
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft
File: 98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft (raw, json)
Hash identifier: +oWBIjEb0IDrv3d0eiqkIHLSHQwSlarobLjSopaOMcA=
Subject key identifier: 31:B7:B6:75:E4:9E:63:CB:5E:62:89:77:3E:87:0D:82:2D:F0:F2:37
Authority key identifier: 98:C4:7D:ED:77:AC:F5:B8:20:46:A5:1E:C3:8C:F9:EB:BF:9F:09:14
Certificate issuer: /CN=98C47DED77ACF5B82046A51EC38CF9EBBF9F0914
Certificate serial: 2C205F40C96077E91DF975138E65FD51BAE08EA3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft
Manifest number: 77
Signing time: Sat 10 Oct 2026 16:14:46 +0000
Manifest this update: Sat 10 Oct 2026 16:09:46 +0000
Manifest next update: Tue 13 Oct 2026 16:32:46 +0000
Files and hashes: 1: 98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.crl (hash: 06AKgPwXOqfacgcwbkd9PyOYOI4ExT7Ra38JW1qY7DI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.crl
rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:32:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:20:5f:40:c9:60:77:e9:1d:f9:75:13:8e:65:fd:51:ba:e0:8e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98C47DED77ACF5B82046A51EC38CF9EBBF9F0914
Validity
Not Before: Oct 10 16:09:46 2026 GMT
Not After : Oct 13 16:32:46 2026 GMT
Subject: CN=31B7B675E49E63CB5E6289773E870D822DF0F237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:5d:6c:82:a9:64:2e:09:97:23:b7:68:26:
cf:b2:86:4b:b4:18:c9:88:fd:28:72:ed:25:cc:bb:
8d:d2:d4:2a:a5:9d:ca:b1:96:ee:29:1e:2d:0e:cb:
c7:e0:27:55:56:4b:e1:38:2c:11:bf:1b:94:4b:d7:
55:1d:d6:ac:8a:43:01:1e:41:86:6b:bb:27:21:c1:
ab:f6:86:79:69:bc:e4:6d:f1:0d:9c:0a:9d:1c:16:
fb:20:ac:ec:e3:bd:dd:0d:b1:ad:5e:e3:0e:f3:c4:
fb:9c:2f:9d:f2:22:b6:cc:4d:ee:cf:91:08:6f:db:
04:4d:e2:da:da:9e:b8:28:b1:f4:f0:d0:58:d5:3a:
17:ed:d4:d5:86:04:3a:6c:e3:51:78:d8:4e:76:e3:
6e:fb:3f:3a:1d:a7:d3:12:4d:36:96:e8:b8:86:93:
21:ec:3f:86:79:00:ee:e2:9c:4c:83:44:86:41:dc:
38:e7:b5:1e:db:5b:b1:c6:d6:70:c2:07:cc:e5:83:
c3:3c:52:62:d2:e9:82:1b:90:41:94:e2:67:56:d4:
a9:d5:a2:90:21:f3:3d:48:3e:fc:8b:e6:cd:a2:84:
b9:bb:4a:09:e4:94:ac:a2:00:65:58:57:f6:92:e0:
22:31:cb:ea:be:04:96:e3:e0:a9:b2:94:0f:a8:51:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B7:B6:75:E4:9E:63:CB:5E:62:89:77:3E:87:0D:82:2D:F0:F2:37
X509v3 Authority Key Identifier:
keyid:98:C4:7D:ED:77:AC:F5:B8:20:46:A5:1E:C3:8C:F9:EB:BF:9F:09:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:48:2f:f1:da:5e:33:7b:00:40:ac:43:41:2c:2e:2e:74:00:
c0:8e:16:b2:49:fe:6b:40:59:ea:ab:9b:6c:cb:16:25:0c:28:
e6:ac:ea:6c:c3:c5:7c:62:74:e0:f7:5d:d9:f8:c9:a6:66:bd:
a0:bb:0e:bf:76:cf:e6:bc:08:8e:a0:9f:5f:5f:b1:31:02:ed:
39:a8:69:e8:2d:4d:9d:98:bf:b9:6b:c5:3d:c3:a1:c9:72:a8:
87:1c:24:27:79:ff:f0:5f:eb:26:86:4a:a4:c2:4a:f2:4c:c1:
10:f0:0c:26:b4:88:10:93:1d:6a:3b:0f:ce:97:12:ad:c7:45:
3f:02:d8:21:f1:74:90:46:a5:45:14:20:34:65:37:5b:d6:36:
27:0c:90:43:6c:66:9c:9a:53:65:60:fd:50:6f:70:91:6c:48:
f5:4d:68:44:39:20:de:7b:4d:75:48:9a:8d:ac:14:45:7f:03:
76:12:43:4c:79:53:33:cf:e8:08:3c:36:93:61:45:a8:27:bc:
8f:58:9f:97:73:be:a4:c8:17:d6:4b:90:99:7e:9c:28:26:0a:
2c:e6:db:b8:76:0d:54:4e:97:f3:89:8d:36:e0:09:73:3e:7a:
5f:03:76:46:50:26:83:88:60:fb:bd:df:6b:ab:6e:07:9a:e3:
39:82:bb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 07:51:38 2026 by rpki-client