
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft
File: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft (raw, json)
Hash identifier: LpKv7BhfH+MhbXJSUvzg7IZdbpK+k1g9IffFeC3Y5G0=
Subject key identifier: D7:E0:6A:51:50:E2:78:1F:B1:8F:73:44:C0:89:59:31:26:EB:96:88
Authority key identifier: 98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01
Certificate issuer: /CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601
Certificate serial: 0126299B9D7739269918806FF6CDDFF9A8D4E888
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft
Manifest number: 0103
Signing time: Wed 03 Jun 2026 23:34:00 +0000
Manifest this update: Wed 03 Jun 2026 23:29:00 +0000
Manifest next update: Fri 05 Jun 2026 03:25:00 +0000
Files and hashes: 1: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl (hash: bFZ+yRONDQ23RdbgXZYGxSeYxjgGbEKMqn0g+Slekdo=)
2: 3137302e3137392e302e302f31362d3234203d3e20313331343836.roa (hash: qat1H617QJwQjY8jG6LbfzleO4RxVlthXXvF9jpIwLY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl
rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Jun 2026 03:25:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:26:29:9b:9d:77:39:26:99:18:80:6f:f6:cd:df:f9:a8:d4:e8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601
Validity
Not Before: Jun 3 23:29:00 2026 GMT
Not After : Jun 5 03:25:00 2026 GMT
Subject: CN=D7E06A5150E2781FB18F7344C089593126EB9688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:93:6e:0b:4d:f5:30:4d:a1:bf:84:78:c1:c2:
8f:51:76:4c:85:3b:bc:c3:25:ee:0d:ce:38:a6:95:
84:19:bf:cf:5a:9e:5d:a2:d7:34:5f:fd:d9:f8:fe:
e6:23:af:e2:a6:28:8a:2e:33:fa:d6:df:54:4b:fb:
35:c5:58:55:9a:08:96:84:b0:b0:d1:4c:06:87:6b:
91:2b:39:b2:1e:5d:a4:5a:9a:d5:b1:02:a2:a9:06:
f9:31:86:61:ac:a3:b8:ab:5b:0f:2e:d2:a9:68:aa:
61:06:ac:b2:cd:f1:39:fc:ed:49:b0:1d:e8:12:fa:
fc:87:0c:dd:9b:91:16:ab:71:68:c1:53:d4:35:b2:
d2:67:ed:7b:41:ac:13:c5:61:76:ab:44:61:70:76:
9d:d6:31:54:d0:43:a6:70:8a:d6:e2:2c:fa:4b:9f:
5f:d2:eb:37:9a:99:91:51:7b:25:4d:4b:1b:83:c0:
8e:7e:1b:cc:f8:74:e5:b2:71:1f:b8:fc:18:f8:f4:
ca:10:0c:62:ff:b3:8b:ab:36:a2:a1:af:82:ec:ca:
92:c6:47:c8:79:b6:ff:28:79:a2:1f:3c:72:13:1e:
df:c7:c7:44:a8:58:78:6c:77:fc:e5:33:2a:20:8f:
96:36:e3:cb:f7:58:78:f0:a0:c6:3c:49:ac:3a:ec:
14:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E0:6A:51:50:E2:78:1F:B1:8F:73:44:C0:89:59:31:26:EB:96:88
X509v3 Authority Key Identifier:
keyid:98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a4:61:e7:d8:29:9e:1f:85:f5:6f:58:3d:2d:44:12:93:b4:
41:5d:bc:fe:27:60:63:25:02:4b:6f:2b:8f:14:34:49:da:4d:
f0:7d:8f:ed:b9:c5:50:fc:7b:a2:a0:2c:56:d4:c3:fc:c7:c2:
5a:f0:ad:4b:02:df:19:bc:82:af:59:99:cd:f6:8e:e0:d9:e6:
fb:b5:fd:52:85:45:49:63:08:8d:e6:9f:8b:4e:95:4d:19:af:
65:67:43:dc:1c:6c:f1:e8:2b:5c:84:3e:cd:0d:ba:08:79:13:
44:00:5c:b0:a8:02:7e:a8:04:6a:0d:8e:ce:34:98:65:da:99:
73:bb:15:d5:70:62:f4:07:c3:8c:e1:65:cd:5e:7c:0a:a6:64:
37:85:27:68:b2:7b:de:8b:40:c5:21:6c:ef:a6:31:62:aa:06:
93:8f:0e:4f:33:6e:a7:b5:ac:cc:bb:9e:de:89:ad:fa:74:14:
26:b0:64:d4:1a:34:bf:7b:4f:0c:ae:dc:ae:61:e5:b4:67:70:
3d:e2:3b:7b:ba:6b:0d:e0:6a:ad:a3:22:08:a6:ed:89:51:7f:
d6:79:63:62:c3:d9:7c:60:9e:ca:99:b4:82:79:4e:cb:14:47:
9e:35:01:07:4c:0a:ea:42:17:e1:34:4e:48:a3:53:60:ef:56:
a4:2f:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:09:35 2026 by rpki-client