$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft File: 921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft (raw, json) Hash identifier: r/vxU4Ns8b5hhuR79ZE8w3KYmeM4dh1dRWGKiiChMh4= Subject key identifier: 7C:10:D1:CD:B3:41:DE:3A:46:4F:4B:B9:12:7E:55:B2:8D:98:49:3E Authority key identifier: 92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB Certificate issuer: /CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB Certificate serial: 3F33B4B7C01ECBE64E7BA91CC3196FC989F1F3DE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft Manifest number: 8E Signing time: Fri 21 Aug 2026 11:29:32 +0000 Manifest this update: Fri 21 Aug 2026 11:24:32 +0000 Manifest next update: Sat 22 Aug 2026 13:43:32 +0000 Files and hashes: 1: 3130312e39362e3132382e302f32332d3233203d3e2034383437.roa (hash: BD4EXLsTPjgLNF/fO8rF/VtqmsIw5b2waeO1LupTlYg=) 2: 3130312e39362e3133342e302f32342d3234203d3e2034383437.roa (hash: 726ofHardCPhPvBsnl7kwy8aBXb1yfomBTbl12Gkc3M=) 3: 3230322e3138392e332e302f32342d3234203d3e2034383437.roa (hash: 8ExX38dFJsGKMnDEN9NFSJMsrj0Y6q940RyHgciWJpw=) 4: 3130312e39362e3133322e302f32332d3233203d3e2034383437.roa (hash: pyruQMwauadA5XEUz/CIqNbzDvE1Pt09dSU3KIN64Xo=) 5: 3230322e3138392e302e302f32322d3232203d3e2030.roa (hash: eGONjzo8uSWbtDzYQe2V6Q+IAVLW43fp8m2gPK9MrYI=) 6: 3130312e39362e3133302e302f32342d3234203d3e2034383437.roa (hash: ztj4TIPHcK5ivl+9NmAGeK2Itc9Oqt+5hlO18neMVjM=) 7: 3130312e39362e3134322e302f32332d3233203d3e2034383437.roa (hash: GfoCWx5sl+tSN4OQ9uHej6sNYOh8bKKVWlXIiY9CVU8=) 8: 3130312e39362e3132382e302f32302d3230203d3e2030.roa (hash: 1xV9aP2gdc7Trs8xNwE/KOsAMShbKw7iwWZGWtS2IK0=) 9: 921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl (hash: fyhnZ2ZhIzApsnUfkGycCSjyvqajQrNZYe2BPp5xA4Q=) 10: 3138332e38312e3138302e302f32322d3232203d3e2034383437.roa (hash: 4n7ZEuacTY07r7KmCftnz6ytrp3giTJTSn68WneTiTE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 13:43:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:33:b4:b7:c0:1e:cb:e6:4e:7b:a9:1c:c3:19:6f:c9:89:f1:f3:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB Validity Not Before: Aug 21 11:24:32 2026 GMT Not After : Aug 22 13:43:32 2026 GMT Subject: CN=7C10D1CDB341DE3A464F4BB9127E55B28D98493E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:10:33:17:c0:46:41:eb:d8:56:26:fc:36:38: 07:3d:39:09:52:31:26:2a:79:50:22:cb:99:59:3f: 58:e9:69:e9:f9:ab:56:f4:8b:53:f0:95:ba:0a:73: aa:f1:0b:6e:c3:4e:f4:5e:d5:ab:af:db:21:8e:87: f1:51:20:99:b2:22:35:cb:97:54:6a:9a:5b:4d:1d: 41:4b:fe:27:bb:81:fb:4f:df:1a:00:a3:f8:33:4d: 69:12:bd:ef:a2:2e:e5:06:61:a7:4f:c4:7e:7f:8a: 34:55:e7:c7:4b:83:f2:e4:66:c5:27:7a:7d:63:c7: 5d:96:63:b0:e0:90:2f:18:a6:b5:77:90:6b:2f:79: 92:e6:1e:a7:48:d0:88:f0:b7:2a:b9:8f:f0:4f:9c: 64:40:fd:ee:3f:54:84:61:1c:94:ab:26:8d:37:32: 16:99:6a:56:f8:52:08:a6:3c:7b:98:8e:4a:75:81: 7a:d1:6d:f3:5a:82:48:75:0c:4b:93:ec:9f:a7:35: 02:f4:bd:c1:57:ea:c8:2b:fc:c9:86:b1:d2:1d:aa: 0c:7d:e2:18:95:60:91:68:e4:d1:cf:09:4c:01:e3: 7b:24:45:d0:2a:5e:94:12:4b:c9:ec:c9:cd:00:89: a9:53:cb:3c:f6:98:df:de:73:59:77:27:9b:2f:7a: 93:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:10:D1:CD:B3:41:DE:3A:46:4F:4B:B9:12:7E:55:B2:8D:98:49:3E X509v3 Authority Key Identifier: keyid:92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:d6:d9:78:5a:8d:35:f5:4b:75:eb:15:52:9e:35:a9:4f:ba: 35:10:08:aa:95:e3:a1:ce:27:b4:58:47:74:e0:c8:b4:8a:90: fe:32:13:84:8c:f4:0f:51:2d:c7:96:69:6a:12:30:b0:2d:99: cd:0e:23:34:94:0e:ed:7e:6e:d4:fb:75:10:d0:db:ca:a5:6f: ee:fa:27:55:5c:65:4c:74:bd:ff:4d:73:3b:bc:92:8b:92:24: e8:cd:eb:26:47:3e:98:fd:ea:c4:fa:52:92:84:19:9c:77:45: cf:0f:0a:a5:42:80:3b:87:1d:8c:59:ef:c9:14:4d:0d:e4:d4: 65:35:ff:0b:9a:28:fa:95:c8:13:1d:fd:e1:35:37:d5:49:40: 4a:11:a2:f4:ae:2f:25:7f:e4:90:12:e8:4b:07:86:38:9c:a5: 05:30:b5:44:f8:b1:a9:47:20:bf:88:52:0a:e3:49:b4:08:ad: 41:b5:2d:17:bc:a0:f7:6d:e6:72:77:ae:d9:23:6d:a2:3d:e7: 3c:5a:0d:b0:16:34:c0:ff:58:41:67:8f:3f:fc:a4:4f:39:64: 4f:11:ae:87:5d:75:a9:d5:37:f6:fb:cc:06:62:6e:cd:15:4e: 83:98:03:ae:e5:14:3b:b5:ce:76:b7:f4:d8:90:40:6a:12:ef: f2:41:69:70 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPzO0t8Aey+ZOe6kcwxlvyYnx894wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxRTdDQ0VGQURDOUEwNUJGQkU4QThCOUVFRDRDOTVE NEJBNzVFQjAeFw0yNjA4MjExMTI0MzJaFw0yNjA4MjIxMzQzMzJaMDMxMTAvBgNV BAMTKDdDMTBEMUNEQjM0MURFM0E0NjRGNEJCOTEyN0U1NUIyOEQ5ODQ5M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1EDMXwEZB69hWJvw2OAc9OQlS MSYqeVAiy5lZP1jpaen5q1b0i1PwlboKc6rxC27DTvRe1auv2yGOh/FRIJmyIjXL l1RqmltNHUFL/ie7gftP3xoAo/gzTWkSve+iLuUGYadPxH5/ijRV58dLg/LkZsUn en1jx12WY7DgkC8YprV3kGsveZLmHqdI0Ijwtyq5j/BPnGRA/e4/VIRhHJSrJo03 MhaZalb4UgimPHuYjkp1gXrRbfNagkh1DEuT7J+nNQL0vcFX6sgr/MmGsdIdqgx9 4hiVYJFo5NHPCUwB43skRdAqXpQSS8nsyc0AialTyzz2mN/ec1l3J5svepNFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfBDRzbNB3jpGT0u5En5Vso2YST4wHwYDVR0j BBgwFoAUkh58zvrcmgW/voqLnu1MldS6deswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDk2ODA5NTE3ODQyNDMyNS8wLzkyMUU3Q0NFRkFEQzlBMDVCRkJFOEE4QjlFRUQ0 Qzk1RDRCQTc1RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTIxRTdDQ0VGQURDOUEwNUJGQkU4QThCOUVFRDRDOTVENEJBNzVFQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ5NjgwOTUxNzg0MjQzMjUvMC85MjFFN0NDRUZBREM5 QTA1QkZCRThBOEI5RUVENEM5NUQ0QkE3NUVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsNbZeFqNNfVL desVUp41qU+6NRAIqpXjoc4ntFhHdODItIqQ/jIThIz0D1Etx5ZpahIwsC2ZzQ4j NJQO7X5u1Pt1ENDbyqVv7vonVVxlTHS9/01zO7ySi5Ik6M3rJkc+mP3qxPpSkoQZ nHdFzw8KpUKAO4cdjFnvyRRNDeTUZTX/C5oo+pXIEx394TU31UlAShGi9K4vJX/k kBLoSweGOJylBTC1RPixqUcgv4hSCuNJtAitQbUtF7yg923mcneu2SNtoj3nPFoN sBY0wP9YQWePP/ykTzlkTxGuh111qdU39vvMBmJuzRVOg5gDruUUO7XOdrf02JBA ahLv8kFpcA== -----END CERTIFICATE-----Generated at Fri Aug 21 23:10:09 2026 by rpki-client