$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft File: 8421F0680EB1B3756485D0F7681F78067E9C172E.mft (raw, json) Hash identifier: nyV4BHDddbBGBqvmwYnr3pmyWd+S560xVLxup6XveVk= Subject key identifier: 9B:2E:22:D6:58:C9:38:2A:79:66:18:36:5A:1A:B4:5E:07:05:7C:F5 Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E Certificate serial: 1D4634399B761B0F690E5E95BD152EC773BF4E05 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft Manifest number: 012A Signing time: Fri 28 Aug 2026 06:47:42 +0000 Manifest this update: Fri 28 Aug 2026 06:42:42 +0000 Manifest next update: Mon 31 Aug 2026 12:16:42 +0000 Files and hashes: 1: 3131342e3134312e3132382e302f31392d3139203d3e203435303631.roa (hash: rX71zn663mC+PXbN9bZFqHBjL7EmPtxQN3yowzWIv7k=) 2: 3130332e3235312e38342e302f32322d3232203d3e203435303631.roa (hash: Uqm3SQ0Upe1tVgTu+kaQINPzkGJ7F/HFSydp7geQGOU=) 3: 3131342e32382e36382e302f32322d3232203d3e2034383131.roa (hash: k2DANdr4kGbHw5DbBF4H016ZNcLf5+VxwPnYFQBum2I=) 4: 3131342e32382e3132382e302f32302d3230203d3e2034383131.roa (hash: 7ctkGQpyisi9zH2u2VKxvHKRSH6rZz0X8ZJdtm7yPBk=) 5: 34352e3131362e35322e302f32322d3232203d3e203435303631.roa (hash: Q2GLAzJCuXolF8zvE4SK4DiSfrkjkP04MyuCM9i3+zc=) 6: 3131342e3134312e3134382e302f32322d3232203d3e203435303631.roa (hash: GAjhPK7uIzL9Jk1ZUM2oYaioJeK2HkXJIrHGIBCS68A=) 7: 3131342e32382e3132382e302f31392d3139203d3e2034383132.roa (hash: xqw7IomjKxBRLvFlgY2UqqWMCB7OIYkSZ42ZB2kiYMc=) 8: 3131382e3132362e33322e302f31392d3139203d3e203435303631.roa (hash: oxCUlAGrmEVENEvphgoHrtULEK4PmQscKpU+wwYDSQQ=) 9: 3131342e32382e3134342e302f32302d3230203d3e2034383131.roa (hash: E1m38mZb/SG7oWaFlqcUfpVkwaATD41p5lliHG3KeOw=) 10: 3230322e3132322e3131322e302f32312d3231203d3e203435303631.roa (hash: p64OlJWN4xzR7Eauh13Kq9y9HsakhADFQc1EpncoPyA=) 11: 3131342e32382e37322e302f32312d3231203d3e2034383131.roa (hash: z+KkAbE1tNzpn5jtmiDv8aWslLlp03fmv+ixrqjR+0c=) 12: 8421F0680EB1B3756485D0F7681F78067E9C172E.crl (hash: 6dhE+SCgbj3znwT2/JI2zJvG7/j74U9UM67PCANgt/s=) 13: 34352e3131352e34342e302f32322d3232203d3e2034383131.roa (hash: y/MSFBJdojfDrNGDV6JXxCEFfy6JVkgRu8xQqlGA1+o=) 14: 3131342e3134312e3132382e302f31382d3138203d3e203435303631.roa (hash: //+6nQlQDBn0BXAXI99nw4HMz9l6KIJ4wurfWegCjHI=) 15: 3131342e32382e3136302e302f31392d3139203d3e203435303631.roa (hash: TjgLKPNifN+3Wr/+k2dIOHUJlqXOKSiGUcoZKgFaxSY=) 16: 323430303a383230313a3a2f34382d313238203d3e203435303631.roa (hash: 36yhztcZ5Fu1fqVVziBV34gyTNeZzEm9a1ZFJhxb2Fs=) 17: 323430303a383230303a3a2f33322d313238203d3e203435303631.roa (hash: OJuPzB78ELG7oWhjMKLWmQEkKhS3FsL77IA5FBEyGug=) 18: 3131342e3134312e3136302e302f31392d3139203d3e203435303631.roa (hash: JCIREiuOF9Kv/Vlb/fhDKY/AqbnrP7VRNXpBzQfkI54=) 19: 323430303a383230313a3a2f33322d313238203d3e203435303631.roa (hash: cCjZk6/D7FQRokzzWSYRnQwLRhmgRoE9l1n51OgrOrQ=) 20: 3131342e32382e3133342e302f32342d3234203d3e2034383337.roa (hash: UYKWkrVdhnWPxrHTELoGMnyGsAs4tF9fFKf83dqOGqw=) 21: 3132312e35352e302e302f31382d3138203d3e203435303631.roa (hash: NhqqQJvDACKCKhJecfErnOqf7SHXIpNF0kxLCWZji7g=) 22: 3130332e31332e3234342e302f32322d3232203d3e203435303631.roa (hash: s7xNgeXINQ5XzPzluG6befi4PDsxGcgFDif9YN8Cjtc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 12:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:46:34:39:9b:76:1b:0f:69:0e:5e:95:bd:15:2e:c7:73:bf:4e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E Validity Not Before: Aug 28 06:42:42 2026 GMT Not After : Aug 31 12:16:42 2026 GMT Subject: CN=9B2E22D658C9382A796618365A1AB45E07057CF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ec:ae:1c:cd:6f:64:d4:fb:e0:b6:0f:7b:11: 21:d5:00:33:17:96:7b:1b:3a:17:94:2b:e8:52:db: c7:64:3d:ad:41:eb:75:b1:36:9f:07:46:01:c1:d6: 2d:60:b9:23:c9:62:8f:39:45:0f:7c:98:3e:42:fe: b9:1d:a4:7a:25:be:8a:7e:71:8c:57:84:de:c4:5b: 41:6f:a4:e7:6f:87:45:7c:ca:a8:0e:d0:7c:d7:bc: 55:20:82:50:96:1b:f8:8d:62:c9:6b:7b:79:d3:d5: 0e:dd:43:6c:8a:85:4b:0c:96:d4:0e:f3:ca:54:fb: 90:df:b1:90:e9:b1:ff:8d:0e:54:db:49:05:b8:15: b1:cb:bb:28:f5:86:0a:53:54:23:ae:d5:62:4b:4f: e8:b0:16:7a:7c:d3:bf:d7:78:51:b0:f4:af:bd:a9: 7d:f7:59:b4:66:f5:4f:17:d2:80:be:a4:fd:a7:c3: e4:91:08:67:8d:65:b8:9a:60:f3:88:de:42:a1:79: a4:1c:32:9f:76:37:a6:8b:1b:99:07:9a:9d:29:d6: 7c:02:89:dc:e8:2b:2a:2f:c8:2f:ea:5a:00:3a:82: 84:83:8d:4e:b7:e0:bb:bc:25:b4:85:de:48:c1:82: 18:2b:97:ef:a1:08:9c:e6:0b:b2:22:f0:bd:98:49: c7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2E:22:D6:58:C9:38:2A:79:66:18:36:5A:1A:B4:5E:07:05:7C:F5 X509v3 Authority Key Identifier: keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d5:ed:62:e5:45:81:9f:30:7d:20:e1:37:74:5d:6f:b4:6d: 7b:34:1e:93:b4:e4:b5:ea:3d:9f:c4:d3:bd:1b:19:be:ba:7a: b2:e8:c1:4b:a7:b2:af:33:ac:88:8d:c7:89:db:11:a7:b1:7c: 65:87:cf:23:12:2d:94:d4:00:e7:36:b7:7e:d3:68:45:00:8d: 95:9e:3d:58:30:6e:2d:b7:67:bf:b9:b3:fe:8e:02:1d:0a:f0: fb:6b:e1:16:b7:e5:a3:e3:28:db:b6:86:32:6e:5c:97:5e:2d: 6f:30:53:0d:3e:7e:cf:f2:65:81:84:d0:2b:2f:a7:3b:61:b0: 18:6a:1e:84:cd:74:d9:60:a8:5a:9e:3c:70:84:99:6f:16:31: 5a:db:02:6b:fd:c9:71:54:b2:5f:d6:ca:b8:19:83:e8:6a:9f: a9:9b:52:28:db:b8:79:a6:e0:a6:c5:b5:6f:a5:3a:c5:54:c7: 02:78:e5:02:18:f2:f6:2f:df:f1:df:48:b5:ce:45:b2:38:21: c5:63:c0:89:6d:c8:2e:2b:3c:3d:94:53:8d:3f:fe:bc:67:d0: 63:86:21:75:68:a3:00:07:fb:e2:9c:fb:1f:08:ad:2e:1d:ab: 23:f5:83:2e:6a:51:62:13:38:1f:77:16:a1:5c:b9:83:04:3d: b5:cc:2d:68 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHUY0OZt2Gw9pDl6VvRUux3O/TgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3 RTlDMTcyRTAeFw0yNjA4MjgwNjQyNDJaFw0yNjA4MzExMjE2NDJaMDMxMTAvBgNV BAMTKDlCMkUyMkQ2NThDOTM4MkE3OTY2MTgzNjVBMUFCNDVFMDcwNTdDRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD7K4czW9k1Pvgtg97ESHVADMX lnsbOheUK+hS28dkPa1B63WxNp8HRgHB1i1guSPJYo85RQ98mD5C/rkdpHolvop+ cYxXhN7EW0FvpOdvh0V8yqgO0HzXvFUgglCWG/iNYslre3nT1Q7dQ2yKhUsMltQO 88pU+5DfsZDpsf+NDlTbSQW4FbHLuyj1hgpTVCOu1WJLT+iwFnp807/XeFGw9K+9 qX33WbRm9U8X0oC+pP2nw+SRCGeNZbiaYPOI3kKheaQcMp92N6aLG5kHmp0p1nwC idzoKyovyC/qWgA6goSDjU634Lu8JbSF3kjBghgrl++hCJzmC7Ii8L2YScc3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmy4i1ljJOCp5Zhg2Whq0XgcFfPUwHwYDVR0j BBgwFoAUhCHwaA6xs3VkhdD3aB94Bn6cFy4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQ3MTg3My8wLzg0MjFGMDY4MEVCMUIzNzU2NDg1RDBGNzY4MUY3 ODA2N0U5QzE3MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3RTlDMTcyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc0NzE4NzMvMC84NDIxRjA2ODBFQjFC Mzc1NjQ4NUQwRjc2ODFGNzgwNjdFOUMxNzJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASNXtYuVFgZ8w fSDhN3Rdb7RtezQek7Tkteo9n8TTvRsZvrp6sujBS6eyrzOsiI3HidsRp7F8ZYfP IxItlNQA5za3ftNoRQCNlZ49WDBuLbdnv7mz/o4CHQrw+2vhFrflo+Mo27aGMm5c l14tbzBTDT5+z/JlgYTQKy+nO2GwGGoehM102WCoWp48cISZbxYxWtsCa/3JcVSy X9bKuBmD6GqfqZtSKNu4eabgpsW1b6U6xVTHAnjlAhjy9i/f8d9Itc5FsjghxWPA iW3ILis8PZRTjT/+vGfQY4YhdWijAAf74pz7HwitLh2rI/WDLmpRYhM4H3cWoVy5 gwQ9tcwtaA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:32:43 2026 by rpki-client