$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft File: 995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft (raw, json) Hash identifier: rC44CHkFyp79UX0Or8kcgf7NKFmJ88M/pwAMdM9M1wA= Subject key identifier: E9:7C:DD:1C:94:72:DB:B3:87:6E:5F:F7:2C:9E:80:BE:11:31:0B:27 Authority key identifier: 99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C Certificate issuer: /CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Certificate serial: 24FCC32F28F9220EC5DADDDD75C975EA35DA7043 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft Manifest number: C1 Signing time: Mon 28 Sep 2026 17:11:08 +0000 Manifest this update: Mon 28 Sep 2026 17:06:08 +0000 Manifest next update: Thu 01 Oct 2026 17:34:08 +0000 Files and hashes: 1: 995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl (hash: krwDJPB7I2dVHAj29mFQQFrRb6stP85MPM3Ra5zODI0=) 2: 3130332e3130382e3234342e302f32342d3234203d3e203137363231.roa (hash: 2vlfLeMmGPjeaZPUEbjFHqo4xA0gQau0xrYELgWA3GA=) 3: 3130332e3130382e3234372e302f32342d3234203d3e203137363231.roa (hash: s+D2jjcXHT/GQYsoTxwHVqiHduQEa+gXupnaABFCM4o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 17:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:fc:c3:2f:28:f9:22:0e:c5:da:dd:dd:75:c9:75:ea:35:da:70:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Validity Not Before: Sep 28 17:06:08 2026 GMT Not After : Oct 1 17:34:08 2026 GMT Subject: CN=E97CDD1C9472DBB3876E5FF72C9E80BE11310B27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1c:15:f6:0d:d2:90:9f:43:89:93:94:97:ff: 38:38:7c:44:03:06:00:55:b7:c6:db:ab:a5:c7:f3: 3c:aa:64:07:6f:13:fa:93:24:f6:9c:c8:01:af:a0: 38:6b:00:e1:02:62:9d:8a:be:da:7c:eb:8d:8c:67: a7:3a:07:e3:12:7f:ea:42:56:c3:18:a4:fa:d8:48: 66:06:3b:21:b4:6a:ac:de:6f:48:9c:aa:a3:af:02: a0:06:81:9b:fc:b1:98:c6:e6:cf:67:75:9a:00:ab: cc:16:74:68:2b:20:8f:27:0b:4d:14:65:ff:40:9b: 5d:19:7f:5f:4e:b8:fb:f2:7c:67:04:90:a6:6c:73: dc:b7:56:4a:a7:08:23:1a:f6:aa:82:a5:85:2c:a9: 90:55:d2:4d:0a:38:2e:21:e8:8f:9d:53:7f:4e:8c: 1a:ab:89:c5:00:4a:1a:ab:39:f7:a5:85:7c:17:56: 64:de:46:25:82:0f:6b:7f:64:db:f4:3a:28:eb:58: 4f:c4:57:56:79:e6:7f:ee:b7:ec:c9:b1:f0:b7:3c: 10:db:17:19:48:c6:ef:a8:00:05:bc:03:1d:6e:5b: 84:b3:7f:fa:9a:e5:c9:73:4d:7e:71:a1:3b:94:a6: fb:be:77:43:d8:01:83:1b:6f:a7:be:63:04:90:88: 2f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7C:DD:1C:94:72:DB:B3:87:6E:5F:F7:2C:9E:80:BE:11:31:0B:27 X509v3 Authority Key Identifier: keyid:99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:7d:40:fd:78:5d:8b:9e:a8:07:c6:73:03:30:cf:05:40:0e: 4a:0f:ec:18:6b:bc:db:15:62:ee:9c:1c:93:d9:cd:2a:53:6b: 00:4e:39:3e:48:7a:ec:59:b5:26:33:1c:0c:59:4c:d0:a2:c2: 63:3c:28:4f:93:12:22:09:eb:cf:83:1a:e5:c5:e9:c8:06:61: 93:b0:d1:5d:da:20:db:8d:67:72:a2:78:49:c8:08:86:42:83: bc:4d:10:d6:99:12:2d:1a:50:12:1f:ac:8a:8d:36:97:e7:03: db:20:2d:cd:dc:c6:bd:9d:fc:e4:9e:71:77:ea:9f:8d:aa:ae: 08:a8:1a:09:bf:03:b1:9a:a7:eb:31:8f:01:6c:ec:5e:aa:d4: d0:97:51:2b:e7:f9:2c:49:7f:b1:ea:96:e6:68:d1:b5:19:c2: 0d:71:e5:48:de:29:4f:81:b3:13:7a:d0:f6:dd:de:c2:f7:cb: 5e:f5:14:3a:5b:cf:a4:da:e2:4f:c1:a2:12:0e:2c:18:9d:99: 48:30:cb:07:01:57:dd:82:f0:51:d2:61:f9:ab:30:c0:c2:5a: 4d:ae:0c:85:c4:96:d0:4c:f9:1b:c2:b6:5c:db:07:5d:16:32: ea:5e:1c:ec:0f:02:8a:37:64:9d:5b:6b:24:dd:dc:44:58:2f: 86:68:fe:6d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJPzDLyj5Ig7F2t3ddcl16jXacEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMy RTBDNkY5QzAeFw0yNjA5MjgxNzA2MDhaFw0yNjEwMDExNzM0MDhaMDMxMTAvBgNV BAMTKEU5N0NERDFDOTQ3MkRCQjM4NzZFNUZGNzJDOUU4MEJFMTEzMTBCMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHBX2DdKQn0OJk5SX/zg4fEQD BgBVt8bbq6XH8zyqZAdvE/qTJPacyAGvoDhrAOECYp2Kvtp8642MZ6c6B+MSf+pC VsMYpPrYSGYGOyG0aqzeb0icqqOvAqAGgZv8sZjG5s9ndZoAq8wWdGgrII8nC00U Zf9Am10Zf19OuPvyfGcEkKZsc9y3VkqnCCMa9qqCpYUsqZBV0k0KOC4h6I+dU39O jBqricUAShqrOfelhXwXVmTeRiWCD2t/ZNv0OijrWE/EV1Z55n/ut+zJsfC3PBDb FxlIxu+oAAW8Ax1uW4Szf/qa5clzTX5xoTuUpvu+d0PYAYMbb6e+YwSQiC+LAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6XzdHJRy27OHbl/3LJ6AvhExCycwHwYDVR0j BBgwFoAUmVugHAsJJXPK3VYjBYu7bC4Mb5wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODg2Njc0ODMyMjQ4MDEyOS8wLzk5NUJBMDFDMEIwOTI1NzNDQURENTYyMzA1OEJC QjZDMkUwQzZGOUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMyRTBDNkY5Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg4NjY3NDgzMjI0ODAxMjkvMC85OTVCQTAxQzBCMDky NTczQ0FERDU2MjMwNThCQkI2QzJFMEM2RjlDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg31A/Xhdi56o B8ZzAzDPBUAOSg/sGGu82xVi7pwck9nNKlNrAE45Pkh67Fm1JjMcDFlM0KLCYzwo T5MSIgnrz4Ma5cXpyAZhk7DRXdog241ncqJ4ScgIhkKDvE0Q1pkSLRpQEh+sio02 l+cD2yAtzdzGvZ385J5xd+qfjaquCKgaCb8DsZqn6zGPAWzsXqrU0JdRK+f5LEl/ seqW5mjRtRnCDXHlSN4pT4GzE3rQ9t3ewvfLXvUUOlvPpNriT8GiEg4sGJ2ZSDDL BwFX3YLwUdJh+aswwMJaTa4MhcSW0Ez5G8K2XNsHXRYy6l4c7A8CijdknVtrJN3c RFgvhmj+bQ== -----END CERTIFICATE-----Generated at Mon Sep 28 21:42:17 2026 by rpki-client