$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft File: 98AA7A42F1AD88F64241535778555B0FE42637EA.mft (raw, json) Hash identifier: kFhGM/aa5U5wBcfGs5jQHUAeA+SrQ8XWgL9VP5eawYA= Subject key identifier: 83:A7:2F:0B:69:F2:D1:B8:18:DE:A1:AB:1B:B1:7C:08:C5:E5:FC:60 Authority key identifier: 98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA Certificate issuer: /CN=98AA7A42F1AD88F64241535778555B0FE42637EA Certificate serial: 42EBA1BCFD745B7E641A54FC7C35133A343A3AC2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft Manifest number: D2 Signing time: Fri 02 Oct 2026 22:35:50 +0000 Manifest this update: Fri 02 Oct 2026 22:30:50 +0000 Manifest next update: Tue 06 Oct 2026 10:04:50 +0000 Files and hashes: 1: 3130332e36302e3233302e302f32332d3233203d3e2030.roa (hash: Ue8/vIfgsSnN4LW/5kCPAbghCplvny1P0iX59/D578Q=) 2: 98AA7A42F1AD88F64241535778555B0FE42637EA.crl (hash: QbnH8O6HL9I+QgxjJ8AnTKESZeIUQKwzrXRSakw2oMk=) 3: 3130332e36302e3232382e302f32332d3233203d3e2034383131.roa (hash: 7yZqchq5RQPFP43vKaHRYkjM76ohU/66SRSv6GUC4k0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Oct 2026 09:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:eb:a1:bc:fd:74:5b:7e:64:1a:54:fc:7c:35:13:3a:34:3a:3a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98AA7A42F1AD88F64241535778555B0FE42637EA Validity Not Before: Oct 2 22:30:50 2026 GMT Not After : Oct 6 10:04:50 2026 GMT Subject: CN=83A72F0B69F2D1B818DEA1AB1BB17C08C5E5FC60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:78:ff:f9:3a:fe:53:8d:a1:3b:41:0c:85:9c: 61:4c:f7:c1:ed:7b:8a:77:87:78:dd:11:61:7b:ea: 6e:b3:38:60:30:07:3b:3d:e2:8c:f3:cc:8c:2c:ef: 83:a8:ca:27:e7:42:36:86:b2:93:3d:b2:6d:12:07: a3:ed:1f:4e:a8:7c:16:12:d0:7f:70:a5:b9:f0:88: c8:39:d4:77:ce:16:11:8c:d6:a3:b4:95:0c:62:ae: 9e:2b:b6:16:d5:89:7a:e3:72:7d:7d:ec:5a:a3:30: e7:2f:81:a6:31:f6:28:7d:18:64:a3:f4:bb:06:12: f6:52:41:fa:09:89:71:ab:bc:80:73:6e:cb:9d:0d: ab:46:bb:91:67:11:42:81:b2:73:68:f9:84:8a:65: 50:aa:8e:b4:ce:d0:da:cd:26:54:6e:55:36:b1:4b: b7:42:c1:fd:75:05:fe:20:49:f0:80:12:a3:6f:9a: a5:7a:12:19:89:13:68:02:e7:b8:a9:9e:a4:ac:49: 2c:2f:33:31:1d:f8:9b:99:ae:d4:cd:4b:9e:a7:95: 53:21:03:88:33:6d:5b:fa:07:c6:77:ff:9a:e6:d5: 28:a9:77:85:1e:0a:1a:6a:52:0b:5c:9b:1e:3c:17: 8b:cb:ee:fd:9c:ce:7c:51:42:61:4b:07:b5:50:69: c1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:A7:2F:0B:69:F2:D1:B8:18:DE:A1:AB:1B:B1:7C:08:C5:E5:FC:60 X509v3 Authority Key Identifier: keyid:98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:c2:5e:ab:90:98:17:c3:4e:8c:61:6c:a1:81:3d:b9:ff:69: 93:72:5e:15:2e:f5:9e:8d:5f:6d:d8:e5:39:22:c2:ef:93:83: 7b:03:90:5b:8e:34:69:5e:79:24:9c:ac:f2:e2:66:0f:23:bd: d5:bf:d0:3a:56:e2:07:5d:be:f3:a7:e8:dd:d3:e2:61:57:5e: 30:3f:82:b2:59:cd:15:c3:45:e0:26:f7:eb:2f:3e:ca:9f:b8: 65:49:e8:32:39:4d:2b:51:41:0f:9e:b9:e8:3e:7d:f4:34:22: 72:19:94:c5:2a:be:58:74:77:c8:67:56:4c:39:23:ac:17:d7: 4b:fb:4d:a6:c3:2d:d9:40:fc:63:8b:38:1a:eb:d5:a4:5f:52: ee:ac:37:8d:dd:21:ff:65:d4:af:01:1f:97:16:c2:b6:76:ca: 4a:2e:48:c1:b7:5a:3d:f9:4f:45:38:67:71:9e:93:ae:15:df: c7:4a:bd:54:00:3d:ce:ef:2c:89:0e:23:a4:24:96:85:78:34: 6e:c0:8a:8a:6c:eb:cb:73:08:3f:e5:9e:6f:e0:ea:24:b2:45: a9:0f:b7:63:6b:29:fd:45:d2:b5:e8:81:7a:7e:a5:a6:ef:3d: 9e:1b:1a:66:39:d3:ff:61:96:0f:b4:b9:cf:23:03:f0:cf:66: 5b:a9:b7:e8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQuuhvP10W35kGlT8fDUTOjQ6OsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZF NDI2MzdFQTAeFw0yNjEwMDIyMjMwNTBaFw0yNjEwMDYxMDA0NTBaMDMxMTAvBgNV BAMTKDgzQTcyRjBCNjlGMkQxQjgxOERFQTFBQjFCQjE3QzA4QzVFNUZDNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBeP/5Ov5TjaE7QQyFnGFM98Ht e4p3h3jdEWF76m6zOGAwBzs94ozzzIws74OoyifnQjaGspM9sm0SB6PtH06ofBYS 0H9wpbnwiMg51HfOFhGM1qO0lQxirp4rthbViXrjcn197FqjMOcvgaYx9ih9GGSj 9LsGEvZSQfoJiXGrvIBzbsudDatGu5FnEUKBsnNo+YSKZVCqjrTO0NrNJlRuVTax S7dCwf11Bf4gSfCAEqNvmqV6EhmJE2gC57ipnqSsSSwvMzEd+JuZrtTNS56nlVMh A4gzbVv6B8Z3/5rm1Sipd4UeChpqUgtcmx48F4vL7v2cznxRQmFLB7VQacFpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUg6cvC2ny0bgY3qGrG7F8CMXl/GAwHwYDVR0j BBgwFoAUmKp6QvGtiPZCQVNXeFVbD+QmN+owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUyNzgxNTE5NTI5NTc0NS8wLzk4QUE3QTQyRjFBRDg4RjY0MjQxNTM1Nzc4NTU1 QjBGRTQyNjM3RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZFNDI2MzdFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1Mjc4MTUxOTUyOTU3NDUvMC85OEFBN0E0MkYxQUQ4 OEY2NDI0MTUzNTc3ODU1NUIwRkU0MjYzN0VBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssJeq5CYF8NO jGFsoYE9uf9pk3JeFS71no1fbdjlOSLC75ODewOQW440aV55JJys8uJmDyO91b/Q OlbiB12+86fo3dPiYVdeMD+CslnNFcNF4Cb36y8+yp+4ZUnoMjlNK1FBD5656D59 9DQichmUxSq+WHR3yGdWTDkjrBfXS/tNpsMt2UD8Y4s4GuvVpF9S7qw3jd0h/2XU rwEflxbCtnbKSi5IwbdaPflPRThncZ6TrhXfx0q9VAA9zu8siQ4jpCSWhXg0bsCK imzry3MIP+Web+DqJLJFqQ+3Y2sp/UXSteiBen6lpu89nhsaZjnT/2GWD7S5zyMD 8M9mW6m36A== -----END CERTIFICATE-----Generated at Sat Oct 3 11:56:50 2026 by rpki-client