$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft File: 98AA7A42F1AD88F64241535778555B0FE42637EA.mft (raw, json) Hash identifier: pg8yfKANKMGXJlde6clQWsZNrA+s4LCxGHPvwg5qig0= Subject key identifier: 2B:A8:B1:2D:BF:46:18:10:6F:14:17:7D:39:F1:9F:BC:EF:9C:8B:75 Authority key identifier: 98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA Certificate issuer: /CN=98AA7A42F1AD88F64241535778555B0FE42637EA Certificate serial: 72AB23B42A3207715A0A06017CF0429EF2EC1052 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft Manifest number: D6 Signing time: Mon 12 Oct 2026 01:01:17 +0000 Manifest this update: Mon 12 Oct 2026 00:56:17 +0000 Manifest next update: Thu 15 Oct 2026 01:24:17 +0000 Files and hashes: 1: 98AA7A42F1AD88F64241535778555B0FE42637EA.crl (hash: Yzs0KoH5zycDrck35z9zqMBBZZAbZiGXecwB/gCb8IE=) 2: 3130332e36302e3232382e302f32332d3233203d3e2034383131.roa (hash: 7yZqchq5RQPFP43vKaHRYkjM76ohU/66SRSv6GUC4k0=) 3: 3130332e36302e3233302e302f32332d3233203d3e2030.roa (hash: Ue8/vIfgsSnN4LW/5kCPAbghCplvny1P0iX59/D578Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ab:23:b4:2a:32:07:71:5a:0a:06:01:7c:f0:42:9e:f2:ec:10:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98AA7A42F1AD88F64241535778555B0FE42637EA Validity Not Before: Oct 12 00:56:17 2026 GMT Not After : Oct 15 01:24:17 2026 GMT Subject: CN=2BA8B12DBF4618106F14177D39F19FBCEF9C8B75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c4:f0:75:3a:38:ba:34:b3:3b:36:3c:37:f0: ea:56:fc:cf:3a:80:e9:dc:6a:aa:b2:dd:46:e4:56: 42:07:15:36:38:4f:21:ff:d0:20:bb:58:83:e3:5b: ac:71:d8:72:87:17:5c:fa:cd:38:1b:09:ed:b9:00: 16:3b:37:dd:fd:12:42:a8:fc:24:de:f8:c5:fd:1e: 53:b4:f5:a7:e9:93:05:de:6c:4f:9e:f8:c2:80:21: 6d:af:57:1b:e9:7f:13:cb:9f:e8:36:cd:62:c8:a8: a1:18:ea:72:55:5b:37:94:c1:49:83:28:87:53:22: 0f:52:14:6e:b5:cf:b8:8e:9a:62:a6:11:14:13:b7: e6:14:0f:26:d4:38:8e:38:d9:4d:4d:91:91:27:05: b6:ba:5b:7b:e9:26:fd:75:49:83:92:3d:ab:55:cf: dd:05:df:c2:6b:28:cb:d9:f6:f5:04:77:bf:67:3d: 04:cd:74:68:c7:f0:07:e2:5b:5f:05:67:c0:34:d9: d4:cf:49:46:a0:9d:fc:8e:52:5c:58:5b:e1:93:de: f2:92:5d:f7:16:52:fe:12:10:2c:13:d1:50:bb:8c: a9:6c:28:0b:70:83:9d:ef:66:6d:81:a1:f2:4b:9a: a3:c9:a4:47:6f:20:07:0f:7c:7e:6e:f2:69:9c:f3: c3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A8:B1:2D:BF:46:18:10:6F:14:17:7D:39:F1:9F:BC:EF:9C:8B:75 X509v3 Authority Key Identifier: keyid:98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:38:60:80:a1:c5:86:c6:de:9c:f8:28:52:4b:3d:e9:4e:90: 8e:98:1f:b2:2e:a8:a0:10:5a:b1:fb:3b:f8:67:75:24:c4:74: 36:1e:12:6f:f8:63:f4:31:05:51:e1:d2:21:93:5c:e4:d6:0d: 5b:3b:5d:9a:83:84:cc:dc:be:b0:4f:20:de:ad:1c:bc:63:5e: 61:ad:40:73:bb:b8:80:ef:6c:86:9c:aa:6c:41:bb:cb:ca:8e: c5:2f:86:2d:27:77:c4:36:61:dc:6b:2a:52:e0:3d:d5:0c:8c: 7d:c1:28:95:93:d4:19:27:4f:33:0f:af:16:52:67:66:48:95: ee:f8:78:b8:e3:21:f6:ce:51:3e:08:ef:c1:86:a2:88:23:7d: db:87:8d:51:69:e7:28:e2:e5:40:22:4a:5f:35:af:e8:df:09: cd:d7:29:3b:96:ef:3a:15:3e:31:37:c0:34:03:d4:36:7f:ba: 92:3f:08:56:29:e2:0a:57:8e:26:c3:5a:15:bf:c7:2f:a3:b5: 95:cc:be:e7:59:30:37:be:62:6b:37:52:10:4a:9b:e4:10:68: 12:d8:c7:fe:18:9f:da:e3:9c:cf:6c:61:46:97:2a:60:6d:13: 40:49:be:e3:dd:e7:0f:18:55:d8:c7:46:aa:e2:65:35:f7:1f: d1:f5:9e:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcqsjtCoyB3FaCgYBfPBCnvLsEFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZF NDI2MzdFQTAeFw0yNjEwMTIwMDU2MTdaFw0yNjEwMTUwMTI0MTdaMDMxMTAvBgNV BAMTKDJCQThCMTJEQkY0NjE4MTA2RjE0MTc3RDM5RjE5RkJDRUY5QzhCNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1xPB1Oji6NLM7Njw38OpW/M86 gOncaqqy3UbkVkIHFTY4TyH/0CC7WIPjW6xx2HKHF1z6zTgbCe25ABY7N939EkKo /CTe+MX9HlO09afpkwXebE+e+MKAIW2vVxvpfxPLn+g2zWLIqKEY6nJVWzeUwUmD KIdTIg9SFG61z7iOmmKmERQTt+YUDybUOI442U1NkZEnBba6W3vpJv11SYOSPatV z90F38JrKMvZ9vUEd79nPQTNdGjH8AfiW18FZ8A02dTPSUagnfyOUlxYW+GT3vKS XfcWUv4SECwT0VC7jKlsKAtwg53vZm2BofJLmqPJpEdvIAcPfH5u8mmc88OHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUK6ixLb9GGBBvFBd9OfGfvO+ci3UwHwYDVR0j BBgwFoAUmKp6QvGtiPZCQVNXeFVbD+QmN+owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUyNzgxNTE5NTI5NTc0NS8wLzk4QUE3QTQyRjFBRDg4RjY0MjQxNTM1Nzc4NTU1 QjBGRTQyNjM3RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZFNDI2MzdFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1Mjc4MTUxOTUyOTU3NDUvMC85OEFBN0E0MkYxQUQ4 OEY2NDI0MTUzNTc3ODU1NUIwRkU0MjYzN0VBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADhggKHFhsbe nPgoUks96U6Qjpgfsi6ooBBasfs7+Gd1JMR0Nh4Sb/hj9DEFUeHSIZNc5NYNWztd moOEzNy+sE8g3q0cvGNeYa1Ac7u4gO9shpyqbEG7y8qOxS+GLSd3xDZh3GsqUuA9 1QyMfcEolZPUGSdPMw+vFlJnZkiV7vh4uOMh9s5RPgjvwYaiiCN924eNUWnnKOLl QCJKXzWv6N8JzdcpO5bvOhU+MTfANAPUNn+6kj8IViniCleOJsNaFb/HL6O1lcy+ 51kwN75iazdSEEqb5BBoEtjH/hif2uOcz2xhRpcqYG0TQEm+493nDxhV2MdGquJl Nfcf0fWeMQ== -----END CERTIFICATE-----Generated at Tue Oct 13 04:48:51 2026 by rpki-client