$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft File: 95AFB4515D628A1186D20869CFEAF47D559D5337.mft (raw, json) Hash identifier: zY3SrYUxU93YiiDj0y6ThCbeJN8VPtmMJmEz3ivpuu8= Subject key identifier: 6A:EB:D7:A6:9F:53:85:7E:47:0C:A3:78:BE:4E:D4:6A:B5:8E:BF:A3 Authority key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 Certificate issuer: /CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Certificate serial: 11D47A565095B69B2FDFDE23560D26D8B454EA8C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft Manifest number: 58 Signing time: Thu 26 Mar 2026 07:23:28 +0000 Manifest this update: Thu 26 Mar 2026 07:18:28 +0000 Manifest next update: Fri 27 Mar 2026 08:31:28 +0000 Files and hashes: 1: 3130332e3233362e36342e302f32322d3234203d3e2034383136.roa (hash: 9KFTHxz/y51ykUofxUnbpegbRUp/wwAex2kCfyHmCB0=) 2: 3130332e3233362e35322e302f32322d3234203d3e2034383136.roa (hash: L/Cnxt0IMPqrkk567v66pELmHjh0mHTQ9LGRguxjotg=) 3: 3130332e3233362e35362e302f32322d3234203d3e2034383136.roa (hash: nU9td8FSbjkxq8qr2OaWckCpycvpgcxXULdnzQhot1w=) 4: 95AFB4515D628A1186D20869CFEAF47D559D5337.crl (hash: S2cXdRJVTykOWmM2RwOBsk9lqFdgPXYfPL/1LqnTJ1c=) 5: 3130332e3130392e32302e302f32322d3234203d3e2034383136.roa (hash: Ir54i6mCJphe0tTKRNEplWXjiN5Eyqy0jZSjS9oxoak=) 6: 3130332e3233362e36302e302f32322d3234203d3e2034383136.roa (hash: p2Lh6mSEt8F+Pz43e7M48ZQE8zJIT8aede1FEWphpKg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d4:7a:56:50:95:b6:9b:2f:df:de:23:56:0d:26:d8:b4:54:ea:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Validity Not Before: Mar 26 07:18:28 2026 GMT Not After : Mar 27 08:31:28 2026 GMT Subject: CN=6AEBD7A69F53857E470CA378BE4ED46AB58EBFA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f4:58:fb:e5:b1:ae:0d:6c:85:04:d4:8c:6e: e8:01:93:68:d7:22:79:16:78:df:c6:b7:69:05:1d: bd:be:95:61:93:08:91:ce:82:2c:2d:04:d8:6f:c1: 7c:22:49:b4:13:a6:d9:1c:df:41:e1:db:2b:45:c9: 2d:75:c0:42:0a:5c:48:d1:2a:37:5c:45:f4:7b:ac: 1d:d4:83:81:93:55:80:dc:a4:d6:80:78:59:b3:6f: 4a:f6:9c:90:7b:63:51:a1:25:e3:be:63:b8:52:c0: b5:b4:b0:93:1c:03:57:78:ee:2c:ff:c0:68:39:f1: 28:23:c3:10:46:ce:2a:6d:d7:70:7b:f3:04:07:f7: 9d:a8:58:cd:5e:8d:e8:0f:19:9c:82:0b:72:b0:c2: dd:82:e9:8e:bb:76:ad:e2:cd:d1:09:4b:4c:30:2d: 50:ad:32:a2:4d:bb:16:fd:de:db:20:9d:b2:8a:85: f4:2a:6b:4c:f8:dd:8f:07:b8:d3:6d:99:01:73:e5: a2:d4:b4:22:5d:ab:22:73:e5:e4:cc:82:52:78:b4: 28:50:d2:81:92:d2:be:64:21:85:37:ca:7b:d3:05: 49:2c:27:bb:f9:8d:a4:e7:8c:ce:b2:c5:9c:fa:1f: 3b:a1:66:85:e6:91:78:95:27:25:c4:a7:b6:2e:52: 20:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EB:D7:A6:9F:53:85:7E:47:0C:A3:78:BE:4E:D4:6A:B5:8E:BF:A3 X509v3 Authority Key Identifier: keyid:95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:9f:f8:60:1c:d5:f6:5d:52:28:08:e9:8e:b3:d8:34:08:65: c8:56:07:78:dc:6f:e4:70:9f:c5:04:d9:75:38:63:ad:08:a1: 7a:06:9d:71:04:ac:54:06:0d:35:0e:ff:ff:a1:01:38:28:6e: 06:51:32:c0:3d:f2:50:4b:ac:53:68:c3:23:e2:c3:bd:ee:f0: fe:f3:54:7a:4b:6a:a0:71:ce:e0:f4:c8:f8:bd:0c:b6:72:06: 7a:a3:e3:ef:9d:a5:5b:b8:67:53:bf:43:5c:01:4a:44:77:a6: 46:37:3c:69:19:ab:86:16:4a:34:f6:e8:d4:a8:29:af:26:67: b7:0f:e2:d2:2a:67:91:b1:18:b4:da:e6:5c:39:9f:68:0c:9e: e5:e2:37:11:88:95:e9:80:81:91:30:6f:9e:4a:9a:d4:f0:b1: e5:05:e3:01:dd:8e:86:23:65:f9:78:fb:52:70:32:f6:32:ce: 18:cb:c3:6c:ab:d5:30:24:dc:af:c8:1c:71:c7:89:48:0c:de: 5a:11:8e:83:0f:d9:d6:8a:5d:98:7e:8d:97:a5:de:0d:a8:ff: 29:f5:cf:b5:75:65:97:95:37:4a:42:c9:57:61:3f:ec:97:f1: 2e:2a:8d:42:3e:cb:f8:13:c1:0f:dc:29:d4:33:4c:bf:c4:10: fb:60:d8:05 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEdR6VlCVtpsv394jVg0m2LRU6owwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1 NTlENTMzNzAeFw0yNjAzMjYwNzE4MjhaFw0yNjAzMjcwODMxMjhaMDMxMTAvBgNV BAMTKDZBRUJEN0E2OUY1Mzg1N0U0NzBDQTM3OEJFNEVENDZBQjU4RUJGQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf9Fj75bGuDWyFBNSMbugBk2jX InkWeN/Gt2kFHb2+lWGTCJHOgiwtBNhvwXwiSbQTptkc30Hh2ytFyS11wEIKXEjR KjdcRfR7rB3Ug4GTVYDcpNaAeFmzb0r2nJB7Y1GhJeO+Y7hSwLW0sJMcA1d47iz/ wGg58SgjwxBGzipt13B78wQH952oWM1ejegPGZyCC3Kwwt2C6Y67dq3izdEJS0ww LVCtMqJNuxb93tsgnbKKhfQqa0z43Y8HuNNtmQFz5aLUtCJdqyJz5eTMglJ4tChQ 0oGS0r5kIYU3ynvTBUksJ7v5jaTnjM6yxZz6HzuhZoXmkXiVJyXEp7YuUiChAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUauvXpp9ThX5HDKN4vk7UarWOv6MwHwYDVR0j BBgwFoAUla+0UV1iihGG0ghpz+r0fVWdUzcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzUyMDY0My8wLzk1QUZCNDUxNUQ2MjhBMTE4NkQyMDg2OUNGRUFG NDdENTU5RDUzMzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1NTlENTMzNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1MjA2NDMvMC85NUFGQjQ1MTVENjI4 QTExODZEMjA4NjlDRkVBRjQ3RDU1OUQ1MzM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZ/4YBzV9l1S KAjpjrPYNAhlyFYHeNxv5HCfxQTZdThjrQihegadcQSsVAYNNQ7//6EBOChuBlEy wD3yUEusU2jDI+LDve7w/vNUektqoHHO4PTI+L0MtnIGeqPj752lW7hnU79DXAFK RHemRjc8aRmrhhZKNPbo1KgpryZntw/i0ipnkbEYtNrmXDmfaAye5eI3EYiV6YCB kTBvnkqa1PCx5QXjAd2OhiNl+Xj7UnAy9jLOGMvDbKvVMCTcr8gccceJSAzeWhGO gw/Z1opdmH6Nl6XeDaj/KfXPtXVll5U3SkLJV2E/7JfxLiqNQj7L+BPBD9wp1DNM v8QQ+2DYBQ== -----END CERTIFICATE-----Generated at Thu Mar 26 20:36:44 2026 by rpki-client