$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft File: 921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft (raw, json) Hash identifier: QJWXOSm0JxB8pX54bdcIXzX05rkmt5X8jCiMMlqmB2o= Subject key identifier: 9B:C6:E6:3E:87:74:BB:6D:B0:38:E7:CE:79:56:F4:BF:CB:5F:34:97 Authority key identifier: 92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB Certificate issuer: /CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB Certificate serial: 791E9BB52103E4ECF13D13F60C6E532D6FD3426C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft Manifest number: A8 Signing time: Mon 05 Oct 2026 21:44:34 +0000 Manifest this update: Mon 05 Oct 2026 21:39:34 +0000 Manifest next update: Fri 09 Oct 2026 09:17:34 +0000 Files and hashes: 1: 3130312e39362e3133322e302f32332d3233203d3e2034383437.roa (hash: pyruQMwauadA5XEUz/CIqNbzDvE1Pt09dSU3KIN64Xo=) 2: 3130312e39362e3132382e302f32332d3233203d3e2034383437.roa (hash: BD4EXLsTPjgLNF/fO8rF/VtqmsIw5b2waeO1LupTlYg=) 3: 921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl (hash: MIZB7qmuFXlp4P0VLV9AJaYTJhB2F52cw6SAFFAUmR0=) 4: 3130312e39362e3133302e302f32342d3234203d3e2034383437.roa (hash: ztj4TIPHcK5ivl+9NmAGeK2Itc9Oqt+5hlO18neMVjM=) 5: 3130312e39362e3132382e302f32302d3230203d3e2030.roa (hash: 1xV9aP2gdc7Trs8xNwE/KOsAMShbKw7iwWZGWtS2IK0=) 6: 3138332e38312e3138302e302f32322d3232203d3e2034383437.roa (hash: 4n7ZEuacTY07r7KmCftnz6ytrp3giTJTSn68WneTiTE=) 7: 3130312e39362e3134322e302f32332d3233203d3e2034383437.roa (hash: GfoCWx5sl+tSN4OQ9uHej6sNYOh8bKKVWlXIiY9CVU8=) 8: 3130312e39362e3133342e302f32342d3234203d3e2034383437.roa (hash: 726ofHardCPhPvBsnl7kwy8aBXb1yfomBTbl12Gkc3M=) 9: 3230322e3138392e332e302f32342d3234203d3e2034383437.roa (hash: 8ExX38dFJsGKMnDEN9NFSJMsrj0Y6q940RyHgciWJpw=) 10: 3230322e3138392e302e302f32322d3232203d3e2030.roa (hash: eGONjzo8uSWbtDzYQe2V6Q+IAVLW43fp8m2gPK9MrYI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 09:17:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:1e:9b:b5:21:03:e4:ec:f1:3d:13:f6:0c:6e:53:2d:6f:d3:42:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB Validity Not Before: Oct 5 21:39:34 2026 GMT Not After : Oct 9 09:17:34 2026 GMT Subject: CN=9BC6E63E8774BB6DB038E7CE7956F4BFCB5F3497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0d:39:f6:18:c0:c8:54:64:85:e5:94:59:7d: 56:5f:36:ad:0d:0d:07:9e:b0:10:8c:8f:c6:17:00: 74:4d:1a:46:e6:31:32:d6:8c:ce:e8:dd:3a:14:5f: fe:28:93:02:12:4a:07:a0:0c:e9:6a:a4:7a:9e:03: 95:2f:00:9d:66:33:9e:c7:20:2f:59:5d:96:95:be: 1a:20:b0:4a:25:3b:20:ec:1c:08:36:83:85:8c:a0: ef:6b:39:1f:7f:ab:2e:8d:08:c3:1f:c6:af:79:2b: 68:87:94:dd:28:b6:b5:f8:80:21:88:8f:cb:63:38: c0:be:62:67:d5:51:fc:a8:84:a2:c7:12:9b:9f:f6: e2:6c:8f:b5:af:91:5b:ac:c4:1f:e4:c6:14:ca:1c: 3c:f1:cf:cd:3a:e7:4a:84:31:1d:f2:12:e4:c3:85: 52:dd:c8:37:40:f8:83:79:5d:6d:a2:7c:75:64:be: b8:37:79:20:e8:ec:09:33:11:0e:fc:46:ff:7d:e1: 92:c1:a2:6d:42:d5:a1:1a:30:d1:36:9b:84:d4:3d: 79:a5:d9:92:79:d8:c8:f6:07:6c:b6:ec:91:2d:13: f2:03:24:b2:2a:f3:f9:e3:8e:da:dc:36:56:2c:68: ff:71:7a:b0:f7:93:f7:20:dc:71:44:11:a6:7e:bb: eb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C6:E6:3E:87:74:BB:6D:B0:38:E7:CE:79:56:F4:BF:CB:5F:34:97 X509v3 Authority Key Identifier: keyid:92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:15:6c:1b:b8:c9:75:45:ef:34:bb:c1:9c:bf:35:b4:cf:de: 44:36:98:ab:8f:31:9b:c8:e5:8c:74:8e:45:eb:65:b9:27:3e: 02:ed:c8:50:1a:de:7a:d0:d4:9b:c8:da:e6:2e:1d:85:8c:38: e6:2b:b4:cb:f3:59:56:88:5d:ff:91:6e:13:58:89:a0:e7:48: 30:cf:4b:c5:ad:6b:5f:4f:96:52:52:91:57:8b:aa:9a:c2:d4: 30:b9:e0:59:fa:2a:89:5a:eb:5c:10:0c:17:f5:23:9c:58:03: 6e:b9:49:14:c6:34:7b:53:c5:9c:15:a0:32:bf:fd:c6:d8:9f: 76:80:7b:ce:92:ec:ef:f7:e5:64:06:52:21:96:f3:a3:a5:d7: f6:8a:8e:4c:ec:eb:76:b1:2e:b6:cd:14:1e:39:7c:f5:4d:57: 10:13:cb:48:b2:3a:b1:b8:fd:ff:02:c3:b2:07:df:03:48:1f: 5b:d1:7b:64:b7:48:d6:4a:7c:25:dc:31:04:96:e5:07:17:f6: ba:d9:1e:d3:9e:f9:db:19:a4:1b:89:5d:98:96:02:2e:3c:c8: 8f:c2:ef:de:ab:e3:e7:cc:40:9f:59:12:dd:ca:55:39:31:28: ae:82:0b:e3:01:d4:c7:18:16:ca:e4:c9:77:81:40:69:9c:a8: fe:c7:4b:c7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeR6btSED5OzxPRP2DG5TLW/TQmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxRTdDQ0VGQURDOUEwNUJGQkU4QThCOUVFRDRDOTVE NEJBNzVFQjAeFw0yNjEwMDUyMTM5MzRaFw0yNjEwMDkwOTE3MzRaMDMxMTAvBgNV BAMTKDlCQzZFNjNFODc3NEJCNkRCMDM4RTdDRTc5NTZGNEJGQ0I1RjM0OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYDTn2GMDIVGSF5ZRZfVZfNq0N DQeesBCMj8YXAHRNGkbmMTLWjM7o3ToUX/4okwISSgegDOlqpHqeA5UvAJ1mM57H IC9ZXZaVvhogsEolOyDsHAg2g4WMoO9rOR9/qy6NCMMfxq95K2iHlN0otrX4gCGI j8tjOMC+YmfVUfyohKLHEpuf9uJsj7WvkVusxB/kxhTKHDzxz80650qEMR3yEuTD hVLdyDdA+IN5XW2ifHVkvrg3eSDo7AkzEQ78Rv994ZLBom1C1aEaMNE2m4TUPXml 2ZJ52Mj2B2y27JEtE/IDJLIq8/njjtrcNlYsaP9xerD3k/cg3HFEEaZ+u+sfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUm8bmPod0u22wOOfOeVb0v8tfNJcwHwYDVR0j BBgwFoAUkh58zvrcmgW/voqLnu1MldS6deswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDk2ODA5NTE3ODQyNDMyNS8wLzkyMUU3Q0NFRkFEQzlBMDVCRkJFOEE4QjlFRUQ0 Qzk1RDRCQTc1RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTIxRTdDQ0VGQURDOUEwNUJGQkU4QThCOUVFRDRDOTVENEJBNzVFQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ5NjgwOTUxNzg0MjQzMjUvMC85MjFFN0NDRUZBREM5 QTA1QkZCRThBOEI5RUVENEM5NUQ0QkE3NUVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANxVsG7jJdUXv NLvBnL81tM/eRDaYq48xm8jljHSORetluSc+Au3IUBreetDUm8ja5i4dhYw45iu0 y/NZVohd/5FuE1iJoOdIMM9Lxa1rX0+WUlKRV4uqmsLUMLngWfoqiVrrXBAMF/Uj nFgDbrlJFMY0e1PFnBWgMr/9xtifdoB7zpLs7/flZAZSIZbzo6XX9oqOTOzrdrEu ts0UHjl89U1XEBPLSLI6sbj9/wLDsgffA0gfW9F7ZLdI1kp8JdwxBJblBxf2utke 05752xmkG4ldmJYCLjzIj8Lv3qvj58xAn1kS3cpVOTEoroIL4wHUxxgWyuTJd4FA aZyo/sdLxw== -----END CERTIFICATE-----Generated at Wed Oct 7 23:35:32 2026 by rpki-client