
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
File: 098D421CB46F292F13CE71DF3D685D5E82893289.mft (raw, json)
Hash identifier: wwYKslTwvyPg+4EB87cZNevXGv/l/TEUUB4bspohFPw=
Subject key identifier: 35:93:C6:DE:3D:8C:BE:34:F4:A6:68:A7:F7:77:F2:62:39:43:22:E6
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial: 24DE9E8495CCB72DD02C184A86B670D43A00C3A2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
Manifest number: 2F
Signing time: Mon 23 Feb 2026 00:47:30 +0000
Manifest this update: Mon 23 Feb 2026 00:42:30 +0000
Manifest next update: Tue 24 Feb 2026 02:42:30 +0000
Files and hashes: 1: 3132322e31312e302e302f31392d3139203d3e203633353636.roa (hash: WA5zg0AZiOq5/XX/UbhAjR810o8hOdpxMzpDns/KOgQ=)
2: 098D421CB46F292F13CE71DF3D685D5E82893289.crl (hash: BWxnq/W4+pfqYODfp5GXeOm/KlqQfBvcB9Ask2OlA6o=)
3: 3131382e3139342e35392e302f32342d3234203d3e203633353636.roa (hash: Si5VCZPqJR4AtJTNpPyk8CpFW/h/ob/tIo3FuK/Kt9M=)
4: 3130332e3235322e3234382e302f32342d3234203d3e203633353636.roa (hash: 4DEH4Fk4BDxr9Vha6E1J1M4/mfTr2k2F+9iMhfx9RXE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:de:9e:84:95:cc:b7:2d:d0:2c:18:4a:86:b6:70:d4:3a:00:c3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
Validity
Not Before: Feb 23 00:42:30 2026 GMT
Not After : Feb 24 02:42:30 2026 GMT
Subject: CN=3593C6DE3D8CBE34F4A668A7F777F262394322E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:3e:2c:64:d7:ac:a1:83:2c:c7:53:2b:78:
9a:fc:50:d2:dc:6c:ae:2a:2e:c6:ff:c2:17:ae:b4:
06:5e:0a:35:bf:81:04:4e:ae:4e:a6:1f:0b:5f:ae:
5e:6a:f2:09:41:92:28:97:9e:de:c1:84:20:03:00:
1d:1b:bb:d4:67:3d:93:cc:e9:2e:cc:d8:c7:dd:c5:
9f:b2:6c:9c:6f:c4:41:dd:4e:3a:e2:f7:21:92:59:
65:ee:6b:fc:3b:51:46:96:47:fc:54:a2:1c:75:44:
28:5a:01:2a:12:66:44:ae:6e:c0:af:09:e3:c4:fc:
01:b9:ff:0d:74:3d:ee:69:db:c0:29:b2:5c:95:91:
9c:03:bf:c1:f8:4d:23:45:08:29:ea:16:e7:0d:98:
1b:e7:2c:df:1d:b0:92:9a:45:b6:c5:33:1d:bf:b4:
c1:12:0f:b1:2c:07:57:f2:86:25:3d:f6:fd:51:de:
25:e2:f5:81:de:ef:59:35:07:f2:1b:ad:91:08:1d:
de:77:93:e8:50:17:e9:1d:ae:73:20:ed:01:ba:74:
68:2a:b1:c5:29:3b:94:83:63:d2:2c:da:8b:1b:73:
e5:ef:9b:37:20:98:c2:b2:0d:dd:c7:b5:2b:5e:9b:
c7:f6:06:00:1e:4e:f8:b6:78:0d:7c:56:63:f5:64:
7d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:93:C6:DE:3D:8C:BE:34:F4:A6:68:A7:F7:77:F2:62:39:43:22:E6
X509v3 Authority Key Identifier:
keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a8:77:ca:d8:76:3d:8c:2d:94:98:79:87:4e:59:43:49:71:
4e:4b:62:53:c3:d8:4e:55:14:04:80:e8:d1:e7:28:74:15:b2:
26:67:03:fe:d2:71:97:c4:84:4d:5f:38:bb:5f:b5:1d:77:50:
c6:c9:4f:d5:75:bd:ea:44:84:6f:c2:9c:6e:bb:c4:dd:e5:bd:
32:3c:cd:01:91:41:6d:5f:07:f5:f2:41:f6:a0:31:15:14:75:
8e:02:47:5a:b8:1f:d7:42:86:15:11:ff:c0:64:2f:fb:31:e2:
bc:da:80:de:23:be:fe:82:f0:22:85:dd:c3:a6:4a:04:f3:e9:
85:e8:99:99:d3:3f:15:2a:0a:2a:5f:ff:6d:01:96:78:9b:48:
59:dc:d7:7f:22:e0:6f:08:95:85:d5:69:e8:64:a0:ea:f2:df:
7b:b7:1a:a9:43:a2:a4:7b:11:dc:6f:75:54:7c:11:4d:2c:aa:
68:a2:6e:ce:20:74:4c:74:1c:23:b7:5c:b4:21:46:16:67:bd:
a5:79:34:41:4a:fd:c3:26:a6:3d:15:d0:27:94:51:d3:49:74:
37:92:e7:b8:d2:45:0a:a4:be:9c:45:c9:f9:bd:10:13:f6:cc:
4e:4b:e6:a1:98:19:ee:00:ec:92:e2:4d:9c:b7:3c:21:d5:42:
be:60:5b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:08:15 2026 by rpki-client