$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft File: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft (raw, json) Hash identifier: xWSzVL39IIs3J5DSbrs7EHmUGN90AhkRYW5WT/CbgGo= Subject key identifier: FF:AB:F6:A0:FE:FE:FF:59:63:93:21:74:9D:5F:3D:06:AC:48:D9:77 Authority key identifier: 98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 Certificate issuer: /CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601 Certificate serial: 1CF65DA607FA99F408D7D1F986E6AB61EEEB8737 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft Manifest number: 018F Signing time: Sat 24 Oct 2026 18:21:52 +0000 Manifest this update: Sat 24 Oct 2026 18:16:52 +0000 Manifest next update: Wed 28 Oct 2026 05:02:52 +0000 Files and hashes: 1: 3137302e3137392e302e302f31362d3234203d3e20313331343836.roa (hash: qat1H617QJwQjY8jG6LbfzleO4RxVlthXXvF9jpIwLY=) 2: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl (hash: pzJ1/oo4XKmQMCoPM51kPg3UY58IaS6YUmKFtB7P1fA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 05:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:f6:5d:a6:07:fa:99:f4:08:d7:d1:f9:86:e6:ab:61:ee:eb:87:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601 Validity Not Before: Oct 24 18:16:52 2026 GMT Not After : Oct 28 05:02:52 2026 GMT Subject: CN=FFABF6A0FEFEFF59639321749D5F3D06AC48D977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:74:b5:62:14:ab:76:2c:c5:2b:ca:09:ce:11: 11:3b:02:d0:5e:24:18:66:e9:5e:c1:98:e7:c7:c8: f5:cb:69:49:3e:7d:09:cb:53:a1:4b:6c:da:29:7c: 0e:f1:c7:6a:ba:6f:c6:45:58:9a:e6:0e:32:af:b7: f3:2b:35:9c:b9:fb:fb:2d:37:4b:44:52:8a:c2:2f: d9:dc:3a:f2:44:b8:2e:fa:fc:c3:69:6d:78:7b:41: 7d:66:51:df:2c:19:98:1e:09:2d:30:a3:30:70:79: b5:a3:4f:8b:06:c6:41:ed:5c:31:1a:ad:82:8e:c2: 8c:22:c2:d6:55:bc:57:74:02:07:ab:22:2a:ff:ea: c8:29:72:87:d4:fe:e4:34:d6:ff:f0:f4:fd:b8:b4: dd:61:10:64:32:3d:b3:13:7f:77:1d:4b:68:ae:b4: 8d:2c:3d:75:b9:89:ae:ec:96:a5:8c:5a:f5:26:16: a3:c1:ec:d7:39:ba:6c:d9:56:ac:16:b8:5e:c2:01: 71:d1:54:ba:38:94:98:9e:b7:56:57:be:fa:6e:c1: ab:38:35:8f:27:f3:a9:db:4f:32:f4:9f:7b:4c:b2: 59:b3:e2:84:ad:fe:33:25:de:48:13:3b:ea:2b:a3: f8:d4:f0:86:54:0c:e7:40:65:23:97:3c:15:22:36: 96:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AB:F6:A0:FE:FE:FF:59:63:93:21:74:9D:5F:3D:06:AC:48:D9:77 X509v3 Authority Key Identifier: keyid:98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:39:eb:b3:48:67:08:09:2b:2d:da:bb:6f:9a:2b:94:ad:ed: b5:88:84:76:96:3c:8d:a5:2c:a2:c3:9b:ab:c3:43:15:ad:6d: f3:29:d9:19:06:93:8e:7a:04:2f:70:64:53:18:9c:46:cc:5a: 15:5c:11:74:8b:74:58:f2:8e:ca:86:b8:20:ac:89:b4:81:8f: 31:1a:0d:24:ce:96:ca:e5:83:00:aa:b2:56:13:47:42:5e:65: 6a:36:06:8b:49:40:e3:87:f6:75:d6:07:0e:91:46:d6:64:c3: d0:37:02:53:1f:b0:ee:c3:cc:08:d1:24:81:04:f1:5a:83:92: cd:28:b7:45:3f:e6:55:6f:7d:4f:85:79:07:fd:87:91:61:1b: 9e:b6:ad:48:7b:10:5f:18:6b:50:3a:95:aa:68:34:79:1d:fe: a3:29:c6:b5:1d:2b:ed:b6:71:e1:53:fb:9a:c2:18:d7:68:52: d0:aa:f6:f7:de:fa:05:3b:5a:0d:56:53:65:19:e1:e0:28:37: b5:fb:14:c8:a5:7f:c5:e7:6f:b4:51:b8:79:96:57:3b:25:48: 51:26:81:5c:9e:28:73:bc:4a:a9:4e:75:64:69:67:92:e3:dc: 4f:34:2a:4e:84:26:3d:ec:83:f5:10:95:47:0c:1d:82:d7:61: 05:0a:49:09 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHPZdpgf6mfQI19H5huarYe7rhzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgzMTlBM0JDOEY4Q0ZENEZCQjM4QzczMURCRkVDMTBB QzA1MzYwMTAeFw0yNjEwMjQxODE2NTJaFw0yNjEwMjgwNTAyNTJaMDMxMTAvBgNV BAMTKEZGQUJGNkEwRkVGRUZGNTk2MzkzMjE3NDlENUYzRDA2QUM0OEQ5NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzdLViFKt2LMUrygnOERE7AtBe JBhm6V7BmOfHyPXLaUk+fQnLU6FLbNopfA7xx2q6b8ZFWJrmDjKvt/MrNZy5+/st N0tEUorCL9ncOvJEuC76/MNpbXh7QX1mUd8sGZgeCS0wozBwebWjT4sGxkHtXDEa rYKOwowiwtZVvFd0AgerIir/6sgpcofU/uQ01v/w9P24tN1hEGQyPbMTf3cdS2iu tI0sPXW5ia7slqWMWvUmFqPB7Nc5umzZVqwWuF7CAXHRVLo4lJiet1ZXvvpuwas4 NY8n86nbTzL0n3tMslmz4oSt/jMl3kgTO+oro/jU8IZUDOdAZSOXPBUiNpb/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/6v2oP7+/1ljkyF0nV89BqxI2XcwHwYDVR0j BBgwFoAUmDGaO8j4z9T7s4xzHb/sEKwFNgEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8xLzk4MzE5QTNCQzhGOENGRDRGQkIzOEM3MzFEQkZF QzEwQUMwNTM2MDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOTgzMTlBM0JDOEY4Q0ZENEZCQjM4QzczMURCRkVDMTBBQzA1MzYwMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjgzNjM1OTk3OTA5OTc1MDYvMS85ODMxOUEzQkM4RjhD RkQ0RkJCMzhDNzMxREJGRUMxMEFDMDUzNjAxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTnrs0hnCAkr Ldq7b5orlK3ttYiEdpY8jaUsosObq8NDFa1t8ynZGQaTjnoEL3BkUxicRsxaFVwR dIt0WPKOyoa4IKyJtIGPMRoNJM6WyuWDAKqyVhNHQl5lajYGi0lA44f2ddYHDpFG 1mTD0DcCUx+w7sPMCNEkgQTxWoOSzSi3RT/mVW99T4V5B/2HkWEbnratSHsQXxhr UDqVqmg0eR3+oynGtR0r7bZx4VP7msIY12hS0Kr29976BTtaDVZTZRnh4Cg3tfsU yKV/xedvtFG4eZZXOyVIUSaBXJ4oc7xKqU51ZGlnkuPcTzQqToQmPeyD9RCVRwwd gtdhBQpJCQ== -----END CERTIFICATE-----Generated at Sun Oct 25 20:08:52 2026 by rpki-client