$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft File: 98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft (raw, json) Hash identifier: NMw85CQzRcXyq4yRefomFegF9swgx9ZQiG7DUDlXi8Y= Subject key identifier: 5B:49:D1:6E:6E:AF:AE:9E:54:0A:F5:78:6F:0F:6D:7F:EE:18:96:E7 Authority key identifier: 98:C4:7D:ED:77:AC:F5:B8:20:46:A5:1E:C3:8C:F9:EB:BF:9F:09:14 Certificate issuer: /CN=98C47DED77ACF5B82046A51EC38CF9EBBF9F0914 Certificate serial: 073897E3F330BCC78C891B9EEA7F09B5E9085837 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft Manifest number: 28 Signing time: Tue 14 Jul 2026 05:20:32 +0000 Manifest this update: Tue 14 Jul 2026 05:15:32 +0000 Manifest next update: Wed 15 Jul 2026 06:04:32 +0000 Files and hashes: 1: 98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.crl (hash: Lhrea2aA4XjADM77p//b6fg0Z9Citjxg64yQfayQzcY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.crl rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 06:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:38:97:e3:f3:30:bc:c7:8c:89:1b:9e:ea:7f:09:b5:e9:08:58:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98C47DED77ACF5B82046A51EC38CF9EBBF9F0914 Validity Not Before: Jul 14 05:15:32 2026 GMT Not After : Jul 15 06:04:32 2026 GMT Subject: CN=5B49D16E6EAFAE9E540AF5786F0F6D7FEE1896E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:04:29:31:3e:d6:a5:c6:5f:6d:8f:fd:30:ed: da:5e:fe:26:82:2a:bf:6a:1d:f2:fc:9b:ed:2d:1e: 04:a3:fa:a8:53:ea:24:18:d7:96:2a:bf:c2:66:a3: e3:b5:8f:83:86:11:88:cb:b3:1f:77:2b:06:37:f4: cf:8d:df:72:0b:0f:0f:bb:73:52:5d:74:91:ac:82: 98:81:61:06:6b:55:c3:20:14:d7:1b:87:cb:c5:41: 4f:1b:4b:0d:3d:72:66:16:43:20:01:f8:22:92:92: c8:aa:51:48:8e:c0:85:65:ea:11:57:62:1f:9c:cb: e7:16:2f:f9:ae:cb:4b:80:9e:83:bb:06:07:0a:0a: ed:4f:79:e3:34:bf:dd:f8:ac:27:d0:00:d6:a9:1e: 83:0e:ca:2a:f9:60:1c:aa:9e:92:2b:0f:b6:d2:fc: 75:76:52:1d:fb:3a:2e:75:db:21:77:2d:ad:87:f6: 88:e2:a5:1e:67:22:4d:93:03:d6:a9:dd:9e:b1:3c: 5f:94:c9:67:37:30:96:e7:de:5e:03:ad:a6:80:fb: 8c:32:59:7f:2b:1b:d9:06:a6:e8:6b:9a:34:d7:a6: d4:3e:23:7a:d2:fa:c8:e8:8f:89:bf:d9:bb:03:f1: 10:a7:b3:f6:29:bd:57:d0:bc:86:96:34:13:51:69: 1c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:49:D1:6E:6E:AF:AE:9E:54:0A:F5:78:6F:0F:6D:7F:EE:18:96:E7 X509v3 Authority Key Identifier: keyid:98:C4:7D:ED:77:AC:F5:B8:20:46:A5:1E:C3:8C:F9:EB:BF:9F:09:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118725505982398491/0/98C47DED77ACF5B82046A51EC38CF9EBBF9F0914.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:fc:18:f6:aa:c4:18:94:e2:29:47:e7:9a:7f:45:ec:3f:00: 46:7e:db:b6:d4:9b:d0:f8:d1:e9:b5:55:46:d2:e4:0f:59:0a: 22:ac:be:9f:43:11:fb:22:38:be:d3:c1:3a:61:d5:9d:1a:2a: a0:e8:de:f4:c7:4a:4d:1f:a7:f6:11:2a:bf:d5:8c:52:e3:0f: 90:02:64:38:62:28:29:1e:4c:f0:64:4f:6c:43:64:b9:d8:33: 01:c1:e9:ad:c8:19:f3:4c:5e:0b:ce:bb:e2:24:34:30:fe:5b: 86:9e:1a:66:64:75:de:ad:5b:67:46:34:ec:51:b5:94:da:da: c4:04:00:e2:6f:b3:83:2f:6a:ff:5a:60:fd:76:22:14:8e:c3: 21:eb:e8:c9:cb:6b:e1:73:26:53:ea:e6:d0:4e:b4:3d:46:ec: 68:1b:62:6d:ba:81:20:4a:ae:fe:dd:cf:7e:12:23:c1:df:d0: 94:eb:95:29:5a:32:f1:84:47:d6:99:a8:93:89:1d:1a:a3:67: 7f:50:23:38:cd:cb:a0:dc:08:19:c2:12:7d:e6:90:51:3d:75: 81:fa:59:9a:7f:4f:c8:fc:b3:a0:01:31:05:f4:97:5e:a2:4c: 96:42:89:54:a7:e0:bc:6d:6b:7f:2b:b9:b1:73:23:5e:bc:3f: 26:fc:f0:b6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBziX4/MwvMeMiRue6n8JtekIWDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThDNDdERUQ3N0FDRjVCODIwNDZBNTFFQzM4Q0Y5RUJC RjlGMDkxNDAeFw0yNjA3MTQwNTE1MzJaFw0yNjA3MTUwNjA0MzJaMDMxMTAvBgNV BAMTKDVCNDlEMTZFNkVBRkFFOUU1NDBBRjU3ODZGMEY2RDdGRUUxODk2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbBCkxPtalxl9tj/0w7dpe/iaC Kr9qHfL8m+0tHgSj+qhT6iQY15Yqv8Jmo+O1j4OGEYjLsx93KwY39M+N33ILDw+7 c1JddJGsgpiBYQZrVcMgFNcbh8vFQU8bSw09cmYWQyAB+CKSksiqUUiOwIVl6hFX Yh+cy+cWL/muy0uAnoO7BgcKCu1PeeM0v934rCfQANapHoMOyir5YByqnpIrD7bS /HV2Uh37Oi512yF3La2H9ojipR5nIk2TA9ap3Z6xPF+UyWc3MJbn3l4DraaA+4wy WX8rG9kGpuhrmjTXptQ+I3rS+sjoj4m/2bsD8RCns/YpvVfQvIaWNBNRaRwZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUW0nRbm6vrp5UCvV4bw9tf+4YlucwHwYDVR0j BBgwFoAUmMR97Xes9bggRqUew4z567+fCRQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODcyNTUwNTk4MjM5ODQ5MS8wLzk4QzQ3REVENzdBQ0Y1QjgyMDQ2QTUxRUMzOENG OUVCQkY5RjA5MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOThDNDdERUQ3N0FDRjVCODIwNDZBNTFFQzM4Q0Y5RUJCRjlGMDkxNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTg3MjU1MDU5ODIzOTg0OTEvMC85OEM0N0RFRDc3QUNG NUI4MjA0NkE1MUVDMzhDRjlFQkJGOUYwOTE0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvwY9qrEGJTi KUfnmn9F7D8ARn7bttSb0PjR6bVVRtLkD1kKIqy+n0MR+yI4vtPBOmHVnRoqoOje 9MdKTR+n9hEqv9WMUuMPkAJkOGIoKR5M8GRPbENkudgzAcHprcgZ80xeC8674iQ0 MP5bhp4aZmR13q1bZ0Y07FG1lNraxAQA4m+zgy9q/1pg/XYiFI7DIevoyctr4XMm U+rm0E60PUbsaBtibbqBIEqu/t3PfhIjwd/QlOuVKVoy8YRH1pmok4kdGqNnf1Aj OM3LoNwIGcISfeaQUT11gfpZmn9PyPyzoAExBfSXXqJMlkKJVKfgvG1rfyu5sXMj Xrw/Jvzwtg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:01:56 2026 by rpki-client