$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft File: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft (raw, json) Hash identifier: pzMZoyYgNVKVqRQTJckuEViXR3ii4ZayZo56niEpn2o= Subject key identifier: DC:72:39:24:B5:5C:27:08:EE:70:91:45:8F:65:3A:37:62:FF:26:39 Authority key identifier: 21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 Certificate issuer: /CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Certificate serial: 3FFD6A28BFBB862B2AB0699ABA874750C695A032 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft Manifest number: DB Signing time: Fri 28 Aug 2026 06:47:36 +0000 Manifest this update: Fri 28 Aug 2026 06:42:36 +0000 Manifest next update: Mon 31 Aug 2026 08:00:36 +0000 Files and hashes: 1: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl (hash: 7rCZcyMdfSMpnnr+J9x+IoTCt0NIU+063ja7lPiBIxg=) 2: AS9814.roa (hash: aH13hMU8C8fNHVLNKEaUevRiNr6V/+fHSBOg4b/U2Rw=) 3: AS18241.roa (hash: KghwJGsdAFwKKaHyAzU5cWOTx1CTSMYVyT97Iq5hIVw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:fd:6a:28:bf:bb:86:2b:2a:b0:69:9a:ba:87:47:50:c6:95:a0:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Validity Not Before: Aug 28 06:42:36 2026 GMT Not After : Aug 31 08:00:36 2026 GMT Subject: CN=DC723924B55C2708EE7091458F653A3762FF2639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a0:97:0d:24:ce:41:fd:33:16:4e:6f:fc:d8: e2:f7:aa:67:21:50:af:1f:59:61:87:ae:94:ec:50: 56:5a:b6:76:37:68:c4:56:9f:83:22:5d:cd:66:4c: 6a:0a:08:d4:0b:62:ab:6f:69:aa:60:84:cc:1a:f8: 6a:aa:50:3c:05:30:9d:22:88:04:c9:0e:da:74:d4: 63:42:cf:4b:67:9a:a0:f0:df:f7:06:a7:72:8b:57: 2d:d4:fa:94:01:75:dd:9b:11:e5:1c:f2:bd:03:e4: 29:6a:04:22:00:36:e2:c2:55:96:f3:67:c0:d0:89: 85:2b:62:bc:21:a4:c9:10:06:3e:ac:73:73:10:f3: 4c:10:a1:9d:8d:89:a1:91:79:e3:0d:86:3f:57:d1: 2e:27:fb:ee:3b:73:cd:4e:07:6f:c0:1a:2d:9a:d9: 9f:fe:f8:12:d6:e0:7b:fe:a0:e9:43:fe:b1:af:3b: 6e:6e:e4:d7:a9:5f:63:38:b4:04:73:c3:f5:9a:04: db:87:71:7e:7a:87:ef:95:dd:70:1d:66:51:ee:ac: 76:c3:03:26:97:34:8e:7a:06:6a:d2:d9:77:c5:75: 06:53:31:0d:52:05:c4:71:bc:fe:0a:99:59:c5:67: 6b:4b:84:f2:c9:e4:e8:66:51:4c:00:41:d5:cb:6d: ad:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:72:39:24:B5:5C:27:08:EE:70:91:45:8F:65:3A:37:62:FF:26:39 X509v3 Authority Key Identifier: keyid:21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:14:a5:61:8a:fe:d0:28:4d:26:2b:4e:6e:42:bd:39:03:92: 67:44:92:e4:0e:fc:67:04:8b:c6:92:84:ff:8d:d4:61:f5:e4: 75:0a:96:01:82:97:ae:c9:cb:f2:14:17:7f:75:9e:2b:20:64: 4b:93:16:4b:32:56:5d:ad:3f:3e:ec:d1:0b:57:32:ad:6e:e7: 0c:4e:cd:b9:d3:fc:d1:3f:1f:e5:46:be:95:ef:4e:a5:3c:70: 2e:2b:ad:cf:83:d6:d3:fc:84:c6:65:9b:30:58:ba:d1:d5:8c: bb:d6:52:ab:6b:fa:e0:2f:87:79:99:74:44:f4:2c:bf:16:07: 46:b5:21:05:18:51:5b:3e:15:cc:f0:cf:6d:c8:98:57:38:50: b1:5e:7c:1c:7a:ab:67:9d:cd:d5:3e:c7:11:0b:9d:31:f9:06: 0d:6e:bc:b3:80:86:4e:f3:99:a0:61:88:34:d0:9c:c5:de:a7: 7a:8e:81:62:1b:c6:48:29:a7:c0:a8:75:83:90:d1:f6:a1:c2: 9a:ec:76:7e:38:eb:db:63:99:3c:da:e0:03:7f:5c:b3:50:b7: 74:80:81:0e:22:bc:de:dc:f9:0e:ab:1d:2d:4f:aa:a0:85:20: 20:7a:e7:30:12:58:1b:64:fe:b5:13:17:7d:0c:95:90:65:be: 25:91:e6:ef -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUP/1qKL+7hisqsGmauodHUMaVoDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJB NjJBMkREODAeFw0yNjA4MjgwNjQyMzZaFw0yNjA4MzEwODAwMzZaMDMxMTAvBgNV BAMTKERDNzIzOTI0QjU1QzI3MDhFRTcwOTE0NThGNjUzQTM3NjJGRjI2MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/oJcNJM5B/TMWTm/82OL3qmch UK8fWWGHrpTsUFZatnY3aMRWn4MiXc1mTGoKCNQLYqtvaapghMwa+GqqUDwFMJ0i iATJDtp01GNCz0tnmqDw3/cGp3KLVy3U+pQBdd2bEeUc8r0D5ClqBCIANuLCVZbz Z8DQiYUrYrwhpMkQBj6sc3MQ80wQoZ2NiaGReeMNhj9X0S4n++47c81OB2/AGi2a 2Z/++BLW4Hv+oOlD/rGvO25u5NepX2M4tARzw/WaBNuHcX56h++V3XAdZlHurHbD AyaXNI56BmrS2XfFdQZTMQ1SBcRxvP4KmVnFZ2tLhPLJ5OhmUUwAQdXLba3pAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3HI5JLVcJwjucJFFj2U6N2L/JjkwHwYDVR0j BBgwFoAUIeKnCwV4xnSwvx/XvrO5sqYqLdgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI0MTY2NjY5Nzg1NDk3OS8wLzIxRTJBNzBCMDU3OEM2NzRCMEJGMUZEN0JFQjNC OUIyQTYyQTJERDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJBNjJBMkREOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNDE2NjY2OTc4NTQ5NzkvMC8yMUUyQTcwQjA1NzhD Njc0QjBCRjFGRDdCRUIzQjlCMkE2MkEyREQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBSlYYr+0ChN JitObkK9OQOSZ0SS5A78ZwSLxpKE/43UYfXkdQqWAYKXrsnL8hQXf3WeKyBkS5MW SzJWXa0/PuzRC1cyrW7nDE7NudP80T8f5Ua+le9OpTxwLiutz4PW0/yExmWbMFi6 0dWMu9ZSq2v64C+HeZl0RPQsvxYHRrUhBRhRWz4VzPDPbciYVzhQsV58HHqrZ53N 1T7HEQudMfkGDW68s4CGTvOZoGGINNCcxd6neo6BYhvGSCmnwKh1g5DR9qHCmux2 fjjr22OZPNrgA39cs1C3dICBDiK83tz5DqsdLU+qoIUgIHrnMBJYG2T+tRMXfQyV kGW+JZHm7w== -----END CERTIFICATE-----Generated at Sat Aug 29 07:13:39 2026 by rpki-client