$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft File: 921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft (raw, json) Hash identifier: u1p4EXFBIRs6C39FQuqhHGOjq6XE4I4uklD8QZOrV+8= Subject key identifier: D6:B5:0B:9F:0D:B0:39:73:43:D2:DC:B8:93:E5:70:1A:C3:9D:D4:3F Authority key identifier: 92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB Certificate issuer: /CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB Certificate serial: EDBC27151674AAFCAFD032DA5EDF97609E9488 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft Manifest number: 16 Signing time: Sat 23 May 2026 00:32:34 +0000 Manifest this update: Sat 23 May 2026 00:27:34 +0000 Manifest next update: Sun 24 May 2026 04:29:34 +0000 Files and hashes: 1: 3138332e38312e3138302e302f32322d3232203d3e2034383437.roa (hash: 4n7ZEuacTY07r7KmCftnz6ytrp3giTJTSn68WneTiTE=) 2: 3130312e39362e3133322e302f32332d3233203d3e2034383437.roa (hash: pyruQMwauadA5XEUz/CIqNbzDvE1Pt09dSU3KIN64Xo=) 3: 3130312e39362e3132382e302f32302d3230203d3e2030.roa (hash: 1xV9aP2gdc7Trs8xNwE/KOsAMShbKw7iwWZGWtS2IK0=) 4: 3130312e39362e3133302e302f32342d3234203d3e2034383437.roa (hash: ztj4TIPHcK5ivl+9NmAGeK2Itc9Oqt+5hlO18neMVjM=) 5: 3130312e39362e3133342e302f32342d3234203d3e2034383437.roa (hash: 726ofHardCPhPvBsnl7kwy8aBXb1yfomBTbl12Gkc3M=) 6: 3230322e3138392e302e302f32322d3232203d3e2030.roa (hash: eGONjzo8uSWbtDzYQe2V6Q+IAVLW43fp8m2gPK9MrYI=) 7: 3130312e39362e3134322e302f32332d3233203d3e2034383437.roa (hash: GfoCWx5sl+tSN4OQ9uHej6sNYOh8bKKVWlXIiY9CVU8=) 8: 3130312e39362e3132382e302f32332d3233203d3e2034383437.roa (hash: BD4EXLsTPjgLNF/fO8rF/VtqmsIw5b2waeO1LupTlYg=) 9: 921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl (hash: H1GCNhyddIUnUqpd52tMk2S9nfbmXqI/DOxYXfI9+7w=) 10: 3230322e3138392e332e302f32342d3234203d3e2034383437.roa (hash: 8ExX38dFJsGKMnDEN9NFSJMsrj0Y6q940RyHgciWJpw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 May 2026 02:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ed:bc:27:15:16:74:aa:fc:af:d0:32:da:5e:df:97:60:9e:94:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB Validity Not Before: May 23 00:27:34 2026 GMT Not After : May 24 04:29:34 2026 GMT Subject: CN=D6B50B9F0DB0397343D2DCB893E5701AC39DD43F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:95:26:5f:6e:d3:e4:bf:c7:61:dd:46:7f:d4: 41:60:bb:64:44:6a:92:96:3b:ff:f3:00:c8:43:c6: 37:d0:e6:e8:56:c7:4a:36:76:ab:e8:10:72:1f:6d: bd:8a:f4:75:45:4f:1c:3a:6d:11:98:d5:63:b5:72: 42:50:52:ac:70:bd:97:f1:46:2a:d7:a1:66:99:c7: 49:aa:a8:0d:2c:6f:27:26:ad:ee:c3:46:c1:ea:75: 76:86:c5:04:34:d2:57:bd:bc:b3:c3:e2:c8:80:68: 49:7e:17:34:5f:dc:42:04:de:6c:8a:12:83:95:a2: 6e:e0:6c:12:e6:8d:31:6a:0d:3c:f4:d6:a6:92:5b: 7b:59:60:46:05:d4:15:f5:86:0f:1d:58:0c:a0:17: 33:56:05:a5:97:8f:41:63:dc:e6:fe:2b:b4:a8:d7: 50:18:3f:dc:60:db:68:5b:32:2c:24:6d:64:33:6d: e2:d4:0a:5b:c6:55:77:91:b9:a0:15:15:c6:11:fa: 53:4c:b9:7e:a9:23:30:0d:c2:46:e7:7b:05:b6:a6: f8:86:e6:33:d5:f6:9e:ec:0f:5b:26:48:eb:68:16: 64:4d:34:2d:5d:67:79:65:6d:c4:30:44:e9:83:cc: d3:9f:fb:45:70:44:c2:c2:56:01:19:f8:eb:71:6d: 17:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B5:0B:9F:0D:B0:39:73:43:D2:DC:B8:93:E5:70:1A:C3:9D:D4:3F X509v3 Authority Key Identifier: keyid:92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:f9:a8:07:7e:cd:0f:a2:24:d7:2b:9f:4d:70:38:e1:28:99: 96:a8:d3:7e:f3:97:9d:89:55:e4:90:9a:9c:fb:0c:c9:0f:04: 40:e3:6f:8a:53:88:d2:cc:d2:fa:7a:64:45:9d:a7:ed:64:d9: cd:fb:c3:e7:e5:64:b0:06:d4:32:88:b2:05:87:99:b0:4a:e9: 44:0a:6a:1d:67:63:60:00:8e:53:eb:75:42:a1:d5:81:54:55: 74:78:2c:13:13:80:f8:c1:9e:75:bd:ea:47:b1:65:db:45:17: b8:ab:a4:d5:ea:77:fd:dd:16:3b:dd:85:b4:1c:11:57:b1:fb: cd:b7:ce:0a:9c:bb:2d:0d:47:61:03:43:d4:7b:d3:ab:98:9d: 23:b9:55:65:9b:07:30:2c:b1:d6:a2:1a:39:11:7e:ae:bd:6e: 5a:76:66:b0:c3:c0:ab:b5:83:4c:7b:4b:cb:6d:ac:a2:f1:b3: 01:15:aa:97:17:b7:03:68:75:21:64:bb:81:0b:73:b4:b2:e9: 21:36:8b:97:a8:81:be:6f:82:46:bf:2d:84:d6:b9:d6:59:22: 5a:aa:ff:5f:d6:11:64:34:30:18:68:48:1b:fb:3a:db:74:6f: 18:ca:e2:5e:68:dd:ea:91:50:d5:18:50:9b:3c:49:7a:7d:81: fc:a8:c9:a2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAO28JxUWdKr8r9Ay2l7fl2CelIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxRTdDQ0VGQURDOUEwNUJGQkU4QThCOUVFRDRDOTVE NEJBNzVFQjAeFw0yNjA1MjMwMDI3MzRaFw0yNjA1MjQwNDI5MzRaMDMxMTAvBgNV BAMTKEQ2QjUwQjlGMERCMDM5NzM0M0QyRENCODkzRTU3MDFBQzM5REQ0M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCllSZfbtPkv8dh3UZ/1EFgu2RE apKWO//zAMhDxjfQ5uhWx0o2dqvoEHIfbb2K9HVFTxw6bRGY1WO1ckJQUqxwvZfx RirXoWaZx0mqqA0sbycmre7DRsHqdXaGxQQ00le9vLPD4siAaEl+FzRf3EIE3myK EoOVom7gbBLmjTFqDTz01qaSW3tZYEYF1BX1hg8dWAygFzNWBaWXj0Fj3Ob+K7So 11AYP9xg22hbMiwkbWQzbeLUClvGVXeRuaAVFcYR+lNMuX6pIzANwkbnewW2pviG 5jPV9p7sD1smSOtoFmRNNC1dZ3llbcQwROmDzNOf+0VwRMLCVgEZ+OtxbRenAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1rULnw2wOXND0ty4k+VwGsOd1D8wHwYDVR0j BBgwFoAUkh58zvrcmgW/voqLnu1MldS6deswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDk2ODA5NTE3ODQyNDMyNS8wLzkyMUU3Q0NFRkFEQzlBMDVCRkJFOEE4QjlFRUQ0 Qzk1RDRCQTc1RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTIxRTdDQ0VGQURDOUEwNUJGQkU4QThCOUVFRDRDOTVENEJBNzVFQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ5NjgwOTUxNzg0MjQzMjUvMC85MjFFN0NDRUZBREM5 QTA1QkZCRThBOEI5RUVENEM5NUQ0QkE3NUVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPmoB37ND6Ik 1yufTXA44SiZlqjTfvOXnYlV5JCanPsMyQ8EQONvilOI0szS+npkRZ2n7WTZzfvD 5+VksAbUMoiyBYeZsErpRApqHWdjYACOU+t1QqHVgVRVdHgsExOA+MGedb3qR7Fl 20UXuKuk1ep3/d0WO92FtBwRV7H7zbfOCpy7LQ1HYQND1HvTq5idI7lVZZsHMCyx 1qIaORF+rr1uWnZmsMPAq7WDTHtLy22sovGzARWqlxe3A2h1IWS7gQtztLLpITaL l6iBvm+CRr8thNa51lkiWqr/X9YRZDQwGGhIG/s623RvGMriXmjd6pFQ1RhQmzxJ en2B/KjJog== -----END CERTIFICATE-----Generated at Sat May 23 03:44:06 2026 by rpki-client