$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft File: 098D421CB46F292F13CE71DF3D685D5E82893289.mft (raw, json) Hash identifier: JQivBVAmzwiKKipyi6VZNEOyRr2XLoSXPhSeFH9Vgws= Subject key identifier: 06:5E:3B:90:B4:46:44:E1:DF:42:D5:DB:40:91:F8:88:31:6E:2C:66 Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289 Certificate serial: 158950CA57B0B09158F1A82D67A8907F055267FF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft Manifest number: 70 Signing time: Mon 13 Apr 2026 05:14:17 +0000 Manifest this update: Mon 13 Apr 2026 05:09:17 +0000 Manifest next update: Tue 14 Apr 2026 06:11:17 +0000 Files and hashes: 1: 3132322e31312e302e302f31392d3139203d3e203633353636.roa (hash: WA5zg0AZiOq5/XX/UbhAjR810o8hOdpxMzpDns/KOgQ=) 2: 3131382e3139342e35392e302f32342d3234203d3e203633353636.roa (hash: Si5VCZPqJR4AtJTNpPyk8CpFW/h/ob/tIo3FuK/Kt9M=) 3: 3130332e3235322e3234382e302f32342d3234203d3e203633353636.roa (hash: 4DEH4Fk4BDxr9Vha6E1J1M4/mfTr2k2F+9iMhfx9RXE=) 4: 098D421CB46F292F13CE71DF3D685D5E82893289.crl (hash: HYNaeFSCG67DJJ0HUd1uTDdOHzqYjFxYSvzrrrE8+fM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:89:50:ca:57:b0:b0:91:58:f1:a8:2d:67:a8:90:7f:05:52:67:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289 Validity Not Before: Apr 13 05:09:17 2026 GMT Not After : Apr 14 06:11:17 2026 GMT Subject: CN=065E3B90B44644E1DF42D5DB4091F888316E2C66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:34:3a:e7:11:dc:2d:e3:fa:33:29:ab:9c:64: 1f:18:12:bf:5e:3f:6b:d4:e5:b2:9d:a2:47:6a:cd: d3:7a:95:a4:13:4d:9b:18:40:14:f0:56:12:4a:ef: aa:62:55:2f:69:79:81:dc:47:a2:3e:c1:2a:b5:42: 70:18:a6:86:65:b6:bc:7f:2f:5e:d1:75:23:7b:70: 2a:3d:51:d0:ac:9c:d8:1d:c2:27:c5:b1:51:24:b5: 1e:75:e0:8d:14:42:c1:2c:c3:39:d1:8f:46:5f:41: 5b:78:59:82:86:ce:1b:d9:7e:c5:c6:86:bf:0c:14: 08:bb:df:78:77:44:bd:db:e0:13:05:a3:a8:a5:5a: 06:53:cc:26:40:b3:e4:ef:42:89:ed:ad:e9:f6:0e: 7b:9e:bc:7d:e0:f2:46:ce:d2:8d:ef:64:09:ea:95: 69:4d:10:d7:e7:27:0c:76:4f:16:7f:e5:83:e5:a9: 02:3e:51:92:87:d6:d2:8d:38:cb:e1:66:a3:fe:ed: b3:00:2f:f2:5f:36:99:af:c0:cd:f7:c7:34:b3:8c: bc:b8:6f:3a:74:63:2a:2e:06:06:6b:b7:29:06:25: 21:97:5d:01:34:70:b4:5e:1d:86:3c:a9:38:4a:05: 4b:38:7b:39:cd:56:b5:0e:06:26:78:a2:75:1e:12: 08:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:5E:3B:90:B4:46:44:E1:DF:42:D5:DB:40:91:F8:88:31:6E:2C:66 X509v3 Authority Key Identifier: keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f7:04:c4:1e:e4:ae:63:fa:7c:94:4a:17:22:1a:83:9e:67: b5:45:c3:9b:c5:db:df:1a:63:df:51:f5:6c:04:60:53:42:fb: 2f:50:11:1b:b7:14:47:f0:18:4d:ef:f6:06:75:ca:df:21:d6: 1c:b9:55:b5:81:d9:ca:39:2a:1f:f5:5f:cc:81:2c:74:f9:a4: 4a:7a:6b:d8:3c:1a:56:9c:e8:a3:7b:d6:d6:f1:81:ed:40:a7: cd:12:c6:83:2d:a2:63:19:06:5f:de:d0:e8:cb:c6:c3:bb:1d: d7:38:db:fd:c8:d5:48:06:7e:21:2b:0b:12:83:9a:18:40:27: 88:8e:6b:ad:c7:a6:43:f2:17:f2:2b:82:f4:eb:9d:2a:62:ed: 02:d6:ed:7f:d9:48:81:98:f9:14:f8:32:17:ca:78:ad:85:52: 0c:7f:1f:e1:d7:be:3b:fa:96:09:b7:32:f9:bf:83:78:ab:1d: bb:d5:e1:a5:0c:8e:b6:7d:09:7c:85:f9:51:c0:86:02:f5:ec: ce:31:55:9e:f0:bb:23:ba:e8:1a:b8:9f:7d:44:b5:a9:83:be: 92:e7:b0:d2:2e:ee:18:6c:6f:35:32:33:23:fa:c5:f6:4c:3d: 24:b8:52:b2:d2:ae:3f:82:fb:11:fe:9a:12:ff:6f:55:e9:61: ac:18:0c:c9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFYlQylewsJFY8agtZ6iQfwVSZ/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4 Mjg5MzI4OTAeFw0yNjA0MTMwNTA5MTdaFw0yNjA0MTQwNjExMTdaMDMxMTAvBgNV BAMTKDA2NUUzQjkwQjQ0NjQ0RTFERjQyRDVEQjQwOTFGODg4MzE2RTJDNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeNDrnEdwt4/ozKaucZB8YEr9e P2vU5bKdokdqzdN6laQTTZsYQBTwVhJK76piVS9peYHcR6I+wSq1QnAYpoZltrx/ L17RdSN7cCo9UdCsnNgdwifFsVEktR514I0UQsEswznRj0ZfQVt4WYKGzhvZfsXG hr8MFAi733h3RL3b4BMFo6ilWgZTzCZAs+TvQontren2DnuevH3g8kbO0o3vZAnq lWlNENfnJwx2TxZ/5YPlqQI+UZKH1tKNOMvhZqP+7bMAL/JfNpmvwM33xzSzjLy4 bzp0YyouBgZrtykGJSGXXQE0cLReHYY8qThKBUs4eznNVrUOBiZ4onUeEggbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBl47kLRGROHfQtXbQJH4iDFuLGYwHwYDVR0j BBgwFoAUCY1CHLRvKS8TznHfPWhdXoKJMokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzY2MjQ2Ni8wLzA5OEQ0MjFDQjQ2RjI5MkYxM0NFNzFERjNENjg1 RDVFODI4OTMyODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4Mjg5MzI4OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc2NjI0NjYvMC8wOThENDIxQ0I0NkYy OTJGMTNDRTcxREYzRDY4NUQ1RTgyODkzMjg5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfcExB7krmP6 fJRKFyIag55ntUXDm8Xb3xpj31H1bARgU0L7L1ARG7cUR/AYTe/2BnXK3yHWHLlV tYHZyjkqH/VfzIEsdPmkSnpr2DwaVpzoo3vW1vGB7UCnzRLGgy2iYxkGX97Q6MvG w7sd1zjb/cjVSAZ+ISsLEoOaGEAniI5rrcemQ/IX8iuC9OudKmLtAtbtf9lIgZj5 FPgyF8p4rYVSDH8f4de+O/qWCbcy+b+DeKsdu9XhpQyOtn0JfIX5UcCGAvXszjFV nvC7I7roGriffUS1qYO+kuew0i7uGGxvNTIzI/rF9kw9JLhSstKuP4L7Ef6aEv9v VelhrBgMyQ== -----END CERTIFICATE-----Generated at Mon Apr 13 11:04:51 2026 by rpki-client