$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft File: 8421F0680EB1B3756485D0F7681F78067E9C172E.mft (raw, json) Hash identifier: slOKQ33xKVci2x1AMrx0K4KSyEzn6/WDE/vBvys2dYs= Subject key identifier: 02:A0:A0:C8:52:55:52:20:3B:C7:90:FB:20:53:D6:AE:94:2B:AE:4C Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E Certificate serial: 38C03BFC6A0347BFAC187AF81E11463DA60A9819 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft Manifest number: 9B Signing time: Wed 13 May 2026 07:01:01 +0000 Manifest this update: Wed 13 May 2026 06:56:01 +0000 Manifest next update: Thu 14 May 2026 07:59:01 +0000 Files and hashes: 1: 323430303a383230313a3a2f33322d313238203d3e203435303631.roa (hash: cCjZk6/D7FQRokzzWSYRnQwLRhmgRoE9l1n51OgrOrQ=) 2: 3131342e3134312e3132382e302f31392d3139203d3e203435303631.roa (hash: rX71zn663mC+PXbN9bZFqHBjL7EmPtxQN3yowzWIv7k=) 3: 3131342e32382e3136302e302f31392d3139203d3e203435303631.roa (hash: TjgLKPNifN+3Wr/+k2dIOHUJlqXOKSiGUcoZKgFaxSY=) 4: 3131342e3134312e3132382e302f31382d3138203d3e203435303631.roa (hash: //+6nQlQDBn0BXAXI99nw4HMz9l6KIJ4wurfWegCjHI=) 5: 3131342e32382e37322e302f32312d3231203d3e2034383131.roa (hash: z+KkAbE1tNzpn5jtmiDv8aWslLlp03fmv+ixrqjR+0c=) 6: 3230322e3132322e3131322e302f32312d3231203d3e203435303631.roa (hash: p64OlJWN4xzR7Eauh13Kq9y9HsakhADFQc1EpncoPyA=) 7: 34352e3131362e35322e302f32322d3232203d3e203435303631.roa (hash: Q2GLAzJCuXolF8zvE4SK4DiSfrkjkP04MyuCM9i3+zc=) 8: 3131342e32382e36382e302f32322d3232203d3e2034383131.roa (hash: k2DANdr4kGbHw5DbBF4H016ZNcLf5+VxwPnYFQBum2I=) 9: 3131342e3134312e3134382e302f32322d3232203d3e203435303631.roa (hash: GAjhPK7uIzL9Jk1ZUM2oYaioJeK2HkXJIrHGIBCS68A=) 10: 3131342e32382e3132382e302f31392d3139203d3e2034383132.roa (hash: xqw7IomjKxBRLvFlgY2UqqWMCB7OIYkSZ42ZB2kiYMc=) 11: 3132312e35352e302e302f31382d3138203d3e203435303631.roa (hash: NhqqQJvDACKCKhJecfErnOqf7SHXIpNF0kxLCWZji7g=) 12: 3131342e32382e3134342e302f32302d3230203d3e2034383131.roa (hash: E1m38mZb/SG7oWaFlqcUfpVkwaATD41p5lliHG3KeOw=) 13: 3130332e31332e3234342e302f32322d3232203d3e203435303631.roa (hash: s7xNgeXINQ5XzPzluG6befi4PDsxGcgFDif9YN8Cjtc=) 14: 3130332e3235312e38342e302f32322d3232203d3e203435303631.roa (hash: Uqm3SQ0Upe1tVgTu+kaQINPzkGJ7F/HFSydp7geQGOU=) 15: 3131342e3134312e3136302e302f31392d3139203d3e203435303631.roa (hash: JCIREiuOF9Kv/Vlb/fhDKY/AqbnrP7VRNXpBzQfkI54=) 16: 323430303a383230313a3a2f34382d313238203d3e203435303631.roa (hash: 36yhztcZ5Fu1fqVVziBV34gyTNeZzEm9a1ZFJhxb2Fs=) 17: 3131342e32382e3133342e302f32342d3234203d3e2034383337.roa (hash: UYKWkrVdhnWPxrHTELoGMnyGsAs4tF9fFKf83dqOGqw=) 18: 8421F0680EB1B3756485D0F7681F78067E9C172E.crl (hash: wkiSVizj+ZkqQRpFbWSriUV0WLH4A0rcwosBJjxtZTQ=) 19: 323430303a383230303a3a2f33322d313238203d3e203435303631.roa (hash: OJuPzB78ELG7oWhjMKLWmQEkKhS3FsL77IA5FBEyGug=) 20: 34352e3131352e34342e302f32322d3232203d3e2034383131.roa (hash: y/MSFBJdojfDrNGDV6JXxCEFfy6JVkgRu8xQqlGA1+o=) 21: 3131342e32382e3132382e302f32302d3230203d3e2034383131.roa (hash: 7ctkGQpyisi9zH2u2VKxvHKRSH6rZz0X8ZJdtm7yPBk=) 22: 3131382e3132362e33322e302f31392d3139203d3e203435303631.roa (hash: oxCUlAGrmEVENEvphgoHrtULEK4PmQscKpU+wwYDSQQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c0:3b:fc:6a:03:47:bf:ac:18:7a:f8:1e:11:46:3d:a6:0a:98:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E Validity Not Before: May 13 06:56:01 2026 GMT Not After : May 14 07:59:01 2026 GMT Subject: CN=02A0A0C8525552203BC790FB2053D6AE942BAE4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d2:2d:f2:d2:fa:d9:bb:7a:a3:7b:86:43:a5: fc:87:44:25:56:16:98:33:0e:b2:d4:bb:03:8f:66: 5d:b0:7d:49:cd:93:89:ba:a4:3c:bc:c2:71:7d:c3: 17:d2:4d:ce:8c:00:df:70:46:72:8d:b5:7a:ae:a3: b2:e5:f1:85:dc:ef:e1:9a:75:1b:05:2f:dc:2d:2c: e5:66:0f:12:44:42:a6:0e:87:ad:a9:e6:d9:ad:01: 3f:30:61:ea:b6:ee:8d:35:ed:b6:30:d8:26:12:88: a1:95:7a:f5:e5:75:f1:87:29:4e:da:62:d3:1c:ec: 1d:89:06:57:e4:e0:9a:77:82:f1:73:f4:84:87:20: d2:ba:10:a3:d9:74:4f:8e:1d:b8:77:29:ca:7c:ad: 41:ae:cd:1b:d9:43:2a:d1:45:c2:3b:92:4e:a9:6d: e9:68:00:0d:e5:29:cb:c1:ef:d1:56:70:91:4d:9c: 83:41:24:97:ff:bb:5e:3e:9c:3d:b1:0c:33:70:19: 38:38:52:4b:c8:4a:82:ec:ab:5d:53:dc:08:1d:1c: b0:e2:79:8c:47:ca:95:30:93:fa:00:25:11:68:d8: e8:fa:ac:b5:2e:fb:ca:8a:5b:13:d3:df:6f:8c:58: c8:4d:4f:61:ec:d1:77:c1:30:c2:a8:f4:61:ee:e6: 76:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A0:A0:C8:52:55:52:20:3B:C7:90:FB:20:53:D6:AE:94:2B:AE:4C X509v3 Authority Key Identifier: keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:85:84:ae:fc:2f:9a:a9:48:95:40:b3:7c:f1:4b:14:81:36: 5f:f5:5a:a3:a3:a1:73:75:68:ed:ac:6d:fa:56:1e:c9:95:99: be:53:67:69:fd:64:f9:1a:24:2a:13:4b:06:90:a5:6e:bf:19: cf:56:1b:33:11:0b:89:1e:3e:ce:b9:69:d2:f1:4d:5e:ec:9c: 6f:41:74:3d:29:8e:0b:f0:66:4e:e0:48:19:08:64:04:1b:d9: 6c:27:46:cd:f1:18:4c:f7:e1:b3:86:42:c4:ca:7b:8a:1f:cf: 21:29:ea:be:b2:c9:57:53:ea:8f:3a:9d:83:78:94:4e:53:f7: 68:bc:a7:3e:72:0d:99:cd:6c:fa:c3:7f:bb:b7:68:02:6e:0b: be:78:9a:51:8d:3f:5f:50:fe:b1:9a:d7:2e:5a:97:aa:d3:fc: 07:2b:c6:a8:7a:61:48:8c:99:a5:bb:9c:d1:aa:50:8e:08:6a: 50:af:4f:f0:69:9e:bf:0f:9d:fa:32:f5:ca:44:f7:ae:17:4c: 02:fa:7c:e2:cc:3a:f6:83:15:8a:3a:5b:c3:f0:65:92:3a:02: 2b:16:0a:85:a7:44:73:c4:92:fc:87:24:37:30:2a:51:2c:ac: cc:9a:15:c4:bd:10:e0:1e:3f:c8:12:21:12:9f:aa:ba:e2:cc: 86:8c:8d:ec -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOMA7/GoDR7+sGHr4HhFGPaYKmBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3 RTlDMTcyRTAeFw0yNjA1MTMwNjU2MDFaFw0yNjA1MTQwNzU5MDFaMDMxMTAvBgNV BAMTKDAyQTBBMEM4NTI1NTUyMjAzQkM3OTBGQjIwNTNENkFFOTQyQkFFNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx0i3y0vrZu3qje4ZDpfyHRCVW FpgzDrLUuwOPZl2wfUnNk4m6pDy8wnF9wxfSTc6MAN9wRnKNtXquo7Ll8YXc7+Ga dRsFL9wtLOVmDxJEQqYOh62p5tmtAT8wYeq27o017bYw2CYSiKGVevXldfGHKU7a YtMc7B2JBlfk4Jp3gvFz9ISHINK6EKPZdE+OHbh3Kcp8rUGuzRvZQyrRRcI7kk6p beloAA3lKcvB79FWcJFNnINBJJf/u14+nD2xDDNwGTg4UkvISoLsq11T3AgdHLDi eYxHypUwk/oAJRFo2Oj6rLUu+8qKWxPT32+MWMhNT2Hs0XfBMMKo9GHu5nafAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAqCgyFJVUiA7x5D7IFPWrpQrrkwwHwYDVR0j BBgwFoAUhCHwaA6xs3VkhdD3aB94Bn6cFy4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQ3MTg3My8wLzg0MjFGMDY4MEVCMUIzNzU2NDg1RDBGNzY4MUY3 ODA2N0U5QzE3MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3RTlDMTcyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc0NzE4NzMvMC84NDIxRjA2ODBFQjFC Mzc1NjQ4NUQwRjc2ODFGNzgwNjdFOUMxNzJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx4WErvwvmqlI lUCzfPFLFIE2X/Vao6Ohc3Vo7axt+lYeyZWZvlNnaf1k+RokKhNLBpClbr8Zz1Yb MxELiR4+zrlp0vFNXuycb0F0PSmOC/BmTuBIGQhkBBvZbCdGzfEYTPfhs4ZCxMp7 ih/PISnqvrLJV1Pqjzqdg3iUTlP3aLynPnINmc1s+sN/u7doAm4LvniaUY0/X1D+ sZrXLlqXqtP8ByvGqHphSIyZpbuc0apQjghqUK9P8Gmevw+d+jL1ykT3rhdMAvp8 4sw69oMVijpbw/BlkjoCKxYKhadEc8SS/IckNzAqUSyszJoVxL0Q4B4/yBIhEp+q uuLMhoyN7A== -----END CERTIFICATE-----Generated at Wed May 13 09:59:00 2026 by rpki-client