$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft File: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft (raw, json) Hash identifier: 0dAQZzUyPRpNi2lUy4VlYEEWGCJVHOqIVhNSg9xs2iw= Subject key identifier: 0E:C9:0C:4F:96:63:85:EB:24:61:BE:F8:B2:30:EB:FD:56:C5:FC:72 Authority key identifier: 21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 Certificate issuer: /CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Certificate serial: 7D5F657A4C64E2CAD4D82A6A70A66A2E92BE8AE7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft Manifest number: F0 Signing time: Wed 14 Oct 2026 01:53:25 +0000 Manifest this update: Wed 14 Oct 2026 01:48:25 +0000 Manifest next update: Sat 17 Oct 2026 04:42:25 +0000 Files and hashes: 1: AS9814.roa (hash: aH13hMU8C8fNHVLNKEaUevRiNr6V/+fHSBOg4b/U2Rw=) 2: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl (hash: UApb4zghZKyHaKK51NRjoqic2m1v7AmaItzqCwaOMSo=) 3: AS18241.roa (hash: KghwJGsdAFwKKaHyAzU5cWOTx1CTSMYVyT97Iq5hIVw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 04:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:5f:65:7a:4c:64:e2:ca:d4:d8:2a:6a:70:a6:6a:2e:92:be:8a:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Validity Not Before: Oct 14 01:48:25 2026 GMT Not After : Oct 17 04:42:25 2026 GMT Subject: CN=0EC90C4F966385EB2461BEF8B230EBFD56C5FC72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9b:3f:50:23:4c:2a:14:f4:ef:31:51:c1:33: dc:a1:d5:b0:27:28:a2:3a:9f:0f:70:e1:8a:1f:43: 87:66:27:66:b2:d3:d4:c3:38:fe:45:ce:68:b4:67: 09:ba:7f:d1:21:d6:30:8b:94:51:22:83:2b:7d:b5: d3:35:0d:9f:86:d4:93:88:c5:3c:e7:2c:f2:b9:2f: f8:47:93:48:31:4c:36:71:36:c4:81:60:9f:9e:ce: d9:1b:98:5c:21:90:92:04:82:9d:4a:5a:bf:39:14: 6e:2b:ee:cc:47:a1:95:dc:e4:27:33:54:6f:f6:8d: d4:a0:f4:97:fc:6b:8e:34:2c:e6:38:63:17:87:22: 9f:2d:9f:6c:1a:22:d3:76:dc:c0:bd:46:c9:3a:f9: 3c:d9:72:81:f5:a7:7a:df:5d:32:45:9f:4f:59:a8: ba:49:40:d5:c3:c7:41:01:2a:47:64:40:97:cb:4c: 86:41:4a:02:97:e9:f2:af:55:70:49:06:b8:cf:8d: 1e:ca:99:2e:4b:e3:4e:9f:23:4d:47:d6:11:91:5c: 50:37:ec:d3:85:68:58:c8:21:93:18:f8:85:ce:3b: 9c:a3:9f:ff:74:28:76:f1:5e:e2:13:31:4e:07:40: 92:5a:f1:68:d4:da:49:6f:73:c1:92:df:ab:bb:65: 91:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C9:0C:4F:96:63:85:EB:24:61:BE:F8:B2:30:EB:FD:56:C5:FC:72 X509v3 Authority Key Identifier: keyid:21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c0:15:f1:e3:6a:45:ed:5d:e0:06:10:84:38:7b:f8:9c:75: bf:4c:ed:8a:7c:40:e7:7c:22:60:c1:41:d2:99:74:cc:8f:d0: 34:2f:df:f0:48:5b:1a:0d:fa:d3:1e:02:3b:f1:38:23:4e:e8: 56:11:98:37:bc:d4:57:2f:83:60:d8:01:58:ec:09:6e:4a:25: e3:81:4c:d3:b6:60:f2:cf:d7:58:9c:85:9b:c5:a8:a0:00:fb: b0:cb:b1:6a:0a:11:3d:37:8d:a6:61:8d:51:a4:45:0d:ff:2c: 62:1e:e3:d3:77:b8:ad:fd:e8:d4:39:c8:f3:b7:34:6e:c5:ae: 56:94:b1:c4:39:87:4a:3a:fd:cc:03:4f:32:11:05:b9:c5:ee: 3f:b3:ca:26:27:49:73:6d:4a:d4:0a:6e:68:f1:76:7a:65:d0: d3:a4:5b:5e:44:21:8e:42:00:b0:75:60:48:98:3e:59:15:20: 1c:db:61:0b:e9:96:89:a8:27:0b:78:c9:93:64:05:46:98:58: a7:0f:ce:98:e7:ad:94:87:78:9d:83:64:fc:b3:54:be:57:6a: 28:e4:f0:74:2f:d2:9e:2f:f2:51:0c:1f:8d:aa:55:12:bb:09: ab:06:d9:46:38:8a:c0:41:3e:aa:4d:b4:17:21:4b:54:7d:06: 67:31:45:bc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfV9lekxk4srU2CpqcKZqLpK+iucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJB NjJBMkREODAeFw0yNjEwMTQwMTQ4MjVaFw0yNjEwMTcwNDQyMjVaMDMxMTAvBgNV BAMTKDBFQzkwQzRGOTY2Mzg1RUIyNDYxQkVGOEIyMzBFQkZENTZDNUZDNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfmz9QI0wqFPTvMVHBM9yh1bAn KKI6nw9w4YofQ4dmJ2ay09TDOP5Fzmi0Zwm6f9Eh1jCLlFEigyt9tdM1DZ+G1JOI xTznLPK5L/hHk0gxTDZxNsSBYJ+eztkbmFwhkJIEgp1KWr85FG4r7sxHoZXc5Ccz VG/2jdSg9Jf8a440LOY4YxeHIp8tn2waItN23MC9Rsk6+TzZcoH1p3rfXTJFn09Z qLpJQNXDx0EBKkdkQJfLTIZBSgKX6fKvVXBJBrjPjR7KmS5L406fI01H1hGRXFA3 7NOFaFjIIZMY+IXOO5yjn/90KHbxXuITMU4HQJJa8WjU2klvc8GS36u7ZZGvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDskMT5ZjheskYb74sjDr/VbF/HIwHwYDVR0j BBgwFoAUIeKnCwV4xnSwvx/XvrO5sqYqLdgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI0MTY2NjY5Nzg1NDk3OS8wLzIxRTJBNzBCMDU3OEM2NzRCMEJGMUZEN0JFQjNC OUIyQTYyQTJERDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJBNjJBMkREOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNDE2NjY2OTc4NTQ5NzkvMC8yMUUyQTcwQjA1NzhD Njc0QjBCRjFGRDdCRUIzQjlCMkE2MkEyREQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMAV8eNqRe1d 4AYQhDh7+Jx1v0ztinxA53wiYMFB0pl0zI/QNC/f8EhbGg360x4CO/E4I07oVhGY N7zUVy+DYNgBWOwJbkol44FM07Zg8s/XWJyFm8WooAD7sMuxagoRPTeNpmGNUaRF Df8sYh7j03e4rf3o1DnI87c0bsWuVpSxxDmHSjr9zANPMhEFucXuP7PKJidJc21K 1ApuaPF2emXQ06RbXkQhjkIAsHVgSJg+WRUgHNthC+mWiagnC3jJk2QFRphYpw/O mOetlId4nYNk/LNUvldqKOTwdC/Sni/yUQwfjapVErsJqwbZRjiKwEE+qk20FyFL VH0GZzFFvA== -----END CERTIFICATE-----Generated at Wed Oct 14 17:11:30 2026 by rpki-client