$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft File: 95AFB4515D628A1186D20869CFEAF47D559D5337.mft (raw, json) Hash identifier: PzVOsXZ7auyOfxHT5iD4X7vM7/B6EvewqvBS9ohgp1s= Subject key identifier: 15:C9:6E:6D:91:28:4A:EF:8E:05:4D:9B:64:C9:A6:2D:0F:99:D3:AC Authority key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 Certificate issuer: /CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Certificate serial: 3A6A8304D0DA7B6D370C2C6EC4730EF8F7BE11EB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft Manifest number: 97 Signing time: Tue 12 May 2026 15:00:36 +0000 Manifest this update: Tue 12 May 2026 14:55:36 +0000 Manifest next update: Wed 13 May 2026 17:49:36 +0000 Files and hashes: 1: 95AFB4515D628A1186D20869CFEAF47D559D5337.crl (hash: OpFg1rteT0PV3Q/HhYKfcAmhcMoKbHGZJ6zz9T2Qeak=) 2: 3130332e3130392e32302e302f32322d3234203d3e2034383136.roa (hash: Ir54i6mCJphe0tTKRNEplWXjiN5Eyqy0jZSjS9oxoak=) 3: 3130332e3233362e36342e302f32322d3234203d3e2034383136.roa (hash: 9KFTHxz/y51ykUofxUnbpegbRUp/wwAex2kCfyHmCB0=) 4: 3130332e3233362e36302e302f32322d3234203d3e2034383136.roa (hash: p2Lh6mSEt8F+Pz43e7M48ZQE8zJIT8aede1FEWphpKg=) 5: 3130332e3233362e35322e302f32322d3234203d3e2034383136.roa (hash: L/Cnxt0IMPqrkk567v66pELmHjh0mHTQ9LGRguxjotg=) 6: 3130332e3233362e35362e302f32322d3234203d3e2034383136.roa (hash: nU9td8FSbjkxq8qr2OaWckCpycvpgcxXULdnzQhot1w=) 7: 3231312e3136312e3232342e302f32302d3234203d3e2034383136.roa (hash: 7ESkoMdtrmm8SQWjAiVoIXlCHKhBj+bnSHyVsBLhiTg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 17:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6a:83:04:d0:da:7b:6d:37:0c:2c:6e:c4:73:0e:f8:f7:be:11:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Validity Not Before: May 12 14:55:36 2026 GMT Not After : May 13 17:49:36 2026 GMT Subject: CN=15C96E6D91284AEF8E054D9B64C9A62D0F99D3AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:63:c2:86:4c:c2:f7:c5:77:b4:21:f2:76:e1: ca:8c:d3:87:10:0d:56:b9:5c:c3:aa:11:56:a2:06: 98:ad:75:35:b7:ae:65:18:02:e1:b8:96:7d:8e:0c: 2d:1e:82:f9:1b:16:0b:15:c1:1b:40:af:50:66:be: bc:18:da:14:5c:fc:a5:9c:6c:33:af:b0:4e:41:c9: ac:51:57:30:32:44:b3:f3:c0:f9:4b:10:71:38:24: cd:89:1b:f6:62:94:bc:6c:06:9b:b2:ac:1f:2c:fa: ea:2b:9f:e0:d1:65:03:58:00:97:a0:ad:31:9b:34: fc:6b:ee:47:fd:d7:e8:8f:0b:27:8c:29:75:7b:b5: b8:f1:cf:f0:00:06:af:fd:e5:59:84:99:01:5d:21: 4a:8f:51:b1:ff:05:ce:df:aa:53:d7:08:7f:a6:51: 0c:e2:33:b8:73:fc:bd:f4:ca:90:d4:61:0e:b8:36: b0:28:f8:43:be:0c:d3:f0:26:7c:e8:4b:68:45:23: f0:81:b0:a5:54:d9:e4:04:74:94:9c:d5:16:ae:07: 67:3f:3a:bf:2c:3b:45:3d:67:67:62:22:fd:12:32: e2:c8:91:f1:6a:9d:3c:69:e2:fe:54:c5:ea:84:95: 4d:fb:03:13:7e:d5:bc:70:e5:8e:db:74:fc:26:2b: f6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C9:6E:6D:91:28:4A:EF:8E:05:4D:9B:64:C9:A6:2D:0F:99:D3:AC X509v3 Authority Key Identifier: keyid:95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a8:84:ad:53:89:da:52:c8:05:5a:b1:2d:8a:c1:9b:33:cf: 9b:db:69:fe:2e:37:e1:2d:81:04:fb:48:8b:e1:1b:05:66:dd: 99:a3:88:28:6b:cc:cf:e4:5a:de:d0:51:f3:b9:64:3e:0a:b4: 83:69:53:14:6c:93:2d:3f:04:74:57:86:77:ae:6a:58:72:9d: 1f:98:12:db:c0:ae:91:dc:85:f5:04:2e:53:13:7e:2b:83:13: 54:91:d7:54:47:3d:33:85:3c:c9:e7:9e:12:34:b1:ae:18:32: 38:6b:d3:45:1c:88:8f:84:27:fe:37:d5:6e:ff:57:e6:f0:8c: 61:dd:84:fe:f5:38:81:92:55:58:7e:70:7a:d0:f3:53:cd:b2: dd:0d:ac:01:b8:3d:00:c8:c9:fd:fd:93:3b:e6:04:90:fc:ad: 4d:95:eb:dc:cb:51:24:fc:5e:b5:e4:03:9b:c7:a7:a6:bd:71: 4c:3a:f1:ea:12:e2:0b:d1:a5:97:57:23:de:cf:b3:e7:6d:b8: 4c:2f:cf:32:52:3a:bd:90:93:d3:79:7d:e9:46:22:93:2d:87: 7a:b8:fc:f7:33:c6:38:cf:96:e7:f5:d3:64:4c:cc:e2:f9:13: 76:e5:39:10:be:d8:a8:f0:c2:d7:07:e2:80:66:0c:6f:98:9a: 3f:f7:8c:d1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOmqDBNDae203DCxuxHMO+Pe+EeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1 NTlENTMzNzAeFw0yNjA1MTIxNDU1MzZaFw0yNjA1MTMxNzQ5MzZaMDMxMTAvBgNV BAMTKDE1Qzk2RTZEOTEyODRBRUY4RTA1NEQ5QjY0QzlBNjJEMEY5OUQzQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZY8KGTML3xXe0IfJ24cqM04cQ DVa5XMOqEVaiBpitdTW3rmUYAuG4ln2ODC0egvkbFgsVwRtAr1BmvrwY2hRc/KWc bDOvsE5ByaxRVzAyRLPzwPlLEHE4JM2JG/ZilLxsBpuyrB8s+uorn+DRZQNYAJeg rTGbNPxr7kf91+iPCyeMKXV7tbjxz/AABq/95VmEmQFdIUqPUbH/Bc7fqlPXCH+m UQziM7hz/L30ypDUYQ64NrAo+EO+DNPwJnzoS2hFI/CBsKVU2eQEdJSc1RauB2c/ Or8sO0U9Z2diIv0SMuLIkfFqnTxp4v5UxeqElU37AxN+1bxw5Y7bdPwmK/ajAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFclubZEoSu+OBU2bZMmmLQ+Z06wwHwYDVR0j BBgwFoAUla+0UV1iihGG0ghpz+r0fVWdUzcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzUyMDY0My8wLzk1QUZCNDUxNUQ2MjhBMTE4NkQyMDg2OUNGRUFG NDdENTU5RDUzMzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1NTlENTMzNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1MjA2NDMvMC85NUFGQjQ1MTVENjI4 QTExODZEMjA4NjlDRkVBRjQ3RDU1OUQ1MzM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhaiErVOJ2lLI BVqxLYrBmzPPm9tp/i434S2BBPtIi+EbBWbdmaOIKGvMz+Ra3tBR87lkPgq0g2lT FGyTLT8EdFeGd65qWHKdH5gS28CukdyF9QQuUxN+K4MTVJHXVEc9M4U8yeeeEjSx rhgyOGvTRRyIj4Qn/jfVbv9X5vCMYd2E/vU4gZJVWH5wetDzU82y3Q2sAbg9AMjJ /f2TO+YEkPytTZXr3MtRJPxeteQDm8enpr1xTDrx6hLiC9Gll1cj3s+z5224TC/P MlI6vZCT03l96UYiky2Herj89zPGOM+W5/XTZEzM4vkTduU5EL7YqPDC1wfigGYM b5iaP/eM0Q== -----END CERTIFICATE-----Generated at Wed May 13 07:21:54 2026 by rpki-client