$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft File: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft (raw, json) Hash identifier: ADwAOvbKVWfkw16Yzk+kHCHQZeFPmGT6BmzMbMzAHIs= Subject key identifier: B6:00:1C:C8:FC:85:99:7A:9B:1C:73:F0:BA:50:FD:D2:33:9F:17:46 Authority key identifier: 98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 Certificate issuer: /CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601 Certificate serial: 119EC93F62F5DC5584B09C2A423DEDDE1521E4F5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft Manifest number: 018A Signing time: Tue 13 Oct 2026 21:28:16 +0000 Manifest this update: Tue 13 Oct 2026 21:23:16 +0000 Manifest next update: Sat 17 Oct 2026 05:13:16 +0000 Files and hashes: 1: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl (hash: WUDebiIKE/xeFb4OUh8UImRvuoucjaAYIRYdsOcp4ac=) 2: 3137302e3137392e302e302f31362d3234203d3e20313331343836.roa (hash: qat1H617QJwQjY8jG6LbfzleO4RxVlthXXvF9jpIwLY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 10:58:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:9e:c9:3f:62:f5:dc:55:84:b0:9c:2a:42:3d:ed:de:15:21:e4:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601 Validity Not Before: Oct 13 21:23:16 2026 GMT Not After : Oct 17 05:13:16 2026 GMT Subject: CN=B6001CC8FC85997A9B1C73F0BA50FDD2339F1746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0b:eb:a8:be:b8:a6:d7:d5:cf:f7:c7:41:96: 60:02:42:01:2d:62:01:83:00:9e:88:18:7c:e5:5c: 3c:80:26:12:10:9b:34:f2:71:cd:99:32:bd:3e:6c: d5:f4:aa:64:f8:c2:29:18:12:02:8f:9e:3d:df:09: 44:93:11:40:c5:57:f4:7c:71:5f:e6:fc:44:8b:d3: 17:98:37:65:c3:87:dd:af:3c:30:74:32:02:00:ac: 12:40:8b:56:7a:5d:c8:3e:cb:8e:64:f5:60:04:56: fc:f0:8b:d8:cc:8a:ec:9a:4d:79:51:7b:54:6d:a9: 89:fe:22:3e:1f:20:25:4c:73:50:4f:34:ff:c4:bf: e6:b4:07:6a:fe:6c:23:d3:75:87:90:a5:9e:3b:81: 72:b4:89:5e:2d:3c:69:e6:b9:07:15:a6:27:14:46: 08:25:a8:93:b2:11:23:ae:0d:7c:6c:89:b3:90:49: 5d:d7:57:3b:5c:db:12:8f:bf:f0:f6:82:42:01:f2: 9b:86:b5:65:eb:d4:30:54:81:ae:79:5f:f0:4e:cf: a6:ed:96:ca:e5:3a:52:d4:d7:e3:e3:3d:d5:e1:ff: 4b:1f:8b:c1:59:0f:6a:5e:0e:5e:95:92:59:8d:33: 45:93:53:bf:a7:f0:96:2f:34:a9:85:f0:d9:21:63: 72:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:00:1C:C8:FC:85:99:7A:9B:1C:73:F0:BA:50:FD:D2:33:9F:17:46 X509v3 Authority Key Identifier: keyid:98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:a6:5b:9d:b1:9d:fe:b4:e6:6c:e4:55:56:01:59:ac:33:71: 87:19:34:42:21:1b:be:9e:ae:0d:f3:2f:56:b4:67:10:5f:a4: 9f:db:bf:68:96:4a:1b:3e:d2:c3:32:da:15:7b:8a:20:3c:ef: 4e:f8:9b:5a:1d:80:e7:7e:0a:14:91:55:f9:72:a6:f2:64:8f: 6d:9a:fe:1b:a3:7c:ea:7d:ae:ec:d1:9b:88:1c:50:2f:13:8c: 18:e4:f5:1d:c8:95:59:23:c4:70:7e:3a:6a:0f:8f:46:e0:a7: 73:ab:41:9f:85:74:bb:96:eb:e4:cd:16:64:d9:67:37:96:08: 88:cd:88:7b:6f:5c:18:14:0f:df:74:07:59:c4:e7:ac:fd:a0: d9:97:35:a8:f0:99:21:d5:52:db:7f:ae:f3:f8:3d:54:71:0d: d9:75:1a:9f:a9:70:f8:6b:c8:c4:31:69:a1:01:03:75:c2:c9: 99:b2:ac:34:e3:6f:f5:7c:e0:42:40:80:9d:ea:a3:fe:74:d3: 7e:24:ca:e5:7f:aa:4e:70:85:95:35:35:62:5d:8e:57:89:83: 17:29:2a:70:7e:24:c2:fd:ea:50:6c:4b:48:f2:90:55:00:35: 06:b7:b3:23:af:3b:c5:9a:8b:42:73:46:73:e0:fe:4c:c6:3a: 4d:5a:70:1c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEZ7JP2L13FWEsJwqQj3t3hUh5PUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgzMTlBM0JDOEY4Q0ZENEZCQjM4QzczMURCRkVDMTBB QzA1MzYwMTAeFw0yNjEwMTMyMTIzMTZaFw0yNjEwMTcwNTEzMTZaMDMxMTAvBgNV BAMTKEI2MDAxQ0M4RkM4NTk5N0E5QjFDNzNGMEJBNTBGREQyMzM5RjE3NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfC+uovrim19XP98dBlmACQgEt YgGDAJ6IGHzlXDyAJhIQmzTycc2ZMr0+bNX0qmT4wikYEgKPnj3fCUSTEUDFV/R8 cV/m/ESL0xeYN2XDh92vPDB0MgIArBJAi1Z6Xcg+y45k9WAEVvzwi9jMiuyaTXlR e1RtqYn+Ij4fICVMc1BPNP/Ev+a0B2r+bCPTdYeQpZ47gXK0iV4tPGnmuQcVpicU RgglqJOyESOuDXxsibOQSV3XVztc2xKPv/D2gkIB8puGtWXr1DBUga55X/BOz6bt lsrlOlLU1+PjPdXh/0sfi8FZD2peDl6VklmNM0WTU7+n8JYvNKmF8NkhY3KlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtgAcyPyFmXqbHHPwulD90jOfF0YwHwYDVR0j BBgwFoAUmDGaO8j4z9T7s4xzHb/sEKwFNgEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8xLzk4MzE5QTNCQzhGOENGRDRGQkIzOEM3MzFEQkZF QzEwQUMwNTM2MDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOTgzMTlBM0JDOEY4Q0ZENEZCQjM4QzczMURCRkVDMTBBQzA1MzYwMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjgzNjM1OTk3OTA5OTc1MDYvMS85ODMxOUEzQkM4RjhD RkQ0RkJCMzhDNzMxREJGRUMxMEFDMDUzNjAxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsaZbnbGd/rTm bORVVgFZrDNxhxk0QiEbvp6uDfMvVrRnEF+kn9u/aJZKGz7SwzLaFXuKIDzvTvib Wh2A534KFJFV+XKm8mSPbZr+G6N86n2u7NGbiBxQLxOMGOT1HciVWSPEcH46ag+P RuCnc6tBn4V0u5br5M0WZNlnN5YIiM2Ie29cGBQP33QHWcTnrP2g2Zc1qPCZIdVS 23+u8/g9VHEN2XUan6lw+GvIxDFpoQEDdcLJmbKsNONv9XzgQkCAneqj/nTTfiTK 5X+qTnCFlTU1Yl2OV4mDFykqcH4kwv3qUGxLSPKQVQA1BrezI687xZqLQnNGc+D+ TMY6TVpwHA== -----END CERTIFICATE-----Generated at Wed Oct 14 03:08:48 2026 by rpki-client