$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft File: 95B08F18D0CF8E4AFAD49A08A907521317F19024.mft (raw, json) Hash identifier: AAJ1tEh6RL4f5hYnuXFOJg/8BYafZfH0+kEDc7luObs= Subject key identifier: 71:AF:3E:D2:15:7D:07:0F:1C:E3:CA:AF:4B:9E:96:20:7B:FE:40:7A Authority key identifier: 95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24 Certificate issuer: /CN=95B08F18D0CF8E4AFAD49A08A907521317F19024 Certificate serial: 50101D3DA6F18B887D387A119B9E79FE0C3C8D82 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft Manifest number: 15 Signing time: Wed 13 May 2026 15:46:05 +0000 Manifest this update: Wed 13 May 2026 15:41:05 +0000 Manifest next update: Thu 14 May 2026 18:59:05 +0000 Files and hashes: 1: 3231312e3134372e3132382e302f31392d3139203d3e203138323339.roa (hash: LeMAOm4N8qhxkJ0uj/f0hKHJGXu+NKUzYhGKp2R3aPc=) 2: 3230322e3134382e39362e302f31392d3139203d3e203138323339.roa (hash: JWBK8+Rdiy6uwBsyhbapdOBX2mjcYjJT67ezz3rHKhE=) 3: 323430333a366130303a3a2f33322d3332203d3e203138323339.roa (hash: JEINhMzkfauQueWUMSFYFDuvhgsd11LfjopwxXAxKZc=) 4: 3231302e37352e3139322e302f31392d3139203d3e203138323339.roa (hash: 027EUoyERWAO9UGugZNEma8D4f9DTdiu6kJNHKsmx4Y=) 5: 95B08F18D0CF8E4AFAD49A08A907521317F19024.crl (hash: EDP9KfPNsB+6wM/gFMqF+PyzsTvYIicM1BLy/jmRxDY=) 6: 3231392e3233322e3139322e302f31392d3139203d3e203138323339.roa (hash: 6aMfWBMMpDCsBJHesJ1xnjHna6IScpfcDFlRpDnwQ5U=) 7: 3131352e38342e302e302f31382d3138203d3e203138323339.roa (hash: rOCdXiX+Hr0W66yY0r2Q2lSMIrzkgSFIIyFV6UfYgTg=) 8: 3231382e3234362e36342e302f31392d3139203d3e203138323339.roa (hash: B7eJVbgoaXaPfuwKdMj7UsIXp2ZukioE6XwEh82GLZM=) 9: 3231302e37332e36342e302f31392d3139203d3e203138323339.roa (hash: 1GDwncPlsYPbeW8okel7zSVV3jafsi0ew/0QpyVkPsc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:10:1d:3d:a6:f1:8b:88:7d:38:7a:11:9b:9e:79:fe:0c:3c:8d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95B08F18D0CF8E4AFAD49A08A907521317F19024 Validity Not Before: May 13 15:41:05 2026 GMT Not After : May 14 18:59:05 2026 GMT Subject: CN=71AF3ED2157D070F1CE3CAAF4B9E96207BFE407A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c6:b6:84:21:46:d7:69:ef:2c:30:66:8f:d5: 79:d5:6e:a3:1a:4c:1a:b3:86:ce:b3:10:12:29:d8: 7f:7e:88:9b:21:4d:39:c9:e3:f9:95:65:73:5d:92: 6c:df:98:d1:53:b1:30:fa:3e:42:65:d0:08:77:53: 7a:0c:10:0b:2e:c9:48:a9:b3:0d:c5:1b:1f:39:cf: 7d:52:b4:24:fd:96:f0:ce:05:90:9a:df:32:ba:f5: b5:0f:90:18:42:d0:42:0a:ce:66:7d:e8:dd:72:8b: 02:6c:71:18:71:03:24:f5:da:e7:31:ec:6d:26:0a: 50:aa:2c:10:83:ae:8f:9f:9b:f4:fc:4d:12:3e:63: 84:3b:08:57:56:2f:11:34:9a:65:17:fb:ac:80:ea: 0a:23:fc:d0:83:0a:d7:b6:29:a3:ea:54:f1:83:37: 1d:77:68:b5:70:d9:44:c6:1c:b0:37:09:57:9f:cd: b4:ce:65:d5:6b:fc:b2:1d:d7:9e:f8:1c:f9:6d:e9: 4b:c5:ca:f5:ba:41:99:55:a5:f9:d9:e5:cc:4d:3b: 2e:3a:ac:d0:5c:9f:80:af:d5:14:ef:c2:f2:e6:e5: a8:5a:f2:d7:69:d8:65:da:b2:a1:27:a4:a0:be:96: c0:d6:b0:ac:4a:a7:7b:46:23:09:cb:8c:94:4e:06: 43:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AF:3E:D2:15:7D:07:0F:1C:E3:CA:AF:4B:9E:96:20:7B:FE:40:7A X509v3 Authority Key Identifier: keyid:95:B0:8F:18:D0:CF:8E:4A:FA:D4:9A:08:A9:07:52:13:17:F1:90:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95B08F18D0CF8E4AFAD49A08A907521317F19024.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101689704551546887/0/95B08F18D0CF8E4AFAD49A08A907521317F19024.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0b:57:a8:39:12:32:00:9e:20:21:44:bd:f4:9c:f4:d3:ef: 50:42:3e:a8:03:de:08:2e:82:5b:32:28:2e:48:34:35:2f:c0: 7a:c5:05:28:f3:84:b8:51:d5:a1:db:2a:e4:40:f3:3a:02:9d: e3:ca:f3:24:c2:51:9d:a0:c1:d6:7d:99:f8:6a:c7:73:be:85: 0f:f8:da:25:fd:7d:23:d4:65:71:06:0e:a6:58:12:10:69:39: 0e:24:59:98:1c:b2:28:2f:07:32:5c:86:43:40:b8:3d:e4:1b: 89:1f:e2:ab:5c:3c:f0:99:d9:73:82:44:d0:fe:72:4b:26:a7: f4:c1:62:83:ed:98:6c:7e:a0:f5:bf:d2:ed:83:44:5b:8c:94: 2b:ea:ed:7f:78:95:f4:d9:70:c4:e2:fd:6c:16:9f:24:71:c5: 64:ad:b3:c4:45:2e:a0:d7:c9:b9:0b:c7:80:68:e5:d9:7c:03: ff:f8:77:53:bc:e8:0f:5c:bd:a6:6b:f4:04:ba:53:a4:a3:b9: 41:43:e4:c4:43:36:5e:66:df:5d:77:6b:81:ef:25:4c:4e:f3: d1:6f:e3:84:6a:91:cb:36:08:ee:51:af:6e:22:78:2a:38:69: 0b:43:02:e9:f2:41:30:8c:95:ae:53:e3:b8:ea:40:23:d9:51: b2:29:36:b9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUBAdPabxi4h9OHoRm555/gw8jYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTVCMDhGMThEMENGOEU0QUZBRDQ5QTA4QTkwNzUyMTMx N0YxOTAyNDAeFw0yNjA1MTMxNTQxMDVaFw0yNjA1MTQxODU5MDVaMDMxMTAvBgNV BAMTKDcxQUYzRUQyMTU3RDA3MEYxQ0UzQ0FBRjRCOUU5NjIwN0JGRTQwN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xraEIUbXae8sMGaP1XnVbqMa TBqzhs6zEBIp2H9+iJshTTnJ4/mVZXNdkmzfmNFTsTD6PkJl0Ah3U3oMEAsuyUip sw3FGx85z31StCT9lvDOBZCa3zK69bUPkBhC0EIKzmZ96N1yiwJscRhxAyT12ucx 7G0mClCqLBCDro+fm/T8TRI+Y4Q7CFdWLxE0mmUX+6yA6goj/NCDCte2KaPqVPGD Nx13aLVw2UTGHLA3CVefzbTOZdVr/LId1574HPlt6UvFyvW6QZlVpfnZ5cxNOy46 rNBcn4Cv1RTvwvLm5aha8tdp2GXasqEnpKC+lsDWsKxKp3tGIwnLjJROBkPxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUca8+0hV9Bw8c48qvS56WIHv+QHowHwYDVR0j BBgwFoAUlbCPGNDPjkr61JoIqQdSExfxkCQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTY4OTcwNDU1MTU0Njg4Ny8wLzk1QjA4RjE4RDBDRjhFNEFGQUQ0OUEwOEE5MDc1 MjEzMTdGMTkwMjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTVCMDhGMThEMENGOEU0QUZBRDQ5QTA4QTkwNzUyMTMxN0YxOTAyNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDE2ODk3MDQ1NTE1NDY4ODcvMC85NUIwOEYxOEQwQ0Y4 RTRBRkFENDlBMDhBOTA3NTIxMzE3RjE5MDI0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQtXqDkSMgCe ICFEvfSc9NPvUEI+qAPeCC6CWzIoLkg0NS/AesUFKPOEuFHVodsq5EDzOgKd48rz JMJRnaDB1n2Z+GrHc76FD/jaJf19I9RlcQYOplgSEGk5DiRZmByyKC8HMlyGQ0C4 PeQbiR/iq1w88JnZc4JE0P5ySyan9MFig+2YbH6g9b/S7YNEW4yUK+rtf3iV9Nlw xOL9bBafJHHFZK2zxEUuoNfJuQvHgGjl2XwD//h3U7zoD1y9pmv0BLpTpKO5QUPk xEM2XmbfXXdrge8lTE7z0W/jhGqRyzYI7lGvbiJ4KjhpC0MC6fJBMIyVrlPjuOpA I9lRsik2uQ== -----END CERTIFICATE-----Generated at Wed May 13 20:55:04 2026 by rpki-client