$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft File: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft (raw, json) Hash identifier: n1yBRxPfLsP/u9sdwOUuI20Ke9p5UCCZPqV3AXbl5FI= Subject key identifier: DE:82:B7:FD:D4:F7:BA:FA:75:C4:23:16:EC:4F:25:D8:A5:8F:D3:EA Authority key identifier: 21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 Certificate issuer: /CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Certificate serial: 5989B2812FB1EE1C2210111C7ADDFE67D5F60147 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft Manifest number: EF Signing time: Mon 12 Oct 2026 00:46:17 +0000 Manifest this update: Mon 12 Oct 2026 00:41:17 +0000 Manifest next update: Thu 15 Oct 2026 01:52:17 +0000 Files and hashes: 1: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl (hash: RzfR2FoVlvpVWtoQfkZKoSCFdY4vrNk2ygAnQKP1820=) 2: AS18241.roa (hash: KghwJGsdAFwKKaHyAzU5cWOTx1CTSMYVyT97Iq5hIVw=) 3: AS9814.roa (hash: aH13hMU8C8fNHVLNKEaUevRiNr6V/+fHSBOg4b/U2Rw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:89:b2:81:2f:b1:ee:1c:22:10:11:1c:7a:dd:fe:67:d5:f6:01:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Validity Not Before: Oct 12 00:41:17 2026 GMT Not After : Oct 15 01:52:17 2026 GMT Subject: CN=DE82B7FDD4F7BAFA75C42316EC4F25D8A58FD3EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7b:8b:dc:05:6f:ca:24:a3:0f:32:cb:d2:9d: df:bd:36:c7:3a:68:fb:15:e4:69:7d:65:e1:b8:46: 61:ee:ea:4f:52:6b:48:c5:27:b3:26:36:48:5d:77: e4:3c:66:e6:30:dd:cf:93:f9:b5:40:5c:8d:f3:d0: cf:7d:36:62:d0:46:d6:71:d4:d1:02:28:fe:ad:c3: da:49:cb:cb:01:17:2c:e8:e4:0e:6a:96:1b:77:b5: 04:f3:47:8f:51:af:d8:dd:4e:08:21:b3:d9:8e:50: 37:ce:2a:5e:29:6d:49:7c:32:dc:b0:96:e7:a9:88: 8e:d0:60:d8:af:e9:3f:bf:48:d8:dd:9b:e4:ae:fb: ef:ea:8c:c5:3e:bb:8b:91:7b:74:82:3a:c7:40:80: 9c:99:d3:cc:8a:44:56:53:ba:88:87:cd:b3:49:f9: 21:66:7b:53:ea:8e:45:41:3b:fe:b2:47:77:c5:9e: 42:d0:36:62:45:bc:e3:36:c4:b0:8e:e0:7e:2a:e7: d9:f7:0b:cb:50:48:cc:f7:ee:45:1d:d0:45:e2:59: 9b:f7:55:9b:43:c2:08:ab:9f:45:6e:92:90:6f:f8: 94:4b:50:94:63:3f:2d:f1:d0:69:f9:a0:10:63:5c: 37:4a:98:2c:fa:14:d3:dc:dc:d8:9c:01:b8:b3:2a: 2e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:82:B7:FD:D4:F7:BA:FA:75:C4:23:16:EC:4F:25:D8:A5:8F:D3:EA X509v3 Authority Key Identifier: keyid:21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:4b:50:49:ed:c7:40:9e:61:2f:e6:93:f1:ed:c5:8a:61:92: dd:f1:21:a3:ef:da:22:10:ae:e1:da:f6:b4:ed:b8:70:1c:c2: e3:a4:23:0e:12:ea:5a:e4:2b:6b:1c:6c:f4:58:30:c0:fa:34: 13:b8:57:f6:79:fd:eb:b1:76:2e:2e:c9:81:1e:72:bc:c6:93: 26:43:d6:a9:10:99:f8:03:2c:ac:29:8e:c6:94:8a:de:d5:fc: 5f:5a:b4:c9:22:f9:75:da:b9:eb:48:91:8d:b8:a9:b1:bc:99: d9:6b:59:99:d6:1c:6b:ef:1a:4c:97:cc:09:6c:5b:f2:e9:ab: 98:8e:c5:44:fb:1a:82:94:dd:9c:f3:cf:fe:e4:90:03:0a:68: 1f:e3:a4:5b:55:a9:7f:a6:0a:ba:6c:57:de:d3:cd:41:68:5c: cd:08:60:73:84:94:9c:66:5c:09:1c:bd:06:0e:03:2b:4b:11: ce:d5:3b:55:e0:f0:36:6c:63:15:59:80:9d:c4:f4:a4:72:d8: 1a:de:31:72:3d:1f:1e:5b:b0:00:0c:00:7f:e1:a9:e2:60:00: 21:14:cf:bb:ff:d7:d3:eb:a1:5b:1f:19:65:d5:60:fe:7d:0c: f2:c1:a3:01:27:f1:16:30:6e:34:05:ac:cd:c7:05:4f:dd:1a: b5:06:a2:c0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWYmygS+x7hwiEBEcet3+Z9X2AUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJB NjJBMkREODAeFw0yNjEwMTIwMDQxMTdaFw0yNjEwMTUwMTUyMTdaMDMxMTAvBgNV BAMTKERFODJCN0ZERDRGN0JBRkE3NUM0MjMxNkVDNEYyNUQ4QTU4RkQzRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqe4vcBW/KJKMPMsvSnd+9Nsc6 aPsV5Gl9ZeG4RmHu6k9Sa0jFJ7MmNkhdd+Q8ZuYw3c+T+bVAXI3z0M99NmLQRtZx 1NECKP6tw9pJy8sBFyzo5A5qlht3tQTzR49Rr9jdTgghs9mOUDfOKl4pbUl8Mtyw luepiI7QYNiv6T+/SNjdm+Su++/qjMU+u4uRe3SCOsdAgJyZ08yKRFZTuoiHzbNJ +SFme1PqjkVBO/6yR3fFnkLQNmJFvOM2xLCO4H4q59n3C8tQSMz37kUd0EXiWZv3 VZtDwgirn0VukpBv+JRLUJRjPy3x0Gn5oBBjXDdKmCz6FNPc3NicAbizKi49AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3oK3/dT3uvp1xCMW7E8l2KWP0+owHwYDVR0j BBgwFoAUIeKnCwV4xnSwvx/XvrO5sqYqLdgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI0MTY2NjY5Nzg1NDk3OS8wLzIxRTJBNzBCMDU3OEM2NzRCMEJGMUZEN0JFQjNC OUIyQTYyQTJERDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJBNjJBMkREOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNDE2NjY2OTc4NTQ5NzkvMC8yMUUyQTcwQjA1NzhD Njc0QjBCRjFGRDdCRUIzQjlCMkE2MkEyREQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeUtQSe3HQJ5h L+aT8e3FimGS3fEho+/aIhCu4dr2tO24cBzC46QjDhLqWuQraxxs9FgwwPo0E7hX 9nn967F2Li7JgR5yvMaTJkPWqRCZ+AMsrCmOxpSK3tX8X1q0ySL5ddq560iRjbip sbyZ2WtZmdYca+8aTJfMCWxb8umrmI7FRPsagpTdnPPP/uSQAwpoH+OkW1Wpf6YK umxX3tPNQWhczQhgc4SUnGZcCRy9Bg4DK0sRztU7VeDwNmxjFVmAncT0pHLYGt4x cj0fHluwAAwAf+Gp4mAAIRTPu//X0+uhWx8ZZdVg/n0M8sGjASfxFjBuNAWszccF T90atQaiwA== -----END CERTIFICATE-----Generated at Tue Oct 13 13:57:31 2026 by rpki-client