$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft File: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft (raw, json) Hash identifier: aKHfUyrYtcxe2fL2BhYL/eyoL4Z68jpXgg8aelvdxgo= Subject key identifier: 29:EF:5F:9D:59:25:D1:C2:22:76:9C:B1:BA:9F:78:74:82:10:C4:71 Authority key identifier: 21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 Certificate issuer: /CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Certificate serial: 254AE726C9CBC5D48221CB1FF08800E2D235CA7B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft Manifest number: AC Signing time: Fri 24 Jul 2026 12:36:10 +0000 Manifest this update: Fri 24 Jul 2026 12:31:10 +0000 Manifest next update: Sat 25 Jul 2026 15:03:10 +0000 Files and hashes: 1: AS18241.roa (hash: KghwJGsdAFwKKaHyAzU5cWOTx1CTSMYVyT97Iq5hIVw=) 2: AS9814.roa (hash: aH13hMU8C8fNHVLNKEaUevRiNr6V/+fHSBOg4b/U2Rw=) 3: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl (hash: DqUsppVIwcxlH8d3wovp4Dt7FKKyVq41r8ribC9MWIU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 15:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:4a:e7:26:c9:cb:c5:d4:82:21:cb:1f:f0:88:00:e2:d2:35:ca:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Validity Not Before: Jul 24 12:31:10 2026 GMT Not After : Jul 25 15:03:10 2026 GMT Subject: CN=29EF5F9D5925D1C222769CB1BA9F78748210C471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1e:c3:73:6e:e1:5f:4f:1a:af:3c:8d:1f:14: 15:3f:e5:56:b8:23:52:c0:45:b5:ee:dc:99:5f:15: 74:14:66:cf:cc:e5:94:47:c0:6c:e9:11:c4:bd:9b: 96:3d:d9:0c:0f:57:22:91:e6:73:99:be:4c:cf:f6: b9:39:8a:a3:f8:b7:bf:a3:df:50:21:e1:65:5f:75: cb:1e:ef:4a:cd:10:4c:0b:d1:1b:61:35:ec:83:95: 0b:20:e8:56:78:df:84:57:c7:f9:16:2d:3f:78:f3: 54:72:e5:b4:95:c0:e5:02:37:92:d8:82:e5:66:7e: a0:88:67:3c:1c:ce:7f:20:73:c9:76:16:f0:17:67: c5:b2:9d:45:55:13:a2:24:e1:7f:bb:1f:06:ea:c8: 21:76:f4:a9:32:b7:97:c0:b0:cc:73:2f:3b:e4:1e: a8:d3:40:33:a8:ec:22:21:3e:62:d5:24:70:41:8f: 27:b3:e6:1a:b6:e2:56:a2:59:d5:64:ae:c7:73:5d: ca:11:d9:63:0c:67:a1:fa:e8:ab:46:7b:d9:7a:c5: 20:22:7c:4d:bb:72:65:91:1c:a6:9d:f8:96:cb:e1: a7:00:e0:ae:50:8e:de:f5:64:90:86:a8:4d:4a:a2: 1c:9f:aa:1f:c1:6d:ff:01:40:02:25:e7:5f:2c:ab: d1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:EF:5F:9D:59:25:D1:C2:22:76:9C:B1:BA:9F:78:74:82:10:C4:71 X509v3 Authority Key Identifier: keyid:21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:04:2e:0f:a9:1d:3e:9c:36:e3:f2:b1:61:85:bd:c2:6e:f2: a4:11:69:29:bb:eb:55:c4:a2:43:a4:30:3a:8d:fb:aa:2a:8a: 54:f6:57:62:a0:a5:5b:52:51:a9:dd:07:1a:1d:8d:a5:82:8d: b4:4c:5a:2d:ac:5c:be:bf:be:12:d4:4e:8e:73:8c:47:24:de: fc:05:34:ff:95:12:f0:e1:ba:39:5e:37:61:1f:f7:8a:b4:66: d3:a0:1c:41:8c:f4:de:46:1a:c7:18:a4:8c:41:2f:ac:56:7d: d1:9a:4b:04:ed:02:a5:f2:68:b6:c8:c8:db:5a:6a:59:c7:82: 74:32:0b:23:b9:90:8e:19:5e:0a:0e:5d:96:6f:ec:a3:ae:c1: af:24:06:c3:66:ad:5c:3e:02:a5:34:83:3c:da:9f:27:20:22: da:34:18:d8:e7:af:87:d0:ff:7b:48:8b:b8:a7:8c:e1:d3:74: 78:88:98:1b:ca:24:0e:82:8a:ef:a4:0d:bd:24:ac:51:12:94: cf:56:cd:bc:83:a2:5d:bc:04:d0:d1:46:58:0a:4c:46:10:c0: 42:dd:4d:81:f1:78:58:17:f8:2a:fb:4c:55:94:17:40:05:f8: 73:d8:f2:35:ef:e5:5a:39:4b:ee:61:5a:41:7b:c4:1c:39:8f: ea:e1:3a:a2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJUrnJsnLxdSCIcsf8IgA4tI1ynswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJB NjJBMkREODAeFw0yNjA3MjQxMjMxMTBaFw0yNjA3MjUxNTAzMTBaMDMxMTAvBgNV BAMTKDI5RUY1RjlENTkyNUQxQzIyMjc2OUNCMUJBOUY3ODc0ODIxMEM0NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfHsNzbuFfTxqvPI0fFBU/5Va4 I1LARbXu3JlfFXQUZs/M5ZRHwGzpEcS9m5Y92QwPVyKR5nOZvkzP9rk5iqP4t7+j 31Ah4WVfdcse70rNEEwL0RthNeyDlQsg6FZ434RXx/kWLT9481Ry5bSVwOUCN5LY guVmfqCIZzwczn8gc8l2FvAXZ8WynUVVE6Ik4X+7HwbqyCF29Kkyt5fAsMxzLzvk HqjTQDOo7CIhPmLVJHBBjyez5hq24laiWdVkrsdzXcoR2WMMZ6H66KtGe9l6xSAi fE27cmWRHKad+JbL4acA4K5Qjt71ZJCGqE1Kohyfqh/Bbf8BQAIl518sq9HTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKe9fnVkl0cIidpyxup94dIIQxHEwHwYDVR0j BBgwFoAUIeKnCwV4xnSwvx/XvrO5sqYqLdgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI0MTY2NjY5Nzg1NDk3OS8wLzIxRTJBNzBCMDU3OEM2NzRCMEJGMUZEN0JFQjNC OUIyQTYyQTJERDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJBNjJBMkREOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNDE2NjY2OTc4NTQ5NzkvMC8yMUUyQTcwQjA1NzhD Njc0QjBCRjFGRDdCRUIzQjlCMkE2MkEyREQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQQuD6kdPpw2 4/KxYYW9wm7ypBFpKbvrVcSiQ6QwOo37qiqKVPZXYqClW1JRqd0HGh2NpYKNtExa Laxcvr++EtROjnOMRyTe/AU0/5US8OG6OV43YR/3irRm06AcQYz03kYaxxikjEEv rFZ90ZpLBO0CpfJotsjI21pqWceCdDILI7mQjhleCg5dlm/so67BryQGw2atXD4C pTSDPNqfJyAi2jQY2Oevh9D/e0iLuKeM4dN0eIiYG8okDoKK76QNvSSsURKUz1bN vIOiXbwE0NFGWApMRhDAQt1NgfF4WBf4KvtMVZQXQAX4c9jyNe/lWjlL7mFaQXvE HDmP6uE6og== -----END CERTIFICATE-----Generated at Sat Jul 25 02:04:29 2026 by rpki-client