
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft
File: 98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft (raw, json)
Hash identifier: 5wLtMmvGvwx2k02EmCZBz3L2e3CLC79wehmzrg/3iJI=
Subject key identifier: 65:C2:F9:B9:94:DA:64:0E:DF:E3:F0:47:76:A9:F1:01:8A:02:77:36
Authority key identifier: 98:C4:7D:ED:77:AC:F5:B8:20:46:A5:1E:C3:8C:F9:EB:BF:9F:09:14
Certificate issuer: /CN=98C47DED77ACF5B82046A51EC38CF9EBBF9F0914
Certificate serial: 7F33CA929398AB48CFADE596D4CEB881D61469EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft
Manifest number: 35
Signing time: Fri 24 Jul 2026 00:24:55 +0000
Manifest this update: Fri 24 Jul 2026 00:19:55 +0000
Manifest next update: Sat 25 Jul 2026 04:07:55 +0000
Files and hashes: 1: 98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.crl (hash: /FlST8b1FFav3SpMhSe74V7rcT7QRM201TKshiIh910=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.crl
rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:07:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:33:ca:92:93:98:ab:48:cf:ad:e5:96:d4:ce:b8:81:d6:14:69:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98C47DED77ACF5B82046A51EC38CF9EBBF9F0914
Validity
Not Before: Jul 24 00:19:55 2026 GMT
Not After : Jul 25 04:07:55 2026 GMT
Subject: CN=65C2F9B994DA640EDFE3F04776A9F1018A027736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:19:c9:0a:d0:4e:bd:26:56:4e:5b:18:dd:f3:
81:c9:26:c3:f5:3e:d4:8c:e1:32:42:3d:7e:39:54:
3c:46:f5:07:92:f5:32:08:c4:6a:aa:00:0d:b4:05:
6e:51:5c:03:1c:9e:13:c0:47:61:a2:e6:cf:5a:41:
2e:ef:70:34:d3:f6:cc:d3:71:49:d9:33:76:79:43:
8a:ef:22:90:e2:3b:9b:f4:a6:e6:2c:f3:cf:71:df:
a8:fd:24:ce:3d:42:ff:a5:fe:23:9a:de:39:56:73:
ae:71:a5:8e:e7:27:c6:f4:66:4e:29:e8:00:f2:a0:
3d:61:4d:a8:7e:24:b4:b1:31:c9:b0:16:d6:0a:f1:
c5:4a:e9:9f:17:a4:a5:7a:a8:0a:c1:8b:6d:f5:d6:
17:c6:7b:ed:4b:27:0b:ce:30:a7:6a:d9:eb:5b:fa:
b6:03:5c:a4:f7:6b:d7:cd:c1:19:6a:e5:74:3a:eb:
cf:ec:19:7e:b7:75:33:9f:83:a6:d2:da:49:09:8c:
94:0f:03:f6:06:af:0a:7a:18:62:0d:19:95:d0:fc:
f9:b0:ca:0f:ed:fb:c9:e3:0a:45:a3:3d:c9:61:ef:
f7:fd:45:6f:f0:8b:6e:52:41:fd:78:10:9b:3e:3f:
e3:1a:7a:9f:f0:58:27:1d:c9:98:b8:06:c3:99:a3:
43:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C2:F9:B9:94:DA:64:0E:DF:E3:F0:47:76:A9:F1:01:8A:02:77:36
X509v3 Authority Key Identifier:
keyid:98:C4:7D:ED:77:AC:F5:B8:20:46:A5:1E:C3:8C:F9:EB:BF:9F:09:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:69:b7:57:1e:d7:13:98:cf:58:28:f4:0b:6b:3b:ad:4e:b1:
36:ed:b8:30:70:6d:f2:aa:d5:f2:a5:99:89:99:8c:32:90:9d:
c3:b7:48:49:bc:c4:56:5a:72:be:66:4c:98:41:8a:a1:8b:b0:
84:b4:fa:1e:6b:c4:86:35:e1:97:15:17:b1:bb:48:bd:54:78:
75:32:44:17:2c:87:c7:4e:aa:ac:5f:fa:6b:cc:ca:42:7d:6a:
33:ae:89:5d:0f:ac:7f:a7:a7:90:ae:23:ba:69:2f:3a:6d:0c:
df:89:72:fb:62:68:fd:88:15:6f:44:c8:68:fb:05:d6:dc:51:
c0:6c:d2:6d:08:01:0d:1a:1c:53:22:dc:64:2c:38:eb:f8:95:
dc:de:c3:5a:bb:33:bb:f0:0f:42:14:54:d3:59:a6:1f:68:8d:
f2:a3:91:c1:7e:cf:cf:7c:7a:c6:90:92:3a:21:ad:d9:44:58:
b6:b5:ab:3f:6f:10:22:1f:c6:66:76:ed:a0:96:6a:74:0d:9f:
a5:63:e8:d9:8a:ff:1a:15:37:f1:cc:a5:d0:be:7f:3f:43:2b:
e8:22:f5:87:5d:c4:b4:d0:15:46:27:c1:63:57:b3:99:e7:c3:
2b:d4:cc:77:48:92:2e:62:8e:77:45:c8:80:79:b6:72:c6:5e:
32:d3:1b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:13:11 2026 by rpki-client