$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft File: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft (raw, json) Hash identifier: WUaIDt8skCTw+hh07i97hf8ErVcEaHkp62F8OjD8N4U= Subject key identifier: A5:81:7F:B4:94:6F:0C:1D:E8:97:1D:ED:7E:1C:41:4C:E1:A4:DE:51 Authority key identifier: 21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 Certificate issuer: /CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Certificate serial: 696116B109D210CDEA997D3B6755085E5674388E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft Manifest number: 55 Signing time: Fri 22 May 2026 05:56:51 +0000 Manifest this update: Fri 22 May 2026 05:51:51 +0000 Manifest next update: Sat 23 May 2026 09:48:51 +0000 Files and hashes: 1: AS18241.roa (hash: KghwJGsdAFwKKaHyAzU5cWOTx1CTSMYVyT97Iq5hIVw=) 2: AS0.roa (hash: BvQgF/OqmMaF0oD/Gh+P6gWfnSxEr9FEAszRlvbr0CI=) 3: AS9814.roa (hash: Fx0jP4aQ4pcOqireF4CpHMswJZljyUdoFx8vMnPRQjI=) 4: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl (hash: sojEVK9ARLLi0AenZllEjbgRLr/rg9kat+z6RcLTNFM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 09:48:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:61:16:b1:09:d2:10:cd:ea:99:7d:3b:67:55:08:5e:56:74:38:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Validity Not Before: May 22 05:51:51 2026 GMT Not After : May 23 09:48:51 2026 GMT Subject: CN=A5817FB4946F0C1DE8971DED7E1C414CE1A4DE51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a2:fe:6f:68:5a:91:eb:ff:d4:60:11:ad:d5: 0b:be:bc:97:a3:81:85:9b:62:fa:22:13:9f:00:84: f9:02:67:e0:13:27:56:a9:35:87:a6:ae:96:0e:4f: e2:52:c1:71:c1:02:ac:75:47:e2:29:e5:c4:e7:60: d5:20:39:af:11:d8:a4:7c:de:ec:cb:f8:13:e2:bd: 3a:7c:4d:86:b6:8d:e7:d7:53:f6:47:b5:72:87:05: ad:67:e0:8a:5f:5d:3b:b9:7a:f3:83:f4:58:71:d7: 9b:5c:1e:f1:0b:3c:f0:da:1c:2a:71:bc:92:f8:97: 9b:a5:9d:fd:10:79:22:51:56:b7:f7:49:79:fc:63: 14:e9:4d:c1:30:03:b3:30:3f:f4:bd:f9:7e:31:a0: 24:ab:14:f3:77:36:43:c9:f3:71:cf:29:2c:98:b4: 8e:cc:46:6c:f7:0a:03:39:eb:e3:4f:1a:bc:21:51: eb:81:d6:b4:9c:44:57:f4:e1:d0:dd:64:e6:f2:4a: 50:04:ae:35:7c:61:d9:03:c0:40:37:e8:1c:3e:4d: 1c:1d:c5:ac:6f:7f:95:b2:84:74:26:f4:e0:66:b9: 95:4a:a5:76:a7:62:24:37:0f:59:68:9a:96:59:b9: f0:29:53:38:bd:44:21:1b:d5:e2:b4:de:8a:18:4a: 05:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:81:7F:B4:94:6F:0C:1D:E8:97:1D:ED:7E:1C:41:4C:E1:A4:DE:51 X509v3 Authority Key Identifier: keyid:21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:6d:7e:97:73:51:64:48:29:2c:dc:02:df:0a:69:3b:6e:45: e3:f8:01:fa:7b:07:26:a0:29:ef:86:e5:53:b3:2e:2b:3e:4e: 4d:f5:19:e7:68:85:3e:de:7d:2f:fd:1e:e6:fb:7e:5f:16:7a: 51:64:95:e6:d0:e1:d8:fa:c0:70:06:78:b8:48:d0:1c:b5:f9: e8:8c:90:9a:e2:b5:bd:15:92:10:c2:f3:b8:5f:c7:25:bc:5f: 87:37:ff:17:db:c4:d0:73:cd:b1:e3:5e:04:ff:70:86:2c:df: 31:9b:94:9d:a0:df:b9:2f:db:44:b5:a0:4a:f4:3c:0c:d6:3b: 28:a3:33:1e:c5:83:1c:e1:ec:90:e6:77:87:fa:c6:f1:9d:07: 26:09:a4:2d:b1:2b:e2:d5:7e:bb:eb:f3:af:e2:d9:0b:40:2e: 51:cb:9e:5b:1a:85:6f:13:52:91:57:c4:9b:6a:cf:33:5a:4a: 77:c2:54:08:9e:94:3b:f3:12:ae:7e:65:eb:f6:0c:2b:b1:96: d4:ea:8d:56:e3:d7:85:05:e5:fa:c6:c7:4a:23:05:ee:c7:db: 4c:00:27:c7:6e:8b:33:6a:cb:68:8f:e7:df:15:ec:01:d5:fa: 93:42:e1:28:7d:10:ad:6a:46:a3:33:a4:eb:20:8d:26:7a:75: 04:3e:0c:5c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaWEWsQnSEM3qmX07Z1UIXlZ0OI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJB NjJBMkREODAeFw0yNjA1MjIwNTUxNTFaFw0yNjA1MjMwOTQ4NTFaMDMxMTAvBgNV BAMTKEE1ODE3RkI0OTQ2RjBDMURFODk3MURFRDdFMUM0MTRDRTFBNERFNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHov5vaFqR6//UYBGt1Qu+vJej gYWbYvoiE58AhPkCZ+ATJ1apNYemrpYOT+JSwXHBAqx1R+Ip5cTnYNUgOa8R2KR8 3uzL+BPivTp8TYa2jefXU/ZHtXKHBa1n4IpfXTu5evOD9Fhx15tcHvELPPDaHCpx vJL4l5ulnf0QeSJRVrf3SXn8YxTpTcEwA7MwP/S9+X4xoCSrFPN3NkPJ83HPKSyY tI7MRmz3CgM56+NPGrwhUeuB1rScRFf04dDdZObySlAErjV8YdkDwEA36Bw+TRwd xaxvf5WyhHQm9OBmuZVKpXanYiQ3D1lompZZufApUzi9RCEb1eK03ooYSgXlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpYF/tJRvDB3olx3tfhxBTOGk3lEwHwYDVR0j BBgwFoAUIeKnCwV4xnSwvx/XvrO5sqYqLdgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI0MTY2NjY5Nzg1NDk3OS8wLzIxRTJBNzBCMDU3OEM2NzRCMEJGMUZEN0JFQjNC OUIyQTYyQTJERDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJBNjJBMkREOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNDE2NjY2OTc4NTQ5NzkvMC8yMUUyQTcwQjA1NzhD Njc0QjBCRjFGRDdCRUIzQjlCMkE2MkEyREQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAam1+l3NRZEgp LNwC3wppO25F4/gB+nsHJqAp74blU7MuKz5OTfUZ52iFPt59L/0e5vt+XxZ6UWSV 5tDh2PrAcAZ4uEjQHLX56IyQmuK1vRWSEMLzuF/HJbxfhzf/F9vE0HPNseNeBP9w hizfMZuUnaDfuS/bRLWgSvQ8DNY7KKMzHsWDHOHskOZ3h/rG8Z0HJgmkLbEr4tV+ u+vzr+LZC0AuUcueWxqFbxNSkVfEm2rPM1pKd8JUCJ6UO/MSrn5l6/YMK7GW1OqN VuPXhQXl+sbHSiMF7sfbTAAnx26LM2rLaI/n3xXsAdX6k0LhKH0QrWpGozOk6yCN Jnp1BD4MXA== -----END CERTIFICATE-----Generated at Sat May 23 03:44:46 2026 by rpki-client