$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft File: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft (raw, json) Hash identifier: wrRaubZN21UvTs3hePhdCpQKQ5jbJN8hnoUB3pPInDk= Subject key identifier: 35:37:BA:FD:EC:A2:7A:51:9E:6E:80:07:D0:CF:0A:D5:C3:9F:D9:18 Authority key identifier: 21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 Certificate issuer: /CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Certificate serial: 76319091B0BB3029FF2BC36DBDD53FF6EEE2EE08 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft Manifest number: 48 Signing time: Tue 12 May 2026 16:00:37 +0000 Manifest this update: Tue 12 May 2026 15:55:37 +0000 Manifest next update: Wed 13 May 2026 18:55:37 +0000 Files and hashes: 1: AS0.roa (hash: BvQgF/OqmMaF0oD/Gh+P6gWfnSxEr9FEAszRlvbr0CI=) 2: AS18241.roa (hash: KghwJGsdAFwKKaHyAzU5cWOTx1CTSMYVyT97Iq5hIVw=) 3: 21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl (hash: TrgjWtWpuBDC9lg6UlZ2w290k4hn7tGW2FStEGgWVeM=) 4: AS9814.roa (hash: Fx0jP4aQ4pcOqireF4CpHMswJZljyUdoFx8vMnPRQjI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 18:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:31:90:91:b0:bb:30:29:ff:2b:c3:6d:bd:d5:3f:f6:ee:e2:ee:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8 Validity Not Before: May 12 15:55:37 2026 GMT Not After : May 13 18:55:37 2026 GMT Subject: CN=3537BAFDECA27A519E6E8007D0CF0AD5C39FD918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9b:c7:09:c8:f8:3b:ec:8c:ed:cf:f8:9d:6b: d0:d3:ed:88:81:10:6d:ee:57:5e:cc:b9:7f:f2:56: b8:e9:dc:ec:af:3c:8c:e3:37:47:8a:7e:2b:5d:98: 78:d2:8a:63:14:b2:89:f2:23:1c:12:46:83:b6:bd: bd:65:d5:8b:05:f3:1c:80:c0:67:62:74:57:09:0a: 31:cf:f6:e8:b1:f9:7f:f6:38:e7:99:89:0e:58:4f: 5c:3a:08:00:df:1d:d5:3e:b5:18:68:c8:58:5c:66: f6:48:90:4d:08:de:f7:79:70:d7:e3:ab:25:ee:a5: 6e:97:5e:06:0f:74:c1:a0:57:d9:85:bc:7f:2d:a3: c3:f4:aa:64:ca:c4:ae:0e:f9:1c:69:27:57:43:6c: 27:fe:7e:dd:10:c3:ee:c7:3b:f4:a1:d8:bc:49:d4: 86:7c:3c:8a:87:e2:21:01:8c:0c:07:60:40:45:7b: fb:d0:68:ba:51:c3:8f:16:d3:16:94:52:22:63:df: 4b:d5:91:cf:ab:b2:ba:f6:c4:3d:ed:c6:19:a8:cc: 27:23:ba:58:54:55:1c:f5:8a:0f:25:82:c8:a8:af: 5f:bc:ab:d7:3a:02:c9:ea:92:41:7e:60:a5:ad:38: d6:7c:89:25:74:4a:7e:08:56:49:ec:29:fe:d5:9f: ed:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:37:BA:FD:EC:A2:7A:51:9E:6E:80:07:D0:CF:0A:D5:C3:9F:D9:18 X509v3 Authority Key Identifier: keyid:21:E2:A7:0B:05:78:C6:74:B0:BF:1F:D7:BE:B3:B9:B2:A6:2A:2D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096241666697854979/0/21E2A70B0578C674B0BF1FD7BEB3B9B2A62A2DD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:ec:a2:ef:d1:f4:1b:ee:ba:59:1f:11:14:a6:19:ff:37:5f: 1b:65:f1:df:d5:fa:64:d0:e0:01:3e:55:39:88:41:dc:c6:35: e3:48:e8:90:04:15:28:6d:58:21:5b:24:7f:52:f8:42:87:fe: a6:7f:4d:75:6a:71:b9:ad:ac:a7:f5:ff:c7:64:c9:77:60:a1: f1:cc:13:4d:a5:df:74:d7:e1:10:1e:2b:30:d6:ec:73:40:3d: 7c:02:49:da:22:4e:a6:1d:0d:22:21:77:e0:95:da:6f:f7:10: 78:95:d2:16:9d:24:78:3f:89:25:fc:b6:03:12:eb:4b:bd:06: b1:bc:05:d8:5a:55:7b:4c:68:2f:6a:4a:ac:b8:76:5f:1c:48: a9:f9:a6:d7:6d:2d:08:05:3b:66:43:ce:b6:15:41:29:74:e0: 0f:f6:4c:bd:f1:56:e6:9f:13:ad:d3:75:e0:8b:fa:76:86:0e: da:15:19:99:54:16:79:9c:29:2e:3b:d5:bb:7e:1a:f4:f9:2a: f6:1a:81:4f:71:a7:f5:18:44:a8:c1:11:12:0b:95:32:23:ae: db:13:88:e2:02:2f:0d:88:a4:5d:c3:ef:e1:4a:38:f4:07:7e: c5:d3:fd:40:48:fc:bb:a0:fb:e1:63:79:37:f3:dc:6a:01:a3: f5:04:3c:f6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdjGQkbC7MCn/K8NtvdU/9u7i7ggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJB NjJBMkREODAeFw0yNjA1MTIxNTU1MzdaFw0yNjA1MTMxODU1MzdaMDMxMTAvBgNV BAMTKDM1MzdCQUZERUNBMjdBNTE5RTZFODAwN0QwQ0YwQUQ1QzM5RkQ5MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmm8cJyPg77Iztz/ida9DT7YiB EG3uV17MuX/yVrjp3OyvPIzjN0eKfitdmHjSimMUsonyIxwSRoO2vb1l1YsF8xyA wGdidFcJCjHP9uix+X/2OOeZiQ5YT1w6CADfHdU+tRhoyFhcZvZIkE0I3vd5cNfj qyXupW6XXgYPdMGgV9mFvH8to8P0qmTKxK4O+RxpJ1dDbCf+ft0Qw+7HO/Sh2LxJ 1IZ8PIqH4iEBjAwHYEBFe/vQaLpRw48W0xaUUiJj30vVkc+rsrr2xD3txhmozCcj ulhUVRz1ig8lgsior1+8q9c6AsnqkkF+YKWtONZ8iSV0Sn4IVknsKf7Vn+1dAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNTe6/eyielGeboAH0M8K1cOf2RgwHwYDVR0j BBgwFoAUIeKnCwV4xnSwvx/XvrO5sqYqLdgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI0MTY2NjY5Nzg1NDk3OS8wLzIxRTJBNzBCMDU3OEM2NzRCMEJGMUZEN0JFQjNC OUIyQTYyQTJERDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjFFMkE3MEIwNTc4QzY3NEIwQkYxRkQ3QkVCM0I5QjJBNjJBMkREOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYyNDE2NjY2OTc4NTQ5NzkvMC8yMUUyQTcwQjA1NzhD Njc0QjBCRjFGRDdCRUIzQjlCMkE2MkEyREQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAleyi79H0G+66 WR8RFKYZ/zdfG2Xx39X6ZNDgAT5VOYhB3MY140jokAQVKG1YIVskf1L4Qof+pn9N dWpxua2sp/X/x2TJd2Ch8cwTTaXfdNfhEB4rMNbsc0A9fAJJ2iJOph0NIiF34JXa b/cQeJXSFp0keD+JJfy2AxLrS70GsbwF2FpVe0xoL2pKrLh2XxxIqfmm120tCAU7 ZkPOthVBKXTgD/ZMvfFW5p8TrdN14Iv6doYO2hUZmVQWeZwpLjvVu34a9Pkq9hqB T3Gn9RhEqMEREguVMiOu2xOI4gIvDYikXcPv4Uo49Ad+xdP9QEj8u6D74WN5N/Pc agGj9QQ89g== -----END CERTIFICATE-----Generated at Wed May 13 08:45:23 2026 by rpki-client