko=) 8: 323430313a333938303a3a2f33322d3332203d3e203539303136.roa (hash: bTUMqZDoaHrSxBkNQJ8uuKsEF6Z9jgMuGDUhgCcaTtc=) 9: 323430313a343738303a3a2f33322d3332203d3e203539303136.roa (hash: Iyb1KGBqBHdVxysl3Ic3fe6dw60fKYWZn5LRMnbYIEg=) 10: 323430313a343038303a3a2f33322d3332203d3e203539303136.roa (hash: iDdse9Ls6yfGVdjhkQRk57LbL20OKYaIkbT6DLWWFss=) 11: 323430313a343238303a3a2f33322d3332203d3e203539303136.roa (hash: wvGE2b5TSnKIY0jATltop2J3jnvexdzdvqHvS8nfqoc=) 12: 323430313a343838303a3a2f33322d3332203d3e203539303136.roa (hash: L3uEhrRZb8f4yuEifKGAUDh5wDZ3Fi8QViYq2N6q/6w=) 13: 323430313a346138303a3a2f33322d3332203d3e203539303136.roa (hash: TA9sNJg7is21RvuqNvlhYmi7s0BOFgm0l6CxlSd3k3E=) 14: 323430313a336338303a3a2f33322d3332203d3e203539303136.roa (hash: bilHjyNG8k1Ew4Jg5iP3JCfreUTY5fsiIjRCV50N4d4=) 15: 323430313a336138303a3a2f33322d3332203d3e203539303136.roa (hash: u0/hBW5D7s2jYfYBv53rUbNvjfHmSGPr9Qius6arWjQ=) 16: 323430313a336438303a3a2f33322d3332203d3e203539303136.roa (hash: DbLTFeOIezLKCvvhDSZf0uP4appQbtTjeFlkdxoCVo4=) 17: 323430313a343538303a3a2f33322d3332203d3e203539303136.roa (hash: 4SF8Pp3L2TEVYRT22za3SayHJbSFtZ5mUY5kMm8lMLE=) 18: 323430313a343638303a3a2f33322d3332203d3e203539303136.roa (hash: v55q9HAun0RdcyFLU8631U5FHjTmdXNRLzVCguNt9C8=) 19: 323430313a336638303a3a2f33322d3332203d3e203539303136.roa (hash: ucjz/dlhV3ok/6hDmWxU2mJ+pwi0UxkJY3B5u/KGHYU=) 20: 323430313a336238303a3a2f33322d3332203d3e203539303136.roa (hash: BoT0BkuMQMjkrkhKJtwZepcOx6+TP+AJ/fdiDyAwVI0=) 21: 323430313a333838303a3a2f33322d3332203d3e203539303136.roa (hash: nIUpPle9V8mZQDvkQEuy67ZE77I4TcZ0g8BdblFs/40=) 22: 3130332e3233372e3234302e302f32312d3234203d3e203539303136.roa (hash: dVO/5l2P8SLtHbMGokjm4j5F0UAo9VepYQjfk/K44Lk=) 23: 323430313a343438303a3a2f33322d3332203d3e203539303136.roa (hash: tijXdtP2aEYodGJFVcP655ov9AvFTQq/eg3860Iq/s8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 21:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:78:19:a8:78:37:a8:3e:7d:ff:1a:3f:9c:8c:5f:eb:4e:d8:13:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Validity Not Before: Oct 13 14:58:08 2026 GMT Not After : Oct 16 21:23:08 2026 GMT Subject: CN=134CD568FF7EE55083B0DE86FD7A588719DB8292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:c9:54:e8:35:f2:6c:c6:57:05:55:4e:f4: 85:69:5c:6b:a1:56:88:44:69:23:f8:2f:55:8e:4b: ce:bb:16:c5:14:ea:16:c9:c9:18:37:5c:8d:9d:5a: 6b:e1:aa:d9:7e:6e:a7:72:6a:49:8e:b8:a9:61:0e: f3:41:51:b2:b1:c2:6f:ce:9d:a2:76:f9:a7:9f:74: 1e:98:2d:59:84:43:6a:bb:13:e2:21:37:ad:e0:12: 71:6e:70:d9:70:eb:21:86:8c:8a:2d:fb:c3:2d:69: 9a:35:7b:23:cb:47:2a:f6:04:40:56:a4:88:9d:8c: 09:fe:14:1e:35:2e:9c:a7:2b:37:09:08:83:12:37: b2:5b:6e:71:aa:a9:44:2f:40:e2:10:0f:21:3e:ed: ac:94:eb:3b:5f:22:b0:e9:10:ae:07:05:1f:77:68: 43:27:28:fa:c4:99:6d:7f:3b:bc:d2:76:71:52:f3: 45:af:8a:ed:f1:0c:ec:e7:43:44:9e:d8:24:0b:c2: ae:c9:92:de:f9:25:33:a6:56:9c:8b:b5:39:a0:a8: a4:73:e8:c5:e4:3b:63:e4:b7:2d:2c:82:07:dd:03: 01:87:35:16:b4:41:d8:c9:fb:82:58:95:f9:84:c7: 9d:3c:7e:50:79:3e:21:59:58:68:19:f9:e8:ab:36: e0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4C:D5:68:FF:7E:E5:50:83:B0:DE:86:FD:7A:58:87:19:DB:82:92 X509v3 Authority Key Identifier: keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:0e:54:64:59:be:64:27:fe:87:18:78:03:b8:e6:c7:2b:5c: 47:ec:d2:51:24:eb:1d:0a:87:ae:66:f1:30:4e:86:34:58:3f: c8:e4:7b:99:c2:65:a3:a9:fe:2f:f8:83:5b:88:c8:b6:d8:dc: d7:8c:e5:7d:cc:34:95:eb:d5:f0:74:d5:21:cf:1e:26:04:d3: b8:e5:b3:e1:c9:ec:57:87:e9:6b:48:3f:bf:1c:70:23:17:4d: cf:ab:12:49:47:d2:16:f8:9c:66:da:ee:31:57:2d:f1:7d:78: a9:49:e1:02:75:dc:23:fd:96:98:a2:40:47:6e:40:a0:84:14: 59:bc:96:5f:02:48:d2:04:33:bc:79:2a:44:69:7c:97:20:a6: 41:25:a9:87:b0:32:fe:6f:eb:78:e8:c9:18:af:f0:38:26:3e: f3:3f:34:c3:1a:5d:01:5a:29:7a:38:c2:f1:80:70:b5:31:7e: 38:19:35:e0:96:92:f3:fa:43:62:30:a6:bf:13:c3:ee:5f:0a: ca:ed:5a:01:91:c8:0c:bb:bd:e8:d0:3d:a7:22:86:17:51:b4: 18:da:30:49:69:25:dc:68:6a:8f:e3:86:2f:c4:e9:fb:44:5a: 16:52:24:64:73:89:c1:e1:e3:0a:83:ac:4e:a4:c7:3a:38:17: 07:26:54:8c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCXgZqHg3qD59/xo/nIxf607YEwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZE RjQ3RENEMzAeFw0yNjEwMTMxNDU4MDhaFw0yNjEwMTYyMTIzMDhaMDMxMTAvBgNV BAMTKDEzNENENTY4RkY3RUU1NTA4M0IwREU4NkZEN0E1ODg3MTlEQjgyOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+fMlU6DXybMZXBVVO9IVpXGuh VohEaSP4L1WOS867FsUU6hbJyRg3XI2dWmvhqtl+bqdyakmOuKlhDvNBUbKxwm/O naJ2+aefdB6YLVmEQ2q7E+IhN63gEnFucNlw6yGGjIot+8MtaZo1eyPLRyr2BEBW pIidjAn+FB41LpynKzcJCIMSN7JbbnGqqUQvQOIQDyE+7ayU6ztfIrDpEK4HBR93 aEMnKPrEmW1/O7zSdnFS80Wviu3xDOznQ0Se2CQLwq7Jkt75JTOmVpyLtTmgqKRz 6MXkO2Pkty0sggfdAwGHNRa0QdjJ+4JYlfmEx508flB5PiFZWGgZ+eirNuD7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUE0zVaP9+5VCDsN6G/XpYhxnbgpIwHwYDVR0j BBgwFoAUlTJe36uJnt+cauUUMviX/99H3NMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTY1NzYyOTI1ODQxNjE0OS8wLzk1MzI1RURGQUI4OTlFREY5QzZBRTUxNDMyRjg5 N0ZGREY0N0RDRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZERjQ3RENEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDk2NTc2MjkyNTg0MTYxNDkvMC85NTMyNUVERkFCODk5 RURGOUM2QUU1MTQzMkY4OTdGRkRGNDdEQ0QzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGw5UZFm+ZCf+ hxh4A7jmxytcR+zSUSTrHQqHrmbxME6GNFg/yOR7mcJlo6n+L/iDW4jIttjc14zl fcw0levV8HTVIc8eJgTTuOWz4cnsV4fpa0g/vxxwIxdNz6sSSUfSFvicZtruMVct 8X14qUnhAnXcI/2WmKJAR25AoIQUWbyWXwJI0gQzvHkqRGl8lyCmQSWph7Ay/m/r eOjJGK/wOCY+8z80wxpdAVopejjC8YBwtTF+OBk14JaS8/pDYjCmvxPD7l8Kyu1a AZHIDLu96NA9pyKGF1G0GNowSWkl3Ghqj+OGL8Tp+0RaFlIkZHOJweHjCoOsTqTH OjgXByZUjA== -----END CERTIFICATE-----Generated at Wed Oct 14 17:43:39 2026 by rpki-client