
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft
File: 98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft (raw, json)
Hash identifier: Qfhbiy+BrtlHw+ayJUfigIpjQ0nOpMOw1sM16mADT8E=
Subject key identifier: 74:21:54:56:DB:94:67:38:DD:18:92:EA:42:F2:B2:5B:DE:36:AD:4B
Authority key identifier: 98:C4:7D:ED:77:AC:F5:B8:20:46:A5:1E:C3:8C:F9:EB:BF:9F:09:14
Certificate issuer: /CN=98C47DED77ACF5B82046A51EC38CF9EBBF9F0914
Certificate serial: 371AE2244A96343BE4EA21D65EF148BA5468C287
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft
Manifest number: 78
Signing time: Mon 12 Oct 2026 16:37:09 +0000
Manifest this update: Mon 12 Oct 2026 16:32:09 +0000
Manifest next update: Thu 15 Oct 2026 22:12:09 +0000
Files and hashes: 1: 98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.crl (hash: I6NCRuwfp7wlxdhckwjJZo0BUClOXLLoRUB3GwPvDrs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.crl
rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:1a:e2:24:4a:96:34:3b:e4:ea:21:d6:5e:f1:48:ba:54:68:c2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98C47DED77ACF5B82046A51EC38CF9EBBF9F0914
Validity
Not Before: Oct 12 16:32:09 2026 GMT
Not After : Oct 15 22:12:09 2026 GMT
Subject: CN=74215456DB946738DD1892EA42F2B25BDE36AD4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:df:c1:e4:c9:91:c7:f5:4a:c4:e7:32:1e:
ef:74:b5:0f:8c:df:3d:ab:c3:8d:b4:4a:9c:fa:be:
36:51:81:74:af:67:9a:2f:be:51:85:1a:5e:ee:c5:
cd:a3:fd:11:d6:a1:86:d8:7f:50:c6:b1:17:59:a1:
3c:cd:6c:66:0c:0f:d3:b7:f5:3d:d8:57:8e:e1:74:
6e:02:80:a5:34:9a:11:97:a6:b9:97:32:39:4b:26:
86:ff:d2:73:91:d4:ab:26:cb:1e:12:00:db:a0:62:
65:cc:a5:85:b5:0d:1c:dc:23:53:90:5f:b2:35:94:
cb:3f:4f:f6:e9:d3:4c:cd:f2:66:aa:4a:50:05:86:
e0:ab:19:fb:c7:a0:dd:3f:f4:bc:3c:43:f5:c1:93:
87:8a:a6:fa:db:a9:60:a3:05:6f:cc:32:d1:6a:fa:
3f:44:c5:0a:f5:62:ec:d9:77:10:43:78:c9:2b:9d:
06:71:01:26:0f:0b:6a:ed:a5:3d:36:97:fb:b1:16:
9a:28:7a:27:fd:13:b1:c9:45:10:45:4a:b4:d8:87:
74:36:59:c2:be:a3:0e:30:1c:cc:64:4e:fc:62:3f:
04:03:4f:3f:43:8d:a1:99:df:a7:a0:75:93:5b:bd:
0c:55:4a:d1:17:bc:a0:11:ac:1d:de:0d:4d:5e:ad:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:21:54:56:DB:94:67:38:DD:18:92:EA:42:F2:B2:5B:DE:36:AD:4B
X509v3 Authority Key Identifier:
keyid:98:C4:7D:ED:77:AC:F5:B8:20:46:A5:1E:C3:8C:F9:EB:BF:9F:09:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:1a:f3:17:9a:f6:54:28:56:e6:86:9e:74:0c:ab:ae:cd:26:
01:af:dc:4c:96:66:11:ae:d5:93:9b:a0:ad:6a:b8:aa:ab:7c:
25:56:cf:57:7f:50:87:b2:da:2e:75:b2:45:6c:d4:7c:1a:ed:
fe:a3:a9:23:d7:3d:2e:95:16:62:1d:63:51:4e:72:4f:79:77:
c4:e6:25:83:26:a1:c8:fa:ac:00:fc:90:b4:26:37:5e:08:1f:
02:1f:e4:1c:b2:92:c9:c3:46:1d:4a:6b:d5:51:d1:8f:21:52:
8d:27:5f:33:4b:90:72:db:76:f1:30:65:2c:8e:ce:65:04:de:
17:8f:70:ad:83:76:3c:00:de:53:8b:4e:cc:0b:c7:92:e8:ca:
44:29:60:01:1e:45:b1:fb:be:4c:2e:9a:b6:40:02:95:ac:9f:
0e:ae:c7:3e:83:e2:ce:8a:12:b8:91:02:2e:75:71:44:62:c7:
2a:d0:6b:0f:c5:95:ab:25:b1:cf:d9:d5:c7:7f:70:cc:9f:32:
d8:ed:3b:7a:ce:f2:8d:2c:24:55:95:6d:4f:92:5b:cb:4c:e1:
da:43:74:96:f4:55:7a:05:30:db:bc:a1:6c:73:37:c0:2b:d2:
b6:3b:5d:e0:1b:54:86:00:fb:88:70:cb:e7:42:f3:eb:ea:b7:
e7:da:43:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:51:45 2026 by rpki-client