$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft File: 098D421CB46F292F13CE71DF3D685D5E82893289.mft (raw, json) Hash identifier: QkOU2DnbXJ1WDZO8HiaS9CE1nBwKPH1Kk4VFb5mr2sA= Subject key identifier: C3:D3:A8:77:45:83:6E:82:7F:50:A5:2C:71:C0:54:C4:13:07:6E:B3 Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289 Certificate serial: 2B14D21FFD79CCE42A20688A1659FEE653B9BC41 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft Manifest number: 58 Signing time: Thu 26 Mar 2026 06:03:28 +0000 Manifest this update: Thu 26 Mar 2026 05:58:28 +0000 Manifest next update: Fri 27 Mar 2026 09:35:28 +0000 Files and hashes: 1: 098D421CB46F292F13CE71DF3D685D5E82893289.crl (hash: duoGJcR1WBZoI+liuEIf+s5J1eQVytbkfwzZuuPyf8g=) 2: 3131382e3139342e35392e302f32342d3234203d3e203633353636.roa (hash: Si5VCZPqJR4AtJTNpPyk8CpFW/h/ob/tIo3FuK/Kt9M=) 3: 3132322e31312e302e302f31392d3139203d3e203633353636.roa (hash: WA5zg0AZiOq5/XX/UbhAjR810o8hOdpxMzpDns/KOgQ=) 4: 3130332e3235322e3234382e302f32342d3234203d3e203633353636.roa (hash: 4DEH4Fk4BDxr9Vha6E1J1M4/mfTr2k2F+9iMhfx9RXE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 09:35:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:14:d2:1f:fd:79:cc:e4:2a:20:68:8a:16:59:fe:e6:53:b9:bc:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289 Validity Not Before: Mar 26 05:58:28 2026 GMT Not After : Mar 27 09:35:28 2026 GMT Subject: CN=C3D3A87745836E827F50A52C71C054C413076EB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:82:9e:cf:ec:99:8f:e2:01:5d:bb:b7:6b:83: 64:ce:c3:10:78:63:aa:e4:7d:c2:90:78:e4:18:0b: 21:dc:a1:e3:87:5b:05:76:b7:ce:ec:71:f6:d1:93: da:05:a1:df:72:cb:d7:83:dd:83:34:a0:27:e4:7b: 44:61:a7:9b:17:cf:80:9c:06:7e:da:5a:83:12:48: d5:9b:eb:2a:99:29:bd:42:fd:45:72:20:2b:25:a7: 89:20:61:83:d4:79:a6:d5:81:3b:0f:7e:48:7b:87: 8a:37:3d:b0:bc:4d:c3:10:a1:76:1b:28:47:a1:dc: df:31:8c:47:90:c7:b8:75:52:88:2c:f6:81:dc:84: 64:af:48:73:8c:9c:82:d0:98:3c:d9:fd:c5:19:98: 33:e2:9d:82:c1:48:2a:40:15:10:c7:9e:a6:2f:ea: a2:56:8b:9c:14:24:83:d3:c8:14:b0:4b:90:d2:27: 6e:6e:86:e1:5d:15:ab:2a:2b:99:fd:8c:88:24:d7: 89:7f:f1:9b:50:77:05:c7:0a:5b:dd:6b:db:d7:d0: f7:fe:84:92:96:36:d8:cb:b0:61:89:59:b2:5f:8d: 2b:5f:e1:b1:b9:42:2a:d1:3d:94:95:bc:43:ca:c2: c4:56:34:06:76:05:80:07:46:3c:b8:ec:1a:66:31: 12:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D3:A8:77:45:83:6E:82:7F:50:A5:2C:71:C0:54:C4:13:07:6E:B3 X509v3 Authority Key Identifier: keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:bd:78:6e:f3:2a:92:ac:a0:b2:95:83:17:2d:3f:bd:50:72: 3f:40:58:44:7c:1a:0d:5f:17:d1:26:4e:82:61:ce:44:b6:55: 4b:e8:54:91:8f:42:af:e8:f7:9a:3a:93:88:eb:12:0f:83:bc: 10:f7:f6:ba:b6:37:6d:e6:03:06:1a:63:36:cb:c2:11:c8:73: 1e:a7:f1:76:2a:2e:83:13:b1:e1:e7:d9:7c:f2:78:4d:de:b5: cb:1f:9b:59:b4:74:2c:ac:68:9c:41:f1:7c:45:24:5f:3c:19: 4e:93:a0:d8:2c:ba:3f:5e:12:ae:82:ae:18:a8:87:a1:a3:0d: 30:5b:58:7f:7d:52:a5:ad:09:80:b5:7a:97:62:6b:49:b5:93: 26:40:fe:d5:67:32:c9:3d:64:57:ea:2c:aa:cb:f1:90:54:17: aa:76:60:4e:96:8a:d9:8b:12:e8:1d:f0:0c:d2:0a:7d:5c:e7: 47:df:f3:92:17:6e:a7:c0:5b:19:99:14:21:bc:3f:40:ae:d9: c8:2c:2e:55:78:63:ac:5e:4d:c2:bf:a2:96:b9:07:4e:9f:f7: bf:13:d5:ec:40:56:60:52:89:6c:08:c5:38:68:1c:ea:fa:1d: a4:17:d6:07:13:0e:d6:2d:2d:ca:6c:92:7a:3b:81:e7:6c:22: 87:9c:e5:4a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKxTSH/15zOQqIGiKFln+5lO5vEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4 Mjg5MzI4OTAeFw0yNjAzMjYwNTU4MjhaFw0yNjAzMjcwOTM1MjhaMDMxMTAvBgNV BAMTKEMzRDNBODc3NDU4MzZFODI3RjUwQTUyQzcxQzA1NEM0MTMwNzZFQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUgp7P7JmP4gFdu7drg2TOwxB4 Y6rkfcKQeOQYCyHcoeOHWwV2t87scfbRk9oFod9yy9eD3YM0oCfke0Rhp5sXz4Cc Bn7aWoMSSNWb6yqZKb1C/UVyICslp4kgYYPUeabVgTsPfkh7h4o3PbC8TcMQoXYb KEeh3N8xjEeQx7h1Uogs9oHchGSvSHOMnILQmDzZ/cUZmDPinYLBSCpAFRDHnqYv 6qJWi5wUJIPTyBSwS5DSJ25uhuFdFasqK5n9jIgk14l/8ZtQdwXHClvda9vX0Pf+ hJKWNtjLsGGJWbJfjStf4bG5QirRPZSVvEPKwsRWNAZ2BYAHRjy47BpmMRLDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUw9Ood0WDboJ/UKUsccBUxBMHbrMwHwYDVR0j BBgwFoAUCY1CHLRvKS8TznHfPWhdXoKJMokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzY2MjQ2Ni8wLzA5OEQ0MjFDQjQ2RjI5MkYxM0NFNzFERjNENjg1 RDVFODI4OTMyODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4Mjg5MzI4OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc2NjI0NjYvMC8wOThENDIxQ0I0NkYy OTJGMTNDRTcxREYzRDY4NUQ1RTgyODkzMjg5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqr14bvMqkqyg spWDFy0/vVByP0BYRHwaDV8X0SZOgmHORLZVS+hUkY9Cr+j3mjqTiOsSD4O8EPf2 urY3beYDBhpjNsvCEchzHqfxdiougxOx4efZfPJ4Td61yx+bWbR0LKxonEHxfEUk XzwZTpOg2Cy6P14SroKuGKiHoaMNMFtYf31Spa0JgLV6l2JrSbWTJkD+1WcyyT1k V+osqsvxkFQXqnZgTpaK2YsS6B3wDNIKfVznR9/zkhdup8BbGZkUIbw/QK7ZyCwu VXhjrF5Nwr+ilrkHTp/3vxPV7EBWYFKJbAjFOGgc6vodpBfWBxMO1i0tymySejuB 52wih5zlSg== -----END CERTIFICATE-----Generated at Fri Mar 27 02:08:20 2026 by rpki-client