$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft File: F21B617F46E5DD760AE56A21B6890185B53C70E0.mft (raw, json) Hash identifier: r40MIqrl/184Mvqq0UrhZxHLLp1yijg4t2Gon5JRjog= Subject key identifier: C0:7C:0B:A1:37:8C:C2:58:3F:E4:04:EB:D9:29:0D:D2:CF:B4:B4:80 Authority key identifier: F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0 Certificate issuer: /CN=F21B617F46E5DD760AE56A21B6890185B53C70E0 Certificate serial: 53ACC7470264258631ECEFE93935E00BE4F1363A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft Manifest number: BD Signing time: Fri 28 Aug 2026 06:47:57 +0000 Manifest this update: Fri 28 Aug 2026 06:42:57 +0000 Manifest next update: Mon 31 Aug 2026 11:02:57 +0000 Files and hashes: 1: 3130332e3131362e3133382e302f32332d3233203d3e2034383337.roa (hash: u8YheGaowfeKbZ8F2KkIOif91xdF76xMFEgwStwZtes=) 2: 3130332e3131362e3133392e302f32342d3234203d3e20313332353336.roa (hash: hYlgJEXB7Dd9KGHTO3cLjmWdOWvw6dSpXmtbfRhgLq0=) 3: F21B617F46E5DD760AE56A21B6890185B53C70E0.crl (hash: DiD9QlNYIE/6WWrEsdruHWbt5GPHCgYQQm1svafwuEk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ac:c7:47:02:64:25:86:31:ec:ef:e9:39:35:e0:0b:e4:f1:36:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F21B617F46E5DD760AE56A21B6890185B53C70E0 Validity Not Before: Aug 28 06:42:57 2026 GMT Not After : Aug 31 11:02:57 2026 GMT Subject: CN=C07C0BA1378CC2583FE404EBD9290DD2CFB4B480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:ca:24:fd:2d:c7:25:96:96:c3:12:ac:bf: fb:ad:fe:11:1f:2c:8d:20:79:0a:33:44:cc:ca:62: e5:68:e8:80:10:ed:11:85:87:27:62:e4:63:e1:ad: 43:8d:07:f5:45:31:65:75:e3:ee:fe:cb:79:15:ca: d1:16:bb:c4:22:8f:d2:64:d6:08:8f:2e:fa:7e:f5: 82:94:6a:00:b2:19:ed:f1:2e:93:86:83:d2:99:f1: 9c:aa:a8:b8:50:ae:e7:41:77:6e:8b:a8:3b:07:66: 2b:cf:7d:37:9a:0e:3f:0d:3a:30:8f:dc:81:84:01: 5b:55:87:3a:90:90:e0:b5:ad:5f:4e:4d:44:5e:f0: 01:6c:88:6b:f9:00:a9:8d:90:df:d9:ed:be:8b:77: 34:20:77:33:a7:c3:40:61:e0:a6:8b:8a:95:e5:48: cd:99:3e:76:dd:a4:57:2e:4f:a4:f7:07:57:36:cd: 15:ee:21:7a:5e:d4:72:4d:f1:5f:04:6e:0d:16:29: f3:38:31:28:6e:34:58:cd:1f:3f:ad:99:aa:5e:7d: be:ca:42:99:1a:8d:41:a6:05:fe:3c:5c:43:5c:e3: 8f:63:d2:ba:9c:b3:68:e5:59:5c:cd:3f:bc:1f:4f: f7:87:74:a7:c4:8f:2c:c6:41:01:f4:50:ea:03:3e: 2b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7C:0B:A1:37:8C:C2:58:3F:E4:04:EB:D9:29:0D:D2:CF:B4:B4:80 X509v3 Authority Key Identifier: keyid:F2:1B:61:7F:46:E5:DD:76:0A:E5:6A:21:B6:89:01:85:B5:3C:70:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F21B617F46E5DD760AE56A21B6890185B53C70E0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094526146340454402/0/F21B617F46E5DD760AE56A21B6890185B53C70E0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:73:cf:48:42:4e:ae:00:4c:d4:a1:2e:8e:c0:08:bc:64:df: 35:f8:6a:a2:bc:7d:1c:43:50:d7:c3:c7:84:a1:8f:c3:cf:90: 07:8d:a6:30:72:5a:50:2f:7f:49:b8:5f:20:45:5e:cc:0c:f3: 57:e0:1e:fe:03:9f:eb:7b:e8:23:55:98:c3:f3:92:12:9e:29: a8:e9:ba:2b:38:cc:09:0f:f9:c5:01:1c:a1:81:6e:f5:2f:7a: 40:8e:c2:d9:31:d1:7c:60:0b:48:95:7a:f0:35:68:4d:57:18: 57:29:9e:c9:57:fb:da:0b:5f:33:47:bf:a8:d7:de:87:27:76: 6e:cd:c9:c5:21:d0:c4:b4:db:64:3a:84:27:36:9a:52:11:5f: e4:72:ff:2e:a6:68:bb:f4:0a:2e:62:ab:4b:ef:e5:bf:a6:0d: 18:c1:a9:91:17:f8:6a:e0:6a:08:c0:e3:f3:45:a1:d0:f9:12: 7d:c7:19:bc:e7:ce:eb:88:0f:b6:32:98:5a:c8:42:73:d8:46: 67:9a:e6:b5:f2:81:15:9c:2a:aa:16:34:f2:a2:16:48:60:9f: dd:0b:bc:79:6d:6f:11:7c:2e:cb:ce:c9:09:20:9e:bb:5d:82: c7:c7:63:00:5c:1a:94:83:e5:2b:fb:dd:e6:92:59:5a:3a:dd: d8:1d:36:59 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUU6zHRwJkJYYx7O/pOTXgC+TxNjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjIxQjYxN0Y0NkU1REQ3NjBBRTU2QTIxQjY4OTAxODVC NTNDNzBFMDAeFw0yNjA4MjgwNjQyNTdaFw0yNjA4MzExMTAyNTdaMDMxMTAvBgNV BAMTKEMwN0MwQkExMzc4Q0MyNTgzRkU0MDRFQkQ5MjkwREQyQ0ZCNEI0ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3MMok/S3HJZaWwxKsv/ut/hEf LI0geQozRMzKYuVo6IAQ7RGFhydi5GPhrUONB/VFMWV14+7+y3kVytEWu8Qij9Jk 1giPLvp+9YKUagCyGe3xLpOGg9KZ8ZyqqLhQrudBd26LqDsHZivPfTeaDj8NOjCP 3IGEAVtVhzqQkOC1rV9OTURe8AFsiGv5AKmNkN/Z7b6LdzQgdzOnw0Bh4KaLipXl SM2ZPnbdpFcuT6T3B1c2zRXuIXpe1HJN8V8Ebg0WKfM4MShuNFjNHz+tmapefb7K QpkajUGmBf48XENc449j0rqcs2jlWVzNP7wfT/eHdKfEjyzGQQH0UOoDPiufAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwHwLoTeMwlg/5ATr2SkN0s+0tIAwHwYDVR0j BBgwFoAU8hthf0bl3XYK5WohtokBhbU8cOAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDUyNjE0NjM0MDQ1NDQwMi8wL0YyMUI2MTdGNDZFNURENzYwQUU1NkEyMUI2ODkw MTg1QjUzQzcwRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjIxQjYxN0Y0NkU1REQ3NjBBRTU2QTIxQjY4OTAxODVCNTNDNzBFMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1MjYxNDYzNDA0NTQ0MDIvMC9GMjFCNjE3RjQ2RTVE RDc2MEFFNTZBMjFCNjg5MDE4NUI1M0M3MEUwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3PPSEJOrgBM 1KEujsAIvGTfNfhqorx9HENQ18PHhKGPw8+QB42mMHJaUC9/SbhfIEVezAzzV+Ae /gOf63voI1WYw/OSEp4pqOm6KzjMCQ/5xQEcoYFu9S96QI7C2THRfGALSJV68DVo TVcYVymeyVf72gtfM0e/qNfehyd2bs3JxSHQxLTbZDqEJzaaUhFf5HL/LqZou/QK LmKrS+/lv6YNGMGpkRf4auBqCMDj80Wh0PkSfccZvOfO64gPtjKYWshCc9hGZ5rm tfKBFZwqqhY08qIWSGCf3Qu8eW1vEXwuy87JCSCeu12Cx8djAFwalIPlK/vd5pJZ Wjrd2B02WQ== -----END CERTIFICATE-----Generated at Sat Aug 29 06:07:30 2026 by rpki-client