$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft File: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft (raw, json) Hash identifier: hv8lDjkLWQuJE+MMPGlD+tfD9c1oiC4ZQBdyXw3QjSM= Subject key identifier: DB:E2:AB:8B:0F:B3:D5:82:5F:99:88:36:84:AC:94:21:42:D2:DF:04 Authority key identifier: 98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 Certificate issuer: /CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601 Certificate serial: 7322C52C6CA9331E0C0B59EE0791DDA46E414A3B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft Manifest number: 51 Signing time: Wed 25 Mar 2026 13:38:27 +0000 Manifest this update: Wed 25 Mar 2026 13:33:27 +0000 Manifest next update: Thu 26 Mar 2026 16:32:27 +0000 Files and hashes: 1: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl (hash: K8wbvIZpiUVevfobrsm75r2TpfklbSOTw+W0NmHSwt0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 16:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:22:c5:2c:6c:a9:33:1e:0c:0b:59:ee:07:91:dd:a4:6e:41:4a:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601 Validity Not Before: Mar 25 13:33:27 2026 GMT Not After : Mar 26 16:32:27 2026 GMT Subject: CN=DBE2AB8B0FB3D5825F99883684AC942142D2DF04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:96:71:a8:78:5a:3d:a1:b7:d3:99:b6:b4:41: 19:d3:38:a4:0c:30:d5:e2:03:ca:73:2d:e2:dc:4d: e0:eb:5d:92:5e:6a:81:41:be:f1:77:33:e8:5d:1f: 1f:6e:33:47:dd:8a:4b:f1:b5:91:c2:74:42:83:af: b6:35:82:8c:97:8f:61:b4:ba:64:28:68:ea:05:8b: fa:1a:72:c5:f9:0d:5d:5e:f3:df:0a:8b:3f:d0:6e: b0:42:4d:68:12:c9:8c:8b:6b:79:55:a7:58:4e:64: 60:08:1f:99:78:5f:0e:b4:f3:15:72:24:96:8f:2b: 4a:f3:3b:f1:d1:1c:9f:81:77:7f:f1:cf:59:9e:69: d0:46:7f:eb:97:94:42:75:8c:59:d5:ba:ae:31:2a: a2:24:15:2d:c1:17:48:c4:18:ea:34:ec:21:a8:2d: 91:ff:d1:aa:b4:8a:29:04:87:92:ca:a0:bc:a6:87: ff:7e:f2:07:80:83:44:27:f3:6e:79:ea:27:c9:29: 9c:d7:5c:ed:aa:aa:ed:19:ef:2e:26:89:76:49:0f: c1:85:3e:f5:28:1e:cf:63:a9:0f:65:e2:56:59:4f: 15:13:34:20:63:5a:f0:16:db:f5:17:b8:dc:9d:3f: 90:c9:a6:9d:e1:77:75:f0:7f:c2:b1:e6:4c:4e:a7: da:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E2:AB:8B:0F:B3:D5:82:5F:99:88:36:84:AC:94:21:42:D2:DF:04 X509v3 Authority Key Identifier: keyid:98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:3b:fa:4d:08:f0:57:11:a9:ba:cb:13:04:fe:0f:93:0d:43: 75:eb:3b:ec:a6:98:39:37:04:42:22:d1:fb:6f:83:02:99:4c: 41:f0:a5:43:a0:92:bc:e0:e8:60:b3:d6:b3:b6:2c:9a:3e:70: 1d:42:b5:21:38:77:9f:8b:6b:b6:f2:5a:9d:2a:04:22:1e:cb: a0:bf:49:a7:52:5a:e4:1e:6c:85:f3:95:d5:e7:d0:3d:9b:50: cc:07:9b:5f:ca:bb:c2:31:91:4f:00:89:75:3b:74:83:2a:95: 73:36:82:84:2f:30:e9:01:ba:c1:ca:c5:d1:e5:4a:12:52:76: bc:5b:4a:ac:db:39:87:1b:23:23:75:65:4c:0b:d8:87:e1:b6: 4c:a0:39:7d:0c:d7:f6:97:b2:fa:7d:ae:29:c9:7a:46:aa:7d: 5a:28:a6:36:f5:f3:af:86:c8:ce:b3:dc:6f:0b:52:79:85:5a: 7b:38:71:1c:7b:00:f9:5b:3e:fc:1e:84:c8:a4:c6:7e:e4:c7: 37:cd:8a:d7:91:27:53:b3:c8:e5:ae:aa:c6:8e:48:59:de:45: 6b:18:70:7e:dc:fa:06:f8:ba:c1:bc:8a:6d:81:a6:33:ec:ed: f2:7b:0c:37:c6:29:21:d4:c6:75:c5:9e:82:b2:ab:2e:87:9b: 57:40:85:ac -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcyLFLGypMx4MC1nuB5HdpG5BSjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgzMTlBM0JDOEY4Q0ZENEZCQjM4QzczMURCRkVDMTBB QzA1MzYwMTAeFw0yNjAzMjUxMzMzMjdaFw0yNjAzMjYxNjMyMjdaMDMxMTAvBgNV BAMTKERCRTJBQjhCMEZCM0Q1ODI1Rjk5ODgzNjg0QUM5NDIxNDJEMkRGMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSlnGoeFo9obfTmba0QRnTOKQM MNXiA8pzLeLcTeDrXZJeaoFBvvF3M+hdHx9uM0fdikvxtZHCdEKDr7Y1goyXj2G0 umQoaOoFi/oacsX5DV1e898Kiz/QbrBCTWgSyYyLa3lVp1hOZGAIH5l4Xw608xVy JJaPK0rzO/HRHJ+Bd3/xz1meadBGf+uXlEJ1jFnVuq4xKqIkFS3BF0jEGOo07CGo LZH/0aq0iikEh5LKoLymh/9+8geAg0Qn82556ifJKZzXXO2qqu0Z7y4miXZJD8GF PvUoHs9jqQ9l4lZZTxUTNCBjWvAW2/UXuNydP5DJpp3hd3Xwf8Kx5kxOp9qNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2+Kriw+z1YJfmYg2hKyUIULS3wQwHwYDVR0j BBgwFoAUmDGaO8j4z9T7s4xzHb/sEKwFNgEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8xLzk4MzE5QTNCQzhGOENGRDRGQkIzOEM3MzFEQkZF QzEwQUMwNTM2MDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOTgzMTlBM0JDOEY4Q0ZENEZCQjM4QzczMURCRkVDMTBBQzA1MzYwMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjgzNjM1OTk3OTA5OTc1MDYvMS85ODMxOUEzQkM4RjhD RkQ0RkJCMzhDNzMxREJGRUMxMEFDMDUzNjAxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyDv6TQjwVxGp ussTBP4Pkw1Ddes77KaYOTcEQiLR+2+DAplMQfClQ6CSvODoYLPWs7Ysmj5wHUK1 ITh3n4trtvJanSoEIh7LoL9Jp1Ja5B5shfOV1efQPZtQzAebX8q7wjGRTwCJdTt0 gyqVczaChC8w6QG6wcrF0eVKElJ2vFtKrNs5hxsjI3VlTAvYh+G2TKA5fQzX9pey +n2uKcl6Rqp9WiimNvXzr4bIzrPcbwtSeYVaezhxHHsA+Vs+/B6EyKTGfuTHN82K 15EnU7PI5a6qxo5IWd5Faxhwftz6Bvi6wbyKbYGmM+zt8nsMN8YpIdTGdcWegrKr LoebV0CFrA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:21:45 2026 by rpki-client