$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft File: 98AA7A42F1AD88F64241535778555B0FE42637EA.mft (raw, json) Hash identifier: 2hZW6P87qb134wMm6fZFpVdnEZLRv/rYGW5gXWMK3W8= Subject key identifier: 47:46:33:F0:3D:E9:CF:69:C1:14:DE:A3:56:D2:8E:3E:02:1F:DE:A4 Authority key identifier: 98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA Certificate issuer: /CN=98AA7A42F1AD88F64241535778555B0FE42637EA Certificate serial: 0EC5180386E564D63E01DC760CE77F65DDB12A44 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft Manifest number: 48 Signing time: Fri 29 May 2026 05:37:40 +0000 Manifest this update: Fri 29 May 2026 05:32:40 +0000 Manifest next update: Sat 30 May 2026 07:15:40 +0000 Files and hashes: 1: 98AA7A42F1AD88F64241535778555B0FE42637EA.crl (hash: a+dXbBHnDoqoTN/0YodaydmddDopR2CvRGNKmhwgQAk=) 2: 3130332e36302e3232382e302f32332d3233203d3e2034383131.roa (hash: 7yZqchq5RQPFP43vKaHRYkjM76ohU/66SRSv6GUC4k0=) 3: 3130332e36302e3233302e302f32332d3233203d3e2030.roa (hash: Ue8/vIfgsSnN4LW/5kCPAbghCplvny1P0iX59/D578Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 07:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c5:18:03:86:e5:64:d6:3e:01:dc:76:0c:e7:7f:65:dd:b1:2a:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98AA7A42F1AD88F64241535778555B0FE42637EA Validity Not Before: May 29 05:32:40 2026 GMT Not After : May 30 07:15:40 2026 GMT Subject: CN=474633F03DE9CF69C114DEA356D28E3E021FDEA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f7:22:f1:26:ba:ac:29:78:25:94:68:1f:83: fc:ae:ba:71:c3:9a:d3:f9:1c:b4:6d:48:f6:04:5e: c4:aa:94:b4:0d:ce:de:4d:aa:1e:18:e4:8e:0c:34: a1:50:58:50:4d:0f:46:15:ea:05:d6:cd:c8:b2:86: a6:0d:06:41:33:59:42:39:92:36:be:5f:a7:fa:91: 57:eb:83:a3:03:12:67:64:38:ec:07:7c:8c:13:44: 6e:3b:86:37:1d:c1:54:8f:55:a9:61:ed:97:20:d4: 6c:ba:6a:79:56:6c:f7:c5:76:41:ba:84:31:30:96: 49:82:fd:9f:d1:a6:68:b4:38:b1:02:ca:40:d9:87: 3b:f7:17:b7:68:6c:1a:4c:04:e0:c0:ee:05:94:dc: bf:c3:88:c8:5e:5e:8f:0c:d9:82:e3:4a:ff:82:81: 05:36:02:cd:fa:61:13:83:f8:ee:64:b4:12:3c:f3: 91:f9:60:f9:bb:c9:04:67:09:3d:37:96:f4:6e:2e: e0:75:8a:15:d7:7f:f2:ce:3a:79:10:ae:c4:51:cf: 38:9d:94:9a:22:24:80:69:e3:0e:a6:eb:4b:42:c2: a3:0f:92:28:15:54:f1:3e:0b:74:c7:2e:14:fa:11: 2d:7f:86:f4:47:d2:6f:d7:69:3a:68:4e:c3:5a:fa: e7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:46:33:F0:3D:E9:CF:69:C1:14:DE:A3:56:D2:8E:3E:02:1F:DE:A4 X509v3 Authority Key Identifier: keyid:98:AA:7A:42:F1:AD:88:F6:42:41:53:57:78:55:5B:0F:E4:26:37:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98AA7A42F1AD88F64241535778555B0FE42637EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094527815195295745/0/98AA7A42F1AD88F64241535778555B0FE42637EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:31:08:0c:9f:4d:c4:89:ce:9c:36:6e:8d:29:1a:5f:0f:06: 7b:a3:44:53:f1:fc:86:a3:5a:bf:5a:c2:9a:9f:5b:4e:b7:72: 24:70:76:b8:4f:3a:0f:21:34:16:c4:c5:75:66:07:7b:f6:35: 11:60:c4:24:2f:3a:63:8a:6b:cb:9e:2c:79:87:37:40:44:7b: e9:02:bc:98:14:51:cd:5f:75:6d:ad:f5:06:19:a1:7f:ce:19: 84:fa:c7:15:94:c1:0a:45:c4:5e:af:d6:87:74:73:e1:45:9f: ec:cd:14:bc:23:17:06:7c:db:68:2e:81:f8:31:d0:37:c4:57: e9:24:a8:c9:79:1c:b1:b4:5f:4f:4d:54:c4:22:94:b1:d9:08: 6b:81:73:2e:7f:ce:6b:65:3a:11:f2:a4:1d:d8:9a:50:15:0a: 7f:45:79:6e:7b:53:99:8d:56:5c:00:af:c6:6f:84:b2:9c:6f: 51:be:b5:60:68:4a:aa:19:cf:8c:f6:b3:e6:ae:cd:f2:bf:ee: 38:89:b4:e8:d7:f9:8d:55:cb:e0:e2:0e:a8:ba:02:25:65:12: 5d:1d:0d:d8:f9:62:a7:32:63:dc:1f:8c:89:3b:48:bc:78:83: f9:64:aa:c6:6b:4f:74:26:27:11:5b:fd:14:08:e4:5f:c4:4a: a9:f0:57:3c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDsUYA4blZNY+Adx2DOd/Zd2xKkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZF NDI2MzdFQTAeFw0yNjA1MjkwNTMyNDBaFw0yNjA1MzAwNzE1NDBaMDMxMTAvBgNV BAMTKDQ3NDYzM0YwM0RFOUNGNjlDMTE0REVBMzU2RDI4RTNFMDIxRkRFQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO9yLxJrqsKXgllGgfg/yuunHD mtP5HLRtSPYEXsSqlLQNzt5Nqh4Y5I4MNKFQWFBND0YV6gXWzciyhqYNBkEzWUI5 kja+X6f6kVfrg6MDEmdkOOwHfIwTRG47hjcdwVSPValh7Zcg1Gy6anlWbPfFdkG6 hDEwlkmC/Z/Rpmi0OLECykDZhzv3F7dobBpMBODA7gWU3L/DiMheXo8M2YLjSv+C gQU2As36YROD+O5ktBI885H5YPm7yQRnCT03lvRuLuB1ihXXf/LOOnkQrsRRzzid lJoiJIBp4w6m60tCwqMPkigVVPE+C3THLhT6ES1/hvRH0m/XaTpoTsNa+udVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUR0Yz8D3pz2nBFN6jVtKOPgIf3qQwHwYDVR0j BBgwFoAUmKp6QvGtiPZCQVNXeFVbD+QmN+owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUyNzgxNTE5NTI5NTc0NS8wLzk4QUE3QTQyRjFBRDg4RjY0MjQxNTM1Nzc4NTU1 QjBGRTQyNjM3RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOThBQTdBNDJGMUFEODhGNjQyNDE1MzU3Nzg1NTVCMEZFNDI2MzdFQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1Mjc4MTUxOTUyOTU3NDUvMC85OEFBN0E0MkYxQUQ4 OEY2NDI0MTUzNTc3ODU1NUIwRkU0MjYzN0VBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjEIDJ9NxInO nDZujSkaXw8Ge6NEU/H8hqNav1rCmp9bTrdyJHB2uE86DyE0FsTFdWYHe/Y1EWDE JC86Y4pry54seYc3QER76QK8mBRRzV91ba31Bhmhf84ZhPrHFZTBCkXEXq/Wh3Rz 4UWf7M0UvCMXBnzbaC6B+DHQN8RX6SSoyXkcsbRfT01UxCKUsdkIa4FzLn/Oa2U6 EfKkHdiaUBUKf0V5bntTmY1WXACvxm+EspxvUb61YGhKqhnPjPaz5q7N8r/uOIm0 6Nf5jVXL4OIOqLoCJWUSXR0N2PlipzJj3B+MiTtIvHiD+WSqxmtPdCYnEVv9FAjk X8RKqfBXPA== -----END CERTIFICATE-----Generated at Fri May 29 22:05:28 2026 by rpki-client