$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft File: 95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft (raw, json) Hash identifier: V/26HXEKZ/muyOGvHu0sJLR6hbvvVtjVHYFVuR3bWMg= Subject key identifier: 85:78:95:AE:0C:0E:A3:DF:AE:B6:7F:88:62:D0:7A:5B:8C:26:CC:0C Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 Certificate issuer: /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Certificate serial: 0E6CDE0FFF03345920C90AC67B45FB9AAF1EB316 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft Manifest number: 5B Signing time: Thu 23 Jul 2026 11:28:32 +0000 Manifest this update: Thu 23 Jul 2026 11:23:32 +0000 Manifest next update: Fri 24 Jul 2026 12:24:32 +0000 Files and hashes: 1: 323430313a343538303a3a2f33322d3332203d3e203539303136.roa (hash: 4SF8Pp3L2TEVYRT22za3SayHJbSFtZ5mUY5kMm8lMLE=) 2: 3130332e3233372e3137362e302f32302d3234203d3e203539303136.roa (hash: F6kjKUL9Cuh7q/O+3aOPpPcOXiPPLNq3m8dj5BQeoJw=) 3: 323430313a333838303a3a2f33322d3332203d3e203539303136.roa (hash: nIUpPle9V8mZQDvkQEuy67ZE77I4TcZ0g8BdblFs/40=) 4: 323430313a336538303a3a2f33322d3332203d3e203539303136.roa (hash: 10u8/tQ0bj2m7WAt3d3KZeYYZx3ooQ6ech4KzfSDNOQ=) 5: 3130332e3233372e3232342e302f32302d3234203d3e203539303136.roa (hash: 6b/8l+Uh6nKe1lChpPD2qoAHroOaap5ZOEDgUWycvko=) 6: 323430313a343238303a3a2f33322d3332203d3e203539303136.roa (hash: wvGE2b5TSnKIY0jATltop2J3jnvexdzdvqHvS8nfqoc=) 7: 323430313a343438303a3a2f33322d3332203d3e203539303136.roa (hash: tijXdtP2aEYodGJFVcP655ov9AvFTQq/eg3860Iq/s8=) 8: 95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl (hash: wkHdLzKKtczc+d91sY5Pc1+ss8oigy30WYmkkc4qUiw=) 9: 3130332e3233372e3139322e302f31392d3234203d3e203539303136.roa (hash: GyFDLjhmzslpLAkxLQMKXf73yrWrvHv9QN2FG7CWGMg=) 10: 323430313a333938303a3a2f33322d3332203d3e203539303136.roa (hash: bTUMqZDoaHrSxBkNQJ8uuKsEF6Z9jgMuGDUhgCcaTtc=) 11: 323430313a336138303a3a2f33322d3332203d3e203539303136.roa (hash: u0/hBW5D7s2jYfYBv53rUbNvjfHmSGPr9Qius6arWjQ=) 12: 323430313a343038303a3a2f33322d3332203d3e203539303136.roa (hash: iDdse9Ls6yfGVdjhkQRk57LbL20OKYaIkbT6DLWWFss=) 13: 323430313a343138303a3a2f33322d3332203d3e203539303136.roa (hash: OSFQ0l/OO8+SL8jJPJmY4WFRjU1QPttWYeUk5dMi/6I=) 14: 323430313a343338303a3a2f33322d3332203d3e203539303136.roa (hash: vu/T9HfTgNGQsuDixmS4B1wmKEiY+xqCh70hJ2TmJE4=) 15: 323430313a343738303a3a2f33322d3332203d3e203539303136.roa (hash: Iyb1KGBqBHdVxysl3Ic3fe6dw60fKYWZn5LRMnbYIEg=) 16: 323430313a336438303a3a2f33322d3332203d3e203539303136.roa (hash: DbLTFeOIezLKCvvhDSZf0uP4appQbtTjeFlkdxoCVo4=) 17: 323430313a336238303a3a2f33322d3332203d3e203539303136.roa (hash: BoT0BkuMQMjkrkhKJtwZepcOx6+TP+AJ/fdiDyAwVI0=) 18: 3130332e3233372e3234302e302f32312d3234203d3e203539303136.roa (hash: dVO/5l2P8SLtHbMGokjm4j5F0UAo9VepYQjfk/K44Lk=) 19: 323430313a346138303a3a2f33322d3332203d3e203539303136.roa (hash: TA9sNJg7is21RvuqNvlhYmi7s0BOFgm0l6CxlSd3k3E=) 20: 323430313a343638303a3a2f33322d3332203d3e203539303136.roa (hash: v55q9HAun0RdcyFLU8631U5FHjTmdXNRLzVCguNt9C8=) 21: 323430313a336338303a3a2f33322d3332203d3e203539303136.roa (hash: bilHjyNG8k1Ew4Jg5iP3JCfreUTY5fsiIjRCV50N4d4=) 22: 323430313a336638303a3a2f33322d3332203d3e203539303136.roa (hash: ucjz/dlhV3ok/6hDmWxU2mJ+pwi0UxkJY3B5u/KGHYU=) 23: 323430313a343838303a3a2f33322d3332203d3e203539303136.roa (hash: L3uEhrRZb8f4yuEifKGAUDh5wDZ3Fi8QViYq2N6q/6w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:6c:de:0f:ff:03:34:59:20:c9:0a:c6:7b:45:fb:9a:af:1e:b3:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Validity Not Before: Jul 23 11:23:32 2026 GMT Not After : Jul 24 12:24:32 2026 GMT Subject: CN=857895AE0C0EA3DFAEB67F8862D07A5B8C26CC0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9a:32:82:7c:ad:2e:2a:52:b8:24:50:99:dd: 90:58:61:d8:e8:3d:1b:ee:88:57:fd:56:04:19:f4: 51:03:24:ec:c5:d2:3a:31:dc:6e:2b:c3:a0:a4:99: cd:07:b7:a9:b4:e2:e7:44:d6:95:93:d4:64:e4:3e: 7e:2a:a9:fe:a1:55:9e:83:bd:7c:d5:87:2b:ee:3e: 9b:fb:4d:7f:ea:52:72:ac:a1:36:61:a3:61:c3:46: 14:45:a6:e7:48:bb:3a:96:cb:b7:2d:bf:d6:30:a6: 62:61:d3:89:d6:4a:78:2b:2d:59:5f:e9:8f:5d:9d: a8:af:46:b2:f2:d7:c3:6e:3e:9a:57:f8:2b:11:6b: 06:f1:51:ab:bf:f0:49:16:19:b9:b9:97:e3:d3:50: 33:ef:93:40:90:65:55:f4:4b:0a:f0:99:39:37:71: 2f:17:67:c1:ba:9a:0c:2d:a2:5b:8f:33:92:8a:86: b5:5f:a2:9a:70:1a:f8:c2:ea:c1:a0:45:34:05:06: 57:bb:41:46:39:9a:ca:fb:c0:67:f3:90:d7:aa:1b: 24:05:4f:51:10:08:ed:67:23:59:74:d1:89:d1:ae: 91:7f:01:fa:cf:49:8a:ef:00:b2:4c:0b:85:73:7d: 92:df:c3:92:9b:5d:78:5c:4f:3f:f8:1c:8d:18:a2: fe:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:78:95:AE:0C:0E:A3:DF:AE:B6:7F:88:62:D0:7A:5B:8C:26:CC:0C X509v3 Authority Key Identifier: keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:3b:c8:1e:d8:76:f6:c4:d3:f3:09:28:01:c1:7f:bd:3f:76: 82:42:8a:b3:81:1c:1b:e3:5c:59:18:d2:d0:15:ee:af:e0:82: 29:4d:20:1a:97:08:f4:92:56:16:a9:4f:f2:f6:88:05:09:a6: 4f:21:0f:99:36:3d:72:9d:b7:fc:73:a5:db:f0:7b:e9:23:ae: 0b:a6:d1:dd:d4:84:e5:f9:0c:18:6a:70:78:f5:3e:53:b9:33: 75:ae:4e:fc:77:4c:81:20:67:72:ef:6b:76:21:dc:3e:f9:7a: 19:3e:59:52:0e:9e:c7:18:b5:00:a1:b4:be:1a:f4:5c:cf:91: 28:d1:dc:ae:fb:0f:08:4b:56:27:aa:1f:80:a8:3c:ff:df:8d: 5a:11:9f:40:a2:b5:6f:21:d2:40:b8:eb:81:9c:b9:a9:83:ad: e0:f9:dd:cd:85:e8:43:fe:34:fa:1c:cf:66:70:bb:2e:30:c9: af:bd:d1:c2:39:f9:77:20:6f:52:52:64:97:3d:7c:65:c6:eb: 20:9c:ce:65:3e:41:4a:95:9c:f3:26:6e:0e:6f:fa:c4:24:08: 75:61:d6:ca:51:2d:9a:b3:f0:c3:71:93:5a:34:0a:15:de:67: af:cb:dc:7b:b1:4f:37:db:11:43:ad:7b:83:f2:2a:49:5a:25: 2c:0d:52:39 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDmzeD/8DNFkgyQrGe0X7mq8esxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZE RjQ3RENEMzAeFw0yNjA3MjMxMTIzMzJaFw0yNjA3MjQxMjI0MzJaMDMxMTAvBgNV BAMTKDg1Nzg5NUFFMEMwRUEzREZBRUI2N0Y4ODYyRDA3QTVCOEMyNkNDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvmjKCfK0uKlK4JFCZ3ZBYYdjo PRvuiFf9VgQZ9FEDJOzF0jox3G4rw6Ckmc0Ht6m04udE1pWT1GTkPn4qqf6hVZ6D vXzVhyvuPpv7TX/qUnKsoTZho2HDRhRFpudIuzqWy7ctv9YwpmJh04nWSngrLVlf 6Y9dnaivRrLy18NuPppX+CsRawbxUau/8EkWGbm5l+PTUDPvk0CQZVX0SwrwmTk3 cS8XZ8G6mgwtoluPM5KKhrVfoppwGvjC6sGgRTQFBle7QUY5msr7wGfzkNeqGyQF T1EQCO1nI1l00YnRrpF/AfrPSYrvALJMC4VzfZLfw5KbXXhcTz/4HI0Yov7jAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhXiVrgwOo9+utn+IYtB6W4wmzAwwHwYDVR0j BBgwFoAUlTJe36uJnt+cauUUMviX/99H3NMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTY1NzYyOTI1ODQxNjE0OS8wLzk1MzI1RURGQUI4OTlFREY5QzZBRTUxNDMyRjg5 N0ZGREY0N0RDRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZERjQ3RENEMy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDk2NTc2MjkyNTg0MTYxNDkvMC85NTMyNUVERkFCODk5 RURGOUM2QUU1MTQzMkY4OTdGRkRGNDdEQ0QzLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzvIHth29sTT 8wkoAcF/vT92gkKKs4EcG+NcWRjS0BXur+CCKU0gGpcI9JJWFqlP8vaIBQmmTyEP mTY9cp23/HOl2/B76SOuC6bR3dSE5fkMGGpwePU+U7kzda5O/HdMgSBncu9rdiHc Pvl6GT5ZUg6exxi1AKG0vhr0XM+RKNHcrvsPCEtWJ6ofgKg8/9+NWhGfQKK1byHS QLjrgZy5qYOt4PndzYXoQ/40+hzPZnC7LjDJr73Rwjn5dyBvUlJklz18ZcbrIJzO ZT5BSpWc8yZuDm/6xCQIdWHWylEtmrPww3GTWjQKFd5nr8vce7FPN9sRQ617g/Iq SVolLA1SOQ== -----END CERTIFICATE-----Generated at Fri Jul 24 04:28:19 2026 by rpki-client