
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft
File: 98AA7A42F1AD88F64241535778555B0FE42637EA.mft (raw, json)
Hash identifier: 4JK59GjZeBYaHGB5spLD68ph2z9LknlXL73C1hnOYiI=
Subject key identifier: 2B:1B:28:10:77:A1:05:F2:9F:10:47:16:CD:FB:67:1F:AA:69:8B:86
Authority key identifier: 98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA
Certificate issuer: /CN=98AA7A42F1AD88F64241535778555B0FE42637EA
Certificate serial: 1B3D6707C3FB6275160BD55A651CE234E07A7AC3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft
Manifest number: 94
Signing time: Fri 24 Jul 2026 20:37:04 +0000
Manifest this update: Fri 24 Jul 2026 20:32:04 +0000
Manifest next update: Sat 25 Jul 2026 20:50:04 +0000
Files and hashes: 1: 98AA7A42F1AD88F64241535778555B0FE42637EA.crl (hash: +nI3CDBpCG2jyeNnXjtzOywH4cZuGhhScK06Sc3HvL8=)
2: 3130332e36302e3232382e302f32332d3233203d3e2034383131.roa (hash: 7yZqchq5RQPFP43vKaHRYkjM76ohU/66SRSv6GUC4k0=)
3: 3130332e36302e3233302e302f32332d3233203d3e2030.roa (hash: Ue8/vIfgsSnN4LW/5kCPAbghCplvny1P0iX59/D578Q=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl
rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 20:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:3d:67:07:c3:fb:62:75:16:0b:d5:5a:65:1c:e2:34:e0:7a:7a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98AA7A42F1AD88F64241535778555B0FE42637EA
Validity
Not Before: Jul 24 20:32:04 2026 GMT
Not After : Jul 25 20:50:04 2026 GMT
Subject: CN=2B1B281077A105F29F104716CDFB671FAA698B86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:4f:0e:04:a6:36:b5:40:4b:3b:e5:b0:9b:
48:2e:cd:ea:45:36:a7:e0:1e:12:e2:4b:3b:22:f2:
43:31:8f:57:0f:db:42:d2:af:d7:7e:65:b8:9c:af:
ed:5d:58:2c:23:f2:ba:a4:cb:da:89:1d:92:a5:72:
21:15:69:82:bd:08:86:53:e5:b2:93:51:fe:a2:b2:
7b:34:ac:36:64:b4:8c:a8:5c:f4:9a:8f:e6:21:b6:
d9:e8:62:87:1d:30:81:f5:99:bc:d7:cc:e5:ad:a8:
a6:14:02:a8:4f:41:0a:c0:e7:f7:34:6f:45:a7:27:
a5:a6:52:94:1e:e0:b9:6f:23:13:f1:be:68:80:bd:
f7:c4:1d:68:50:64:22:d5:01:32:d6:0e:73:db:7c:
76:89:60:0c:65:f9:57:2e:9b:db:3d:a0:98:c4:e2:
f1:42:3e:59:af:d9:2f:30:84:39:5e:99:9c:0f:05:
50:42:86:bd:49:a8:8f:a6:a2:37:6e:77:6f:65:bb:
f8:9c:97:e9:3e:79:5a:8f:0e:f4:f4:d0:31:68:3b:
ea:85:d4:4e:5a:3b:95:e2:fe:3c:a0:4d:97:38:cb:
ce:db:b2:19:06:a6:09:4a:dd:93:b9:76:55:99:57:
47:4e:4a:91:42:42:fe:4d:79:80:0f:d4:14:a0:a6:
32:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1B:28:10:77:A1:05:F2:9F:10:47:16:CD:FB:67:1F:AA:69:8B:86
X509v3 Authority Key Identifier:
keyid:98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:03:20:ba:62:3b:4f:49:82:29:41:b8:58:13:55:10:61:2e:
05:e8:8c:92:af:f4:52:c5:ae:a7:e6:a4:46:09:ff:c6:b8:0a:
4e:e3:d2:11:0a:66:e2:c0:87:b8:8a:cf:bd:a0:d9:ea:b3:87:
8c:f4:8c:c0:04:59:12:32:47:b7:34:9d:40:b8:2a:f9:af:a9:
63:e6:e3:8b:b7:93:93:f1:ba:9b:e3:7d:f9:16:67:86:25:89:
66:91:7f:30:9f:78:ee:56:15:aa:0a:5a:ac:1c:8a:9e:e8:7d:
4e:44:58:ab:5c:e2:f7:df:41:2f:61:89:ff:67:31:67:0f:aa:
00:57:37:7c:55:60:96:e4:7a:ef:6d:28:0a:83:41:5b:15:08:
1e:31:d1:4d:1f:21:fd:db:df:82:9e:44:0b:0b:6c:f3:b5:64:
c1:4b:1d:fe:08:09:e4:10:89:de:dd:86:63:3e:8e:e2:fd:26:
54:ac:e6:23:d9:1f:3b:f2:54:fb:4a:1e:2c:dc:1a:e9:c8:12:
72:cc:3a:8c:09:73:1b:d1:7b:d6:9f:4a:c4:0f:97:b1:5e:65:
9d:fc:07:24:76:b2:fd:b4:36:0e:67:f7:6a:09:6a:cf:9c:7d:
19:87:21:34:d7:59:69:23:91:db:e3:79:02:1b:f9:00:d1:62:
87:b4:0d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:31:57 2026 by rpki-client