$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft File: 95B08F18D0CF8E4AFAD49A08A907521317F19024.mft (raw, json) Hash identifier: q5YN2LzS6XDY1/YSqu1L0UqyvRPzXEoerAELCGp0WRQ= Subject key identifier: 24:9C:34:8A:0E:30:41:45:9D:EF:FC:58:E5:20:E4:A2:2C:DA:64:18 Authority key identifier: 95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24 Certificate issuer: /CN=95B08F18D0CF8E4AFAD49A08A907521317F19024 Certificate serial: 3BF80DFC86E370E43333F241BCE476E82CCFDCB7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft Manifest number: B9 Signing time: Wed 14 Oct 2026 11:59:05 +0000 Manifest this update: Wed 14 Oct 2026 11:54:05 +0000 Manifest next update: Sat 17 Oct 2026 17:08:05 +0000 Files and hashes: 1: 95B08F18D0CF8E4AFAD49A08A907521317F19024.crl (hash: CxRawFRtJIBL8TXh3+0KnTPW+6lV6QKEyA5LMor8Fes=) 2: 323430333a366130303a3a2f33322d3332203d3e203138323339.roa (hash: JEINhMzkfauQueWUMSFYFDuvhgsd11LfjopwxXAxKZc=) 3: 3231392e3233322e3139322e302f31392d3139203d3e203138323339.roa (hash: 6aMfWBMMpDCsBJHesJ1xnjHna6IScpfcDFlRpDnwQ5U=) 4: 3231312e3134372e3132382e302f31392d3139203d3e203138323339.roa (hash: LeMAOm4N8qhxkJ0uj/f0hKHJGXu+NKUzYhGKp2R3aPc=) 5: 3231382e3234362e36342e302f31392d3139203d3e203138323339.roa (hash: B7eJVbgoaXaPfuwKdMj7UsIXp2ZukioE6XwEh82GLZM=) 6: 3230322e3134382e39362e302f31392d3139203d3e203138323339.roa (hash: JWBK8+Rdiy6uwBsyhbapdOBX2mjcYjJT67ezz3rHKhE=) 7: 3231302e37332e36342e302f31392d3139203d3e203138323339.roa (hash: 1GDwncPlsYPbeW8okel7zSVV3jafsi0ew/0QpyVkPsc=) 8: 3131352e38342e302e302f31382d3138203d3e203138323339.roa (hash: rOCdXiX+Hr0W66yY0r2Q2lSMIrzkgSFIIyFV6UfYgTg=) 9: 3231302e37352e3139322e302f31392d3139203d3e203138323339.roa (hash: 027EUoyERWAO9UGugZNEma8D4f9DTdiu6kJNHKsmx4Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f8:0d:fc:86:e3:70:e4:33:33:f2:41:bc:e4:76:e8:2c:cf:dc:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95B08F18D0CF8E4AFAD49A08A907521317F19024 Validity Not Before: Oct 14 11:54:05 2026 GMT Not After : Oct 17 17:08:05 2026 GMT Subject: CN=249C348A0E3041459DEFFC58E520E4A22CDA6418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5a:f9:b4:4b:c9:5a:29:98:c0:bb:88:46:b1: e6:3e:a5:d2:d4:89:21:ff:19:02:20:a1:cd:08:bd: 9e:93:b5:b1:7f:49:e5:e3:37:df:df:55:14:1e:94: cb:d8:dd:91:68:f4:a6:94:fb:33:97:25:b0:8f:bf: b5:13:fe:aa:b3:1a:12:69:92:4e:28:b8:80:84:b2: 89:8c:1d:28:f7:51:12:b2:ed:23:f1:ae:28:f5:b1: 36:91:7f:49:f7:0f:e1:26:0e:4a:ad:a9:be:f9:26: f5:76:8e:99:e6:36:60:47:39:95:af:80:ed:55:db: 31:d5:71:00:5f:74:7b:cc:7f:58:33:3c:28:a7:a5: 66:ea:59:dc:78:59:e7:6b:9d:60:80:41:f4:ac:57: fa:3e:e7:29:4d:4e:14:46:f9:c6:bf:14:30:8d:39: e5:d5:53:4b:61:61:e3:64:18:cb:9d:23:13:95:62: ac:48:b3:f8:c0:8b:6a:2b:59:cf:ee:ff:b8:6e:10: 8d:db:2f:49:ee:a9:0c:3b:bb:3b:f4:a5:56:57:34: 94:38:2a:5e:38:8c:4c:d8:ea:27:78:c7:c8:8d:a9: 0e:2a:e3:e1:9c:e9:ea:28:a8:2a:3c:4e:eb:93:f1: 08:e8:9a:3a:f4:ed:8c:ca:50:8b:34:8c:65:cd:49: ca:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9C:34:8A:0E:30:41:45:9D:EF:FC:58:E5:20:E4:A2:2C:DA:64:18 X509v3 Authority Key Identifier: keyid:95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:24:63:19:55:14:e2:05:e2:21:e1:08:22:cb:0b:2f:36:fd: e1:a6:d0:4b:88:51:82:f2:c4:11:21:7a:c1:c9:a0:ff:95:dc: 9b:d2:e2:74:e5:88:95:76:b2:63:fe:cc:ec:18:8e:53:65:b7: 14:5e:26:62:e6:ff:ec:49:60:47:dc:a3:bf:20:a4:1b:dc:e7: 7b:2c:f6:6a:fb:2a:ee:e5:8c:d1:00:bd:32:61:4a:3a:41:5a: fe:65:89:3b:6d:7a:c2:a0:15:18:8c:7d:fc:50:5d:c8:4b:27: e3:ad:10:e5:37:eb:db:4b:c9:74:99:a1:07:e5:b8:7e:49:c0: d7:2b:a1:e0:04:9b:5e:81:a2:7c:30:d1:eb:2e:1b:97:71:90: 0b:72:d8:fc:51:21:a9:3d:96:34:cd:82:ce:38:74:2e:b7:d7: 84:ef:84:84:d0:e1:22:49:b0:c4:58:8d:b9:60:81:2b:0a:57: 2c:bf:b4:7b:74:09:11:34:49:44:ce:cf:d2:25:09:d2:19:74: 45:ba:49:4f:e4:b8:c3:83:3d:2a:43:1b:89:ef:c9:21:7e:ae: 1e:c4:38:63:9f:d4:54:b2:30:a3:91:0b:23:3d:b9:0f:42:03: 68:db:86:a0:07:a4:73:97:92:e0:26:cc:23:ea:cc:10:63:f3: a0:4c:28:e9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUO/gN/IbjcOQzM/JBvOR26CzP3LcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVCMDhGMThEMENGOEU0QUZBRDQ5QTA4QTkwNzUyMTMx N0YxOTAyNDAeFw0yNjEwMTQxMTU0MDVaFw0yNjEwMTcxNzA4MDVaMDMxMTAvBgNV BAMTKDI0OUMzNDhBMEUzMDQxNDU5REVGRkM1OEU1MjBFNEEyMkNEQTY0MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXWvm0S8laKZjAu4hGseY+pdLU iSH/GQIgoc0IvZ6TtbF/SeXjN9/fVRQelMvY3ZFo9KaU+zOXJbCPv7UT/qqzGhJp kk4ouICEsomMHSj3URKy7SPxrij1sTaRf0n3D+EmDkqtqb75JvV2jpnmNmBHOZWv gO1V2zHVcQBfdHvMf1gzPCinpWbqWdx4WedrnWCAQfSsV/o+5ylNThRG+ca/FDCN OeXVU0thYeNkGMudIxOVYqxIs/jAi2orWc/u/7huEI3bL0nuqQw7uzv0pVZXNJQ4 Kl44jEzY6id4x8iNqQ4q4+Gc6eooqCo8TuuT8Qjomjr07YzKUIs0jGXNScqJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJJw0ig4wQUWd7/xY5SDkoizaZBgwHwYDVR0j BBgwFoAUlbCPGNDPjkr61JoIqQdSExfxkCQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTY4OTcwNDU1MTU0Njg4Ny8wLzk1QjA4RjE4RDBDRjhFNEFGQUQ0OUEwOEE5MDc1 MjEzMTdGMTkwMjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVCMDhGMThEMENGOEU0QUZBRDQ5QTA4QTkwNzUyMTMxN0YxOTAyNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDE2ODk3MDQ1NTE1NDY4ODcvMC85NUIwOEYxOEQwQ0Y4 RTRBRkFENDlBMDhBOTA3NTIxMzE3RjE5MDI0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICRjGVUU4gXi IeEIIssLLzb94abQS4hRgvLEESF6wcmg/5Xcm9LidOWIlXayY/7M7BiOU2W3FF4m Yub/7ElgR9yjvyCkG9zneyz2avsq7uWM0QC9MmFKOkFa/mWJO216wqAVGIx9/FBd yEsn460Q5Tfr20vJdJmhB+W4fknA1yuh4ASbXoGifDDR6y4bl3GQC3LY/FEhqT2W NM2Czjh0LrfXhO+EhNDhIkmwxFiNuWCBKwpXLL+0e3QJETRJRM7P0iUJ0hl0RbpJ T+S4w4M9KkMbie/JIX6uHsQ4Y5/UVLIwo5ELIz25D0IDaNuGoAekc5eS4CbMI+rM EGPzoEwo6Q== -----END CERTIFICATE-----Generated at Wed Oct 14 19:44:44 2026 by rpki-client