$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft File: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft (raw, json) Hash identifier: qtT5MBDb8Nn8ucwhRBemda0adep73PmQrlxVfIi9YO0= Subject key identifier: 3D:18:11:19:75:26:2F:DF:4A:35:06:5F:CB:41:AA:BA:48:39:01:9B Authority key identifier: 98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 Certificate issuer: /CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601 Certificate serial: 564819F0CB8358E4C5D99377E1B9D4562538552F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft Manifest number: 0178 Signing time: Fri 04 Sep 2026 00:04:21 +0000 Manifest this update: Thu 03 Sep 2026 23:59:21 +0000 Manifest next update: Mon 07 Sep 2026 02:09:21 +0000 Files and hashes: 1: 98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl (hash: NcWbDbFyKjmVDnqpslATuQEvU/lrRcYUjy1ED+KETYc=) 2: 3137302e3137392e302e302f31362d3234203d3e20313331343836.roa (hash: qat1H617QJwQjY8jG6LbfzleO4RxVlthXXvF9jpIwLY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 10:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:48:19:f0:cb:83:58:e4:c5:d9:93:77:e1:b9:d4:56:25:38:55:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98319A3BC8F8CFD4FBB38C731DBFEC10AC053601 Validity Not Before: Sep 3 23:59:21 2026 GMT Not After : Sep 7 02:09:21 2026 GMT Subject: CN=3D18111975262FDF4A35065FCB41AABA4839019B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:39:72:fa:4d:21:f9:76:e3:9e:2f:95:2d:62: c5:e0:3b:b4:f1:78:71:6e:7f:59:2d:db:89:dd:43: e7:d7:a6:49:80:53:05:e5:f7:33:11:85:42:08:19: 74:04:7c:d6:d8:85:9e:74:17:a0:9c:10:d7:5e:0e: a2:73:d9:49:01:0d:89:a7:4e:c5:e8:d5:7e:8b:3f: df:41:6a:2f:35:e0:8c:00:e8:9c:e0:c7:d4:49:be: 8a:7c:ac:7a:4d:cb:75:17:89:af:38:02:7a:b8:5f: c8:d8:a3:a6:ee:bf:fc:52:24:9f:d9:4f:3a:49:15: f7:40:33:99:e6:07:a8:b2:6f:a9:2b:ab:06:ac:86: f9:b3:a1:b3:79:e5:bf:ee:b3:ac:7b:ee:a4:ee:e9: 2b:d8:4e:e7:9d:34:4a:1d:10:38:bc:c2:bc:32:ac: 01:61:6a:42:e1:c5:6a:ae:04:0b:2c:6a:c5:aa:54: 1b:e3:0a:c7:8f:b2:21:6e:27:05:a6:68:bb:b6:1f: b6:07:24:c8:a4:d9:e3:37:b1:5f:27:a2:e2:41:8f: a2:ce:4a:f3:64:c1:1f:55:80:a1:cd:a9:e1:f9:2d: 8c:02:10:60:eb:fa:77:33:0e:87:5c:7c:4a:69:30: 69:59:a2:89:5e:d7:a5:a6:40:99:d6:57:27:50:43: a7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:18:11:19:75:26:2F:DF:4A:35:06:5F:CB:41:AA:BA:48:39:01:9B X509v3 Authority Key Identifier: keyid:98:31:9A:3B:C8:F8:CF:D4:FB:B3:8C:73:1D:BF:EC:10:AC:05:36:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/1/98319A3BC8F8CFD4FBB38C731DBFEC10AC053601.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:67:88:89:d2:c9:b9:88:22:84:4d:e5:41:99:0e:94:b2:69: 18:57:0f:24:37:8c:ea:21:3f:91:89:ff:b3:af:b8:1c:88:75: 87:d6:9d:90:27:c9:aa:a7:47:5d:37:c8:8f:0c:0a:09:9f:09: 4c:bc:41:de:73:21:f0:ab:2a:dc:15:35:57:82:15:7b:fa:94: 9c:a1:70:32:e4:d0:e2:4f:ac:93:58:04:b9:21:a2:98:2d:93: 16:91:bf:0d:3e:57:3b:de:30:64:01:71:91:56:ef:87:fd:a2: 09:19:fa:8f:df:40:c7:5a:62:38:19:02:d7:36:4b:bf:00:7f: 35:b2:8d:28:60:96:49:c8:3e:92:e7:ff:12:b9:8b:9d:c5:34: 93:33:6e:f3:54:28:3d:ab:1e:9b:c8:f9:12:de:fe:b7:7d:3b: f1:e9:fb:2f:05:e6:40:e1:7c:a1:d5:8c:ea:95:cb:f9:c8:fb: 6d:30:63:14:42:aa:d0:e5:08:65:eb:56:b8:05:b7:dd:78:06: af:5c:6a:84:3f:3a:bb:a2:0c:66:6e:9d:32:4e:c6:05:6b:d2: f9:02:91:ca:97:db:8d:1c:ad:1d:dc:cc:d5:81:b5:11:b1:55: 65:14:56:5d:f4:5e:a2:ee:df:8a:f8:aa:a1:4c:4d:74:e8:4a: 9a:d7:b0:65 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVkgZ8MuDWOTF2ZN34bnUViU4VS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgzMTlBM0JDOEY4Q0ZENEZCQjM4QzczMURCRkVDMTBB QzA1MzYwMTAeFw0yNjA5MDMyMzU5MjFaFw0yNjA5MDcwMjA5MjFaMDMxMTAvBgNV BAMTKDNEMTgxMTE5NzUyNjJGREY0QTM1MDY1RkNCNDFBQUJBNDgzOTAxOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQOXL6TSH5duOeL5UtYsXgO7Tx eHFuf1kt24ndQ+fXpkmAUwXl9zMRhUIIGXQEfNbYhZ50F6CcENdeDqJz2UkBDYmn TsXo1X6LP99Bai814IwA6Jzgx9RJvop8rHpNy3UXia84Anq4X8jYo6buv/xSJJ/Z TzpJFfdAM5nmB6iyb6krqwashvmzobN55b/us6x77qTu6SvYTuedNEodEDi8wrwy rAFhakLhxWquBAssasWqVBvjCsePsiFuJwWmaLu2H7YHJMik2eM3sV8nouJBj6LO SvNkwR9VgKHNqeH5LYwCEGDr+nczDodcfEppMGlZoole16WmQJnWVydQQ6fdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPRgRGXUmL99KNQZfy0Gqukg5AZswHwYDVR0j BBgwFoAUmDGaO8j4z9T7s4xzHb/sEKwFNgEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8xLzk4MzE5QTNCQzhGOENGRDRGQkIzOEM3MzFEQkZF QzEwQUMwNTM2MDEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvOTgzMTlBM0JDOEY4Q0ZENEZCQjM4QzczMURCRkVDMTBBQzA1MzYwMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjgzNjM1OTk3OTA5OTc1MDYvMS85ODMxOUEzQkM4RjhD RkQ0RkJCMzhDNzMxREJGRUMxMEFDMDUzNjAxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2eIidLJuYgi hE3lQZkOlLJpGFcPJDeM6iE/kYn/s6+4HIh1h9adkCfJqqdHXTfIjwwKCZ8JTLxB 3nMh8Ksq3BU1V4IVe/qUnKFwMuTQ4k+sk1gEuSGimC2TFpG/DT5XO94wZAFxkVbv h/2iCRn6j99Ax1piOBkC1zZLvwB/NbKNKGCWScg+kuf/ErmLncU0kzNu81QoPase m8j5Et7+t3078en7LwXmQOF8odWM6pXL+cj7bTBjFEKq0OUIZetWuAW33XgGr1xq hD86u6IMZm6dMk7GBWvS+QKRypfbjRytHdzM1YG1EbFVZRRWXfReou7fiviqoUxN dOhKmtewZQ== -----END CERTIFICATE-----Generated at Sat Sep 5 08:06:54 2026 by rpki-client