$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft File: 98AA7A42F1AD88F64241535778555B0FE42637EA.mft (raw, json) Hash identifier: wiNJUm5NHNjwLwaPwTF8djxQy16UC1q/gz/4/L9teBI= Subject key identifier: FD:AE:EB:06:0D:75:0A:FC:39:F7:74:B6:FA:A3:6F:B2:C5:00:64:C0 Authority key identifier: 98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA Certificate issuer: /CN=98AA7A42F1AD88F64241535778555B0FE42637EA Certificate serial: 3D6E124E1CC2EE06FAB2977AA9FAA4F7F25D8B41 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft Manifest number: 9A Signing time: Wed 29 Jul 2026 04:43:26 +0000 Manifest this update: Wed 29 Jul 2026 04:38:26 +0000 Manifest next update: Thu 30 Jul 2026 08:37:26 +0000 Files and hashes: 1: 3130332e36302e3233302e302f32332d3233203d3e2030.roa (hash: Ue8/vIfgsSnN4LW/5kCPAbghCplvny1P0iX59/D578Q=) 2: 98AA7A42F1AD88F64241535778555B0FE42637EA.crl (hash: JPtyUKoyB46Ge7W+PG7hm4dMMXTiFdfiAUT95NONCW4=) 3: 3130332e36302e3232382e302f32332d3233203d3e2034383131.roa (hash: 7yZqchq5RQPFP43vKaHRYkjM76ohU/66SRSv6GUC4k0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:6e:12:4e:1c:c2:ee:06:fa:b2:97:7a:a9:fa:a4:f7:f2:5d:8b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98AA7A42F1AD88F64241535778555B0FE42637EA Validity Not Before: Jul 29 04:38:26 2026 GMT Not After : Jul 30 08:37:26 2026 GMT Subject: CN=FDAEEB060D750AFC39F774B6FAA36FB2C50064C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:96:67:f4:4f:af:cd:ab:57:55:38:81:7e:ee: 73:de:3a:b1:96:52:b7:ba:9b:77:a6:ab:ad:38:b7: 2b:1d:d2:64:f3:c1:0d:54:c2:ed:6e:09:db:56:de: 38:0d:77:87:d3:4b:dd:cc:14:33:3f:c4:94:74:2c: 3b:f5:0f:48:92:ae:24:39:80:57:23:02:6a:d4:b5: 4f:e9:e6:49:e9:5f:91:db:95:6d:f6:11:f2:f4:6b: 82:2d:b4:b2:05:92:3d:4e:4e:50:09:4f:c4:0b:59: e4:77:4a:ab:8f:67:c0:a9:25:e0:40:68:ad:88:45: 32:e5:14:65:cd:f5:8d:b9:84:a3:05:7f:76:40:6e: 91:72:bc:f5:d4:f8:4f:14:6a:c7:86:26:b4:45:6b: 04:e0:a0:73:89:d3:33:b7:27:5a:01:a2:2e:28:5a: b1:f7:00:4e:e4:ec:59:1e:03:16:6b:07:63:8e:b3: b8:ac:cb:89:88:01:0f:3b:62:da:97:16:28:4c:e4: 75:5d:e5:70:a4:d8:80:ee:b8:dc:ab:14:ae:0e:75: a1:1c:23:2c:29:a7:28:48:56:ff:09:ef:65:80:cf: 55:20:3e:68:bb:d7:5d:fb:d2:63:af:e1:de:e6:45: db:96:df:e1:0d:67:35:77:f1:77:50:cd:d4:2a:dd: f8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AE:EB:06:0D:75:0A:FC:39:F7:74:B6:FA:A3:6F:B2:C5:00:64:C0 X509v3 Authority Key Identifier: keyid:98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:bd:da:eb:60:74:f1:0f:1b:be:5e:87:ad:4c:10:e5:0b:20: f4:ee:75:61:51:ff:1a:08:f7:b8:1d:d8:df:bf:81:c0:83:3e: b5:51:57:25:5c:66:7f:9c:3d:28:04:1e:a0:82:59:11:aa:84: 11:7f:2d:d6:1a:4d:4d:c9:4a:61:b0:1f:50:1c:33:b5:8f:b5: 3b:df:99:43:92:22:73:7f:1a:72:78:a9:5a:77:58:e7:64:1e: 09:b0:c5:65:4b:fb:e8:79:b5:6d:54:3e:20:87:b6:13:37:e0: 43:be:9b:f0:5c:dc:b1:e6:96:6d:4b:5c:11:45:73:5f:95:28: 6b:63:ee:2c:b2:d1:bb:c9:08:c3:68:02:90:2c:a1:11:c1:96: 3a:73:61:5f:ce:0e:9d:6f:47:52:9f:74:42:12:1f:9c:1a:c8: 6e:39:4a:47:25:67:b5:df:a1:5d:c1:dd:02:8f:dc:4b:ab:83: 2d:4d:db:e3:a8:11:6d:0e:a9:65:35:30:42:fe:a3:5d:87:5d: b1:5c:ab:1a:9f:3d:6c:8d:e6:a4:1a:94:d6:a4:f9:36:3b:e8: 15:b3:35:8b:01:30:c6:c4:1a:c4:09:85:dd:7d:ea:05:67:e0: a1:e3:a8:b7:ff:7c:0b:75:2b:c1:29:5b:e4:bd:0c:cc:45:e4: e6:66:32:68 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPW4SThzC7gb6spd6qfqk9/Jdi0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZF NDI2MzdFQTAeFw0yNjA3MjkwNDM4MjZaFw0yNjA3MzAwODM3MjZaMDMxMTAvBgNV BAMTKEZEQUVFQjA2MEQ3NTBBRkMzOUY3NzRCNkZBQTM2RkIyQzUwMDY0QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDklmf0T6/Nq1dVOIF+7nPeOrGW Ure6m3emq604tysd0mTzwQ1Uwu1uCdtW3jgNd4fTS93MFDM/xJR0LDv1D0iSriQ5 gFcjAmrUtU/p5knpX5HblW32EfL0a4IttLIFkj1OTlAJT8QLWeR3SquPZ8CpJeBA aK2IRTLlFGXN9Y25hKMFf3ZAbpFyvPXU+E8UaseGJrRFawTgoHOJ0zO3J1oBoi4o WrH3AE7k7FkeAxZrB2OOs7isy4mIAQ87YtqXFihM5HVd5XCk2IDuuNyrFK4OdaEc IywppyhIVv8J72WAz1UgPmi711370mOv4d7mRduW3+ENZzV38XdQzdQq3fiPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/a7rBg11Cvw593S2+qNvssUAZMAwHwYDVR0j BBgwFoAUmKp6QvGtiPZCQVNXeFVbD+QmN+owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUyNzgxNTE5NTI5NTc0NS8wLzk4QUE3QTQyRjFBRDg4RjY0MjQxNTM1Nzc4NTU1 QjBGRTQyNjM3RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZFNDI2MzdFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1Mjc4MTUxOTUyOTU3NDUvMC85OEFBN0E0MkYxQUQ4 OEY2NDI0MTUzNTc3ODU1NUIwRkU0MjYzN0VBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnb3a62B08Q8b vl6HrUwQ5Qsg9O51YVH/Ggj3uB3Y37+BwIM+tVFXJVxmf5w9KAQeoIJZEaqEEX8t 1hpNTclKYbAfUBwztY+1O9+ZQ5Iic38acnipWndY52QeCbDFZUv76Hm1bVQ+IIe2 EzfgQ76b8FzcseaWbUtcEUVzX5Uoa2PuLLLRu8kIw2gCkCyhEcGWOnNhX84OnW9H Up90QhIfnBrIbjlKRyVntd+hXcHdAo/cS6uDLU3b46gRbQ6pZTUwQv6jXYddsVyr Gp89bI3mpBqU1qT5NjvoFbM1iwEwxsQaxAmF3X3qBWfgoeOot/98C3UrwSlb5L0M zEXk5mYyaA== -----END CERTIFICATE-----Generated at Wed Jul 29 09:54:49 2026 by rpki-client