$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft File: 98AA7A42F1AD88F64241535778555B0FE42637EA.mft (raw, json) Hash identifier: S6Uf8aoZVZuM8VDP00i9ol2Zo6DnQpn48CkXa8EcJj0= Subject key identifier: DF:96:9C:98:0E:09:CA:F9:B3:67:5D:52:6C:AD:E3:72:6D:08:CA:3B Authority key identifier: 98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA Certificate issuer: /CN=98AA7A42F1AD88F64241535778555B0FE42637EA Certificate serial: 0BFCB7891C732A7AF9DC3C576065AD2A442B7516 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft Manifest number: 32 Signing time: Wed 13 May 2026 01:10:50 +0000 Manifest this update: Wed 13 May 2026 01:05:50 +0000 Manifest next update: Thu 14 May 2026 03:30:50 +0000 Files and hashes: 1: 3130332e36302e3233302e302f32332d3233203d3e2030.roa (hash: Ue8/vIfgsSnN4LW/5kCPAbghCplvny1P0iX59/D578Q=) 2: 98AA7A42F1AD88F64241535778555B0FE42637EA.crl (hash: IDsjP9OO9aKHODTnJqU2ouzL2WI0s9hAgi10M7+jyXg=) 3: 3130332e36302e3232382e302f32332d3233203d3e2034383131.roa (hash: 7yZqchq5RQPFP43vKaHRYkjM76ohU/66SRSv6GUC4k0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:fc:b7:89:1c:73:2a:7a:f9:dc:3c:57:60:65:ad:2a:44:2b:75:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98AA7A42F1AD88F64241535778555B0FE42637EA Validity Not Before: May 13 01:05:50 2026 GMT Not After : May 14 03:30:50 2026 GMT Subject: CN=DF969C980E09CAF9B3675D526CADE3726D08CA3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c5:9f:52:85:de:65:93:ac:09:b3:d2:fd:87: 3a:ab:0a:19:63:93:1e:83:01:21:15:4e:a6:11:43: ca:4b:60:95:3d:58:51:ad:6c:62:aa:b2:4b:7b:03: 41:9f:83:e0:ea:4f:74:ee:46:1d:5b:0b:57:5f:0c: 89:21:4b:1f:d9:67:c0:cc:b1:08:15:ec:ab:95:36: d2:9c:e3:a7:6b:8e:4c:99:0f:c8:df:df:2a:39:05: 61:de:e6:23:e2:b6:06:09:59:fc:f9:35:0a:6a:d5: 0d:c4:72:0f:c0:77:bf:e8:f3:fd:01:64:c4:90:85: fa:85:bc:11:14:7f:2c:0e:38:6c:28:cc:39:3e:de: 2c:68:a0:77:50:d2:81:6b:70:6f:8e:f4:1f:7e:6e: de:a1:bf:ba:e4:aa:54:8b:b1:a4:71:c1:6f:58:e2: 3b:b2:4b:ad:43:45:15:6a:25:ee:b5:c0:9a:46:67: 77:f4:f0:a4:76:52:a0:c6:e3:1d:09:81:f7:82:6c: 4a:f5:07:cc:02:d7:82:f5:39:c5:59:be:e1:50:33: 51:35:2e:fe:0a:1b:68:c2:80:21:97:ea:03:6a:47: 9c:e9:83:9c:c7:2c:44:7c:58:07:97:20:2e:46:bd: 2a:4f:e4:77:a1:24:97:f6:f4:45:93:69:af:84:ed: b0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:96:9C:98:0E:09:CA:F9:B3:67:5D:52:6C:AD:E3:72:6D:08:CA:3B X509v3 Authority Key Identifier: keyid:98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:68:4b:2a:2d:44:0e:a5:88:97:f6:79:d7:54:a3:44:f9:cd: 1b:4c:1b:b2:e1:8a:1b:fd:1d:c5:21:22:23:20:37:d1:6c:c7: d8:6e:f7:66:d6:ce:b6:e5:bd:18:09:90:30:d7:57:b5:9a:15: f6:3b:17:96:b0:79:80:7d:35:5f:6b:26:29:35:1d:92:9f:ee: c3:cb:70:8d:d3:d6:94:88:97:4d:a8:bb:f5:d5:ec:70:5a:ea: 3e:07:f9:59:79:7a:fb:cd:37:e9:61:04:ce:ae:a6:73:d1:49: 69:57:51:24:a3:6d:df:e8:ba:98:3e:e7:38:f7:9d:ff:cd:6b: d3:3f:ea:22:be:b9:4d:87:3c:42:db:2a:66:e0:b0:a8:0e:97: 71:1a:46:16:96:df:37:9f:23:ee:3d:99:6c:ab:b8:f4:31:99: 41:e5:63:c2:22:02:64:15:4d:61:82:a2:29:52:dc:70:dc:e8: 65:1d:f6:37:ba:aa:ac:5d:1c:12:f6:b1:ae:88:7b:4f:4f:2b: 1c:13:01:3a:a0:d9:f1:a6:25:e3:35:cf:a7:28:00:c8:cb:29: 9c:40:d1:33:1c:11:3d:f6:8a:2a:ad:c2:e3:22:8d:0c:5d:56: 00:87:a2:58:f6:80:a1:a4:9a:74:1c:cf:b5:2b:64:eb:a1:d3: 33:be:c7:84 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUC/y3iRxzKnr53DxXYGWtKkQrdRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZF NDI2MzdFQTAeFw0yNjA1MTMwMTA1NTBaFw0yNjA1MTQwMzMwNTBaMDMxMTAvBgNV BAMTKERGOTY5Qzk4MEUwOUNBRjlCMzY3NUQ1MjZDQURFMzcyNkQwOENBM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDxZ9Shd5lk6wJs9L9hzqrChlj kx6DASEVTqYRQ8pLYJU9WFGtbGKqskt7A0Gfg+DqT3TuRh1bC1dfDIkhSx/ZZ8DM sQgV7KuVNtKc46drjkyZD8jf3yo5BWHe5iPitgYJWfz5NQpq1Q3Ecg/Ad7/o8/0B ZMSQhfqFvBEUfywOOGwozDk+3ixooHdQ0oFrcG+O9B9+bt6hv7rkqlSLsaRxwW9Y 4juyS61DRRVqJe61wJpGZ3f08KR2UqDG4x0JgfeCbEr1B8wC14L1OcVZvuFQM1E1 Lv4KG2jCgCGX6gNqR5zpg5zHLER8WAeXIC5GvSpP5HehJJf29EWTaa+E7bBXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU35acmA4JyvmzZ11SbK3jcm0IyjswHwYDVR0j BBgwFoAUmKp6QvGtiPZCQVNXeFVbD+QmN+owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUyNzgxNTE5NTI5NTc0NS8wLzk4QUE3QTQyRjFBRDg4RjY0MjQxNTM1Nzc4NTU1 QjBGRTQyNjM3RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZFNDI2MzdFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1Mjc4MTUxOTUyOTU3NDUvMC85OEFBN0E0MkYxQUQ4 OEY2NDI0MTUzNTc3ODU1NUIwRkU0MjYzN0VBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2hLKi1EDqWI l/Z511SjRPnNG0wbsuGKG/0dxSEiIyA30WzH2G73ZtbOtuW9GAmQMNdXtZoV9jsX lrB5gH01X2smKTUdkp/uw8twjdPWlIiXTai79dXscFrqPgf5WXl6+8036WEEzq6m c9FJaVdRJKNt3+i6mD7nOPed/81r0z/qIr65TYc8QtsqZuCwqA6XcRpGFpbfN58j 7j2ZbKu49DGZQeVjwiICZBVNYYKiKVLccNzoZR32N7qqrF0cEvaxroh7T08rHBMB OqDZ8aYl4zXPpygAyMspnEDRMxwRPfaKKq3C4yKNDF1WAIeiWPaAoaSadBzPtStk 66HTM77HhA== -----END CERTIFICATE-----Generated at Wed May 13 13:46:30 2026 by rpki-client