$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft File: 8421F0680EB1B3756485D0F7681F78067E9C172E.mft (raw, json) Hash identifier: z44weclxNBBHsTJD2X3jzMTmRlz+j0uF4PwULZxdgoY= Subject key identifier: A2:ED:B3:AC:C9:65:A6:8B:6E:A8:5B:4A:E5:4E:AE:37:26:E7:88:9B Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E Certificate serial: 3E51EBCFFCB951259CB4068370703CADF714CA2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft Manifest number: 5B Signing time: Thu 26 Mar 2026 14:53:28 +0000 Manifest this update: Thu 26 Mar 2026 14:48:28 +0000 Manifest next update: Fri 27 Mar 2026 15:37:28 +0000 Files and hashes: 1: 323430303a383230313a3a2f33322d313238203d3e203435303631.roa (hash: cCjZk6/D7FQRokzzWSYRnQwLRhmgRoE9l1n51OgrOrQ=) 2: 8421F0680EB1B3756485D0F7681F78067E9C172E.crl (hash: 3E1qIDotZVxbhX4dEng3F4lJ8WCGaUpMEaBs4lYCdtg=) 3: 3131342e32382e3134342e302f32302d3230203d3e2034383131.roa (hash: E1m38mZb/SG7oWaFlqcUfpVkwaATD41p5lliHG3KeOw=) 4: 323430303a383230303a3a2f33322d313238203d3e203435303631.roa (hash: OJuPzB78ELG7oWhjMKLWmQEkKhS3FsL77IA5FBEyGug=) 5: 323430303a383230313a3a2f34382d313238203d3e203435303631.roa (hash: 36yhztcZ5Fu1fqVVziBV34gyTNeZzEm9a1ZFJhxb2Fs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 15:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:51:eb:cf:fc:b9:51:25:9c:b4:06:83:70:70:3c:ad:f7:14:ca:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E Validity Not Before: Mar 26 14:48:28 2026 GMT Not After : Mar 27 15:37:28 2026 GMT Subject: CN=A2EDB3ACC965A68B6EA85B4AE54EAE3726E7889B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fd:1c:4c:b0:37:cc:d1:eb:36:0e:21:92:5a: 2f:a3:54:5d:e7:07:b9:1e:87:cd:13:2e:2f:99:7b: 6e:87:95:cb:6f:b4:4a:16:ea:80:03:74:20:4b:04: 00:b0:e0:75:a1:a0:15:cd:9b:8b:1d:cc:89:00:57: 0a:e7:96:a1:23:f7:f2:59:b9:6a:74:7f:34:11:99: 08:ad:66:f8:03:60:46:8f:67:fb:72:2d:b7:e7:3f: 1e:33:06:94:8e:5b:c6:b0:99:fa:29:a8:b8:05:b5: 16:51:f2:e8:50:1f:d5:0c:fe:eb:19:6a:04:c0:a4: d3:40:fe:32:99:92:d0:95:3b:28:1e:24:0a:8a:2d: 05:e5:9f:3e:94:67:0e:e0:b0:74:0c:e5:fd:bc:42: 4f:f8:5e:66:c1:e2:51:09:bc:94:e5:da:66:50:d0: 70:a8:e1:7c:2f:d1:87:fd:29:c2:9e:9c:6e:03:9e: d6:07:ea:b7:fb:44:38:b9:54:f3:63:c7:8f:fc:ca: 69:0b:6a:11:25:43:ec:cb:d3:a0:6d:31:89:c4:ff: 7b:2e:0f:7b:3d:3b:71:0f:74:2c:f5:5a:f5:c6:64: dc:93:78:e8:b0:1f:ee:a4:e9:01:95:95:93:ce:8e: d2:61:b7:a5:2b:5d:d5:26:93:7b:22:08:6f:85:3e: 01:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:ED:B3:AC:C9:65:A6:8B:6E:A8:5B:4A:E5:4E:AE:37:26:E7:88:9B X509v3 Authority Key Identifier: keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:7c:7a:52:a1:97:78:d2:58:4b:03:cd:6a:84:50:c8:52:a4: a8:ff:7d:ca:ac:48:1f:af:f0:43:02:9f:37:79:04:17:e3:9f: 6c:98:05:bb:cd:e2:95:9c:35:85:44:d8:05:86:8c:53:1d:08: 2c:04:24:d4:55:34:c2:9a:c2:37:c4:46:27:62:e6:e6:8d:a1: e8:28:f8:78:80:e3:c8:02:0b:3c:31:d5:bb:44:60:f2:68:06: 10:e5:94:f6:f3:51:d7:21:9c:d1:9d:96:41:97:30:52:03:bf: 15:43:2b:8b:e1:8a:7b:ca:71:0d:b9:b2:c1:eb:7a:6a:da:8d: 33:1b:92:49:7d:18:e7:66:7b:5c:d2:f4:b7:08:ad:41:22:db: fc:25:1c:62:a7:19:b2:04:ac:49:bd:75:bb:c4:0c:f0:2a:5e: 88:a8:7a:77:8f:88:6d:f0:20:32:12:4a:61:a9:f5:da:cb:00: fc:e2:d6:ba:5f:68:27:82:6e:3c:06:50:02:81:6c:a1:38:49: 27:f3:f5:30:75:52:12:34:6c:84:d2:67:fc:f7:14:3a:e4:9a: ea:dc:6b:d3:bb:30:71:ba:2c:58:ea:46:92:2b:a6:55:54:32: 36:ea:f5:00:71:e7:16:ec:09:59:ae:f4:71:f6:0c:39:96:37: 68:78:5f:8b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPlHrz/y5USWctAaDcHA8rfcUyiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3 RTlDMTcyRTAeFw0yNjAzMjYxNDQ4MjhaFw0yNjAzMjcxNTM3MjhaMDMxMTAvBgNV BAMTKEEyRURCM0FDQzk2NUE2OEI2RUE4NUI0QUU1NEVBRTM3MjZFNzg4OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/RxMsDfM0es2DiGSWi+jVF3n B7keh80TLi+Ze26HlctvtEoW6oADdCBLBACw4HWhoBXNm4sdzIkAVwrnlqEj9/JZ uWp0fzQRmQitZvgDYEaPZ/tyLbfnPx4zBpSOW8awmfopqLgFtRZR8uhQH9UM/usZ agTApNNA/jKZktCVOygeJAqKLQXlnz6UZw7gsHQM5f28Qk/4XmbB4lEJvJTl2mZQ 0HCo4Xwv0Yf9KcKenG4DntYH6rf7RDi5VPNjx4/8ymkLahElQ+zL06BtMYnE/3su D3s9O3EPdCz1WvXGZNyTeOiwH+6k6QGVlZPOjtJht6UrXdUmk3siCG+FPgG9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUou2zrMllpotuqFtK5U6uNybniJswHwYDVR0j BBgwFoAUhCHwaA6xs3VkhdD3aB94Bn6cFy4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQ3MTg3My8wLzg0MjFGMDY4MEVCMUIzNzU2NDg1RDBGNzY4MUY3 ODA2N0U5QzE3MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3RTlDMTcyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc0NzE4NzMvMC84NDIxRjA2ODBFQjFC Mzc1NjQ4NUQwRjc2ODFGNzgwNjdFOUMxNzJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXx6UqGXeNJY SwPNaoRQyFKkqP99yqxIH6/wQwKfN3kEF+OfbJgFu83ilZw1hUTYBYaMUx0ILAQk 1FU0wprCN8RGJ2Lm5o2h6Cj4eIDjyAILPDHVu0Rg8mgGEOWU9vNR1yGc0Z2WQZcw UgO/FUMri+GKe8pxDbmywet6atqNMxuSSX0Y52Z7XNL0twitQSLb/CUcYqcZsgSs Sb11u8QM8CpeiKh6d4+IbfAgMhJKYan12ssA/OLWul9oJ4JuPAZQAoFsoThJJ/P1 MHVSEjRshNJn/PcUOuSa6txr07swcbosWOpGkiumVVQyNur1AHHnFuwJWa70cfYM OZY3aHhfiw== -----END CERTIFICATE-----Generated at Fri Mar 27 00:36:06 2026 by rpki-client