$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft File: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft (raw, json) Hash identifier: TOfP922beicc2GMJ4t2ZIRbNloXDZo0sjBoKGrOkliw= Subject key identifier: 3A:60:80:B3:43:51:BA:D9:EC:03:65:68:37:8F:CF:D9:9A:C4:B4:10 Authority key identifier: 21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 Certificate issuer: /CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Certificate serial: 4324A2CB5DAC5338AF56E9725D849CBB7E0B24EB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft Manifest number: 9F Signing time: Tue 14 Jul 2026 14:21:28 +0000 Manifest this update: Tue 14 Jul 2026 14:16:28 +0000 Manifest next update: Wed 15 Jul 2026 14:41:28 +0000 Files and hashes: 1: AS18241.roa (hash: KghwJGsdAFwKKaHyAzU5cWOTx1CTSMYVyT97Iq5hIVw=) 2: AS9814.roa (hash: aH13hMU8C8fNHVLNKEaUevRiNr6V/+fHSBOg4b/U2Rw=) 3: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl (hash: 6QbZx7htuCwHesACVe3cbsxWS9u5onbN2KMXKmSwym0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 14:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:24:a2:cb:5d:ac:53:38:af:56:e9:72:5d:84:9c:bb:7e:0b:24:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Validity Not Before: Jul 14 14:16:28 2026 GMT Not After : Jul 15 14:41:28 2026 GMT Subject: CN=3A6080B34351BAD9EC036568378FCFD99AC4B410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d4:a6:7f:5d:87:fd:9f:de:ef:f1:4f:fe:48: b6:16:67:ff:d6:e1:bf:78:93:c2:cc:3d:cb:36:57: 3f:0e:47:23:bc:52:39:cc:98:e7:72:ac:20:17:8e: 61:e7:9f:d7:8b:ef:6c:c6:4a:d0:51:d1:ea:95:d4: 38:50:3c:a9:ad:ca:e2:d4:d4:c6:85:b8:0b:7d:9b: 09:5e:bd:14:ae:1b:73:8e:d3:c6:02:f5:5c:52:66: 39:06:a7:44:5a:ea:e1:23:d4:10:68:14:35:9c:d6: eb:1f:53:03:55:23:09:42:c5:1e:bc:5e:1f:9d:ee: 78:07:b5:e8:7d:37:18:f7:23:b1:2c:33:b9:0f:25: 51:78:67:17:1c:65:fd:9e:fa:a7:41:1d:67:82:f1: e6:03:ce:a2:f9:79:a0:e1:98:f2:de:a6:95:09:02: c8:a6:05:3c:26:cb:03:ae:d2:da:b8:ae:fd:41:87: 39:6e:b9:78:ed:eb:79:34:40:73:4f:2a:5f:f6:71: 00:4c:a5:d5:e7:33:e8:31:9f:18:e7:85:cf:59:c3: d8:91:b8:43:9b:57:26:fe:f6:25:c9:6e:c6:ed:63: 9a:24:cb:a8:57:7a:e0:c6:72:f2:67:67:67:03:39: 4d:d3:8f:ba:46:03:d2:76:05:27:48:c2:f9:40:f6: 1c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:60:80:B3:43:51:BA:D9:EC:03:65:68:37:8F:CF:D9:9A:C4:B4:10 X509v3 Authority Key Identifier: keyid:21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:93:d7:2f:ae:5b:a9:04:fd:66:bb:0d:12:e4:18:19:e3:75: 7b:00:ee:50:9a:a5:b6:91:7c:1f:8b:76:21:d9:96:e0:f3:38: f4:d9:fc:6a:1c:41:0f:79:99:ec:36:a3:aa:ee:a7:73:e8:05: 89:a8:ac:a4:5e:1d:8e:74:a2:c4:bb:6c:99:53:28:d8:d7:ec: c7:c0:e9:6c:f6:f6:52:d9:0e:97:07:81:87:5a:2c:0d:d2:47: 30:e7:a4:49:94:58:74:0f:ec:65:3b:03:90:e2:f1:7a:a0:6f: 5e:e8:48:e7:1d:64:e7:e1:77:39:c8:b5:9a:d6:ca:d8:9d:c3: bd:b3:22:d2:89:e1:1f:e6:7e:db:b0:dc:c1:62:04:5c:1f:9d: 5e:d7:31:94:e5:9c:63:cf:3f:6e:a8:97:f0:83:40:10:d0:cb: 27:1c:60:89:a7:d3:b3:5e:1d:dc:dc:c5:6f:16:f8:be:24:4e: 46:16:63:74:44:62:c5:b2:76:07:76:82:27:09:da:d5:01:ef: 31:15:ab:ff:6a:03:98:81:83:5b:3d:11:b5:dc:a3:4d:c5:36: ed:66:76:26:cb:48:3c:af:ae:55:3d:ee:0d:f9:0d:1c:b1:3a: 7c:46:6f:8b:e5:61:42:7b:00:f6:dc:fa:50:fb:fc:ff:49:db: 5f:4b:41:65 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQySiy12sUzivVulyXYScu34LJOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJB NjJBMkREODAeFw0yNjA3MTQxNDE2MjhaFw0yNjA3MTUxNDQxMjhaMDMxMTAvBgNV BAMTKDNBNjA4MEIzNDM1MUJBRDlFQzAzNjU2ODM3OEZDRkQ5OUFDNEI0MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC31KZ/XYf9n97v8U/+SLYWZ//W 4b94k8LMPcs2Vz8ORyO8UjnMmOdyrCAXjmHnn9eL72zGStBR0eqV1DhQPKmtyuLU 1MaFuAt9mwlevRSuG3OO08YC9VxSZjkGp0Ra6uEj1BBoFDWc1usfUwNVIwlCxR68 Xh+d7ngHteh9Nxj3I7EsM7kPJVF4ZxccZf2e+qdBHWeC8eYDzqL5eaDhmPLeppUJ AsimBTwmywOu0tq4rv1BhzluuXjt63k0QHNPKl/2cQBMpdXnM+gxnxjnhc9Zw9iR uEObVyb+9iXJbsbtY5oky6hXeuDGcvJnZ2cDOU3Tj7pGA9J2BSdIwvlA9hz1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOmCAs0NRutnsA2VoN4/P2ZrEtBAwHwYDVR0j BBgwFoAUIeKnCwV4xnSwvx/XvrO5sqYqLdgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI0MTY2NjY5Nzg1NDk3OS8wLzIxRTJBNzBCMDU3OEM2NzRCMEJGMUZEN0JFQjNC OUIyQTYyQTJERDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJBNjJBMkREOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNDE2NjY2OTc4NTQ5NzkvMC8yMUUyQTcwQjA1NzhD Njc0QjBCRjFGRDdCRUIzQjlCMkE2MkEyREQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZPXL65bqQT9 ZrsNEuQYGeN1ewDuUJqltpF8H4t2IdmW4PM49Nn8ahxBD3mZ7Dajqu6nc+gFiais pF4djnSixLtsmVMo2Nfsx8DpbPb2UtkOlweBh1osDdJHMOekSZRYdA/sZTsDkOLx eqBvXuhI5x1k5+F3Oci1mtbK2J3DvbMi0onhH+Z+27DcwWIEXB+dXtcxlOWcY88/ bqiX8INAENDLJxxgiafTs14d3NzFbxb4viRORhZjdERixbJ2B3aCJwna1QHvMRWr /2oDmIGDWz0RtdyjTcU27WZ2JstIPK+uVT3uDfkNHLE6fEZvi+VhQnsA9tz6UPv8 /0nbX0tBZQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:52 2026 by rpki-client