$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft File: 921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft (raw, json) Hash identifier: OteVXfHV5IJyeptxrCKeQZmlTfM5JJgW0jVqW3vJCrI= Subject key identifier: 9D:5E:57:D5:2D:C8:0E:07:7C:22:4E:2C:A4:F8:A2:D3:61:AB:D3:90 Authority key identifier: 92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB Certificate issuer: /CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB Certificate serial: 7B989068A650E335EEEB864FB81A9F88B0AD7E99 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft Manifest number: 52 Signing time: Mon 06 Jul 2026 19:07:36 +0000 Manifest this update: Mon 06 Jul 2026 19:02:36 +0000 Manifest next update: Tue 07 Jul 2026 23:06:36 +0000 Files and hashes: 1: 3230322e3138392e332e302f32342d3234203d3e2034383437.roa (hash: 8ExX38dFJsGKMnDEN9NFSJMsrj0Y6q940RyHgciWJpw=) 2: 3130312e39362e3133342e302f32342d3234203d3e2034383437.roa (hash: 726ofHardCPhPvBsnl7kwy8aBXb1yfomBTbl12Gkc3M=) 3: 3130312e39362e3134322e302f32332d3233203d3e2034383437.roa (hash: GfoCWx5sl+tSN4OQ9uHej6sNYOh8bKKVWlXIiY9CVU8=) 4: 921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl (hash: Ov4Dzy48OHMZqHHkOPw6ZjNVX37bupO76BYCL+JcE+s=) 5: 3138332e38312e3138302e302f32322d3232203d3e2034383437.roa (hash: 4n7ZEuacTY07r7KmCftnz6ytrp3giTJTSn68WneTiTE=) 6: 3130312e39362e3132382e302f32332d3233203d3e2034383437.roa (hash: BD4EXLsTPjgLNF/fO8rF/VtqmsIw5b2waeO1LupTlYg=) 7: 3130312e39362e3133302e302f32342d3234203d3e2034383437.roa (hash: ztj4TIPHcK5ivl+9NmAGeK2Itc9Oqt+5hlO18neMVjM=) 8: 3230322e3138392e302e302f32322d3232203d3e2030.roa (hash: eGONjzo8uSWbtDzYQe2V6Q+IAVLW43fp8m2gPK9MrYI=) 9: 3130312e39362e3132382e302f32302d3230203d3e2030.roa (hash: 1xV9aP2gdc7Trs8xNwE/KOsAMShbKw7iwWZGWtS2IK0=) 10: 3130312e39362e3133322e302f32332d3233203d3e2034383437.roa (hash: pyruQMwauadA5XEUz/CIqNbzDvE1Pt09dSU3KIN64Xo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Jul 2026 23:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:98:90:68:a6:50:e3:35:ee:eb:86:4f:b8:1a:9f:88:b0:ad:7e:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB Validity Not Before: Jul 6 19:02:36 2026 GMT Not After : Jul 7 23:06:36 2026 GMT Subject: CN=9D5E57D52DC80E077C224E2CA4F8A2D361ABD390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:84:da:da:6e:f5:c1:01:40:2e:12:74:b8:23: e1:55:44:dd:ef:b2:3d:2b:a1:5c:90:02:97:5f:3f: b9:a4:8b:10:13:e7:51:92:f7:53:d6:b5:76:72:35: 2b:f8:af:d8:26:c1:bb:f7:81:ec:59:b6:fb:e6:e0: 26:c7:de:3a:59:30:41:12:75:64:e8:5e:08:6f:ff: f3:9d:73:97:e0:c9:e8:5a:6c:bf:8b:67:55:a6:a8: 8b:6a:e1:8d:7b:8c:e1:a6:d5:62:9e:2d:36:bc:53: 69:ec:81:44:96:42:b6:f1:46:4d:6a:5b:8e:0e:f8: 99:60:b0:5f:39:8f:26:ef:01:9d:89:11:ed:06:d0: 90:34:03:83:e5:7f:bd:ee:5b:32:4d:3c:3c:4c:04: f6:05:cf:7b:71:df:5a:28:c7:f1:37:6d:a6:1a:68: 7b:70:25:0c:e1:cc:3e:3e:02:5f:7a:f7:50:05:4c: 6b:25:26:37:31:ad:b3:21:ff:b8:fa:6f:1d:32:88: 98:a4:5f:b3:42:43:d7:e7:0d:55:6d:32:a7:af:8c: fa:ea:24:b9:00:2f:10:a5:a0:07:00:bf:3a:c5:bf: 46:14:45:5d:da:38:c7:e6:00:29:ce:e0:47:9c:68: b4:ae:ef:d3:33:32:47:f4:c6:22:ef:99:89:48:2f: 2c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5E:57:D5:2D:C8:0E:07:7C:22:4E:2C:A4:F8:A2:D3:61:AB:D3:90 X509v3 Authority Key Identifier: keyid:92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:3e:25:c2:e7:56:a5:a4:68:36:b5:00:f4:31:cf:b3:36:b3: 60:9f:bb:9c:01:39:81:0c:c2:26:e3:3a:8e:08:9f:8d:ae:37: 62:b0:46:7b:ea:29:5b:7d:29:66:8b:df:81:6b:d8:62:1a:48: 7e:df:58:6c:43:48:ab:64:3b:22:72:81:66:4b:2b:69:55:a6: ea:22:41:62:2a:3f:a5:be:3b:3c:d7:e7:c2:f0:eb:d6:ff:02: 26:e8:47:89:28:de:66:27:88:d1:1b:62:36:d6:ee:97:74:a1: d9:9f:d7:11:64:98:b4:8d:5e:c4:e9:e8:1f:e8:8c:6e:8e:9d: 1e:27:96:46:e0:63:14:62:ba:b6:2a:d4:82:c3:4d:0a:3e:47: 4b:2d:e9:19:12:e3:c4:f5:07:60:ce:1f:60:b8:13:aa:f6:47: 83:d4:d8:37:08:3f:52:28:91:f3:77:ce:94:51:27:3b:dd:16: 36:87:2e:9c:f7:e2:bf:7c:d9:fa:0c:56:03:64:99:31:b4:c9: fe:52:64:ec:d0:1d:85:8e:b0:f5:88:aa:1a:ca:c1:0b:75:47: ba:7c:44:5b:4e:46:64:72:83:55:77:7b:7e:e5:0b:c0:38:f1: bd:ac:6a:1e:f6:9a:bd:9b:cc:4b:40:17:5b:9c:71:73:41:09: e3:bb:d4:14 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe5iQaKZQ4zXu64ZPuBqfiLCtfpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxRTdDQ0VGQURDOUEwNUJGQkU4QThCOUVFRDRDOTVE NEJBNzVFQjAeFw0yNjA3MDYxOTAyMzZaFw0yNjA3MDcyMzA2MzZaMDMxMTAvBgNV BAMTKDlENUU1N0Q1MkRDODBFMDc3QzIyNEUyQ0E0RjhBMkQzNjFBQkQzOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDShNrabvXBAUAuEnS4I+FVRN3v sj0roVyQApdfP7mkixAT51GS91PWtXZyNSv4r9gmwbv3gexZtvvm4CbH3jpZMEES dWToXghv//Odc5fgyehabL+LZ1WmqItq4Y17jOGm1WKeLTa8U2nsgUSWQrbxRk1q W44O+JlgsF85jybvAZ2JEe0G0JA0A4Plf73uWzJNPDxMBPYFz3tx31oox/E3baYa aHtwJQzhzD4+Al9691AFTGslJjcxrbMh/7j6bx0yiJikX7NCQ9fnDVVtMqevjPrq JLkALxCloAcAvzrFv0YURV3aOMfmACnO4EecaLSu79MzMkf0xiLvmYlILyyXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnV5X1S3IDgd8Ik4spPii02Gr05AwHwYDVR0j BBgwFoAUkh58zvrcmgW/voqLnu1MldS6deswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDk2ODA5NTE3ODQyNDMyNS8wLzkyMUU3Q0NFRkFEQzlBMDVCRkJFOEE4QjlFRUQ0 Qzk1RDRCQTc1RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTIxRTdDQ0VGQURDOUEwNUJGQkU4QThCOUVFRDRDOTVENEJBNzVFQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ5NjgwOTUxNzg0MjQzMjUvMC85MjFFN0NDRUZBREM5 QTA1QkZCRThBOEI5RUVENEM5NUQ0QkE3NUVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVz4lwudWpaRo NrUA9DHPszazYJ+7nAE5gQzCJuM6jgifja43YrBGe+opW30pZovfgWvYYhpIft9Y bENIq2Q7InKBZksraVWm6iJBYio/pb47PNfnwvDr1v8CJuhHiSjeZieI0RtiNtbu l3Sh2Z/XEWSYtI1exOnoH+iMbo6dHieWRuBjFGK6tirUgsNNCj5HSy3pGRLjxPUH YM4fYLgTqvZHg9TYNwg/UiiR83fOlFEnO90WNocunPfiv3zZ+gxWA2SZMbTJ/lJk 7NAdhY6w9YiqGsrBC3VHunxEW05GZHKDVXd7fuULwDjxvaxqHvaavZvMS0AXW5xx c0EJ47vUFA== -----END CERTIFICATE-----Generated at Tue Jul 7 10:45:44 2026 by rpki-client