$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft File: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft (raw, json) Hash identifier: uuJICMQqUyAT2m3JDfGWdnnKUvkEZ7vy3F53x6OPDvk= Subject key identifier: D4:36:5A:EA:83:E9:CA:2E:62:3B:41:85:5A:6E:19:95:3A:13:11:A4 Authority key identifier: 98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 Certificate issuer: /CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601 Certificate serial: 77FB64FA154A35ADB07423277BA4D42DFE4FDF71 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft Manifest number: 34 Signing time: Wed 04 Mar 2026 08:37:31 +0000 Manifest this update: Wed 04 Mar 2026 08:32:31 +0000 Manifest next update: Thu 05 Mar 2026 10:57:31 +0000 Files and hashes: 1: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl (hash: KZCkLNOwca0p+3yB8MZCrrjzfgq9vSzgP80n+grGIh4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:fb:64:fa:15:4a:35:ad:b0:74:23:27:7b:a4:d4:2d:fe:4f:df:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601 Validity Not Before: Mar 4 08:32:31 2026 GMT Not After : Mar 5 10:57:31 2026 GMT Subject: CN=D4365AEA83E9CA2E623B41855A6E19953A1311A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2a:5c:e0:68:1d:7c:1e:aa:2a:22:fd:19:82: 15:ac:e9:ba:a5:9f:ed:0b:ca:31:e0:53:8d:40:cb: 27:43:f1:8f:79:df:8f:49:91:15:b8:c4:15:92:f1: de:49:37:28:7c:e5:3f:42:c3:72:7d:e2:19:b7:63: ef:ee:ac:04:c9:51:4c:42:1b:85:f3:b0:0a:2a:07: ac:2b:0d:fb:5b:cb:0a:84:23:5c:f0:2d:a8:22:29: e5:43:e5:9d:2b:9e:de:b3:f2:97:c8:b9:38:59:22: 0c:81:e5:e4:1e:f9:f3:39:ab:f1:d6:96:62:a6:6a: ec:17:f7:b5:b3:b7:83:24:d5:14:26:24:30:fb:77: 74:21:39:bb:07:fc:bc:02:bd:3d:76:c2:d7:3f:e5: 42:ce:0d:3e:fd:cf:10:93:63:21:ac:59:26:fc:32: 1c:50:4d:7d:07:a6:5e:88:d6:da:af:73:a1:04:04: a9:0c:9a:32:e2:2c:c4:ac:db:84:3e:99:09:ae:cf: 4b:36:44:b2:1b:ad:31:48:e9:a1:68:fb:05:17:d9: de:b0:15:05:92:b9:86:71:c9:41:3f:25:14:7f:00: 2d:7f:fa:39:8f:9b:0a:7b:dd:bd:d5:ab:26:9d:88: 7d:48:6e:cf:7b:3b:22:e8:fe:ee:65:2f:b7:29:58: bc:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:36:5A:EA:83:E9:CA:2E:62:3B:41:85:5A:6E:19:95:3A:13:11:A4 X509v3 Authority Key Identifier: keyid:98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:69:e2:90:70:72:9d:e1:f2:7d:ad:a6:9e:c5:76:b8:a5:3b: d9:ae:c2:8d:9c:76:6c:bb:27:05:3e:3e:19:00:11:10:48:43: 9b:d2:9a:55:e7:f0:9d:7a:30:c0:a3:1e:bd:a3:f4:ba:b9:09: 9d:d4:4a:2f:f7:f8:d3:ff:ae:46:1b:af:e7:14:d7:14:8c:83: 8b:bf:e0:9d:bf:48:e9:3e:7a:89:4f:b4:bd:6a:0e:8a:da:4e: 44:e7:94:77:55:1b:d6:0e:ee:29:b5:71:3e:32:50:48:2b:ad: 7c:1f:ca:3d:61:22:00:05:2b:46:0d:57:2e:64:d2:73:6a:84: 25:a8:3c:29:b9:9c:1a:25:d1:0e:ae:2f:6a:cb:e5:84:d8:c3: 68:83:61:7e:0b:5a:a6:5f:9a:6c:74:86:07:f4:a1:60:4d:35: 4c:54:f3:59:c7:08:fa:80:c3:b4:ad:cf:ee:bb:b2:fa:18:9f: 9c:d7:31:5d:44:8b:f1:b6:76:1b:95:62:41:14:10:68:40:fe: 35:e0:3a:5d:1e:ae:0b:12:b0:aa:b0:99:2d:3f:ea:47:55:9e: 9a:3e:80:76:38:a2:7e:7f:f6:ac:5e:15:24:95:ca:ca:2f:a4: d9:64:4a:53:b5:79:a0:58:df:ae:64:d8:f0:70:bc:62:90:dc: a0:21:58:7d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUd/tk+hVKNa2wdCMne6TULf5P33EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgzMTlBM0JDOEY4Q0ZENEZCQjM4QzczMURCRkVDMTBB QzA1MzYwMTAeFw0yNjAzMDQwODMyMzFaFw0yNjAzMDUxMDU3MzFaMDMxMTAvBgNV BAMTKEQ0MzY1QUVBODNFOUNBMkU2MjNCNDE4NTVBNkUxOTk1M0ExMzExQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0KlzgaB18HqoqIv0ZghWs6bql n+0LyjHgU41AyydD8Y95349JkRW4xBWS8d5JNyh85T9Cw3J94hm3Y+/urATJUUxC G4XzsAoqB6wrDftbywqEI1zwLagiKeVD5Z0rnt6z8pfIuThZIgyB5eQe+fM5q/HW lmKmauwX97Wzt4Mk1RQmJDD7d3QhObsH/LwCvT12wtc/5ULODT79zxCTYyGsWSb8 MhxQTX0Hpl6I1tqvc6EEBKkMmjLiLMSs24Q+mQmuz0s2RLIbrTFI6aFo+wUX2d6w FQWSuYZxyUE/JRR/AC1/+jmPmwp73b3VqyadiH1Ibs97OyLo/u5lL7cpWLxJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1DZa6oPpyi5iO0GFWm4ZlToTEaQwHwYDVR0j BBgwFoAUmDGaO8j4z9T7s4xzHb/sEKwFNgEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8xLzk4MzE5QTNCQzhGOENGRDRGQkIzOEM3MzFEQkZF QzEwQUMwNTM2MDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOTgzMTlBM0JDOEY4Q0ZENEZCQjM4QzczMURCRkVDMTBBQzA1MzYwMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjgzNjM1OTk3OTA5OTc1MDYvMS85ODMxOUEzQkM4RjhD RkQ0RkJCMzhDNzMxREJGRUMxMEFDMDUzNjAxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUGnikHByneHy fa2mnsV2uKU72a7CjZx2bLsnBT4+GQAREEhDm9KaVefwnXowwKMevaP0urkJndRK L/f40/+uRhuv5xTXFIyDi7/gnb9I6T56iU+0vWoOitpOROeUd1Ub1g7uKbVxPjJQ SCutfB/KPWEiAAUrRg1XLmTSc2qEJag8KbmcGiXRDq4vasvlhNjDaINhfgtapl+a bHSGB/ShYE01TFTzWccI+oDDtK3P7ruy+hifnNcxXUSL8bZ2G5ViQRQQaED+NeA6 XR6uCxKwqrCZLT/qR1Wemj6Adjiifn/2rF4VJJXKyi+k2WRKU7V5oFjfrmTY8HC8 YpDcoCFYfQ== -----END CERTIFICATE-----Generated at Wed Mar 4 11:32:27 2026 by rpki-client