$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft File: 995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft (raw, json) Hash identifier: fmN4ZQG2Nu0jpGv3e4gCUrFzq+BU6LH/cc+Gi/YnqhA= Subject key identifier: F1:15:2A:E3:D0:7C:C3:81:96:CB:1F:06:F0:19:30:14:8B:CE:05:1A Authority key identifier: 99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C Certificate issuer: /CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Certificate serial: 10C1CE0AD88F1F3373E880B7B7F5397F41C11FDB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft Manifest number: 83 Signing time: Fri 24 Jul 2026 03:25:16 +0000 Manifest this update: Fri 24 Jul 2026 03:20:16 +0000 Manifest next update: Sat 25 Jul 2026 05:00:16 +0000 Files and hashes: 1: 995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl (hash: WbRYuMzN0TZhCFMP5vJXUBHcEaPAO91tZLVfczOrsXE=) 2: 3130332e3130382e3234342e302f32342d3234203d3e203137363231.roa (hash: 2vlfLeMmGPjeaZPUEbjFHqo4xA0gQau0xrYELgWA3GA=) 3: 3130332e3130382e3234372e302f32342d3234203d3e203137363231.roa (hash: s+D2jjcXHT/GQYsoTxwHVqiHduQEa+gXupnaABFCM4o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:c1:ce:0a:d8:8f:1f:33:73:e8:80:b7:b7:f5:39:7f:41:c1:1f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Validity Not Before: Jul 24 03:20:16 2026 GMT Not After : Jul 25 05:00:16 2026 GMT Subject: CN=F1152AE3D07CC38196CB1F06F01930148BCE051A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d0:29:de:dd:ed:e1:95:8d:6c:3c:4a:67:2b: b2:99:1d:83:22:48:7d:40:54:e1:d9:a6:4b:d3:9c: c8:59:53:ad:b2:c8:7e:36:a4:99:e4:c5:7b:69:df: e1:f2:75:5f:61:c9:71:19:81:10:0a:90:0f:89:6b: 4c:75:e5:69:6f:b8:e2:8e:58:0d:88:e4:a2:c6:71: 67:be:ca:21:5e:ba:31:a1:98:f1:49:14:11:d2:37: d9:60:3f:07:ec:21:00:37:b5:4b:70:8d:0b:05:27: 03:b8:6e:02:93:26:7b:17:f8:5f:43:3d:09:e0:3c: 44:9f:5d:d0:6d:7d:ec:0a:19:fe:67:1c:86:0e:f6: d4:3e:e3:c6:6a:f3:77:80:be:2b:32:a2:2a:8f:ef: f5:70:36:21:b0:85:39:a4:ea:00:80:71:87:1b:12: 0d:12:c8:37:cf:f6:03:93:e9:fe:91:5a:0d:fc:2e: 2e:c6:0f:c4:ea:0e:65:c2:1d:e5:4b:0e:42:bd:d0: 41:a3:db:87:30:d6:19:43:d7:25:01:34:dd:b1:8e: df:a6:0b:58:53:56:ed:31:23:ea:5f:77:8d:be:38: c1:58:94:45:3f:7f:26:4d:b6:6b:37:b0:d0:ee:ec: 1c:1e:67:02:23:c8:e0:ee:b3:29:1e:47:5e:cc:6d: 4a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:15:2A:E3:D0:7C:C3:81:96:CB:1F:06:F0:19:30:14:8B:CE:05:1A X509v3 Authority Key Identifier: keyid:99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:ec:40:7d:a5:51:3b:e1:64:26:f3:1e:8d:0e:c3:7e:76:95: ae:b5:75:08:14:03:e1:21:7b:94:3a:87:fc:78:8d:9e:ef:b0: 1c:58:0c:86:a3:c8:14:21:82:5c:e7:82:17:5a:d6:20:7b:c7: 44:09:06:d6:be:b1:7d:95:38:2f:90:f0:7c:0c:c4:62:0e:31: 7e:79:12:76:1d:bc:bc:6e:05:d1:b8:e4:c6:9b:6a:3d:80:d6: 8c:16:c3:4e:64:04:07:9c:cf:f7:f9:fc:ed:4b:52:48:81:0d: bc:cb:34:cd:63:75:6d:cc:eb:df:8b:69:c0:e2:4c:67:52:90: 75:ff:3f:04:18:2c:00:e1:15:97:09:1b:33:bd:86:d0:36:71: e3:a7:41:09:7d:17:b2:27:74:cd:10:83:8b:b2:7a:d1:47:2e: 18:f7:1f:2a:c7:ed:88:df:00:13:a4:49:d0:4e:02:ba:09:0f: 00:82:1c:8c:dd:c0:16:6f:e6:f9:11:3f:e6:f6:68:e4:8e:bc: fd:8d:e1:6b:2a:b2:06:e3:42:05:4a:2e:a8:6c:fe:21:e6:28: 90:ed:c8:83:5c:35:7f:39:f5:07:f2:ca:35:04:34:5c:74:67: 1b:e3:33:8d:65:63:fb:24:70:bf:fc:34:c6:f8:ae:e0:84:3b: 28:e2:14:8d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEMHOCtiPHzNz6IC3t/U5f0HBH9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMy RTBDNkY5QzAeFw0yNjA3MjQwMzIwMTZaFw0yNjA3MjUwNTAwMTZaMDMxMTAvBgNV BAMTKEYxMTUyQUUzRDA3Q0MzODE5NkNCMUYwNkYwMTkzMDE0OEJDRTA1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy0Cne3e3hlY1sPEpnK7KZHYMi SH1AVOHZpkvTnMhZU62yyH42pJnkxXtp3+HydV9hyXEZgRAKkA+Ja0x15WlvuOKO WA2I5KLGcWe+yiFeujGhmPFJFBHSN9lgPwfsIQA3tUtwjQsFJwO4bgKTJnsX+F9D PQngPESfXdBtfewKGf5nHIYO9tQ+48Zq83eAvisyoiqP7/VwNiGwhTmk6gCAcYcb Eg0SyDfP9gOT6f6RWg38Li7GD8TqDmXCHeVLDkK90EGj24cw1hlD1yUBNN2xjt+m C1hTVu0xI+pfd42+OMFYlEU/fyZNtms3sNDu7BweZwIjyODusykeR17MbUrLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8RUq49B8w4GWyx8G8BkwFIvOBRowHwYDVR0j BBgwFoAUmVugHAsJJXPK3VYjBYu7bC4Mb5wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODg2Njc0ODMyMjQ4MDEyOS8wLzk5NUJBMDFDMEIwOTI1NzNDQURENTYyMzA1OEJC QjZDMkUwQzZGOUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMyRTBDNkY5Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg4NjY3NDgzMjI0ODAxMjkvMC85OTVCQTAxQzBCMDky NTczQ0FERDU2MjMwNThCQkI2QzJFMEM2RjlDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+xAfaVRO+Fk JvMejQ7DfnaVrrV1CBQD4SF7lDqH/HiNnu+wHFgMhqPIFCGCXOeCF1rWIHvHRAkG 1r6xfZU4L5DwfAzEYg4xfnkSdh28vG4F0bjkxptqPYDWjBbDTmQEB5zP9/n87UtS SIENvMs0zWN1bczr34tpwOJMZ1KQdf8/BBgsAOEVlwkbM72G0DZx46dBCX0Xsid0 zRCDi7J60UcuGPcfKsftiN8AE6RJ0E4CugkPAIIcjN3AFm/m+RE/5vZo5I68/Y3h ayqyBuNCBUouqGz+IeYokO3Ig1w1fzn1B/LKNQQ0XHRnG+MzjWVj+yRwv/w0xviu 4IQ7KOIUjQ== -----END CERTIFICATE-----Generated at Fri Jul 24 17:37:31 2026 by rpki-client