
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
File: 098D421CB46F292F13CE71DF3D685D5E82893289.mft (raw, json)
Hash identifier: Gc5wPSWpXJyiObekhZGKHieD5JkqmoTYZ8sMAOZzjY8=
Subject key identifier: 78:00:3F:DB:06:C0:DB:FE:D8:C3:B7:8E:0A:8A:66:E4:8D:0F:EA:E5
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial: 0A926151DEFB93B484509D49E08CDC79572586FF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
Manifest number: 98
Signing time: Wed 13 May 2026 11:21:04 +0000
Manifest this update: Wed 13 May 2026 11:16:04 +0000
Manifest next update: Thu 14 May 2026 14:20:04 +0000
Files and hashes: 1: 3130332e3235322e3234382e302f32342d3234203d3e203633353636.roa (hash: 4DEH4Fk4BDxr9Vha6E1J1M4/mfTr2k2F+9iMhfx9RXE=)
2: 098D421CB46F292F13CE71DF3D685D5E82893289.crl (hash: /BXpXiEjWG4PfcknULokryB9ZMKVHchr9gXRcojn4Dk=)
3: 3131382e3139342e35392e302f32342d3234203d3e203633353636.roa (hash: Si5VCZPqJR4AtJTNpPyk8CpFW/h/ob/tIo3FuK/Kt9M=)
4: 3132322e31312e302e302f31392d3139203d3e203633353636.roa (hash: WA5zg0AZiOq5/XX/UbhAjR810o8hOdpxMzpDns/KOgQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:92:61:51:de:fb:93:b4:84:50:9d:49:e0:8c:dc:79:57:25:86:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
Validity
Not Before: May 13 11:16:04 2026 GMT
Not After : May 14 14:20:04 2026 GMT
Subject: CN=78003FDB06C0DBFED8C3B78E0A8A66E48D0FEAE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:24:1f:35:bd:41:8a:4d:95:08:bf:3a:9d:a3:
22:1c:c4:51:d3:85:0e:c2:cf:d8:27:ca:1a:b4:17:
e1:d9:c3:b1:c5:5c:d2:f1:e2:2d:fd:a4:58:6e:d7:
ae:73:1f:e8:5a:f2:87:5f:42:fb:9f:32:39:15:2f:
9f:13:35:7f:e0:fd:04:de:75:77:7a:33:c4:1f:60:
a2:2e:8b:7a:58:01:15:91:d2:16:c2:5f:97:07:3e:
d8:b3:29:cb:f1:d8:2b:72:f8:59:ee:71:d4:97:fa:
26:6d:b1:9d:77:2e:e2:f1:64:84:23:63:cb:df:9e:
18:3c:33:b7:14:e1:39:a8:b7:15:05:d1:9b:fd:66:
73:cd:24:9a:ac:a8:5d:8c:c8:30:73:13:56:09:bf:
58:90:e7:a0:e2:d7:db:34:d7:29:5d:5f:b8:b2:dc:
da:ca:8b:5e:06:b2:6c:aa:99:c7:54:fb:2c:c5:5b:
a6:cf:73:58:75:0d:33:27:05:0d:f7:61:94:a6:01:
4b:13:9c:91:9e:bb:06:85:f8:70:23:fe:f8:63:ff:
95:f8:10:1d:2e:8d:2d:10:bf:72:e9:5d:5f:d9:fa:
a7:0d:e0:63:2f:89:5c:13:2b:ef:1e:1e:0a:a9:08:
db:17:78:f9:e4:f7:c6:8a:eb:b0:e1:4b:6e:d3:bf:
ff:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:00:3F:DB:06:C0:DB:FE:D8:C3:B7:8E:0A:8A:66:E4:8D:0F:EA:E5
X509v3 Authority Key Identifier:
keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:0b:71:5f:da:41:e9:41:9e:7f:e9:ce:e1:a9:2b:38:8c:7c:
74:82:09:86:61:e8:3e:3e:85:68:ed:c1:7e:5f:60:e8:8a:cb:
5d:0a:1b:c8:73:c3:7d:01:c4:0a:89:89:27:63:af:04:dd:ea:
2c:39:15:37:03:eb:41:f3:7e:bd:e7:e4:83:fc:3c:23:18:39:
e1:20:fa:f6:33:7e:ce:e8:47:2b:43:d8:e0:96:bf:c6:ad:5d:
3d:8a:ac:53:b5:05:5c:b3:fd:1b:ef:87:55:14:29:dd:3c:c4:
55:ae:60:f0:38:48:5a:89:e1:43:d7:32:2b:e2:c3:1f:f9:ba:
86:d4:4c:d3:05:f4:46:88:64:44:20:27:95:93:d2:f6:bc:60:
cb:db:d5:59:5b:23:55:f5:81:b1:af:97:df:23:e5:d3:e9:40:
1d:5f:bf:f5:66:73:5e:85:d9:11:a7:57:18:4f:6d:88:be:d3:
8b:60:43:20:53:5f:8c:30:4c:dc:58:33:da:49:86:fe:ec:38:
d3:2a:44:78:ea:60:27:15:d3:c2:ec:88:18:bd:71:49:46:cd:
b1:96:5c:84:7f:66:bf:ed:3b:f8:2d:36:dc:19:bc:09:f4:c0:
4c:1a:4a:1e:84:29:46:ed:e4:a5:cb:f5:96:bf:b6:e1:7b:c7:
3b:04:57:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:20:43 2026 by rpki-client