$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft File: 98AA7A42F1AD88F64241535778555B0FE42637EA.mft (raw, json) Hash identifier: IadzNf0OoROVWa0APGRiSDj5ddI/H13N0u0Qwi41HZM= Subject key identifier: 05:CE:01:BF:49:97:EC:C3:35:30:CD:06:13:3D:9E:88:B3:14:68:CC Authority key identifier: 98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA Certificate issuer: /CN=98AA7A42F1AD88F64241535778555B0FE42637EA Certificate serial: 1FE48E55425822DF0FE4C9ED2FEC03C66CBEF397 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft Manifest number: 06 Signing time: Mon 13 Apr 2026 03:09:17 +0000 Manifest this update: Mon 13 Apr 2026 03:04:17 +0000 Manifest next update: Tue 14 Apr 2026 06:53:17 +0000 Files and hashes: 1: 98AA7A42F1AD88F64241535778555B0FE42637EA.crl (hash: iaQbPzfur0UiUf1fKmxpTqYBuHy1F3S/+SaQrqVujZE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e4:8e:55:42:58:22:df:0f:e4:c9:ed:2f:ec:03:c6:6c:be:f3:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98AA7A42F1AD88F64241535778555B0FE42637EA Validity Not Before: Apr 13 03:04:17 2026 GMT Not After : Apr 14 06:53:17 2026 GMT Subject: CN=05CE01BF4997ECC33530CD06133D9E88B31468CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:e9:66:1e:b1:79:7e:45:b8:dc:f9:4f:de: 33:ed:e2:b3:2c:32:6c:8e:e8:11:d4:5d:d6:64:56: 62:30:65:98:c5:15:5f:f6:4e:c6:4d:de:72:4e:42: 09:af:08:78:41:cc:96:cf:96:ea:a9:ff:46:67:78: cc:b6:3c:88:12:f9:0b:27:7c:04:82:44:71:b3:45: eb:96:f2:29:74:82:2b:af:5b:6f:64:99:45:84:52: af:24:a7:88:cb:c9:d5:6c:57:91:55:1e:f9:5a:39: 83:77:65:a1:32:16:8f:bd:cb:2f:4f:c6:50:e3:fd: 91:cb:3f:eb:1a:6f:5a:a4:46:b0:46:e9:16:59:81: c2:63:cf:70:53:aa:ed:7e:42:94:45:2e:1e:ea:e0: 56:3e:47:02:de:b2:75:c1:3c:ce:2e:f4:42:08:59: 4b:23:13:f1:eb:85:df:01:a0:da:00:c5:23:a4:ef: 4c:2f:99:03:8b:a5:99:1e:2a:bb:12:c6:36:5b:6c: 43:25:98:a7:e0:ab:39:28:e3:ea:92:15:fb:17:29: a6:b4:48:33:2b:cd:67:cb:61:9c:95:81:76:2d:ec: ef:cb:c8:b9:1b:cc:3d:d3:04:09:97:9f:e9:ea:81: b4:af:a9:b5:87:41:31:6c:d7:22:f7:42:ed:b3:f6: 01:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CE:01:BF:49:97:EC:C3:35:30:CD:06:13:3D:9E:88:B3:14:68:CC X509v3 Authority Key Identifier: keyid:98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:5a:fc:4d:8b:81:97:46:ce:e3:a5:df:e6:13:f6:33:1a:bb: 9c:4b:8b:26:b7:c6:e7:f5:33:05:86:b7:aa:c2:6f:21:fb:0a: be:17:3e:86:8d:65:2c:0c:24:0b:52:33:af:b7:bd:12:fd:ef: d3:a1:7d:86:48:92:ee:a3:84:13:41:74:07:ef:2a:02:fa:cc: e7:6a:bf:db:a5:1c:97:50:43:3f:be:7b:23:0e:f9:be:22:48: 6f:f1:ad:75:78:00:de:06:7a:cc:79:5e:1d:7d:ff:3c:36:78: e5:c7:23:36:a7:1e:4e:a3:18:06:01:cd:d0:3f:82:07:da:ad: 55:b0:85:39:ad:3d:44:42:39:2e:aa:ae:37:56:46:04:66:83: 2b:8a:ce:97:9d:4e:64:93:da:57:1f:e7:65:78:c5:64:36:ea: 80:52:ec:e6:4d:fd:78:9d:4e:5b:b5:34:8d:cc:f7:08:c6:bf: 51:17:72:73:b7:17:d5:af:c5:b3:05:6a:32:e1:7f:7f:1c:57: 7e:92:08:48:2a:6c:3e:88:fa:14:c2:db:90:f2:95:ee:24:6d: ed:16:a1:64:cd:c0:88:a6:8b:73:19:df:60:89:fc:a9:97:ed: 15:27:d7:f0:73:2e:1a:aa:4f:9a:4b:c1:7e:eb:08:44:92:b9: b3:d1:56:6c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUH+SOVUJYIt8P5MntL+wDxmy+85cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZF NDI2MzdFQTAeFw0yNjA0MTMwMzA0MTdaFw0yNjA0MTQwNjUzMTdaMDMxMTAvBgNV BAMTKDA1Q0UwMUJGNDk5N0VDQzMzNTMwQ0QwNjEzM0Q5RTg4QjMxNDY4Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCJ+lmHrF5fkW43PlP3jPt4rMs MmyO6BHUXdZkVmIwZZjFFV/2TsZN3nJOQgmvCHhBzJbPluqp/0ZneMy2PIgS+Qsn fASCRHGzReuW8il0giuvW29kmUWEUq8kp4jLydVsV5FVHvlaOYN3ZaEyFo+9yy9P xlDj/ZHLP+sab1qkRrBG6RZZgcJjz3BTqu1+QpRFLh7q4FY+RwLesnXBPM4u9EII WUsjE/Hrhd8BoNoAxSOk70wvmQOLpZkeKrsSxjZbbEMlmKfgqzko4+qSFfsXKaa0 SDMrzWfLYZyVgXYt7O/LyLkbzD3TBAmXn+nqgbSvqbWHQTFs1yL3Qu2z9gGLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBc4Bv0mX7MM1MM0GEz2eiLMUaMwwHwYDVR0j BBgwFoAUmKp6QvGtiPZCQVNXeFVbD+QmN+owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUyNzgxNTE5NTI5NTc0NS8wLzk4QUE3QTQyRjFBRDg4RjY0MjQxNTM1Nzc4NTU1 QjBGRTQyNjM3RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZFNDI2MzdFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1Mjc4MTUxOTUyOTU3NDUvMC85OEFBN0E0MkYxQUQ4 OEY2NDI0MTUzNTc3ODU1NUIwRkU0MjYzN0VBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFr8TYuBl0bO 46Xf5hP2Mxq7nEuLJrfG5/UzBYa3qsJvIfsKvhc+ho1lLAwkC1Izr7e9Ev3v06F9 hkiS7qOEE0F0B+8qAvrM52q/26Ucl1BDP757Iw75viJIb/GtdXgA3gZ6zHleHX3/ PDZ45ccjNqceTqMYBgHN0D+CB9qtVbCFOa09REI5LqquN1ZGBGaDK4rOl51OZJPa Vx/nZXjFZDbqgFLs5k39eJ1OW7U0jcz3CMa/URdyc7cX1a/FswVqMuF/fxxXfpII SCpsPoj6FMLbkPKV7iRt7RahZM3AiKaLcxnfYIn8qZftFSfX8HMuGqpPmkvBfusI RJK5s9FWbA== -----END CERTIFICATE-----Generated at Mon Apr 13 11:01:40 2026 by rpki-client