$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft File: 98AA7A42F1AD88F64241535778555B0FE42637EA.mft (raw, json) Hash identifier: E4i44qMLhLP06xfW3Xe1IMJaTtQe9Gs6omEl4wU47og= Subject key identifier: 00:76:42:1A:7D:C4:36:43:BD:B4:99:71:49:9B:D7:77:60:AD:0B:A9 Authority key identifier: 98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA Certificate issuer: /CN=98AA7A42F1AD88F64241535778555B0FE42637EA Certificate serial: 77AB5504CEEEF91614EAC295419ACCD1DB8C5DF8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft Manifest number: C2 Signing time: Fri 28 Aug 2026 06:47:38 +0000 Manifest this update: Fri 28 Aug 2026 06:42:38 +0000 Manifest next update: Mon 31 Aug 2026 07:52:38 +0000 Files and hashes: 1: 3130332e36302e3232382e302f32332d3233203d3e2034383131.roa (hash: 7yZqchq5RQPFP43vKaHRYkjM76ohU/66SRSv6GUC4k0=) 2: 3130332e36302e3233302e302f32332d3233203d3e2030.roa (hash: Ue8/vIfgsSnN4LW/5kCPAbghCplvny1P0iX59/D578Q=) 3: 98AA7A42F1AD88F64241535778555B0FE42637EA.crl (hash: d/5wTv1QVywfebKqqEmUB23i/YKYAptbjtz76EQFdvE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 07:52:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ab:55:04:ce:ee:f9:16:14:ea:c2:95:41:9a:cc:d1:db:8c:5d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98AA7A42F1AD88F64241535778555B0FE42637EA Validity Not Before: Aug 28 06:42:38 2026 GMT Not After : Aug 31 07:52:38 2026 GMT Subject: CN=0076421A7DC43643BDB49971499BD77760AD0BA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8a:a0:32:ee:18:f2:d0:72:2c:42:66:e7:11: de:d4:79:db:b9:8e:b0:8d:8c:4b:68:4c:69:31:d7: 5b:3a:12:c5:a6:fe:67:f0:0c:db:6e:f9:0b:2f:ad: 1b:34:07:56:a4:bd:d9:62:48:1f:d9:2b:5c:9e:81: 44:41:63:1d:6b:9a:a2:6f:d0:96:08:f6:48:1d:29: a4:6f:d3:8f:86:0d:cd:85:ba:0e:d0:ef:54:bf:20: b8:dc:dd:59:da:ed:44:94:8e:45:d1:a5:f1:44:36: 33:23:61:3b:00:63:7d:2f:a1:37:17:7a:b7:61:53: 25:a1:8a:e1:a7:43:a7:86:31:2b:d0:f0:88:40:f2: c7:75:b1:29:a0:98:f4:ca:34:7c:92:d0:6c:02:38: 7f:48:0c:8e:91:fd:88:ff:5b:d8:71:0a:77:05:2e: 05:61:d7:54:25:dd:90:f3:18:d6:98:8b:1a:64:3c: 6d:23:63:e0:dd:f5:6e:d1:25:81:b1:27:fe:8b:b7: 43:ad:7e:2b:d7:86:0f:bd:02:ad:6b:e6:87:2a:b0: ad:3f:08:5b:0f:2d:b0:16:bb:13:91:96:6b:8f:8c: f8:74:ea:0d:96:5a:c0:6d:27:56:f5:ae:28:4d:b5: e1:6f:62:58:9d:ed:bb:d7:fa:69:3d:ac:48:a0:cc: e9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:76:42:1A:7D:C4:36:43:BD:B4:99:71:49:9B:D7:77:60:AD:0B:A9 X509v3 Authority Key Identifier: keyid:98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:78:2c:2c:c2:7a:1a:53:47:b4:49:fe:c8:43:83:7d:eb:9a: b4:65:5d:10:9c:a6:d3:4f:7e:cc:d7:51:d8:88:bf:5f:41:0d: d2:66:51:7b:e0:bc:3a:ac:93:a4:a0:1f:ff:ac:ab:d6:e2:d9: 20:cb:38:c4:77:2e:db:ce:0b:1e:b5:1d:5d:16:b6:bb:0f:9d: a8:7e:2b:9f:b6:b2:3f:b8:06:16:7b:ad:6c:0f:d8:c8:5e:56: b6:42:c1:0d:6a:5c:de:af:c0:cb:ce:03:b1:ce:d3:ab:ae:73: d7:01:2a:73:1f:9f:21:37:4a:c3:cb:0f:a4:1f:46:81:02:08: 5b:a6:a4:09:4d:79:50:bd:be:07:f5:01:b3:9a:d5:9b:8e:14: fb:95:c6:34:84:01:07:f0:0c:02:65:78:19:39:35:04:30:c6: 1a:e7:f4:17:af:a6:82:e3:dd:8f:e1:7f:06:d7:39:d7:af:fa: 4e:76:d4:05:79:e6:07:22:99:b5:cc:32:c1:a5:5b:18:52:67: 5c:b6:d4:54:31:75:77:b3:29:85:1f:1f:13:c8:df:21:73:bd: 87:6c:08:bd:e5:a2:e4:26:16:04:b0:f0:a8:ac:e3:72:c7:f9: 5d:fd:92:3a:3e:2a:53:b8:86:e9:41:59:0d:62:07:50:77:00: 38:cb:58:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUd6tVBM7u+RYU6sKVQZrM0duMXfgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZF NDI2MzdFQTAeFw0yNjA4MjgwNjQyMzhaFw0yNjA4MzEwNzUyMzhaMDMxMTAvBgNV BAMTKDAwNzY0MjFBN0RDNDM2NDNCREI0OTk3MTQ5OUJENzc3NjBBRDBCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZiqAy7hjy0HIsQmbnEd7Uedu5 jrCNjEtoTGkx11s6EsWm/mfwDNtu+QsvrRs0B1akvdliSB/ZK1yegURBYx1rmqJv 0JYI9kgdKaRv04+GDc2Fug7Q71S/ILjc3Vna7USUjkXRpfFENjMjYTsAY30voTcX erdhUyWhiuGnQ6eGMSvQ8IhA8sd1sSmgmPTKNHyS0GwCOH9IDI6R/Yj/W9hxCncF LgVh11Ql3ZDzGNaYixpkPG0jY+Dd9W7RJYGxJ/6Lt0OtfivXhg+9Aq1r5ocqsK0/ CFsPLbAWuxORlmuPjPh06g2WWsBtJ1b1rihNteFvYlid7bvX+mk9rEigzOmpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAHZCGn3ENkO9tJlxSZvXd2CtC6kwHwYDVR0j BBgwFoAUmKp6QvGtiPZCQVNXeFVbD+QmN+owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUyNzgxNTE5NTI5NTc0NS8wLzk4QUE3QTQyRjFBRDg4RjY0MjQxNTM1Nzc4NTU1 QjBGRTQyNjM3RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZFNDI2MzdFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1Mjc4MTUxOTUyOTU3NDUvMC85OEFBN0E0MkYxQUQ4 OEY2NDI0MTUzNTc3ODU1NUIwRkU0MjYzN0VBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt3gsLMJ6GlNH tEn+yEODfeuatGVdEJym009+zNdR2Ii/X0EN0mZRe+C8OqyTpKAf/6yr1uLZIMs4 xHcu284LHrUdXRa2uw+dqH4rn7ayP7gGFnutbA/YyF5WtkLBDWpc3q/Ay84Dsc7T q65z1wEqcx+fITdKw8sPpB9GgQIIW6akCU15UL2+B/UBs5rVm44U+5XGNIQBB/AM AmV4GTk1BDDGGuf0F6+mguPdj+F/Btc516/6TnbUBXnmByKZtcwywaVbGFJnXLbU VDF1d7MphR8fE8jfIXO9h2wIveWi5CYWBLDwqKzjcsf5Xf2SOj4qU7iG6UFZDWIH UHcAOMtYiQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:07:28 2026 by rpki-client