$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft File: 98AA7A42F1AD88F64241535778555B0FE42637EA.mft (raw, json) Hash identifier: bJE7M8oJML2ELi2bdUg5XZ8pibvARRC2amg7Ic+PE08= Subject key identifier: 11:69:B2:CF:1D:AE:B2:AF:E2:93:52:C9:AE:2F:AF:79:25:55:73:FF Authority key identifier: 98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA Certificate issuer: /CN=98AA7A42F1AD88F64241535778555B0FE42637EA Certificate serial: 70A01A986CB462EBDD86FBE822D5C2B5430E4CAC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft Manifest number: 10 Signing time: Fri 17 Apr 2026 18:34:47 +0000 Manifest this update: Fri 17 Apr 2026 18:29:47 +0000 Manifest next update: Sat 18 Apr 2026 19:55:47 +0000 Files and hashes: 1: 98AA7A42F1AD88F64241535778555B0FE42637EA.crl (hash: c/uoNRPwyb67TXgzhy8c78gPJfiY1HTk1GZrd/1eDnM=) 2: 3130332e36302e3233302e302f32332d3233203d3e2030.roa (hash: Ue8/vIfgsSnN4LW/5kCPAbghCplvny1P0iX59/D578Q=) 3: 3130332e36302e3232382e302f32332d3233203d3e2034383131.roa (hash: 7yZqchq5RQPFP43vKaHRYkjM76ohU/66SRSv6GUC4k0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:a0:1a:98:6c:b4:62:eb:dd:86:fb:e8:22:d5:c2:b5:43:0e:4c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98AA7A42F1AD88F64241535778555B0FE42637EA Validity Not Before: Apr 17 18:29:47 2026 GMT Not After : Apr 18 19:55:47 2026 GMT Subject: CN=1169B2CF1DAEB2AFE29352C9AE2FAF79255573FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:51:69:4d:77:4e:e1:58:53:a5:89:4b:b6:64: 7c:4a:6e:cc:ce:97:f6:c8:b5:34:7b:cb:de:fb:96: b7:83:5f:55:4d:21:27:71:12:e7:a9:35:a2:f9:62: b7:92:08:ed:4b:8f:af:0c:f5:6e:8f:4a:2a:8b:2a: 4b:a9:e7:3f:1d:af:c8:e9:6a:a3:f3:0a:00:bf:61: 36:ba:31:0e:56:ba:b7:75:94:73:2e:b9:de:02:74: 9f:72:21:b5:99:58:a1:ce:1a:28:f0:4a:26:fc:37: 9c:79:3f:41:73:84:b9:2f:c6:56:bd:09:52:82:0b: 6e:21:73:07:5d:c9:5b:8e:92:6b:bc:ed:7d:c3:25: be:e8:85:62:b1:65:80:2c:c4:65:22:b2:5b:89:25: 40:70:aa:08:96:8a:a9:23:14:c4:82:aa:2f:b0:7d: d8:33:79:0f:7b:ed:cf:06:2e:61:c7:e7:52:1a:92: 99:9b:bb:0d:88:14:b7:1c:dc:86:7f:84:e2:fd:9d: 79:62:c5:57:79:68:c3:0a:23:cd:d2:f7:38:d2:72: 01:45:70:ec:02:fe:2c:39:3a:fd:86:48:a2:18:bd: c7:98:5b:3a:2c:85:b8:b0:19:93:57:7b:1e:a8:3b: 14:87:f6:cc:d9:50:ac:a1:5b:b5:69:73:8c:0c:53: 26:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:69:B2:CF:1D:AE:B2:AF:E2:93:52:C9:AE:2F:AF:79:25:55:73:FF X509v3 Authority Key Identifier: keyid:98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:f2:36:47:ac:20:d5:3f:54:4f:ce:dd:fe:38:6f:b0:2b:cd: 2b:79:9b:7a:03:e7:0e:e0:6f:aa:99:ff:7c:44:1a:91:f9:ad: ae:cd:26:e7:5a:fa:5c:6c:bd:54:74:cc:2e:4d:04:01:2d:bd: 0f:3c:57:be:96:c2:76:8b:dd:76:a6:27:66:d6:a4:2c:dc:4a: 83:e8:cd:55:04:4c:1e:29:2c:d8:5b:c7:f2:4c:1a:62:4a:f8: 0d:b0:c1:03:43:5c:bf:0a:15:58:10:cd:08:67:0f:ea:f0:cf: ad:d9:c6:f5:39:61:db:ef:6b:f3:04:62:61:f2:a6:79:fa:e1: 5e:f2:dc:b1:45:39:e7:d9:08:f4:3a:0d:a9:64:9f:b2:a9:e6: 8d:8b:ec:77:e6:0a:a8:ba:e3:bc:6d:8a:ba:fd:4f:09:a4:ff: 3c:e6:e9:d6:c4:c4:d6:90:d8:13:37:8c:63:a9:d7:3d:1f:51: 46:26:5a:56:79:df:07:33:66:d0:79:31:a5:3f:3d:79:c1:79: c0:ed:05:05:c0:76:51:98:a8:57:65:cf:8d:70:25:61:5d:ce: 1d:31:d6:37:10:fd:30:f1:98:60:0f:8c:e6:89:2b:de:20:37: fa:cd:f4:b3:23:22:1c:53:c3:70:f1:12:91:89:b7:e3:ce:51: 2d:c4:f6:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcKAamGy0YuvdhvvoItXCtUMOTKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZF NDI2MzdFQTAeFw0yNjA0MTcxODI5NDdaFw0yNjA0MTgxOTU1NDdaMDMxMTAvBgNV BAMTKDExNjlCMkNGMURBRUIyQUZFMjkzNTJDOUFFMkZBRjc5MjU1NTczRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoUWlNd07hWFOliUu2ZHxKbszO l/bItTR7y977lreDX1VNISdxEuepNaL5YreSCO1Lj68M9W6PSiqLKkup5z8dr8jp aqPzCgC/YTa6MQ5Wurd1lHMuud4CdJ9yIbWZWKHOGijwSib8N5x5P0FzhLkvxla9 CVKCC24hcwddyVuOkmu87X3DJb7ohWKxZYAsxGUisluJJUBwqgiWiqkjFMSCqi+w fdgzeQ977c8GLmHH51Iakpmbuw2IFLcc3IZ/hOL9nXlixVd5aMMKI83S9zjScgFF cOwC/iw5Ov2GSKIYvceYWzoshbiwGZNXex6oOxSH9szZUKyhW7Vpc4wMUyafAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEWmyzx2usq/ik1LJri+veSVVc/8wHwYDVR0j BBgwFoAUmKp6QvGtiPZCQVNXeFVbD+QmN+owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUyNzgxNTE5NTI5NTc0NS8wLzk4QUE3QTQyRjFBRDg4RjY0MjQxNTM1Nzc4NTU1 QjBGRTQyNjM3RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZFNDI2MzdFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1Mjc4MTUxOTUyOTU3NDUvMC85OEFBN0E0MkYxQUQ4 OEY2NDI0MTUzNTc3ODU1NUIwRkU0MjYzN0VBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvI2R6wg1T9U T87d/jhvsCvNK3mbegPnDuBvqpn/fEQakfmtrs0m51r6XGy9VHTMLk0EAS29DzxX vpbCdovddqYnZtakLNxKg+jNVQRMHiks2FvH8kwaYkr4DbDBA0NcvwoVWBDNCGcP 6vDPrdnG9Tlh2+9r8wRiYfKmefrhXvLcsUU559kI9DoNqWSfsqnmjYvsd+YKqLrj vG2Kuv1PCaT/PObp1sTE1pDYEzeMY6nXPR9RRiZaVnnfBzNm0HkxpT89ecF5wO0F BcB2UZioV2XPjXAlYV3OHTHWNxD9MPGYYA+M5okr3iA3+s30syMiHFPDcPESkYm3 485RLcT28Q== -----END CERTIFICATE-----Generated at Fri Apr 17 22:41:31 2026 by rpki-client