$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft File: 95AFB4515D628A1186D20869CFEAF47D559D5337.mft (raw, json) Hash identifier: ZLKz56NVYaxTIkbQQvf8hBHWPjGEKsLjGftnhoZ7tbQ= Subject key identifier: DA:0B:B0:94:1E:3D:DB:8C:57:AF:A4:6F:A8:29:3B:4F:2E:71:B1:4E Authority key identifier: 95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 Certificate issuer: /CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Certificate serial: 7C8A0030FA1D9F154BDD0556AD11829DFF932170 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft Manifest number: 0137 Signing time: Thu 24 Sep 2026 00:00:43 +0000 Manifest this update: Wed 23 Sep 2026 23:55:43 +0000 Manifest next update: Sun 27 Sep 2026 10:29:43 +0000 Files and hashes: 1: 3130332e3233362e36342e302f32322d3234203d3e2034383136.roa (hash: 9KFTHxz/y51ykUofxUnbpegbRUp/wwAex2kCfyHmCB0=) 2: 3130332e3233362e35362e302f32322d3234203d3e2034383136.roa (hash: nU9td8FSbjkxq8qr2OaWckCpycvpgcxXULdnzQhot1w=) 3: 3130332e3233362e35322e302f32322d3234203d3e2034383136.roa (hash: L/Cnxt0IMPqrkk567v66pELmHjh0mHTQ9LGRguxjotg=) 4: 3130332e3233362e36302e302f32322d3234203d3e2034383136.roa (hash: p2Lh6mSEt8F+Pz43e7M48ZQE8zJIT8aede1FEWphpKg=) 5: 95AFB4515D628A1186D20869CFEAF47D559D5337.crl (hash: VOYs/LU5cX46k4vb4NRA2jolFyOXHHPhyZSm7t0ZZ0M=) 6: 3231312e3136312e3232372e302f32342d3234203d3e20323035353438.roa (hash: Ln2h1DObADPae64oImYFdKQ5uHj+DhkSUyON4jZ4kMU=) 7: 3130332e3130392e32302e302f32322d3234203d3e2034383136.roa (hash: Ir54i6mCJphe0tTKRNEplWXjiN5Eyqy0jZSjS9oxoak=) 8: 3231312e3136312e3232342e302f32302d3234203d3e2034383136.roa (hash: 7ESkoMdtrmm8SQWjAiVoIXlCHKhBj+bnSHyVsBLhiTg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 10:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:8a:00:30:fa:1d:9f:15:4b:dd:05:56:ad:11:82:9d:ff:93:21:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95AFB4515D628A1186D20869CFEAF47D559D5337 Validity Not Before: Sep 23 23:55:43 2026 GMT Not After : Sep 27 10:29:43 2026 GMT Subject: CN=DA0BB0941E3DDB8C57AFA46FA8293B4F2E71B14E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:47:22:f2:b6:60:4e:58:23:b5:f6:bd:2f:b1: b7:4c:80:47:21:be:bf:45:8d:c7:b4:57:db:c2:a3: ea:f5:04:d8:cb:03:f9:42:2f:55:24:c3:40:8e:19: 54:e8:aa:d4:67:39:35:81:d3:03:7e:3c:ca:cf:b5: 81:3a:32:cc:98:c3:23:a1:61:1c:63:96:02:ca:2a: 27:1e:dd:18:33:35:34:0a:7a:ba:b8:39:02:76:b1: 1d:1b:87:3d:11:fe:3a:54:94:1c:cf:76:00:78:67: 65:78:e5:1c:e6:50:3f:b4:14:eb:3d:84:32:7a:9d: 1e:8c:44:3b:11:a0:e2:dc:9f:2b:98:03:d2:63:f4: 3f:15:ad:26:11:ae:df:67:1c:58:0f:28:c9:d4:d4: ff:7d:0c:18:02:81:43:af:90:e9:a6:e4:46:1f:58: 2f:f9:d9:71:db:68:ef:f9:17:ed:f1:e1:48:7c:5b: a3:e8:3f:75:11:bc:f0:f6:af:0d:da:14:2e:b3:df: f3:5c:fe:12:ee:8b:31:d1:fe:39:9c:e4:85:eb:43: 28:44:d2:a5:5f:34:22:0e:42:27:64:73:ef:0f:df: 3d:ee:0f:54:c8:98:db:74:4a:84:d6:7a:37:88:8f: 08:f4:42:5b:ae:f9:3e:e3:82:71:7b:0c:b4:86:85: bc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0B:B0:94:1E:3D:DB:8C:57:AF:A4:6F:A8:29:3B:4F:2E:71:B1:4E X509v3 Authority Key Identifier: keyid:95:AF:B4:51:5D:62:8A:11:86:D2:08:69:CF:EA:F4:7D:55:9D:53:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95AFB4515D628A1186D20869CFEAF47D559D5337.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/0/95AFB4515D628A1186D20869CFEAF47D559D5337.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:fb:7f:55:4f:15:1d:34:d6:73:49:cf:cc:cb:f3:29:a0:d9: aa:a3:73:10:29:34:21:fd:27:51:b7:91:3d:24:07:d0:1b:03: e7:54:51:bf:a3:9f:49:57:c8:ba:4d:33:e9:ab:c0:a6:41:9b: de:d3:ed:90:a0:c4:f3:b1:78:52:5f:ef:fe:a7:80:86:f1:66: 51:8e:9f:94:d7:38:49:37:5f:13:99:dc:ed:83:d5:48:ee:a9: fe:87:b1:ef:c7:33:8b:97:27:f2:33:0b:28:b6:93:5a:84:90: 27:9e:17:2c:58:58:95:2b:b7:b2:d2:e6:ca:01:2f:14:15:1b: 2a:3a:0c:86:3c:95:7d:92:4d:61:47:2b:63:e2:5c:af:ae:ee: 30:11:e9:7d:06:7e:f6:09:54:7c:70:47:15:29:81:00:0e:7f: 53:61:2c:85:16:47:d7:b1:ec:93:4a:dc:88:1e:fa:67:51:03: 84:86:3c:3f:65:6f:1f:57:86:53:dd:0c:4f:ae:70:aa:e4:f7: 11:fa:55:0b:ee:9c:ec:38:66:07:61:98:b7:0c:8f:72:fa:cc: 57:1e:13:d3:de:00:4b:6a:c3:96:10:6f:5e:52:14:7a:d6:bd: 88:b3:69:a7:71:23:16:42:46:f9:4e:75:0c:ad:e0:2b:11:52: 09:7e:e9:f9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfIoAMPodnxVL3QVWrRGCnf+TIXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1 NTlENTMzNzAeFw0yNjA5MjMyMzU1NDNaFw0yNjA5MjcxMDI5NDNaMDMxMTAvBgNV BAMTKERBMEJCMDk0MUUzRERCOEM1N0FGQTQ2RkE4MjkzQjRGMkU3MUIxNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgRyLytmBOWCO19r0vsbdMgEch vr9Fjce0V9vCo+r1BNjLA/lCL1Ukw0COGVToqtRnOTWB0wN+PMrPtYE6MsyYwyOh YRxjlgLKKice3RgzNTQKerq4OQJ2sR0bhz0R/jpUlBzPdgB4Z2V45RzmUD+0FOs9 hDJ6nR6MRDsRoOLcnyuYA9Jj9D8VrSYRrt9nHFgPKMnU1P99DBgCgUOvkOmm5EYf WC/52XHbaO/5F+3x4Uh8W6PoP3URvPD2rw3aFC6z3/Nc/hLuizHR/jmc5IXrQyhE 0qVfNCIOQidkc+8P3z3uD1TImNt0SoTWejeIjwj0Qluu+T7jgnF7DLSGhbz7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2guwlB4924xXr6RvqCk7Ty5xsU4wHwYDVR0j BBgwFoAUla+0UV1iihGG0ghpz+r0fVWdUzcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzUyMDY0My8wLzk1QUZCNDUxNUQ2MjhBMTE4NkQyMDg2OUNGRUFG NDdENTU5RDUzMzcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVBRkI0NTE1RDYyOEExMTg2RDIwODY5Q0ZFQUY0N0Q1NTlENTMzNy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc1MjA2NDMvMC85NUFGQjQ1MTVENjI4 QTExODZEMjA4NjlDRkVBRjQ3RDU1OUQ1MzM3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvt/VU8VHTTW c0nPzMvzKaDZqqNzECk0If0nUbeRPSQH0BsD51RRv6OfSVfIuk0z6avApkGb3tPt kKDE87F4Ul/v/qeAhvFmUY6flNc4STdfE5nc7YPVSO6p/oex78czi5cn8jMLKLaT WoSQJ54XLFhYlSu3stLmygEvFBUbKjoMhjyVfZJNYUcrY+Jcr67uMBHpfQZ+9glU fHBHFSmBAA5/U2EshRZH17Hsk0rciB76Z1EDhIY8P2VvH1eGU90MT65wquT3EfpV C+6c7DhmB2GYtwyPcvrMVx4T094AS2rDlhBvXlIUeta9iLNpp3EjFkJG+U51DK3g KxFSCX7p+Q== -----END CERTIFICATE-----Generated at Fri Sep 25 21:49:39 2026 by rpki-client