$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft File: 995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft (raw, json) Hash identifier: I/ylZP2wMUiRFU7AkIY9HxRL5vXohR/gmdLHt7mzRK4= Subject key identifier: A0:1F:98:6B:24:D5:72:F4:5D:C1:F6:B3:B8:DC:39:1D:91:0C:9B:65 Authority key identifier: 99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C Certificate issuer: /CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Certificate serial: 71E1B2643A7C3CE575D1C8376948998D68CFE412 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft Manifest number: 23 Signing time: Wed 13 May 2026 09:11:03 +0000 Manifest this update: Wed 13 May 2026 09:06:03 +0000 Manifest next update: Thu 14 May 2026 09:39:03 +0000 Files and hashes: 1: 3130332e3130382e3234372e302f32342d3234203d3e203137363231.roa (hash: s+D2jjcXHT/GQYsoTxwHVqiHduQEa+gXupnaABFCM4o=) 2: 3130332e3130382e3234342e302f32342d3234203d3e203137363231.roa (hash: 2vlfLeMmGPjeaZPUEbjFHqo4xA0gQau0xrYELgWA3GA=) 3: 995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl (hash: GESBjzDSRXFyJA6hG5Wz4Bf7w/FTPKZ4s9TEbuQIOdY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:e1:b2:64:3a:7c:3c:e5:75:d1:c8:37:69:48:99:8d:68:cf:e4:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Validity Not Before: May 13 09:06:03 2026 GMT Not After : May 14 09:39:03 2026 GMT Subject: CN=A01F986B24D572F45DC1F6B3B8DC391D910C9B65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e7:98:4f:1f:76:7d:48:9b:77:bf:e6:2a:ae: 05:67:1e:6e:6c:f8:e3:75:f9:d9:fc:05:f6:81:37: ef:30:3e:d2:6e:48:f2:c8:15:eb:35:c0:4e:00:3c: c7:8d:c3:1d:37:a0:52:43:80:bb:0e:c6:e4:d9:b5: 69:71:c3:f1:73:3b:8d:60:b9:9d:64:a3:f7:c8:ff: 2c:7a:b8:28:ab:11:29:39:d7:e6:38:24:57:ad:35: c2:09:11:16:e5:14:22:70:b1:cb:1a:5c:98:29:c2: 83:dc:e4:07:b9:6f:d1:a1:cc:af:5c:bd:eb:61:11: 90:2e:97:bd:e1:f8:3b:04:83:4f:43:e5:bc:b6:c5: d5:3e:58:7e:9b:1e:5e:8a:89:81:13:a2:76:78:36: b4:fa:c6:03:6c:bd:43:12:a6:1c:b7:83:77:89:e9: 5e:d5:a5:1e:9e:81:80:fb:e2:57:4f:e0:15:14:21: 09:69:17:eb:dd:b6:1d:0a:85:cd:8f:61:de:33:8a: 46:4f:81:93:22:e3:75:59:7b:44:26:85:03:b1:fc: f7:73:cd:b0:8a:fb:c5:eb:02:fe:79:bb:12:b5:c0: d1:b4:c3:5c:3a:34:08:48:c7:d1:e5:84:1a:07:4b: df:f8:a2:f2:35:98:46:c7:83:ef:e8:4d:d1:36:4e: aa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:1F:98:6B:24:D5:72:F4:5D:C1:F6:B3:B8:DC:39:1D:91:0C:9B:65 X509v3 Authority Key Identifier: keyid:99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:de:6d:2e:cf:0e:a1:d6:3f:ca:92:e7:1c:e8:27:9f:2d:31: 3c:05:56:93:1b:c9:01:b0:ca:17:f3:f7:3e:e8:3f:3b:da:77: 7b:b3:8d:1d:55:36:b2:43:90:ca:1a:30:e1:a6:41:22:13:25: fb:89:fc:a3:ea:4b:0d:13:dd:d2:32:d1:dc:e5:49:0b:cd:05: 01:0a:e5:0b:4c:de:8f:9f:cd:19:9c:f8:ad:ca:fd:78:da:c5: d0:b9:3a:e4:24:ec:15:9d:94:b7:d5:df:fc:c0:3f:61:6c:10: 85:99:39:7a:9c:66:3a:3b:8e:fa:07:d8:73:4d:8b:db:04:61: ae:47:ae:38:09:5d:d5:db:8b:c6:ee:2c:ef:b8:83:9d:46:4e: af:82:24:86:ec:0d:7f:77:7f:55:68:84:7b:8b:57:19:b3:bd: 0d:21:ec:68:37:64:70:29:2b:d8:57:ab:d5:5e:2b:7e:00:bd: dd:6d:c7:5e:20:ca:54:ac:59:8d:85:53:7e:91:9a:ad:cf:f1: 37:2b:8b:ca:af:2e:74:fb:09:d5:12:34:c0:fc:f2:de:7a:69: f0:a2:a3:5a:81:f5:e7:8f:dd:bc:45:6b:ab:f3:a2:47:44:61: 00:e7:e6:bc:03:bf:dd:7c:fb:14:2f:64:f9:e0:f1:0e:12:65: aa:13:4b:b8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUceGyZDp8POV10cg3aUiZjWjP5BIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMy RTBDNkY5QzAeFw0yNjA1MTMwOTA2MDNaFw0yNjA1MTQwOTM5MDNaMDMxMTAvBgNV BAMTKEEwMUY5ODZCMjRENTcyRjQ1REMxRjZCM0I4REMzOTFEOTEwQzlCNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP55hPH3Z9SJt3v+YqrgVnHm5s +ON1+dn8BfaBN+8wPtJuSPLIFes1wE4APMeNwx03oFJDgLsOxuTZtWlxw/FzO41g uZ1ko/fI/yx6uCirESk51+Y4JFetNcIJERblFCJwscsaXJgpwoPc5Ae5b9GhzK9c vethEZAul73h+DsEg09D5by2xdU+WH6bHl6KiYETonZ4NrT6xgNsvUMSphy3g3eJ 6V7VpR6egYD74ldP4BUUIQlpF+vdth0Khc2PYd4zikZPgZMi43VZe0QmhQOx/Pdz zbCK+8XrAv55uxK1wNG0w1w6NAhIx9HlhBoHS9/4ovI1mEbHg+/oTdE2TqqBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoB+YayTVcvRdwfazuNw5HZEMm2UwHwYDVR0j BBgwFoAUmVugHAsJJXPK3VYjBYu7bC4Mb5wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODg2Njc0ODMyMjQ4MDEyOS8wLzk5NUJBMDFDMEIwOTI1NzNDQURENTYyMzA1OEJC QjZDMkUwQzZGOUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMyRTBDNkY5Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg4NjY3NDgzMjI0ODAxMjkvMC85OTVCQTAxQzBCMDky NTczQ0FERDU2MjMwNThCQkI2QzJFMEM2RjlDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAat5tLs8OodY/ ypLnHOgnny0xPAVWkxvJAbDKF/P3Pug/O9p3e7ONHVU2skOQyhow4aZBIhMl+4n8 o+pLDRPd0jLR3OVJC80FAQrlC0zej5/NGZz4rcr9eNrF0Lk65CTsFZ2Ut9Xf/MA/ YWwQhZk5epxmOjuO+gfYc02L2wRhrkeuOAld1duLxu4s77iDnUZOr4IkhuwNf3d/ VWiEe4tXGbO9DSHsaDdkcCkr2Fer1V4rfgC93W3HXiDKVKxZjYVTfpGarc/xNyuL yq8udPsJ1RI0wPzy3npp8KKjWoH154/dvEVrq/OiR0RhAOfmvAO/3Xz7FC9k+eDx DhJlqhNLuA== -----END CERTIFICATE-----Generated at Wed May 13 13:44:40 2026 by rpki-client