$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft File: 98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft (raw, json) Hash identifier: ZfaI/rfnEVpTzmkLfMsQXhb/OG+4kcmb9+2r4tJdpio= Subject key identifier: A9:50:19:F7:C2:F7:B4:7E:EE:23:49:B4:6E:A3:CC:E9:D1:01:29:D3 Authority key identifier: 98:C4:7D:ED:77:AC:F5:B8:20:46:A5:1E:C3:8C:F9:EB:BF:9F:09:14 Certificate issuer: /CN=98C47DED77ACF5B82046A51EC38CF9EBBF9F0914 Certificate serial: 11D7A6C7169CAEA253F5422E54CE41EEBD3C9D0C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft Manifest number: 3C Signing time: Wed 29 Jul 2026 07:13:46 +0000 Manifest this update: Wed 29 Jul 2026 07:08:46 +0000 Manifest next update: Thu 30 Jul 2026 10:37:46 +0000 Files and hashes: 1: 98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.crl (hash: qrXJSAuI54k/dWtcOpbFfckBBEze9p+MgGFbS6unXoM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.crl rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 10:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:d7:a6:c7:16:9c:ae:a2:53:f5:42:2e:54:ce:41:ee:bd:3c:9d:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98C47DED77ACF5B82046A51EC38CF9EBBF9F0914 Validity Not Before: Jul 29 07:08:46 2026 GMT Not After : Jul 30 10:37:46 2026 GMT Subject: CN=A95019F7C2F7B47EEE2349B46EA3CCE9D10129D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7a:a6:f9:47:24:1c:4f:52:88:7b:23:34:93: 1e:9a:ed:9e:10:9d:fa:bb:78:75:49:47:37:dc:9a: ba:00:f5:9d:a4:24:92:e1:92:ec:63:87:ee:89:af: 31:09:8b:b0:6c:a8:9e:34:e9:8d:44:8c:04:69:d3: cc:68:02:d4:39:cd:40:86:4b:cc:c7:6b:14:7d:90: 17:22:a6:f4:40:2f:26:03:6d:25:7f:f3:41:8e:00: c4:58:a6:97:a7:5b:2f:71:3c:a5:3f:76:15:10:63: 07:53:73:a2:d2:ef:92:b4:fe:19:6c:5d:d1:e4:f7: 26:55:f8:7d:90:a3:d9:f9:e6:b5:89:6b:73:5f:6f: 47:03:93:7f:28:f6:89:64:57:3e:66:d1:e3:6e:20: 33:2d:01:9e:14:d1:17:fb:3b:f0:04:dc:93:30:7c: 8a:d4:23:f7:70:8d:e2:e6:28:46:ae:ea:a5:2c:e0: 20:17:06:65:2c:07:dd:df:55:27:14:11:b0:6e:9d: 64:31:9c:23:55:01:c9:8a:62:74:f2:a3:ae:a2:4b: fa:67:87:be:c1:86:42:db:ca:5a:aa:f3:ef:79:74: ff:9c:34:f1:ae:2e:24:05:a9:f7:66:a8:af:92:83: d8:1e:bd:96:bb:12:52:05:99:66:3d:7e:b2:56:5d: c6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:50:19:F7:C2:F7:B4:7E:EE:23:49:B4:6E:A3:CC:E9:D1:01:29:D3 X509v3 Authority Key Identifier: keyid:98:C4:7D:ED:77:AC:F5:B8:20:46:A5:1E:C3:8C:F9:EB:BF:9F:09:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:ca:b5:6f:35:87:c5:1c:7d:8a:5f:e4:ea:f1:bb:bb:ce:e0: 61:03:d2:fe:9e:90:60:31:b2:ca:1d:56:4c:8b:09:5e:34:02: 85:ae:16:f2:de:ca:09:5c:56:81:d7:67:fe:ee:a5:a8:6a:39: 97:2a:06:3a:53:09:a1:45:df:77:e4:3f:d1:7e:43:3b:8c:6d: 06:73:58:5e:29:d6:fc:01:55:a9:19:a1:52:9f:e3:5e:81:c4: c4:af:7a:3d:11:12:80:d8:36:17:15:2a:49:03:a6:f9:fe:e1: 97:b9:ff:81:01:6b:b8:36:30:c7:81:9b:ef:fa:9d:64:67:c1: 87:e9:5b:06:bf:b7:17:37:03:06:47:39:03:fe:b7:82:4d:38: 75:00:4a:21:3f:2a:9b:79:83:83:d6:77:5c:44:37:a4:5e:80: c9:ba:3c:d0:dc:72:57:4a:e7:a9:da:64:ac:1e:c2:44:75:22: 1c:c9:41:1a:fc:37:0f:49:ae:ac:64:77:a9:b8:89:6d:65:8b: 87:c3:70:7f:70:3b:9b:de:e1:63:7b:0f:70:29:f1:4a:29:5f: 9b:e6:cb:a3:9f:25:0d:03:a4:a8:30:52:42:2e:a1:d7:f8:37: 84:c1:de:48:a1:4d:7f:a8:31:fa:9d:b0:4b:41:f5:5e:3c:82: f7:cd:d1:9f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEdemxxacrqJT9UIuVM5B7r08nQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThDNDdERUQ3N0FDRjVCODIwNDZBNTFFQzM4Q0Y5RUJC RjlGMDkxNDAeFw0yNjA3MjkwNzA4NDZaFw0yNjA3MzAxMDM3NDZaMDMxMTAvBgNV BAMTKEE5NTAxOUY3QzJGN0I0N0VFRTIzNDlCNDZFQTNDQ0U5RDEwMTI5RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSeqb5RyQcT1KIeyM0kx6a7Z4Q nfq7eHVJRzfcmroA9Z2kJJLhkuxjh+6JrzEJi7BsqJ406Y1EjARp08xoAtQ5zUCG S8zHaxR9kBcipvRALyYDbSV/80GOAMRYppenWy9xPKU/dhUQYwdTc6LS75K0/hls XdHk9yZV+H2Qo9n55rWJa3Nfb0cDk38o9olkVz5m0eNuIDMtAZ4U0Rf7O/AE3JMw fIrUI/dwjeLmKEau6qUs4CAXBmUsB93fVScUEbBunWQxnCNVAcmKYnTyo66iS/pn h77BhkLbylqq8+95dP+cNPGuLiQFqfdmqK+Sg9gevZa7ElIFmWY9frJWXcZ9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqVAZ98L3tH7uI0m0bqPM6dEBKdMwHwYDVR0j BBgwFoAUmMR97Xes9bggRqUew4z567+fCRQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODcyNTUwNTk4MjM5ODQ5MS8wLzk4QzQ3REVENzdBQ0Y1QjgyMDQ2QTUxRUMzOENG OUVCQkY5RjA5MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOThDNDdERUQ3N0FDRjVCODIwNDZBNTFFQzM4Q0Y5RUJCRjlGMDkxNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTg3MjU1MDU5ODIzOTg0OTEvMC85OEM0N0RFRDc3QUNG NUI4MjA0NkE1MUVDMzhDRjlFQkJGOUYwOTE0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv8q1bzWHxRx9 il/k6vG7u87gYQPS/p6QYDGyyh1WTIsJXjQCha4W8t7KCVxWgddn/u6lqGo5lyoG OlMJoUXfd+Q/0X5DO4xtBnNYXinW/AFVqRmhUp/jXoHExK96PRESgNg2FxUqSQOm +f7hl7n/gQFruDYwx4Gb7/qdZGfBh+lbBr+3FzcDBkc5A/63gk04dQBKIT8qm3mD g9Z3XEQ3pF6Aybo80NxyV0rnqdpkrB7CRHUiHMlBGvw3D0murGR3qbiJbWWLh8Nw f3A7m97hY3sPcCnxSilfm+bLo58lDQOkqDBSQi6h1/g3hMHeSKFNf6gx+p2wS0H1 XjyC983Rnw== -----END CERTIFICATE-----Generated at Wed Jul 29 22:57:40 2026 by rpki-client