$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft File: 8421F0680EB1B3756485D0F7681F78067E9C172E.mft (raw, json) Hash identifier: L0fh3QsU+EYRyvvMweJA1t7OucOlk0KjNa6LGECn2dw= Subject key identifier: B4:64:2E:5A:42:46:74:D2:33:AF:63:AA:83:4B:AB:CA:E2:A8:A1:42 Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E Certificate serial: 250D83778540940D784585CCAAB98AA8955E9E89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft Manifest number: FA Signing time: Thu 23 Jul 2026 15:49:02 +0000 Manifest this update: Thu 23 Jul 2026 15:44:02 +0000 Manifest next update: Fri 24 Jul 2026 18:24:02 +0000 Files and hashes: 1: 3131342e32382e3133342e302f32342d3234203d3e2034383337.roa (hash: UYKWkrVdhnWPxrHTELoGMnyGsAs4tF9fFKf83dqOGqw=) 2: 3230322e3132322e3131322e302f32312d3231203d3e203435303631.roa (hash: p64OlJWN4xzR7Eauh13Kq9y9HsakhADFQc1EpncoPyA=) 3: 3131342e3134312e3136302e302f31392d3139203d3e203435303631.roa (hash: JCIREiuOF9Kv/Vlb/fhDKY/AqbnrP7VRNXpBzQfkI54=) 4: 3130332e31332e3234342e302f32322d3232203d3e203435303631.roa (hash: s7xNgeXINQ5XzPzluG6befi4PDsxGcgFDif9YN8Cjtc=) 5: 3131342e3134312e3132382e302f31382d3138203d3e203435303631.roa (hash: //+6nQlQDBn0BXAXI99nw4HMz9l6KIJ4wurfWegCjHI=) 6: 323430303a383230303a3a2f33322d313238203d3e203435303631.roa (hash: OJuPzB78ELG7oWhjMKLWmQEkKhS3FsL77IA5FBEyGug=) 7: 3131342e32382e3134342e302f32302d3230203d3e2034383131.roa (hash: E1m38mZb/SG7oWaFlqcUfpVkwaATD41p5lliHG3KeOw=) 8: 8421F0680EB1B3756485D0F7681F78067E9C172E.crl (hash: xDbUkACQpM1rUumdvLK1cOnlBZ01ZTZZCMR+mBwBWoI=) 9: 3131342e32382e3132382e302f32302d3230203d3e2034383131.roa (hash: 7ctkGQpyisi9zH2u2VKxvHKRSH6rZz0X8ZJdtm7yPBk=) 10: 3131342e3134312e3134382e302f32322d3232203d3e203435303631.roa (hash: GAjhPK7uIzL9Jk1ZUM2oYaioJeK2HkXJIrHGIBCS68A=) 11: 3131342e32382e37322e302f32312d3231203d3e2034383131.roa (hash: z+KkAbE1tNzpn5jtmiDv8aWslLlp03fmv+ixrqjR+0c=) 12: 3131342e32382e36382e302f32322d3232203d3e2034383131.roa (hash: k2DANdr4kGbHw5DbBF4H016ZNcLf5+VxwPnYFQBum2I=) 13: 3131342e3134312e3132382e302f31392d3139203d3e203435303631.roa (hash: rX71zn663mC+PXbN9bZFqHBjL7EmPtxQN3yowzWIv7k=) 14: 323430303a383230313a3a2f34382d313238203d3e203435303631.roa (hash: 36yhztcZ5Fu1fqVVziBV34gyTNeZzEm9a1ZFJhxb2Fs=) 15: 34352e3131352e34342e302f32322d3232203d3e2034383131.roa (hash: y/MSFBJdojfDrNGDV6JXxCEFfy6JVkgRu8xQqlGA1+o=) 16: 3131382e3132362e33322e302f31392d3139203d3e203435303631.roa (hash: oxCUlAGrmEVENEvphgoHrtULEK4PmQscKpU+wwYDSQQ=) 17: 323430303a383230313a3a2f33322d313238203d3e203435303631.roa (hash: cCjZk6/D7FQRokzzWSYRnQwLRhmgRoE9l1n51OgrOrQ=) 18: 3130332e3235312e38342e302f32322d3232203d3e203435303631.roa (hash: Uqm3SQ0Upe1tVgTu+kaQINPzkGJ7F/HFSydp7geQGOU=) 19: 3131342e32382e3132382e302f31392d3139203d3e2034383132.roa (hash: xqw7IomjKxBRLvFlgY2UqqWMCB7OIYkSZ42ZB2kiYMc=) 20: 34352e3131362e35322e302f32322d3232203d3e203435303631.roa (hash: Q2GLAzJCuXolF8zvE4SK4DiSfrkjkP04MyuCM9i3+zc=) 21: 3131342e32382e3136302e302f31392d3139203d3e203435303631.roa (hash: TjgLKPNifN+3Wr/+k2dIOHUJlqXOKSiGUcoZKgFaxSY=) 22: 3132312e35352e302e302f31382d3138203d3e203435303631.roa (hash: NhqqQJvDACKCKhJecfErnOqf7SHXIpNF0kxLCWZji7g=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:24:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:0d:83:77:85:40:94:0d:78:45:85:cc:aa:b9:8a:a8:95:5e:9e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E Validity Not Before: Jul 23 15:44:02 2026 GMT Not After : Jul 24 18:24:02 2026 GMT Subject: CN=B4642E5A424674D233AF63AA834BABCAE2A8A142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:53:e9:ec:55:23:bd:79:3f:64:8b:84:e9:fd: 9e:f3:27:93:ca:37:00:bd:9a:94:c0:62:e1:cd:09: 1f:08:aa:3d:5e:e2:cd:41:89:e7:99:ee:b8:b3:a1: 0e:fc:f0:7f:b7:97:e6:c1:5b:c4:70:7e:1e:ac:36: 6e:44:c1:55:3a:6e:9e:12:a5:c5:18:a1:61:6e:b9: 1f:0e:50:64:0a:cb:9d:48:6b:49:4a:ba:ef:c8:34: 2d:08:94:bb:3b:4d:d2:16:08:2c:9c:98:aa:30:7a: 3a:d9:18:e8:30:ee:52:32:70:f1:07:59:9b:a0:0e: cb:e6:11:ee:a4:9a:86:c0:cd:6c:fc:f1:d8:80:a2: a8:46:19:17:09:d0:61:ca:bd:22:3a:ac:a3:1a:d9: da:b2:45:36:42:d3:ec:5a:6e:dc:7a:44:37:95:32: 3f:31:f6:54:cf:db:14:60:69:b1:bd:fc:1a:b8:85: 84:20:31:48:91:64:d7:b7:9f:42:de:21:4b:84:91: 1c:98:0b:d3:df:f4:3a:8b:49:56:d1:52:88:4d:77: 43:07:94:f4:47:15:6d:99:78:3e:57:00:79:ae:e8: 84:03:b2:d5:29:a7:a5:db:33:88:9d:8e:9c:10:fc: 7e:33:2a:78:4a:56:c6:53:e5:f8:42:58:45:18:8f: 75:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:64:2E:5A:42:46:74:D2:33:AF:63:AA:83:4B:AB:CA:E2:A8:A1:42 X509v3 Authority Key Identifier: keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:32:7f:1e:07:0a:9c:61:52:ba:5c:19:27:da:fa:60:b7:b0: 11:be:63:91:f5:7a:c4:f8:ec:3f:fa:9c:be:d7:0c:46:bc:29: 8c:69:89:3d:00:87:d6:13:28:dd:c9:b9:61:35:5e:f7:13:9d: d6:24:b5:bc:bd:69:a3:83:66:29:db:11:67:2a:df:e7:88:69: dc:de:83:c8:01:60:ac:bf:74:1f:c7:f9:82:5a:c6:3e:f4:3e: 01:7f:29:a6:5c:fd:77:56:d2:d8:02:80:f1:49:39:86:e3:a1: fc:00:6e:db:2e:a0:e4:5c:78:d3:b5:fe:99:47:df:c5:fb:a1: 6a:48:91:d2:68:56:eb:17:d8:b5:cf:83:6d:1a:a9:72:64:4b: 20:9a:3c:0f:8a:63:d5:42:8d:f6:31:6c:9a:78:a4:20:c4:5b: 55:ad:c9:a2:ee:a2:65:4d:8a:3e:6c:2f:b6:e5:9e:0c:9e:3e: d0:19:2a:bf:ca:25:e3:7b:30:22:7d:f9:cc:b1:c4:38:d5:2e: 64:97:ba:55:aa:c9:56:e8:92:e7:6b:9e:29:1c:da:eb:fd:8f: d2:90:e5:c8:12:4a:b7:ef:68:98:f6:4c:ef:42:41:48:6e:8c: 70:bb:95:ac:6e:f0:e1:4d:19:c1:a4:e0:e1:ad:fe:71:94:3f: a4:fe:de:55 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJQ2Dd4VAlA14RYXMqrmKqJVenokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3 RTlDMTcyRTAeFw0yNjA3MjMxNTQ0MDJaFw0yNjA3MjQxODI0MDJaMDMxMTAvBgNV BAMTKEI0NjQyRTVBNDI0Njc0RDIzM0FGNjNBQTgzNEJBQkNBRTJBOEExNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUU+nsVSO9eT9ki4Tp/Z7zJ5PK NwC9mpTAYuHNCR8Iqj1e4s1BieeZ7rizoQ788H+3l+bBW8Rwfh6sNm5EwVU6bp4S pcUYoWFuuR8OUGQKy51Ia0lKuu/INC0IlLs7TdIWCCycmKowejrZGOgw7lIycPEH WZugDsvmEe6kmobAzWz88diAoqhGGRcJ0GHKvSI6rKMa2dqyRTZC0+xabtx6RDeV Mj8x9lTP2xRgabG9/Bq4hYQgMUiRZNe3n0LeIUuEkRyYC9Pf9DqLSVbRUohNd0MH lPRHFW2ZeD5XAHmu6IQDstUpp6XbM4idjpwQ/H4zKnhKVsZT5fhCWEUYj3WfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtGQuWkJGdNIzr2Oqg0uryuKooUIwHwYDVR0j BBgwFoAUhCHwaA6xs3VkhdD3aB94Bn6cFy4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQ3MTg3My8wLzg0MjFGMDY4MEVCMUIzNzU2NDg1RDBGNzY4MUY3 ODA2N0U5QzE3MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3RTlDMTcyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc0NzE4NzMvMC84NDIxRjA2ODBFQjFC Mzc1NjQ4NUQwRjc2ODFGNzgwNjdFOUMxNzJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTJ/HgcKnGFS ulwZJ9r6YLewEb5jkfV6xPjsP/qcvtcMRrwpjGmJPQCH1hMo3cm5YTVe9xOd1iS1 vL1po4NmKdsRZyrf54hp3N6DyAFgrL90H8f5glrGPvQ+AX8pplz9d1bS2AKA8Uk5 huOh/ABu2y6g5Fx407X+mUffxfuhakiR0mhW6xfYtc+DbRqpcmRLIJo8D4pj1UKN 9jFsmnikIMRbVa3Jou6iZU2KPmwvtuWeDJ4+0Bkqv8ol43swIn35zLHEONUuZJe6 VarJVuiS52ueKRza6/2P0pDlyBJKt+9omPZM70JBSG6McLuVrG7w4U0ZwaTg4a3+ cZQ/pP7eVQ== -----END CERTIFICATE-----Generated at Fri Jul 24 09:40:26 2026 by rpki-client