$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft File: 98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft (raw, json) Hash identifier: r2X6O/exJEZ1vFTwcyNKZzhmYzBG7nQUMSJHiSp6c7U= Subject key identifier: 33:8B:55:61:C0:C9:A5:6B:23:E1:DD:24:F9:8B:4E:C3:72:66:D5:3B Authority key identifier: 98:C4:7D:ED:77:AC:F5:B8:20:46:A5:1E:C3:8C:F9:EB:BF:9F:09:14 Certificate issuer: /CN=98C47DED77ACF5B82046A51EC38CF9EBBF9F0914 Certificate serial: 572EE5193CEAB09D6888AF181A24C0C6AAE7624B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft Manifest number: 7D Signing time: Sat 24 Oct 2026 05:36:15 +0000 Manifest this update: Sat 24 Oct 2026 05:31:15 +0000 Manifest next update: Tue 27 Oct 2026 15:38:15 +0000 Files and hashes: 1: 98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.crl (hash: OTNdFRwGISBVfKncLdt8sKm0VvjHDqYyN8xUF9TYo94=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.crl rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 15:38:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:2e:e5:19:3c:ea:b0:9d:68:88:af:18:1a:24:c0:c6:aa:e7:62:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98C47DED77ACF5B82046A51EC38CF9EBBF9F0914 Validity Not Before: Oct 24 05:31:15 2026 GMT Not After : Oct 27 15:38:15 2026 GMT Subject: CN=338B5561C0C9A56B23E1DD24F98B4EC37266D53B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b1:76:12:40:70:65:87:a8:90:68:f5:ce:7e: c7:1b:52:05:bb:db:4a:d1:33:78:4a:28:b2:3b:5f: 31:be:2e:37:53:8c:16:46:a5:68:f0:da:05:07:4a: f5:61:a4:05:5d:f0:13:55:bd:8a:0c:c2:3d:53:4a: bd:6d:91:08:3e:ea:0b:d7:68:b0:5f:2c:ab:01:70: b6:10:a1:b0:40:ef:3a:45:cc:0c:04:15:34:0a:56: 3f:55:31:25:60:25:b1:9c:01:b7:62:da:37:8e:fd: b7:ec:a3:db:6d:89:8c:79:06:16:ef:b7:09:16:87: 86:0c:34:d7:c8:c1:43:75:78:04:29:3f:06:ac:54: 0f:e0:a5:f3:8f:55:6a:5a:3e:3f:be:fe:f8:8b:2e: 90:2f:8c:23:82:9f:b9:90:59:2f:d9:67:bc:fa:f6: ae:a8:05:6b:72:c6:10:c6:33:4c:9d:c3:32:47:ee: c6:67:b4:a1:09:15:d1:33:8d:38:e0:85:9c:6d:11: 5c:db:de:2d:84:68:65:eb:6e:45:5b:74:82:c9:e9: f8:bd:00:e0:74:d6:6e:f0:9d:75:97:6a:e5:8a:e7: 0c:41:a9:cb:54:60:dc:7b:85:55:96:4b:41:6a:4b: 41:8a:1e:a7:26:53:af:c8:39:5d:12:02:60:5f:27: 07:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8B:55:61:C0:C9:A5:6B:23:E1:DD:24:F9:8B:4E:C3:72:66:D5:3B X509v3 Authority Key Identifier: keyid:98:C4:7D:ED:77:AC:F5:B8:20:46:A5:1E:C3:8C:F9:EB:BF:9F:09:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:72:8d:66:34:48:d0:79:11:64:54:cb:6a:af:8c:df:d4:93: 92:83:6c:de:04:70:d9:bb:fc:7d:cf:2d:93:4d:60:10:57:96: 52:0f:8b:44:df:b9:e6:7d:52:e9:88:80:45:b7:cc:5c:70:bb: cf:97:a0:92:1c:ab:83:20:33:e4:38:a8:f8:60:9c:87:46:5e: 5a:25:61:54:64:ab:2b:0c:aa:5b:7f:0e:b3:37:96:40:9b:6a: 4b:1f:ed:c7:34:ca:4d:88:d3:b5:d6:2f:11:ed:74:83:26:e9: ac:dc:e4:a7:4f:d4:1e:b2:ec:f4:09:87:99:21:ba:ec:12:a0: da:58:4e:f2:1f:28:78:cc:29:ca:32:65:77:e6:fa:a4:85:85: 7c:45:bf:20:15:73:bb:0d:e6:3d:c5:c7:cb:8e:3b:d2:ec:9c: 39:11:11:8c:19:76:e6:0a:49:a5:81:b0:7d:d9:90:09:50:65: 1a:8b:c9:a7:84:d3:e3:4d:cf:77:8a:a2:90:77:5a:0c:8d:45: f6:57:31:df:d8:75:85:6c:6b:85:2d:fd:b4:df:63:66:0b:56: dd:28:2e:87:d6:8d:3e:73:df:4f:15:82:00:14:63:f6:b6:95: b8:0a:65:59:d0:4b:f3:32:3c:b5:8e:ca:c4:60:1a:ce:34:35: c4:22:25:43 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVy7lGTzqsJ1oiK8YGiTAxqrnYkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThDNDdERUQ3N0FDRjVCODIwNDZBNTFFQzM4Q0Y5RUJC RjlGMDkxNDAeFw0yNjEwMjQwNTMxMTVaFw0yNjEwMjcxNTM4MTVaMDMxMTAvBgNV BAMTKDMzOEI1NTYxQzBDOUE1NkIyM0UxREQyNEY5OEI0RUMzNzI2NkQ1M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNsXYSQHBlh6iQaPXOfscbUgW7 20rRM3hKKLI7XzG+LjdTjBZGpWjw2gUHSvVhpAVd8BNVvYoMwj1TSr1tkQg+6gvX aLBfLKsBcLYQobBA7zpFzAwEFTQKVj9VMSVgJbGcAbdi2jeO/bfso9ttiYx5Bhbv twkWh4YMNNfIwUN1eAQpPwasVA/gpfOPVWpaPj++/viLLpAvjCOCn7mQWS/ZZ7z6 9q6oBWtyxhDGM0ydwzJH7sZntKEJFdEzjTjghZxtEVzb3i2EaGXrbkVbdILJ6fi9 AOB01m7wnXWXauWK5wxBqctUYNx7hVWWS0FqS0GKHqcmU6/IOV0SAmBfJwczAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUM4tVYcDJpWsj4d0k+YtOw3Jm1TswHwYDVR0j BBgwFoAUmMR97Xes9bggRqUew4z567+fCRQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODcyNTUwNTk4MjM5ODQ5MS8wLzk4QzQ3REVENzdBQ0Y1QjgyMDQ2QTUxRUMzOENG OUVCQkY5RjA5MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOThDNDdERUQ3N0FDRjVCODIwNDZBNTFFQzM4Q0Y5RUJCRjlGMDkxNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTg3MjU1MDU5ODIzOTg0OTEvMC85OEM0N0RFRDc3QUNG NUI4MjA0NkE1MUVDMzhDRjlFQkJGOUYwOTE0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnKNZjRI0HkR ZFTLaq+M39STkoNs3gRw2bv8fc8tk01gEFeWUg+LRN+55n1S6YiARbfMXHC7z5eg khyrgyAz5Dio+GCch0ZeWiVhVGSrKwyqW38OszeWQJtqSx/txzTKTYjTtdYvEe10 gybprNzkp0/UHrLs9AmHmSG67BKg2lhO8h8oeMwpyjJld+b6pIWFfEW/IBVzuw3m PcXHy4470uycORERjBl25gpJpYGwfdmQCVBlGovJp4TT403Pd4qikHdaDI1F9lcx 39h1hWxrhS39tN9jZgtW3Sguh9aNPnPfTxWCABRj9raVuAplWdBL8zI8tY7KxGAa zjQ1xCIlQw== -----END CERTIFICATE-----Generated at Mon Oct 26 07:27:08 2026 by rpki-client