$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft File: 95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft (raw, json) Hash identifier: g2LIXIv2A6HREu5eQXLnri8SWTF73Qsf3AW1Tk374m8= Subject key identifier: 28:41:6A:3D:55:AF:10:70:66:CF:D0:BA:1D:0F:A3:4B:AB:10:9F:02 Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 Certificate issuer: /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Certificate serial: 2F750BF73C5E2F3246A41925F049E0D6BCDD71B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft Manifest number: 12 Signing time: Fri 29 May 2026 06:42:41 +0000 Manifest this update: Fri 29 May 2026 06:37:41 +0000 Manifest next update: Sat 30 May 2026 08:30:41 +0000 Files and hashes: 1: 323430313a343438303a3a2f33322d3332203d3e203539303136.roa (hash: tijXdtP2aEYodGJFVcP655ov9AvFTQq/eg3860Iq/s8=) 2: 323430313a336538303a3a2f33322d3332203d3e203539303136.roa (hash: 10u8/tQ0bj2m7WAt3d3KZeYYZx3ooQ6ech4KzfSDNOQ=) 3: 323430313a346138303a3a2f33322d3332203d3e203539303136.roa (hash: TA9sNJg7is21RvuqNvlhYmi7s0BOFgm0l6CxlSd3k3E=) 4: 323430313a343538303a3a2f33322d3332203d3e203539303136.roa (hash: 4SF8Pp3L2TEVYRT22za3SayHJbSFtZ5mUY5kMm8lMLE=) 5: 323430313a343738303a3a2f33322d3332203d3e203539303136.roa (hash: Iyb1KGBqBHdVxysl3Ic3fe6dw60fKYWZn5LRMnbYIEg=) 6: 323430313a343238303a3a2f33322d3332203d3e203539303136.roa (hash: wvGE2b5TSnKIY0jATltop2J3jnvexdzdvqHvS8nfqoc=) 7: 323430313a333838303a3a2f33322d3332203d3e203539303136.roa (hash: nIUpPle9V8mZQDvkQEuy67ZE77I4TcZ0g8BdblFs/40=) 8: 323430313a336438303a3a2f33322d3332203d3e203539303136.roa (hash: DbLTFeOIezLKCvvhDSZf0uP4appQbtTjeFlkdxoCVo4=) 9: 323430313a336638303a3a2f33322d3332203d3e203539303136.roa (hash: ucjz/dlhV3ok/6hDmWxU2mJ+pwi0UxkJY3B5u/KGHYU=) 10: 323430313a343338303a3a2f33322d3332203d3e203539303136.roa (hash: vu/T9HfTgNGQsuDixmS4B1wmKEiY+xqCh70hJ2TmJE4=) 11: 3130332e3233372e3234302e302f32312d3234203d3e203539303136.roa (hash: dVO/5l2P8SLtHbMGokjm4j5F0UAo9VepYQjfk/K44Lk=) 12: 323430313a343638303a3a2f33322d3332203d3e203539303136.roa (hash: v55q9HAun0RdcyFLU8631U5FHjTmdXNRLzVCguNt9C8=) 13: 95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl (hash: 4TEtAVFKgLhVQGErBgXKIQLXN9r6mPBm/0hVs2+QUkA=) 14: 3130332e3233372e3139322e302f31392d3234203d3e203539303136.roa (hash: GyFDLjhmzslpLAkxLQMKXf73yrWrvHv9QN2FG7CWGMg=) 15: 323430313a343838303a3a2f33322d3332203d3e203539303136.roa (hash: L3uEhrRZb8f4yuEifKGAUDh5wDZ3Fi8QViYq2N6q/6w=) 16: 323430313a336338303a3a2f33322d3332203d3e203539303136.roa (hash: bilHjyNG8k1Ew4Jg5iP3JCfreUTY5fsiIjRCV50N4d4=) 17: 323430313a333938303a3a2f33322d3332203d3e203539303136.roa (hash: bTUMqZDoaHrSxBkNQJ8uuKsEF6Z9jgMuGDUhgCcaTtc=) 18: 323430313a343038303a3a2f33322d3332203d3e203539303136.roa (hash: iDdse9Ls6yfGVdjhkQRk57LbL20OKYaIkbT6DLWWFss=) 19: 3130332e3233372e3232342e302f32302d3234203d3e203539303136.roa (hash: 6b/8l+Uh6nKe1lChpPD2qoAHroOaap5ZOEDgUWycvko=) 20: 323430313a343138303a3a2f33322d3332203d3e203539303136.roa (hash: OSFQ0l/OO8+SL8jJPJmY4WFRjU1QPttWYeUk5dMi/6I=) 21: 3130332e3233372e3137362e302f32302d3234203d3e203539303136.roa (hash: F6kjKUL9Cuh7q/O+3aOPpPcOXiPPLNq3m8dj5BQeoJw=) 22: 323430313a336138303a3a2f33322d3332203d3e203539303136.roa (hash: u0/hBW5D7s2jYfYBv53rUbNvjfHmSGPr9Qius6arWjQ=) 23: 323430313a336238303a3a2f33322d3332203d3e203539303136.roa (hash: BoT0BkuMQMjkrkhKJtwZepcOx6+TP+AJ/fdiDyAwVI0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:75:0b:f7:3c:5e:2f:32:46:a4:19:25:f0:49:e0:d6:bc:dd:71:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Validity Not Before: May 29 06:37:41 2026 GMT Not After : May 30 08:30:41 2026 GMT Subject: CN=28416A3D55AF107066CFD0BA1D0FA34BAB109F02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1d:e6:e2:35:b1:32:96:6d:ad:49:7e:8e:f6: bc:b7:e8:dc:f9:bc:01:00:d2:34:5d:63:f2:08:49: fd:74:3e:e8:6f:6d:af:b5:64:b2:9a:a2:8b:27:84: 8a:94:a0:1a:f0:99:f9:e0:29:4d:ab:15:de:1d:d6: 35:27:53:f2:97:0b:66:0a:42:16:98:d3:68:ef:f0: 00:8f:8f:29:78:22:37:65:4f:64:c8:d6:f5:cd:2c: 37:99:3a:92:46:f6:88:1b:83:9a:48:42:a0:eb:85: 28:b0:eb:f6:fc:fe:d7:0f:dc:30:4c:ce:f0:7f:22: 58:17:a7:1e:d9:5c:3f:15:91:e7:78:5d:2e:ca:04: c7:4f:d3:fe:f4:2f:d9:2c:13:90:5c:0b:35:f3:d5: 9f:a6:e0:14:2e:65:df:d6:d1:6b:f2:fd:ee:cc:29: a2:d2:12:0a:09:78:18:fc:d3:65:28:86:f8:70:d1: 00:c1:c1:77:15:95:cb:4c:87:ef:f7:77:26:cc:fd: 98:69:c5:41:b8:cd:b3:d8:f5:9c:46:21:de:8b:90: 99:ae:2f:79:9d:1a:4d:4e:9e:ec:bc:6f:94:21:27: bc:bb:80:3f:2d:a4:b7:4e:1f:35:a0:6f:92:dd:dd: 5c:14:07:1c:fb:d9:a0:7d:75:a1:4d:2b:74:e5:20: 38:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:41:6A:3D:55:AF:10:70:66:CF:D0:BA:1D:0F:A3:4B:AB:10:9F:02 X509v3 Authority Key Identifier: keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2e:cc:12:7e:df:3f:d5:f7:1f:a8:a7:8b:99:76:b3:a4:35: 62:4b:86:c1:5f:9b:5a:94:58:44:97:07:dc:c7:ac:77:97:be: 41:6b:5f:22:42:a8:57:7b:96:9c:86:d6:7b:11:4b:4c:aa:01: d9:f6:76:13:ac:2b:e1:e2:d0:0c:27:6c:43:dc:ce:d0:3d:6e: 01:bd:2f:ca:fc:ba:eb:f9:1a:25:1b:35:ab:a0:b3:3b:c5:87: 60:33:73:83:71:34:89:6f:0d:f7:de:0b:db:ac:6e:23:3a:c4: fb:fe:34:3d:37:4a:8d:60:b2:41:7e:d2:63:e4:14:a9:99:95: b1:04:09:d9:b8:a5:3a:7e:f5:a2:bb:fc:1a:e5:fa:d9:66:37: 6d:2e:9f:d8:70:46:e1:04:42:7e:82:2c:97:d3:aa:26:ac:94: b4:9b:f7:33:5c:91:58:63:19:7e:40:e7:16:89:3f:6c:d6:c9: ce:f5:b4:88:99:fc:80:4d:42:b1:42:5a:2f:4f:02:0e:bc:0a: 46:b7:b8:de:da:8d:35:20:a5:ba:08:2e:11:50:79:ba:22:16: b8:1e:7e:fc:22:af:a1:36:04:5c:cc:b6:f7:3e:b0:ed:bf:8f: 34:54:ab:41:12:08:ee:3b:dd:61:19:24:65:93:2d:b1:2f:ba: bf:b3:16:65 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUL3UL9zxeLzJGpBkl8Eng1rzdcbcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZE RjQ3RENEMzAeFw0yNjA1MjkwNjM3NDFaFw0yNjA1MzAwODMwNDFaMDMxMTAvBgNV BAMTKDI4NDE2QTNENTVBRjEwNzA2NkNGRDBCQTFEMEZBMzRCQUIxMDlGMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHebiNbEylm2tSX6O9ry36Nz5 vAEA0jRdY/IISf10Puhvba+1ZLKaoosnhIqUoBrwmfngKU2rFd4d1jUnU/KXC2YK QhaY02jv8ACPjyl4IjdlT2TI1vXNLDeZOpJG9ogbg5pIQqDrhSiw6/b8/tcP3DBM zvB/IlgXpx7ZXD8Vked4XS7KBMdP0/70L9ksE5BcCzXz1Z+m4BQuZd/W0Wvy/e7M KaLSEgoJeBj802Uohvhw0QDBwXcVlctMh+/3dybM/ZhpxUG4zbPY9ZxGId6LkJmu L3mdGk1Onuy8b5QhJ7y7gD8tpLdOHzWgb5Ld3VwUBxz72aB9daFNK3TlIDidAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKEFqPVWvEHBmz9C6HQ+jS6sQnwIwHwYDVR0j BBgwFoAUlTJe36uJnt+cauUUMviX/99H3NMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTY1NzYyOTI1ODQxNjE0OS8wLzk1MzI1RURGQUI4OTlFREY5QzZBRTUxNDMyRjg5 N0ZGREY0N0RDRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZERjQ3RENEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDk2NTc2MjkyNTg0MTYxNDkvMC85NTMyNUVERkFCODk5 RURGOUM2QUU1MTQzMkY4OTdGRkRGNDdEQ0QzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmi7MEn7fP9X3 H6ini5l2s6Q1YkuGwV+bWpRYRJcH3Mesd5e+QWtfIkKoV3uWnIbWexFLTKoB2fZ2 E6wr4eLQDCdsQ9zO0D1uAb0vyvy66/kaJRs1q6CzO8WHYDNzg3E0iW8N994L26xu IzrE+/40PTdKjWCyQX7SY+QUqZmVsQQJ2bilOn71orv8GuX62WY3bS6f2HBG4QRC foIsl9OqJqyUtJv3M1yRWGMZfkDnFok/bNbJzvW0iJn8gE1CsUJaL08CDrwKRre4 3tqNNSClugguEVB5uiIWuB5+/CKvoTYEXMy29z6w7b+PNFSrQRII7jvdYRkkZZMt sS+6v7MWZQ== -----END CERTIFICATE-----Generated at Fri May 29 22:02:40 2026 by rpki-client