$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft File: 098D421CB46F292F13CE71DF3D685D5E82893289.mft (raw, json) Hash identifier: 9I25+tNG7JXiz0v/Sa1oSgZ9SVXkOvq5SXYA9xKFUqA= Subject key identifier: 88:1E:5C:C4:28:19:3E:27:81:5C:77:51:58:E5:2D:D1:B4:81:28:75 Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289 Certificate serial: 08E075CAF558B9063EE3B294B4D039453AA3383B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft Manifest number: AD Signing time: Fri 29 May 2026 07:02:42 +0000 Manifest this update: Fri 29 May 2026 06:57:42 +0000 Manifest next update: Sat 30 May 2026 10:29:42 +0000 Files and hashes: 1: 3132322e31312e302e302f31392d3139203d3e203633353636.roa (hash: WA5zg0AZiOq5/XX/UbhAjR810o8hOdpxMzpDns/KOgQ=) 2: 098D421CB46F292F13CE71DF3D685D5E82893289.crl (hash: 5k116fkDgsiia/z1RSO/byVPUx5Fw+i4IC11fv7dHTE=) 3: 3130332e3235322e3234382e302f32342d3234203d3e203633353636.roa (hash: 4DEH4Fk4BDxr9Vha6E1J1M4/mfTr2k2F+9iMhfx9RXE=) 4: 3131382e3139342e35392e302f32342d3234203d3e203633353636.roa (hash: Si5VCZPqJR4AtJTNpPyk8CpFW/h/ob/tIo3FuK/Kt9M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 10:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:e0:75:ca:f5:58:b9:06:3e:e3:b2:94:b4:d0:39:45:3a:a3:38:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289 Validity Not Before: May 29 06:57:42 2026 GMT Not After : May 30 10:29:42 2026 GMT Subject: CN=881E5CC428193E27815C775158E52DD1B4812875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ae:7a:69:a7:90:2e:e3:54:bc:4e:22:96:6c: e9:f3:9f:42:c9:6b:9a:29:9b:a9:03:00:fd:1e:6c: 85:53:b5:46:ce:2b:bd:5e:84:ee:e9:0e:73:f9:a6: 9d:5c:b3:8c:52:34:81:99:a0:f2:0b:d8:14:48:e5: 92:bd:62:6d:2d:56:17:f6:55:cb:12:47:c2:4f:7e: d4:8a:2a:ef:df:79:c2:4f:ee:54:dd:73:f1:af:a3: 54:0e:a1:26:5c:44:20:e4:43:a6:74:c7:0c:34:e5: db:fe:86:0f:7e:1b:7c:f1:48:bf:cc:03:5a:95:9b: 15:c3:7a:6c:90:70:7a:f4:8b:b1:d1:da:c8:3c:22: 34:06:6a:b0:b0:06:06:80:1a:d9:4a:4f:ee:2e:6c: dc:bd:7e:33:b8:f1:54:4e:1a:b6:d9:5e:16:2e:d5: c1:a8:7e:a3:c9:f7:6e:7e:2f:c1:d8:fa:2a:e0:fb: ff:2b:5e:2a:2e:fa:05:a5:91:7c:92:02:28:11:79: ae:d2:22:27:b9:2e:34:6e:22:a7:ee:b7:f9:83:5f: 23:88:c1:82:82:f9:f5:89:63:f0:59:21:d3:20:16: ad:b9:96:49:d1:1e:b9:de:51:2b:1a:8b:24:5d:73: 56:88:3e:fe:9b:ad:29:c4:55:f5:4d:b2:64:45:ac: ed:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1E:5C:C4:28:19:3E:27:81:5C:77:51:58:E5:2D:D1:B4:81:28:75 X509v3 Authority Key Identifier: keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:82:ff:5d:49:7b:88:f8:3e:c3:05:bf:f1:c5:b1:e1:a0:c7: 25:b3:4e:78:44:68:20:60:12:e0:a4:2e:0d:68:bf:1d:0f:2b: 7a:e8:61:87:c5:d1:8b:fc:ec:51:79:5f:a2:39:aa:15:3a:0c: b7:90:c7:4e:6a:41:e8:2a:90:c1:d9:f4:22:7e:bf:35:97:2f: 91:b8:2a:43:78:0f:9d:f7:1f:4b:6e:24:b0:3b:37:21:5f:65: 89:ca:9d:f8:a7:cb:dd:c4:fc:da:a5:ce:13:34:9b:61:3e:b4: 32:0c:64:32:06:6f:28:2b:6e:7e:84:42:e0:23:fa:75:3f:53: 22:79:4f:9e:ac:3f:8a:1b:e1:98:b9:8d:e3:2f:35:4e:01:df: 1f:5b:5a:a2:28:0f:a7:c3:2a:3b:30:f4:a1:bf:bf:2a:af:07: f0:d2:b5:93:52:41:72:ca:a1:b5:a2:88:ed:0e:92:61:13:a1: 3b:18:5a:65:ed:4a:2a:44:69:e7:16:b9:08:98:7f:50:13:8d: 19:b0:70:1b:2c:07:29:f3:bf:ac:c7:dc:92:5f:9b:f5:62:c3: 26:3d:31:2a:a5:80:a2:17:c1:c7:33:20:f0:2e:dd:97:bc:d7: a6:1b:ed:73:5a:d8:23:03:08:42:c7:31:26:b3:5b:9e:95:71: 6e:15:72:4c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCOB1yvVYuQY+47KUtNA5RTqjODswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4 Mjg5MzI4OTAeFw0yNjA1MjkwNjU3NDJaFw0yNjA1MzAxMDI5NDJaMDMxMTAvBgNV BAMTKDg4MUU1Q0M0MjgxOTNFMjc4MTVDNzc1MTU4RTUyREQxQjQ4MTI4NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5rnppp5Au41S8TiKWbOnzn0LJ a5opm6kDAP0ebIVTtUbOK71ehO7pDnP5pp1cs4xSNIGZoPIL2BRI5ZK9Ym0tVhf2 VcsSR8JPftSKKu/fecJP7lTdc/Gvo1QOoSZcRCDkQ6Z0xww05dv+hg9+G3zxSL/M A1qVmxXDemyQcHr0i7HR2sg8IjQGarCwBgaAGtlKT+4ubNy9fjO48VROGrbZXhYu 1cGofqPJ925+L8HY+irg+/8rXiou+gWlkXySAigRea7SIie5LjRuIqfut/mDXyOI wYKC+fWJY/BZIdMgFq25lknRHrneUSsaiyRdc1aIPv6brSnEVfVNsmRFrO3RAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiB5cxCgZPieBXHdRWOUt0bSBKHUwHwYDVR0j BBgwFoAUCY1CHLRvKS8TznHfPWhdXoKJMokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzY2MjQ2Ni8wLzA5OEQ0MjFDQjQ2RjI5MkYxM0NFNzFERjNENjg1 RDVFODI4OTMyODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4Mjg5MzI4OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1Nzc2NjI0NjYvMC8wOThENDIxQ0I0NkYy OTJGMTNDRTcxREYzRDY4NUQ1RTgyODkzMjg5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYL/XUl7iPg+ wwW/8cWx4aDHJbNOeERoIGAS4KQuDWi/HQ8reuhhh8XRi/zsUXlfojmqFToMt5DH TmpB6CqQwdn0In6/NZcvkbgqQ3gPnfcfS24ksDs3IV9licqd+KfL3cT82qXOEzSb YT60MgxkMgZvKCtufoRC4CP6dT9TInlPnqw/ihvhmLmN4y81TgHfH1taoigPp8Mq OzD0ob+/Kq8H8NK1k1JBcsqhtaKI7Q6SYROhOxhaZe1KKkRp5xa5CJh/UBONGbBw GywHKfO/rMfckl+b9WLDJj0xKqWAohfBxzMg8C7dl7zXphvtc1rYIwMIQscxJrNb npVxbhVyTA== -----END CERTIFICATE-----Generated at Fri May 29 22:05:21 2026 by rpki-client