$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft File: 098D421CB46F292F13CE71DF3D685D5E82893289.mft (raw, json) Hash identifier: 3+76fcM2UsaTEtW8SOGhyhkdw3uAW91pfHwZvpH5W7E= Subject key identifier: 85:54:98:C4:FC:56:1D:BC:0E:B0:B7:F7:9F:EB:38:A1:F7:F4:05:23 Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289 Certificate serial: 660A1F7A6BDFC177C8EE1824AD714AD6C26EBD56 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 17:14:43 +0000 Manifest this update: Fri 17 Apr 2026 17:09:43 +0000 Manifest next update: Sat 18 Apr 2026 21:08:43 +0000 Files and hashes: 1: 3132322e31312e302e302f31392d3139203d3e203633353636.roa (hash: WA5zg0AZiOq5/XX/UbhAjR810o8hOdpxMzpDns/KOgQ=) 2: 098D421CB46F292F13CE71DF3D685D5E82893289.crl (hash: cp7kOV5Y1ddBxmJUDRpxJ3xpLntwuPqL+Li4S8lEoFk=) 3: 3131382e3139342e35392e302f32342d3234203d3e203633353636.roa (hash: Si5VCZPqJR4AtJTNpPyk8CpFW/h/ob/tIo3FuK/Kt9M=) 4: 3130332e3235322e3234382e302f32342d3234203d3e203633353636.roa (hash: 4DEH4Fk4BDxr9Vha6E1J1M4/mfTr2k2F+9iMhfx9RXE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:0a:1f:7a:6b:df:c1:77:c8:ee:18:24:ad:71:4a:d6:c2:6e:bd:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289 Validity Not Before: Apr 17 17:09:43 2026 GMT Not After : Apr 18 21:08:43 2026 GMT Subject: CN=855498C4FC561DBC0EB0B7F79FEB38A1F7F40523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:0f:d7:d3:33:38:ab:c4:60:43:81:56:d6: b7:de:9a:77:b1:eb:1b:e9:91:be:b3:12:1a:8b:24: 00:ab:7e:e7:50:13:57:88:e1:81:47:25:fd:6e:f6: 20:e2:48:e0:f4:3f:92:83:2b:d1:13:e0:79:8f:e4: 30:08:5e:39:9a:d4:86:66:f6:33:60:53:fd:06:82: 3c:9e:ac:dc:72:c3:ab:ad:c8:f8:07:5d:ca:78:79: 45:9c:99:a8:3b:19:88:cb:5c:9b:98:1e:23:b0:9a: 28:ce:87:b1:f0:20:c7:41:c2:f6:66:61:5a:62:ce: ac:5f:82:e9:7d:e1:a5:c4:07:71:31:ef:b4:0f:ea: d2:82:c1:de:2a:61:28:67:3f:66:a1:4d:46:20:6a: 3d:46:cc:9e:40:d6:1f:e8:58:aa:17:cc:29:2d:21: 0f:86:af:6c:61:04:f5:b5:a4:a2:4e:19:b8:d4:b5: 22:91:cc:0b:7b:cf:64:26:c2:f9:71:de:16:4b:82: 3e:d3:67:05:71:9c:2a:92:49:7d:07:53:f8:d2:7e: e6:98:39:4f:cd:a4:13:30:c5:56:4a:d7:4c:df:41: 80:fe:77:1f:75:3b:9b:59:95:3d:26:ef:ff:9e:f3: 6e:fc:7a:32:7d:f1:64:54:61:69:fc:87:bc:7d:53: f8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:54:98:C4:FC:56:1D:BC:0E:B0:B7:F7:9F:EB:38:A1:F7:F4:05:23 X509v3 Authority Key Identifier: keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9c:a9:b6:6a:3d:53:a3:04:6f:01:9e:13:83:29:b6:4f:1e: 00:2c:e2:bb:74:0d:47:f4:da:41:df:02:44:73:7c:08:b9:3c: 1c:8a:f4:66:e5:04:fc:6f:84:88:0d:4f:84:99:91:2e:52:6f: b4:e0:6a:4c:0d:cd:33:a2:8a:49:97:8f:4b:c5:cf:10:d8:3d: 37:44:7e:ba:37:85:77:2a:5a:07:06:ae:2e:a4:55:c5:8a:88: 8a:db:eb:81:00:f3:23:7b:e0:03:ad:92:9f:09:1a:36:8e:65: 9a:48:55:a2:ce:c6:7c:15:0f:13:fa:da:56:c7:02:37:ce:f0: 44:a0:1b:14:65:5e:f6:3f:f0:e7:2f:d2:a8:c4:89:85:4c:1d: cf:f2:ee:77:35:fd:d1:62:ab:ef:68:4c:16:a5:4b:ee:2f:4b: f4:e9:1b:b5:5b:6e:c6:44:9c:6f:06:cd:cf:80:ef:03:8b:6b: 4b:ff:f1:81:5c:59:19:c0:a9:7e:3e:e7:23:5c:47:93:6f:84: b5:6b:fb:d3:9f:3c:5d:f9:2a:7d:00:78:4f:2b:bc:5f:f9:86: 09:4b:88:89:05:a8:22:da:5b:cb:37:b7:78:ca:f6:b9:71:83: 93:88:05:50:ec:fc:3a:65:6d:20:f1:03:c2:67:4a:b1:46:04: 5a:25:e5:cd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZgofemvfwXfI7hgkrXFK1sJuvVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4 Mjg5MzI4OTAeFw0yNjA0MTcxNzA5NDNaFw0yNjA0MTgyMTA4NDNaMDMxMTAvBgNV BAMTKDg1NTQ5OEM0RkM1NjFEQkMwRUIwQjdGNzlGRUIzOEExRjdGNDA1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Aw/X0zM4q8RgQ4FW1rfemnex 6xvpkb6zEhqLJACrfudQE1eI4YFHJf1u9iDiSOD0P5KDK9ET4HmP5DAIXjma1IZm 9jNgU/0GgjyerNxyw6utyPgHXcp4eUWcmag7GYjLXJuYHiOwmijOh7HwIMdBwvZm YVpizqxfgul94aXEB3Ex77QP6tKCwd4qYShnP2ahTUYgaj1GzJ5A1h/oWKoXzCkt IQ+Gr2xhBPW1pKJOGbjUtSKRzAt7z2Qmwvlx3hZLgj7TZwVxnCqSSX0HU/jSfuaY OU/NpBMwxVZK10zfQYD+dx91O5tZlT0m7/+e8278ejJ98WRUYWn8h7x9U/i7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhVSYxPxWHbwOsLf3n+s4off0BSMwHwYDVR0j BBgwFoAUCY1CHLRvKS8TznHfPWhdXoKJMokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzY2MjQ2Ni8wLzA5OEQ0MjFDQjQ2RjI5MkYxM0NFNzFERjNENjg1 RDVFODI4OTMyODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4Mjg5MzI4OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc2NjI0NjYvMC8wOThENDIxQ0I0NkYy OTJGMTNDRTcxREYzRDY4NUQ1RTgyODkzMjg5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5yptmo9U6ME bwGeE4Mptk8eACziu3QNR/TaQd8CRHN8CLk8HIr0ZuUE/G+EiA1PhJmRLlJvtOBq TA3NM6KKSZePS8XPENg9N0R+ujeFdypaBwauLqRVxYqIitvrgQDzI3vgA62Snwka No5lmkhVos7GfBUPE/raVscCN87wRKAbFGVe9j/w5y/SqMSJhUwdz/LudzX90WKr 72hMFqVL7i9L9OkbtVtuxkScbwbNz4DvA4trS//xgVxZGcCpfj7nI1xHk2+EtWv7 0588XfkqfQB4Tyu8X/mGCUuIiQWoItpbyze3eMr2uXGDk4gFUOz8OmVtIPEDwmdK sUYEWiXlzQ== -----END CERTIFICATE-----Generated at Sat Apr 18 08:06:36 2026 by rpki-client