$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft File: 098D421CB46F292F13CE71DF3D685D5E82893289.mft (raw, json) Hash identifier: NGW7oBVBx4ZFxmMun+eldQRz0Mgsh6N7ZlL65Gc357Y= Subject key identifier: 00:7E:90:04:5D:8C:FF:92:D8:D1:4C:85:4A:C7:CD:7C:B9:14:92:35 Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289 Certificate serial: 425F82D70B45E9E6FBC435D12A53583A47F9757E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 18:48:16 +0000 Manifest this update: Sun 01 Mar 2026 18:43:16 +0000 Manifest next update: Mon 02 Mar 2026 21:48:16 +0000 Files and hashes: 1: 098D421CB46F292F13CE71DF3D685D5E82893289.crl (hash: VUMIFcJjVwyJRkElmVeCFUTW+tuJnPZYZGVL9MVlRSU=) 2: 3132322e31312e302e302f31392d3139203d3e203633353636.roa (hash: WA5zg0AZiOq5/XX/UbhAjR810o8hOdpxMzpDns/KOgQ=) 3: 3130332e3235322e3234382e302f32342d3234203d3e203633353636.roa (hash: 4DEH4Fk4BDxr9Vha6E1J1M4/mfTr2k2F+9iMhfx9RXE=) 4: 3131382e3139342e35392e302f32342d3234203d3e203633353636.roa (hash: Si5VCZPqJR4AtJTNpPyk8CpFW/h/ob/tIo3FuK/Kt9M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 21:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:5f:82:d7:0b:45:e9:e6:fb:c4:35:d1:2a:53:58:3a:47:f9:75:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289 Validity Not Before: Mar 1 18:43:16 2026 GMT Not After : Mar 2 21:48:16 2026 GMT Subject: CN=007E90045D8CFF92D8D14C854AC7CD7CB9149235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:ce:e3:7a:51:59:9f:2a:a3:bd:aa:7b:9b: 3a:95:6d:e3:39:7d:4e:92:e5:e1:03:38:70:04:a5: 80:6d:51:57:b3:d6:01:eb:10:f7:44:0e:88:31:a4: 04:de:e5:70:c0:4c:a4:65:3d:e1:2f:57:0c:fa:b9: c5:74:35:82:88:8c:56:23:59:f3:e5:89:46:50:e0: 65:02:e1:5c:95:d1:7e:c5:c1:12:1d:83:b7:bf:c8: 13:8f:b7:7a:f1:73:98:71:b9:a9:73:3c:11:a3:07: 4b:44:df:12:5f:6b:81:ad:67:1f:86:f5:ba:15:55: 4b:85:cf:37:96:78:70:08:95:c8:20:1e:87:5a:6b: c4:c4:03:89:b9:7f:6b:25:f3:a0:bc:24:ab:41:52: c4:c9:96:d8:0e:f8:21:df:af:63:b7:ab:57:a8:f3: f4:48:5a:a8:cb:b3:1c:5b:89:d8:14:01:88:c3:31: a5:e9:e6:69:42:21:f5:81:99:57:25:da:7b:8a:15: d7:c3:ba:91:a0:b4:44:92:a1:1c:f1:01:de:f0:8b: ce:d6:c7:92:68:17:81:8a:68:8c:a6:93:27:ed:c9: d1:99:da:fe:bd:15:3b:0c:9b:77:0b:67:0b:a4:f5: e7:95:6e:42:0a:5a:2e:4e:a7:2d:78:82:ed:99:66: 34:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7E:90:04:5D:8C:FF:92:D8:D1:4C:85:4A:C7:CD:7C:B9:14:92:35 X509v3 Authority Key Identifier: keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:88:ef:50:3d:05:2b:0e:d8:de:48:08:67:7e:22:15:ab:81: a8:51:a3:26:91:1c:49:27:4e:f0:0d:d3:fe:15:ec:39:01:e5: a3:c0:ce:5d:16:40:01:2b:eb:06:00:e8:ef:f2:00:55:23:fd: 1c:b2:54:3b:af:9f:c4:a1:23:5f:e2:1e:1b:2d:ec:f3:39:c1: f0:f3:4f:4c:11:f3:53:75:56:c1:02:c1:a0:38:a2:a2:b1:5e: 94:be:3a:79:a6:22:d3:15:52:99:8a:a9:dd:29:8a:83:c6:9a: 5e:30:a3:1b:22:19:13:78:17:2a:08:50:80:09:14:5d:46:d1: 0f:21:90:b9:97:bd:21:7e:2e:27:56:d1:ba:87:52:90:62:ca: 93:13:09:31:9c:d2:f8:fb:7d:14:2c:5e:42:73:48:f4:5d:85: 8c:9e:5e:8c:85:67:3b:b2:35:a3:d9:de:c4:dc:ed:4e:b0:19: cb:d3:99:98:5d:e8:b2:11:1d:8c:ea:4e:a1:fa:e8:45:96:b3: 11:0d:59:dc:f8:1d:28:4e:f5:0f:52:f8:fc:d9:5f:57:56:93: 7d:ac:da:b2:f2:01:99:05:46:7e:22:b7:0a:e6:42:35:79:8c: f8:ac:42:e6:b1:13:e9:ea:07:25:03:bb:3a:6d:42:98:0b:e0: 66:18:5a:8c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQl+C1wtF6eb7xDXRKlNYOkf5dX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4 Mjg5MzI4OTAeFw0yNjAzMDExODQzMTZaFw0yNjAzMDIyMTQ4MTZaMDMxMTAvBgNV BAMTKDAwN0U5MDA0NUQ4Q0ZGOTJEOEQxNEM4NTRBQzdDRDdDQjkxNDkyMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ls7jelFZnyqjvap7mzqVbeM5 fU6S5eEDOHAEpYBtUVez1gHrEPdEDogxpATe5XDATKRlPeEvVwz6ucV0NYKIjFYj WfPliUZQ4GUC4VyV0X7FwRIdg7e/yBOPt3rxc5hxualzPBGjB0tE3xJfa4GtZx+G 9boVVUuFzzeWeHAIlcggHodaa8TEA4m5f2sl86C8JKtBUsTJltgO+CHfr2O3q1eo 8/RIWqjLsxxbidgUAYjDMaXp5mlCIfWBmVcl2nuKFdfDupGgtESSoRzxAd7wi87W x5JoF4GKaIymkyftydGZ2v69FTsMm3cLZwuk9eeVbkIKWi5Opy14gu2ZZjSrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAH6QBF2M/5LY0UyFSsfNfLkUkjUwHwYDVR0j BBgwFoAUCY1CHLRvKS8TznHfPWhdXoKJMokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzY2MjQ2Ni8wLzA5OEQ0MjFDQjQ2RjI5MkYxM0NFNzFERjNENjg1 RDVFODI4OTMyODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4Mjg5MzI4OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc2NjI0NjYvMC8wOThENDIxQ0I0NkYy OTJGMTNDRTcxREYzRDY4NUQ1RTgyODkzMjg5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYjvUD0FKw7Y 3kgIZ34iFauBqFGjJpEcSSdO8A3T/hXsOQHlo8DOXRZAASvrBgDo7/IAVSP9HLJU O6+fxKEjX+IeGy3s8znB8PNPTBHzU3VWwQLBoDiiorFelL46eaYi0xVSmYqp3SmK g8aaXjCjGyIZE3gXKghQgAkUXUbRDyGQuZe9IX4uJ1bRuodSkGLKkxMJMZzS+Pt9 FCxeQnNI9F2FjJ5ejIVnO7I1o9nexNztTrAZy9OZmF3oshEdjOpOofroRZazEQ1Z 3PgdKE71D1L4/NlfV1aTfazasvIBmQVGfiK3CuZCNXmM+KxC5rET6eoHJQO7Om1C mAvgZhhajA== -----END CERTIFICATE-----Generated at Mon Mar 2 09:27:23 2026 by rpki-client