$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft File: 98AA7A42F1AD88F64241535778555B0FE42637EA.mft (raw, json) Hash identifier: sFTEAIYIhz5S+uXp4zCiJI+cE1uFKwSjtdgznLrNfm8= Subject key identifier: 81:08:A5:0A:E6:3A:E2:26:5C:4A:B8:1B:05:5A:13:66:D0:C8:74:97 Authority key identifier: 98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA Certificate issuer: /CN=98AA7A42F1AD88F64241535778555B0FE42637EA Certificate serial: 404E3DE511BBBFD2B4598C0E5673B3709F6E5AF2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft Manifest number: 86 Signing time: Tue 14 Jul 2026 14:01:25 +0000 Manifest this update: Tue 14 Jul 2026 13:56:25 +0000 Manifest next update: Wed 15 Jul 2026 14:50:25 +0000 Files and hashes: 1: 3130332e36302e3233302e302f32332d3233203d3e2030.roa (hash: Ue8/vIfgsSnN4LW/5kCPAbghCplvny1P0iX59/D578Q=) 2: 3130332e36302e3232382e302f32332d3233203d3e2034383131.roa (hash: 7yZqchq5RQPFP43vKaHRYkjM76ohU/66SRSv6GUC4k0=) 3: 98AA7A42F1AD88F64241535778555B0FE42637EA.crl (hash: hLTk9vQwG2IH4fAJcAwJruhSW+AmwHeph4Wd3QC12bQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 14:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:4e:3d:e5:11:bb:bf:d2:b4:59:8c:0e:56:73:b3:70:9f:6e:5a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98AA7A42F1AD88F64241535778555B0FE42637EA Validity Not Before: Jul 14 13:56:25 2026 GMT Not After : Jul 15 14:50:25 2026 GMT Subject: CN=8108A50AE63AE2265C4AB81B055A1366D0C87497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:98:f4:17:43:46:01:2d:a8:c9:66:19:68:2f: e2:63:20:dd:88:f4:61:c6:9b:34:af:01:bd:f7:88: fa:05:8c:08:4a:16:86:c6:39:fc:0c:d3:39:0a:fa: 15:22:5a:4e:4b:c0:49:ff:1a:c3:58:9c:cf:31:d3: df:c7:a0:d7:0e:69:1b:5a:ff:4f:f9:91:3e:de:35: 48:70:e9:6c:3a:7e:33:89:83:01:66:fa:6d:54:c3: f7:f8:27:db:e6:77:c4:1d:26:77:fc:48:76:f6:87: 87:12:0a:7e:1e:80:47:a4:53:d7:73:65:1f:3b:9b: f4:98:26:2e:d9:c0:1d:df:96:20:d4:99:db:db:43: c2:01:0a:72:aa:76:83:88:bc:2d:8a:67:84:8a:63: 4b:4d:5b:2b:cb:b8:82:cc:f8:16:6c:18:af:6d:29: db:06:c7:f2:0b:6b:b0:56:a6:fb:93:76:86:d8:79: db:81:70:66:61:bf:e3:6b:d4:e5:e4:0e:58:7d:a6: ae:9c:ea:d0:aa:9a:01:ae:7a:82:dc:b8:8d:58:b4: 49:e2:c4:80:7d:44:bb:ae:18:e6:85:a4:23:26:d6: a7:a1:61:bf:cc:6b:ab:41:33:2c:d4:bc:cb:79:0b: 54:7b:6a:bd:3f:cb:1b:b5:4e:2a:2e:58:5d:b7:b3: 5c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:08:A5:0A:E6:3A:E2:26:5C:4A:B8:1B:05:5A:13:66:D0:C8:74:97 X509v3 Authority Key Identifier: keyid:98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:70:8d:8b:cc:6c:ca:cb:11:dd:95:27:15:34:13:57:a2:2f: 39:30:16:26:f4:94:38:05:b3:fa:59:b2:1c:17:ab:4e:79:a3: cb:2a:03:1b:1d:95:c2:da:6b:47:b5:4d:04:bf:6f:35:80:dc: ca:ee:33:4d:2c:6a:2a:3e:60:25:30:57:f1:13:f3:9d:37:be: 32:27:39:77:16:de:f0:ea:60:f4:7c:54:3b:8e:f9:8e:5c:bc: 77:ff:1f:30:5a:84:9f:d6:75:78:cf:b6:e0:be:49:2a:5e:50: b9:f6:f4:e8:1a:13:a6:a0:8c:1c:43:6b:80:e1:2e:be:71:8d: 42:a0:87:95:54:2b:5e:7e:32:ce:39:d9:e6:df:c7:97:bd:ef: 6a:44:c2:9c:e9:00:c9:93:af:93:14:6f:a0:4a:77:2e:c5:bb: b5:9b:09:c8:ec:c0:04:eb:86:20:6e:7c:4f:0f:66:47:72:50: a7:c9:ba:a9:f8:03:28:f5:4a:35:a8:cf:c9:3f:08:42:73:2a: 19:a6:70:ab:8e:08:89:89:c4:c1:11:c2:14:09:42:95:94:ae: 3d:ea:34:33:f5:a7:87:c3:03:88:93:98:29:47:38:4b:0a:fb: 6c:95:ae:ee:23:38:e1:d4:af:cd:e7:2c:fa:77:02:3e:45:43: 22:8a:5d:db -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQE495RG7v9K0WYwOVnOzcJ9uWvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZF NDI2MzdFQTAeFw0yNjA3MTQxMzU2MjVaFw0yNjA3MTUxNDUwMjVaMDMxMTAvBgNV BAMTKDgxMDhBNTBBRTYzQUUyMjY1QzRBQjgxQjA1NUExMzY2RDBDODc0OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCymPQXQ0YBLajJZhloL+JjIN2I 9GHGmzSvAb33iPoFjAhKFobGOfwM0zkK+hUiWk5LwEn/GsNYnM8x09/HoNcOaRta /0/5kT7eNUhw6Ww6fjOJgwFm+m1Uw/f4J9vmd8QdJnf8SHb2h4cSCn4egEekU9dz ZR87m/SYJi7ZwB3fliDUmdvbQ8IBCnKqdoOIvC2KZ4SKY0tNWyvLuILM+BZsGK9t KdsGx/ILa7BWpvuTdobYeduBcGZhv+Nr1OXkDlh9pq6c6tCqmgGueoLcuI1YtEni xIB9RLuuGOaFpCMm1qehYb/Ma6tBMyzUvMt5C1R7ar0/yxu1TiouWF23s1xbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgQilCuY64iZcSrgbBVoTZtDIdJcwHwYDVR0j BBgwFoAUmKp6QvGtiPZCQVNXeFVbD+QmN+owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUyNzgxNTE5NTI5NTc0NS8wLzk4QUE3QTQyRjFBRDg4RjY0MjQxNTM1Nzc4NTU1 QjBGRTQyNjM3RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZFNDI2MzdFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1Mjc4MTUxOTUyOTU3NDUvMC85OEFBN0E0MkYxQUQ4 OEY2NDI0MTUzNTc3ODU1NUIwRkU0MjYzN0VBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnCNi8xsyssR 3ZUnFTQTV6IvOTAWJvSUOAWz+lmyHBerTnmjyyoDGx2VwtprR7VNBL9vNYDcyu4z TSxqKj5gJTBX8RPznTe+Mic5dxbe8Opg9HxUO475jly8d/8fMFqEn9Z1eM+24L5J Kl5Qufb06BoTpqCMHENrgOEuvnGNQqCHlVQrXn4yzjnZ5t/Hl73vakTCnOkAyZOv kxRvoEp3LsW7tZsJyOzABOuGIG58Tw9mR3JQp8m6qfgDKPVKNajPyT8IQnMqGaZw q44IiYnEwRHCFAlClZSuPeo0M/Wnh8MDiJOYKUc4Swr7bJWu7iM44dSvzecs+ncC PkVDIopd2w== -----END CERTIFICATE-----Generated at Tue Jul 14 20:09:12 2026 by rpki-client