$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft File: 98AA7A42F1AD88F64241535778555B0FE42637EA.mft (raw, json) Hash identifier: 2uLyirg+o8hbBsR/I/jNM7tBZohK5wnLlMsOFRjh1lg= Subject key identifier: 0B:25:B7:DB:D5:36:06:DF:5A:DB:F0:1E:F5:43:72:D8:9C:12:EB:93 Authority key identifier: 98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA Certificate issuer: /CN=98AA7A42F1AD88F64241535778555B0FE42637EA Certificate serial: 77135648FA208100958C309ADD656BABB4CEC581 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft Manifest number: 5D Signing time: Sat 13 Jun 2026 21:02:13 +0000 Manifest this update: Sat 13 Jun 2026 20:57:13 +0000 Manifest next update: Sun 14 Jun 2026 21:27:13 +0000 Files and hashes: 1: 3130332e36302e3232382e302f32332d3233203d3e2034383131.roa (hash: 7yZqchq5RQPFP43vKaHRYkjM76ohU/66SRSv6GUC4k0=) 2: 98AA7A42F1AD88F64241535778555B0FE42637EA.crl (hash: kxtcZWacZVPA0Eiu4eR4MwRb0yuVoJS7aY25oSaj0G4=) 3: 3130332e36302e3233302e302f32332d3233203d3e2030.roa (hash: Ue8/vIfgsSnN4LW/5kCPAbghCplvny1P0iX59/D578Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:13:56:48:fa:20:81:00:95:8c:30:9a:dd:65:6b:ab:b4:ce:c5:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98AA7A42F1AD88F64241535778555B0FE42637EA Validity Not Before: Jun 13 20:57:13 2026 GMT Not After : Jun 14 21:27:13 2026 GMT Subject: CN=0B25B7DBD53606DF5ADBF01EF54372D89C12EB93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b1:d6:a1:a5:58:7d:79:5d:ff:fc:31:c1:70: ea:75:0a:30:2e:4e:55:04:53:bd:73:33:a1:83:2e: 5d:69:07:ae:65:ab:ae:23:9e:38:16:88:fe:2a:ae: f3:00:50:04:8b:2f:ac:ca:b6:ac:32:c2:fe:42:9d: 77:da:ab:94:76:a6:e8:25:c9:7f:f8:39:46:55:86: d6:20:1d:93:93:b1:0d:80:e2:a3:57:60:a9:50:4c: 16:13:14:b3:95:30:32:07:72:06:3a:83:2a:d5:0a: 7d:e1:76:fd:8d:49:fa:e4:e0:69:c2:3e:f0:6e:28: f5:2e:ca:02:38:c4:78:77:e0:c8:31:8e:46:2b:50: be:5b:1d:90:11:eb:8d:71:15:05:7f:2d:b4:46:48: 3b:d2:23:5d:4d:05:1a:0f:aa:4d:05:ea:37:0b:89: 81:f7:52:49:ff:58:7b:e5:42:c4:f4:9b:61:13:59: 83:af:2b:c9:f5:6b:ee:7a:37:60:fe:8e:63:fd:ce: 1b:d0:98:43:e8:0a:3e:de:12:8d:3d:9c:8f:0d:60: 60:21:bb:ff:db:30:cd:b5:e2:a4:74:af:c5:40:c9: b8:7a:5c:63:31:65:de:f9:1e:16:02:e2:df:24:b6: ae:8b:64:4a:24:3f:8f:69:92:46:f3:89:d8:5b:1b: 1f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:25:B7:DB:D5:36:06:DF:5A:DB:F0:1E:F5:43:72:D8:9C:12:EB:93 X509v3 Authority Key Identifier: keyid:98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:f7:b1:6b:ff:07:5f:16:5a:18:19:86:4d:b2:c9:5e:ae:0f: f4:cd:3e:5a:87:64:21:7e:0b:7d:e6:1a:9e:ef:9e:93:75:64: 7a:5d:e6:87:4a:3c:58:d1:5a:08:fc:b1:29:db:e1:34:c9:e9: f9:c5:0f:0d:63:cf:73:34:75:fa:55:2a:7a:4a:48:b3:bd:5b: 28:01:e7:b7:a5:83:c7:0d:9d:c2:be:c8:a0:7c:11:08:a1:e0: 15:ea:61:60:ac:44:ad:8b:af:a5:ca:ce:da:f5:ba:e8:02:7f: f7:de:e8:3c:bb:41:b5:41:f9:6e:6a:aa:63:35:13:b1:12:9f: 6a:d8:32:3c:8f:dd:d0:c5:49:82:06:d8:1f:df:67:ad:f3:76: 97:b7:d5:ce:da:06:a8:9b:b7:e4:f5:95:82:e0:27:ac:f7:6f: ff:18:cf:2e:bf:8b:4b:0c:21:20:62:6a:87:6d:d2:fb:b5:b0: 57:fb:b1:12:66:0c:02:a1:a2:2b:3b:55:0b:e8:9e:f1:c7:c2: 9e:ec:9a:c3:34:61:60:51:c6:67:04:a6:57:d8:56:40:b2:06: 74:ed:78:d5:70:47:c4:eb:40:76:16:2a:8f:a7:8d:d0:d1:15: d7:1f:fc:5b:ca:90:67:48:52:de:0f:86:eb:5f:ed:eb:c9:2e: 41:c8:4a:95 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdxNWSPoggQCVjDCa3WVrq7TOxYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZF NDI2MzdFQTAeFw0yNjA2MTMyMDU3MTNaFw0yNjA2MTQyMTI3MTNaMDMxMTAvBgNV BAMTKDBCMjVCN0RCRDUzNjA2REY1QURCRjAxRUY1NDM3MkQ4OUMxMkVCOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDsdahpVh9eV3//DHBcOp1CjAu TlUEU71zM6GDLl1pB65lq64jnjgWiP4qrvMAUASLL6zKtqwywv5CnXfaq5R2pugl yX/4OUZVhtYgHZOTsQ2A4qNXYKlQTBYTFLOVMDIHcgY6gyrVCn3hdv2NSfrk4GnC PvBuKPUuygI4xHh34MgxjkYrUL5bHZAR641xFQV/LbRGSDvSI11NBRoPqk0F6jcL iYH3Ukn/WHvlQsT0m2ETWYOvK8n1a+56N2D+jmP9zhvQmEPoCj7eEo09nI8NYGAh u//bMM214qR0r8VAybh6XGMxZd75HhYC4t8ktq6LZEokP49pkkbzidhbGx+zAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCyW329U2Bt9a2/Ae9UNy2JwS65MwHwYDVR0j BBgwFoAUmKp6QvGtiPZCQVNXeFVbD+QmN+owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUyNzgxNTE5NTI5NTc0NS8wLzk4QUE3QTQyRjFBRDg4RjY0MjQxNTM1Nzc4NTU1 QjBGRTQyNjM3RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZFNDI2MzdFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1Mjc4MTUxOTUyOTU3NDUvMC85OEFBN0E0MkYxQUQ4 OEY2NDI0MTUzNTc3ODU1NUIwRkU0MjYzN0VBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhvexa/8HXxZa GBmGTbLJXq4P9M0+WodkIX4LfeYanu+ek3Vkel3mh0o8WNFaCPyxKdvhNMnp+cUP DWPPczR1+lUqekpIs71bKAHnt6WDxw2dwr7IoHwRCKHgFephYKxErYuvpcrO2vW6 6AJ/997oPLtBtUH5bmqqYzUTsRKfatgyPI/d0MVJggbYH99nrfN2l7fVztoGqJu3 5PWVguAnrPdv/xjPLr+LSwwhIGJqh23S+7WwV/uxEmYMAqGiKztVC+ie8cfCnuya wzRhYFHGZwSmV9hWQLIGdO141XBHxOtAdhYqj6eN0NEV1x/8W8qQZ0hS3g+G61/t 68kuQchKlQ== -----END CERTIFICATE-----Generated at Sun Jun 14 04:07:12 2026 by rpki-client