$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft File: 98AA7A42F1AD88F64241535778555B0FE42637EA.mft (raw, json) Hash identifier: 4JK59GjZeBYaHGB5spLD68ph2z9LknlXL73C1hnOYiI= Subject key identifier: 2B:1B:28:10:77:A1:05:F2:9F:10:47:16:CD:FB:67:1F:AA:69:8B:86 Authority key identifier: 98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA Certificate issuer: /CN=98AA7A42F1AD88F64241535778555B0FE42637EA Certificate serial: 1B3D6707C3FB6275160BD55A651CE234E07A7AC3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft Manifest number: 94 Signing time: Fri 24 Jul 2026 20:37:04 +0000 Manifest this update: Fri 24 Jul 2026 20:32:04 +0000 Manifest next update: Sat 25 Jul 2026 20:50:04 +0000 Files and hashes: 1: 98AA7A42F1AD88F64241535778555B0FE42637EA.crl (hash: +nI3CDBpCG2jyeNnXjtzOywH4cZuGhhScK06Sc3HvL8=) 2: 3130332e36302e3232382e302f32332d3233203d3e2034383131.roa (hash: 7yZqchq5RQPFP43vKaHRYkjM76ohU/66SRSv6GUC4k0=) 3: 3130332e36302e3233302e302f32332d3233203d3e2030.roa (hash: Ue8/vIfgsSnN4LW/5kCPAbghCplvny1P0iX59/D578Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 20:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:3d:67:07:c3:fb:62:75:16:0b:d5:5a:65:1c:e2:34:e0:7a:7a:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98AA7A42F1AD88F64241535778555B0FE42637EA Validity Not Before: Jul 24 20:32:04 2026 GMT Not After : Jul 25 20:50:04 2026 GMT Subject: CN=2B1B281077A105F29F104716CDFB671FAA698B86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:5e:4f:0e:04:a6:36:b5:40:4b:3b:e5:b0:9b: 48:2e:cd:ea:45:36:a7:e0:1e:12:e2:4b:3b:22:f2: 43:31:8f:57:0f:db:42:d2:af:d7:7e:65:b8:9c:af: ed:5d:58:2c:23:f2:ba:a4:cb:da:89:1d:92:a5:72: 21:15:69:82:bd:08:86:53:e5:b2:93:51:fe:a2:b2: 7b:34:ac:36:64:b4:8c:a8:5c:f4:9a:8f:e6:21:b6: d9:e8:62:87:1d:30:81:f5:99:bc:d7:cc:e5:ad:a8: a6:14:02:a8:4f:41:0a:c0:e7:f7:34:6f:45:a7:27: a5:a6:52:94:1e:e0:b9:6f:23:13:f1:be:68:80:bd: f7:c4:1d:68:50:64:22:d5:01:32:d6:0e:73:db:7c: 76:89:60:0c:65:f9:57:2e:9b:db:3d:a0:98:c4:e2: f1:42:3e:59:af:d9:2f:30:84:39:5e:99:9c:0f:05: 50:42:86:bd:49:a8:8f:a6:a2:37:6e:77:6f:65:bb: f8:9c:97:e9:3e:79:5a:8f:0e:f4:f4:d0:31:68:3b: ea:85:d4:4e:5a:3b:95:e2:fe:3c:a0:4d:97:38:cb: ce:db:b2:19:06:a6:09:4a:dd:93:b9:76:55:99:57: 47:4e:4a:91:42:42:fe:4d:79:80:0f:d4:14:a0:a6: 32:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1B:28:10:77:A1:05:F2:9F:10:47:16:CD:FB:67:1F:AA:69:8B:86 X509v3 Authority Key Identifier: keyid:98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:03:20:ba:62:3b:4f:49:82:29:41:b8:58:13:55:10:61:2e: 05:e8:8c:92:af:f4:52:c5:ae:a7:e6:a4:46:09:ff:c6:b8:0a: 4e:e3:d2:11:0a:66:e2:c0:87:b8:8a:cf:bd:a0:d9:ea:b3:87: 8c:f4:8c:c0:04:59:12:32:47:b7:34:9d:40:b8:2a:f9:af:a9: 63:e6:e3:8b:b7:93:93:f1:ba:9b:e3:7d:f9:16:67:86:25:89: 66:91:7f:30:9f:78:ee:56:15:aa:0a:5a:ac:1c:8a:9e:e8:7d: 4e:44:58:ab:5c:e2:f7:df:41:2f:61:89:ff:67:31:67:0f:aa: 00:57:37:7c:55:60:96:e4:7a:ef:6d:28:0a:83:41:5b:15:08: 1e:31:d1:4d:1f:21:fd:db:df:82:9e:44:0b:0b:6c:f3:b5:64: c1:4b:1d:fe:08:09:e4:10:89:de:dd:86:63:3e:8e:e2:fd:26: 54:ac:e6:23:d9:1f:3b:f2:54:fb:4a:1e:2c:dc:1a:e9:c8:12: 72:cc:3a:8c:09:73:1b:d1:7b:d6:9f:4a:c4:0f:97:b1:5e:65: 9d:fc:07:24:76:b2:fd:b4:36:0e:67:f7:6a:09:6a:cf:9c:7d: 19:87:21:34:d7:59:69:23:91:db:e3:79:02:1b:f9:00:d1:62: 87:b4:0d:ec -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGz1nB8P7YnUWC9VaZRziNOB6esMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZF NDI2MzdFQTAeFw0yNjA3MjQyMDMyMDRaFw0yNjA3MjUyMDUwMDRaMDMxMTAvBgNV BAMTKDJCMUIyODEwNzdBMTA1RjI5RjEwNDcxNkNERkI2NzFGQUE2OThCODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Xk8OBKY2tUBLO+Wwm0guzepF NqfgHhLiSzsi8kMxj1cP20LSr9d+Zbicr+1dWCwj8rqky9qJHZKlciEVaYK9CIZT 5bKTUf6isns0rDZktIyoXPSaj+YhttnoYocdMIH1mbzXzOWtqKYUAqhPQQrA5/c0 b0WnJ6WmUpQe4LlvIxPxvmiAvffEHWhQZCLVATLWDnPbfHaJYAxl+Vcum9s9oJjE 4vFCPlmv2S8whDlemZwPBVBChr1JqI+mojdud29lu/icl+k+eVqPDvT00DFoO+qF 1E5aO5Xi/jygTZc4y87bshkGpglK3ZO5dlWZV0dOSpFCQv5NeYAP1BSgpjLlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKxsoEHehBfKfEEcWzftnH6ppi4YwHwYDVR0j BBgwFoAUmKp6QvGtiPZCQVNXeFVbD+QmN+owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUyNzgxNTE5NTI5NTc0NS8wLzk4QUE3QTQyRjFBRDg4RjY0MjQxNTM1Nzc4NTU1 QjBGRTQyNjM3RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZFNDI2MzdFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1Mjc4MTUxOTUyOTU3NDUvMC85OEFBN0E0MkYxQUQ4 OEY2NDI0MTUzNTc3ODU1NUIwRkU0MjYzN0VBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQMgumI7T0mC KUG4WBNVEGEuBeiMkq/0UsWup+akRgn/xrgKTuPSEQpm4sCHuIrPvaDZ6rOHjPSM wARZEjJHtzSdQLgq+a+pY+bji7eTk/G6m+N9+RZnhiWJZpF/MJ947lYVqgparByK nuh9TkRYq1zi999BL2GJ/2cxZw+qAFc3fFVgluR6720oCoNBWxUIHjHRTR8h/dvf gp5ECwts87VkwUsd/ggJ5BCJ3t2GYz6O4v0mVKzmI9kfO/JU+0oeLNwa6cgScsw6 jAlzG9F71p9KxA+XsV5lnfwHJHay/bQ2Dmf3aglqz5x9GYchNNdZaSOR2+N5Ahv5 ANFih7QN7A== -----END CERTIFICATE-----Generated at Fri Jul 24 22:31:57 2026 by rpki-client