$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft File: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft (raw, json) Hash identifier: 4MXDyDbvk76IsMwuOjTRHsa5fMGIaF6O8VN9H6CyVE8= Subject key identifier: AB:7A:B8:D1:9C:10:83:D8:4F:B2:DD:E4:F9:58:F7:9A:6D:85:16:B8 Authority key identifier: 98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 Certificate issuer: /CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601 Certificate serial: 2C44B83690A40AB111B731D5DE1A51F3C6224175 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft Manifest number: E6 Signing time: Wed 13 May 2026 02:30:53 +0000 Manifest this update: Wed 13 May 2026 02:25:53 +0000 Manifest next update: Thu 14 May 2026 03:08:53 +0000 Files and hashes: 1: 3137302e3137392e302e302f31362d3234203d3e20313331343836.roa (hash: qat1H617QJwQjY8jG6LbfzleO4RxVlthXXvF9jpIwLY=) 2: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl (hash: bdyZwzAIpEpz+OtM0qdC63yABYx54DbBugaDY9Y7/D0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:08:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:44:b8:36:90:a4:0a:b1:11:b7:31:d5:de:1a:51:f3:c6:22:41:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601 Validity Not Before: May 13 02:25:53 2026 GMT Not After : May 14 03:08:53 2026 GMT Subject: CN=AB7AB8D19C1083D84FB2DDE4F958F79A6D8516B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b4:bd:48:54:f2:2f:03:03:b1:6d:2b:af:40: 4e:18:a6:9c:26:4c:4e:66:d3:5f:5f:44:47:83:d5: 11:56:b4:f2:b2:e7:05:aa:52:43:96:29:6d:57:09: 27:af:c6:62:c2:a4:1b:6a:54:59:e9:fc:7e:d9:6d: 8d:d7:91:8b:52:2a:10:58:46:b8:b8:16:d5:6c:29: e0:97:ce:3b:34:ca:3f:af:34:07:e9:2b:88:3f:cb: 01:0e:2f:21:a0:d5:d4:f9:58:10:db:94:d0:9b:29: b1:fb:6d:f9:65:b6:c1:ad:23:65:20:c1:c5:c9:52: a2:af:8f:db:69:09:02:d7:d9:f5:d4:19:81:45:ac: 89:13:c0:5f:d8:e1:d0:6a:1f:20:db:cc:24:4c:12: e0:93:6b:de:49:39:40:35:1f:e5:13:aa:f6:af:40: f9:3e:23:1c:5e:9e:0a:b0:46:fe:9e:14:c6:ac:fe: f5:2a:39:6c:ce:28:b4:5f:7b:21:c4:9f:a9:04:17: 13:df:1d:63:c2:f0:dc:ab:71:33:ef:a0:31:68:4c: 69:18:7b:f6:1f:55:21:2c:c8:8b:40:6e:4b:9c:e6: 45:e6:cd:fb:dd:09:c2:7e:12:67:7e:06:22:81:66: c7:00:7f:6c:55:f7:0c:6e:87:10:d9:fb:50:44:93: 6b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7A:B8:D1:9C:10:83:D8:4F:B2:DD:E4:F9:58:F7:9A:6D:85:16:B8 X509v3 Authority Key Identifier: keyid:98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:5f:f0:a8:3b:08:38:e6:be:c5:83:e3:d5:ea:ad:01:9b:55: 6b:1d:44:1a:63:86:0e:fc:e5:b3:b5:cd:7d:cf:8f:7d:a9:64: 91:21:15:54:22:c1:90:9d:a5:e0:a3:a4:a8:7c:f7:58:db:64: fb:15:5e:bd:07:27:79:05:cc:2b:26:5e:04:6c:44:64:62:a1: 31:9a:43:bd:4b:ea:72:9b:a4:18:9a:a8:35:ea:9a:eb:56:fb: 83:27:20:a2:fe:60:94:00:26:4c:b7:f0:9e:61:a4:b2:4d:30: 29:ba:b4:21:5d:ef:b6:b1:ee:a3:1b:0a:dd:cf:5b:b7:8e:2c: 56:a5:b9:d0:54:24:f9:29:3c:89:dc:6e:40:86:9d:6a:7f:58: ff:c8:32:1a:55:15:80:8f:6e:da:8b:69:9c:1d:a1:ab:4c:6b: f5:02:d8:61:9f:22:4d:54:7b:a1:8e:6d:d8:1a:af:e9:00:f0: 79:e9:4a:f3:25:f6:5a:a2:bd:58:9f:85:41:83:c7:dc:c7:3e: 2e:30:5c:f3:14:80:69:e9:c8:f6:79:e4:a2:18:3b:f6:3f:f8: f1:de:a2:d1:a9:5e:3f:31:95:a6:ca:cb:e2:fb:97:33:94:20: 37:85:71:c1:af:50:1e:34:92:d1:0f:9f:a1:7b:59:e4:98:de: 4e:17:94:ff -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULES4NpCkCrERtzHV3hpR88YiQXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgzMTlBM0JDOEY4Q0ZENEZCQjM4QzczMURCRkVDMTBB QzA1MzYwMTAeFw0yNjA1MTMwMjI1NTNaFw0yNjA1MTQwMzA4NTNaMDMxMTAvBgNV BAMTKEFCN0FCOEQxOUMxMDgzRDg0RkIyRERFNEY5NThGNzlBNkQ4NTE2QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbtL1IVPIvAwOxbSuvQE4Yppwm TE5m019fREeD1RFWtPKy5wWqUkOWKW1XCSevxmLCpBtqVFnp/H7ZbY3XkYtSKhBY Rri4FtVsKeCXzjs0yj+vNAfpK4g/ywEOLyGg1dT5WBDblNCbKbH7bflltsGtI2Ug wcXJUqKvj9tpCQLX2fXUGYFFrIkTwF/Y4dBqHyDbzCRMEuCTa95JOUA1H+UTqvav QPk+IxxengqwRv6eFMas/vUqOWzOKLRfeyHEn6kEFxPfHWPC8NyrcTPvoDFoTGkY e/YfVSEsyItAbkuc5kXmzfvdCcJ+Emd+BiKBZscAf2xV9wxuhxDZ+1BEk2v5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUq3q40ZwQg9hPst3k+Vj3mm2FFrgwHwYDVR0j BBgwFoAUmDGaO8j4z9T7s4xzHb/sEKwFNgEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8xLzk4MzE5QTNCQzhGOENGRDRGQkIzOEM3MzFEQkZF QzEwQUMwNTM2MDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOTgzMTlBM0JDOEY4Q0ZENEZCQjM4QzczMURCRkVDMTBBQzA1MzYwMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjgzNjM1OTk3OTA5OTc1MDYvMS85ODMxOUEzQkM4RjhD RkQ0RkJCMzhDNzMxREJGRUMxMEFDMDUzNjAxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoF/wqDsIOOa+ xYPj1eqtAZtVax1EGmOGDvzls7XNfc+PfalkkSEVVCLBkJ2l4KOkqHz3WNtk+xVe vQcneQXMKyZeBGxEZGKhMZpDvUvqcpukGJqoNeqa61b7gycgov5glAAmTLfwnmGk sk0wKbq0IV3vtrHuoxsK3c9bt44sVqW50FQk+Sk8idxuQIadan9Y/8gyGlUVgI9u 2otpnB2hq0xr9QLYYZ8iTVR7oY5t2Bqv6QDweelK8yX2WqK9WJ+FQYPH3Mc+LjBc 8xSAaenI9nnkohg79j/48d6i0alePzGVpsrL4vuXM5QgN4Vxwa9QHjSS0Q+foXtZ 5JjeTheU/w== -----END CERTIFICATE-----Generated at Wed May 13 16:12:45 2026 by rpki-client