$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft File: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft (raw, json) Hash identifier: L60lmroS5a0VOhiuQVd6Bs0bBaQrRJgghvsrqn1AqHU= Subject key identifier: 7D:65:48:5E:1A:F3:95:DD:40:41:82:EA:71:14:5F:81:9D:97:6C:F0 Authority key identifier: 98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 Certificate issuer: /CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601 Certificate serial: 41B6915E9627E3A7E02973E5F46A263993A603ED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft Manifest number: C3 Signing time: Fri 17 Apr 2026 00:04:36 +0000 Manifest this update: Thu 16 Apr 2026 23:59:36 +0000 Manifest next update: Sat 18 Apr 2026 03:01:36 +0000 Files and hashes: 1: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl (hash: 3wL6Xs10ViBGdoiVcNjPlU1RNroNzpYCoZvB+dn+iVk=) 2: 3137302e3137392e302e302f31362d3234203d3e20313331343836.roa (hash: qat1H617QJwQjY8jG6LbfzleO4RxVlthXXvF9jpIwLY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 03:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b6:91:5e:96:27:e3:a7:e0:29:73:e5:f4:6a:26:39:93:a6:03:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601 Validity Not Before: Apr 16 23:59:36 2026 GMT Not After : Apr 18 03:01:36 2026 GMT Subject: CN=7D65485E1AF395DD404182EA71145F819D976CF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4c:5e:1f:59:50:ad:d1:b7:0e:4f:da:85:6d: 12:3d:f4:e4:96:1d:fb:de:a8:67:08:fb:e9:59:af: dc:c3:08:a4:85:86:d0:7b:06:ba:0b:ce:1f:25:4d: b7:09:36:96:fc:40:5b:ce:06:cd:ce:8e:c1:b3:d7: b3:3e:f2:9b:d9:f8:ba:de:e9:44:fa:c1:30:88:ad: 7c:76:0e:7d:cb:11:37:6e:f1:0f:88:48:1e:a4:c7: cb:ce:5d:1c:22:0a:da:76:ff:46:c5:12:c2:e3:bf: 55:48:20:90:8a:c0:fc:a1:36:04:e6:f1:17:6d:43: b3:9e:27:ed:87:e3:83:19:73:9a:c2:d1:24:dd:8a: 52:77:e0:7f:2a:4b:e6:3b:17:e0:e4:b0:ab:65:c2: b4:e8:c6:3d:db:3a:fb:d8:0c:0c:bf:3f:3e:24:78: a7:d1:f5:6e:29:a0:d2:e8:ca:78:3e:42:03:6c:1a: 85:49:58:84:47:bb:c9:7d:8d:91:23:6c:2f:93:b2: 98:7a:b7:e7:d0:6b:f4:40:50:23:36:45:ce:91:bb: 62:6b:49:63:8c:ef:03:aa:fb:06:45:8a:78:6d:76: 13:d0:a5:6b:dc:00:00:e6:fa:a3:12:11:41:72:0b: 6a:93:17:c8:3f:cc:87:40:c1:47:63:93:6e:b5:9c: 25:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:65:48:5E:1A:F3:95:DD:40:41:82:EA:71:14:5F:81:9D:97:6C:F0 X509v3 Authority Key Identifier: keyid:98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:a4:b2:a2:9c:5b:71:ae:b5:72:7d:a8:05:13:e2:00:75:de: cc:de:64:1e:72:9e:bc:53:5b:c5:3d:2c:2b:70:91:bd:fd:c9: 5c:24:63:41:4f:17:5e:48:28:43:9d:00:dd:0c:a6:1a:e8:49: 94:07:ca:83:da:41:13:a4:38:75:08:ad:17:f3:6b:c2:60:b3: c8:00:67:73:08:db:aa:99:19:cb:42:10:60:83:9b:be:cb:02: b9:41:2d:9f:8f:c4:3f:46:0c:23:19:2f:89:b0:e2:37:6f:fb: e1:69:37:3f:6e:7c:fc:aa:cd:d1:52:9e:d5:ae:91:d2:f6:4e: 4f:82:3d:13:d6:cc:b0:eb:12:9f:3c:22:4b:f4:c0:d6:12:e8: e3:4d:60:dc:cb:58:54:b3:8a:0c:68:33:43:f5:c6:f4:93:a4: 26:da:0a:17:9d:cd:3f:9a:8f:79:d3:15:0e:67:15:aa:21:06: cf:4c:56:35:9c:ee:ef:bc:9e:a9:ce:ce:0f:82:e4:7d:2a:c1: 77:c5:65:57:a9:cd:46:93:73:8e:24:5c:f4:84:87:4a:5d:9a: b2:73:d9:40:fd:39:98:d4:bc:f0:06:f1:97:54:f1:c4:0b:96: c9:06:55:f3:40:b8:92:85:66:6c:07:77:d2:36:a9:c0:05:c2: 3b:76:2a:a2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQbaRXpYn46fgKXPl9GomOZOmA+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgzMTlBM0JDOEY4Q0ZENEZCQjM4QzczMURCRkVDMTBB QzA1MzYwMTAeFw0yNjA0MTYyMzU5MzZaFw0yNjA0MTgwMzAxMzZaMDMxMTAvBgNV BAMTKDdENjU0ODVFMUFGMzk1REQ0MDQxODJFQTcxMTQ1RjgxOUQ5NzZDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWTF4fWVCt0bcOT9qFbRI99OSW HfveqGcI++lZr9zDCKSFhtB7BroLzh8lTbcJNpb8QFvOBs3OjsGz17M+8pvZ+Lre 6UT6wTCIrXx2Dn3LETdu8Q+ISB6kx8vOXRwiCtp2/0bFEsLjv1VIIJCKwPyhNgTm 8RdtQ7OeJ+2H44MZc5rC0STdilJ34H8qS+Y7F+DksKtlwrToxj3bOvvYDAy/Pz4k eKfR9W4poNLoyng+QgNsGoVJWIRHu8l9jZEjbC+Tsph6t+fQa/RAUCM2Rc6Ru2Jr SWOM7wOq+wZFinhtdhPQpWvcAADm+qMSEUFyC2qTF8g/zIdAwUdjk261nCUtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfWVIXhrzld1AQYLqcRRfgZ2XbPAwHwYDVR0j BBgwFoAUmDGaO8j4z9T7s4xzHb/sEKwFNgEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8xLzk4MzE5QTNCQzhGOENGRDRGQkIzOEM3MzFEQkZF QzEwQUMwNTM2MDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOTgzMTlBM0JDOEY4Q0ZENEZCQjM4QzczMURCRkVDMTBBQzA1MzYwMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjgzNjM1OTk3OTA5OTc1MDYvMS85ODMxOUEzQkM4RjhD RkQ0RkJCMzhDNzMxREJGRUMxMEFDMDUzNjAxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKSyopxbca61 cn2oBRPiAHXezN5kHnKevFNbxT0sK3CRvf3JXCRjQU8XXkgoQ50A3QymGuhJlAfK g9pBE6Q4dQitF/NrwmCzyABncwjbqpkZy0IQYIObvssCuUEtn4/EP0YMIxkvibDi N2/74Wk3P258/KrN0VKe1a6R0vZOT4I9E9bMsOsSnzwiS/TA1hLo401g3MtYVLOK DGgzQ/XG9JOkJtoKF53NP5qPedMVDmcVqiEGz0xWNZzu77yeqc7OD4LkfSrBd8Vl V6nNRpNzjiRc9ISHSl2asnPZQP05mNS88Abxl1TxxAuWyQZV80C4koVmbAd30jap wAXCO3Yqog== -----END CERTIFICATE-----Generated at Fri Apr 17 19:38:00 2026 by rpki-client