$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft File: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft (raw, json) Hash identifier: El+G+MNRHFDlhau6SnkjYBV3ktoIPjjZCNeGLsp2OUA= Subject key identifier: 80:14:1D:4B:D3:D5:98:18:80:63:D2:44:2D:BA:3C:83:57:B8:43:71 Authority key identifier: 98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 Certificate issuer: /CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601 Certificate serial: 71CABE660F9F0952D81F51FBBFD223BB3E2A12A1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft Manifest number: 0142 Signing time: Tue 21 Jul 2026 21:29:44 +0000 Manifest this update: Tue 21 Jul 2026 21:24:44 +0000 Manifest next update: Wed 22 Jul 2026 22:20:44 +0000 Files and hashes: 1: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl (hash: TNOIDUUapNMckxuVJVO2lge5Gr55J6kO6zX4E4nS3XA=) 2: 3137302e3137392e302e302f31362d3234203d3e20313331343836.roa (hash: qat1H617QJwQjY8jG6LbfzleO4RxVlthXXvF9jpIwLY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 21:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ca:be:66:0f:9f:09:52:d8:1f:51:fb:bf:d2:23:bb:3e:2a:12:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601 Validity Not Before: Jul 21 21:24:44 2026 GMT Not After : Jul 22 22:20:44 2026 GMT Subject: CN=80141D4BD3D598188063D2442DBA3C8357B84371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a2:b0:51:ae:33:c9:8a:7e:8d:f4:cd:34:d1: 5b:3e:e3:95:b6:5e:54:19:bd:74:27:4c:a0:2a:01: c3:66:82:ef:7e:b9:a8:d2:a5:db:f7:00:71:b6:3f: db:e3:86:07:45:ff:3d:bf:a1:e2:fb:23:ec:59:9e: d8:ba:ed:85:2b:4f:e0:42:c2:05:18:39:78:85:b7: 8a:7e:41:64:d5:bb:1f:88:b4:ab:b2:84:fe:c2:31: 18:09:fb:62:32:bb:a5:16:c2:38:0b:3d:de:f3:46: e4:5a:25:a9:01:e1:24:a3:b5:04:94:5a:91:bf:e8: 60:e8:f8:e5:fc:e4:0c:db:65:6d:45:9e:dd:35:ed: a4:6e:80:b1:f5:84:50:60:25:08:27:e1:74:97:a0: c4:b0:4d:45:1d:6f:04:5f:e1:06:12:f9:22:31:b7: b0:6b:3b:48:b8:5f:47:60:ba:bc:5f:99:9c:b7:ac: 1c:85:ce:f7:e7:51:c9:b2:0a:d7:03:56:65:5d:6f: 3a:cc:d4:60:a6:38:d2:36:9b:b3:68:3a:bb:29:c4: 75:8c:0f:7e:c9:fc:12:95:b7:89:b9:40:0c:9f:e6: 43:86:c9:1c:06:11:2c:3a:c3:49:da:60:55:d0:5a: 03:34:18:47:89:f1:2a:f7:72:3e:1d:d2:60:e5:74: ed:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:14:1D:4B:D3:D5:98:18:80:63:D2:44:2D:BA:3C:83:57:B8:43:71 X509v3 Authority Key Identifier: keyid:98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:8f:3f:9e:8f:4e:77:db:a0:d8:05:6b:d2:80:c0:fc:a8:2c: a2:a4:5b:b2:97:b0:2a:75:00:8c:89:0b:ac:e8:15:2e:25:fb: ff:41:b8:a5:de:27:d2:ad:1d:c9:47:ac:d3:3c:94:23:fd:03: 79:09:04:9a:33:38:d7:bf:1e:30:2f:3e:29:b0:08:d7:33:50: 36:37:f8:be:0b:7e:5d:05:c2:8c:39:55:5b:d7:0b:34:ef:13: 62:bf:18:12:92:76:5e:c3:3e:8a:5b:41:4a:97:b8:f9:a6:a6: 68:11:1c:dc:cd:07:af:d3:52:4f:71:5f:e0:0d:e6:8e:10:21: 4f:67:14:8b:65:13:26:29:44:25:5d:74:8c:be:6c:a8:fd:d3: f7:d1:8e:95:fc:bc:ff:23:50:7e:9f:9a:5a:25:35:ff:3d:03: d0:bc:61:a2:42:33:f3:17:e7:a7:d8:30:d5:fd:02:e0:47:64: 06:cb:65:6d:92:4a:29:57:2b:31:95:14:40:f3:0b:46:25:07: cc:c5:ac:81:e4:2f:86:e7:65:21:60:3f:37:75:80:00:64:42: 41:2e:66:a5:7f:2a:2e:bd:89:23:c5:44:1e:11:c3:1c:7b:34: 58:5d:55:a5:0f:2e:09:f7:b4:1c:9a:ba:54:32:98:08:fb:4d: bb:7e:c7:2a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUccq+Zg+fCVLYH1H7v9Ijuz4qEqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgzMTlBM0JDOEY4Q0ZENEZCQjM4QzczMURCRkVDMTBB QzA1MzYwMTAeFw0yNjA3MjEyMTI0NDRaFw0yNjA3MjIyMjIwNDRaMDMxMTAvBgNV BAMTKDgwMTQxRDRCRDNENTk4MTg4MDYzRDI0NDJEQkEzQzgzNTdCODQzNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6orBRrjPJin6N9M000Vs+45W2 XlQZvXQnTKAqAcNmgu9+uajSpdv3AHG2P9vjhgdF/z2/oeL7I+xZnti67YUrT+BC wgUYOXiFt4p+QWTVux+ItKuyhP7CMRgJ+2Iyu6UWwjgLPd7zRuRaJakB4SSjtQSU WpG/6GDo+OX85AzbZW1Fnt017aRugLH1hFBgJQgn4XSXoMSwTUUdbwRf4QYS+SIx t7BrO0i4X0dgurxfmZy3rByFzvfnUcmyCtcDVmVdbzrM1GCmONI2m7NoOrspxHWM D37J/BKVt4m5QAyf5kOGyRwGESw6w0naYFXQWgM0GEeJ8Sr3cj4d0mDldO0nAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgBQdS9PVmBiAY9JELbo8g1e4Q3EwHwYDVR0j BBgwFoAUmDGaO8j4z9T7s4xzHb/sEKwFNgEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8xLzk4MzE5QTNCQzhGOENGRDRGQkIzOEM3MzFEQkZF QzEwQUMwNTM2MDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOTgzMTlBM0JDOEY4Q0ZENEZCQjM4QzczMURCRkVDMTBBQzA1MzYwMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjgzNjM1OTk3OTA5OTc1MDYvMS85ODMxOUEzQkM4RjhD RkQ0RkJCMzhDNzMxREJGRUMxMEFDMDUzNjAxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAho8/no9Od9ug 2AVr0oDA/KgsoqRbspewKnUAjIkLrOgVLiX7/0G4pd4n0q0dyUes0zyUI/0DeQkE mjM4178eMC8+KbAI1zNQNjf4vgt+XQXCjDlVW9cLNO8TYr8YEpJ2XsM+iltBSpe4 +aamaBEc3M0Hr9NST3Ff4A3mjhAhT2cUi2UTJilEJV10jL5sqP3T99GOlfy8/yNQ fp+aWiU1/z0D0LxhokIz8xfnp9gw1f0C4EdkBstlbZJKKVcrMZUUQPMLRiUHzMWs geQvhudlIWA/N3WAAGRCQS5mpX8qLr2JI8VEHhHDHHs0WF1VpQ8uCfe0HJq6VDKY CPtNu37HKg== -----END CERTIFICATE-----Generated at Tue Jul 21 22:46:58 2026 by rpki-client