
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft
File: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft (raw, json)
Hash identifier: AdFh+1CNzKqKAJzJ/Zc3z99TFh9F7LaN5U/WlVdRMSA=
Subject key identifier: 17:8B:5E:BC:9E:B6:2A:A8:85:FC:1B:90:74:B2:3B:50:FE:B2:F8:C3
Authority key identifier: 98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01
Certificate issuer: /CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601
Certificate serial: 1F99C54082584EC2EDBAF81FEB2F34FDEAE94F41
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft
Manifest number: 0145
Signing time: Fri 24 Jul 2026 03:40:16 +0000
Manifest this update: Fri 24 Jul 2026 03:35:16 +0000
Manifest next update: Sat 25 Jul 2026 03:53:16 +0000
Files and hashes: 1: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl (hash: zuslYWGBJT1sjgUNkXt3AgFEejm0aygIXRY6u0qjZCo=)
2: 3137302e3137392e302e302f31362d3234203d3e20313331343836.roa (hash: qat1H617QJwQjY8jG6LbfzleO4RxVlthXXvF9jpIwLY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl
rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:99:c5:40:82:58:4e:c2:ed:ba:f8:1f:eb:2f:34:fd:ea:e9:4f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601
Validity
Not Before: Jul 24 03:35:16 2026 GMT
Not After : Jul 25 03:53:16 2026 GMT
Subject: CN=178B5EBC9EB62AA885FC1B9074B23B50FEB2F8C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:7b:18:8b:fd:ca:b3:b3:64:b6:ae:70:08:
3a:9f:2c:cb:97:16:e1:6a:e9:fd:24:97:d1:db:d7:
28:06:fa:9f:6e:5f:15:15:69:18:a1:71:63:71:40:
60:fe:db:e2:d4:d2:72:26:45:cc:ee:de:ff:a7:49:
9d:c1:33:ee:d8:ca:cd:01:60:9c:04:b1:d6:94:9e:
dd:ac:07:d7:f2:89:76:b4:02:49:8e:94:2f:b2:84:
49:48:4b:94:83:7a:ff:ee:e4:fa:21:23:59:8e:bf:
5a:30:87:d1:63:5b:db:09:57:5a:9a:de:b9:5a:56:
bb:63:59:88:cc:5a:b8:f8:26:4e:a7:5a:f1:05:b2:
10:05:40:bc:7f:21:fc:26:27:c8:39:d7:2f:ac:9b:
39:0f:2d:51:5a:f8:06:cb:c8:95:7c:d9:43:f2:82:
45:ba:10:59:9b:12:5b:93:80:77:5a:5a:66:06:b2:
f1:90:27:ff:b4:11:48:e8:31:9a:0a:f6:5b:71:9f:
e5:e3:5b:ef:a6:3d:49:f9:27:53:e7:bf:e2:ef:a8:
e7:57:34:0b:25:d3:77:f7:73:bf:11:2e:17:fa:85:
83:28:58:6a:64:80:97:6d:f8:1e:86:1b:82:28:ce:
a0:2a:f4:22:ea:20:6b:33:32:72:69:39:58:f1:88:
3f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8B:5E:BC:9E:B6:2A:A8:85:FC:1B:90:74:B2:3B:50:FE:B2:F8:C3
X509v3 Authority Key Identifier:
keyid:98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4c:5a:6b:27:2c:ea:0c:d0:3a:e0:a3:73:cf:03:74:cb:aa:
f2:4c:4c:53:03:d6:f7:24:37:61:2e:d6:b3:92:c3:9f:f9:b4:
95:a0:e8:72:63:f8:0f:b3:7c:31:f6:73:fb:55:4f:7d:9c:89:
de:71:1c:3b:23:c4:ef:ef:4a:aa:8c:f4:29:f7:59:50:a1:86:
0f:6b:ed:34:da:07:ae:ed:3b:0d:e6:93:be:ae:e4:1a:39:23:
57:e7:87:ef:fe:e0:1a:36:33:37:da:1e:3c:9e:39:94:9b:6c:
4f:ab:41:de:03:57:a2:18:66:ac:c1:bd:6b:d3:8e:33:c3:4d:
8d:83:e4:3a:67:6a:16:c8:9d:02:82:42:d4:66:d6:53:50:ca:
3e:b4:b3:25:fc:35:86:ef:d2:94:72:11:4a:45:39:c4:4d:b4:
06:13:81:cd:2f:46:5e:ea:bb:dc:ae:19:2f:9f:60:36:01:bf:
d3:0a:18:56:ca:1f:07:0e:0d:d4:78:2d:5e:a0:69:c4:93:3d:
d5:19:75:2a:00:59:79:ae:21:96:00:90:e4:99:da:2c:bf:84:
f7:9b:37:ef:36:b2:1c:f3:db:a1:3d:e1:b9:9c:f4:48:5c:0e:
0a:54:5f:5c:c1:7d:c0:29:7a:21:0e:a0:e9:0d:5b:54:fb:cb:
cd:21:55:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:43:59 2026 by rpki-client