$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft File: 921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft (raw, json) Hash identifier: 6MSy1qj0inWNYny/a6pM3kwsZ2+D0uEZMqeR71rDziw= Subject key identifier: 74:BE:D8:49:9B:F2:5A:95:D7:E8:36:C9:2E:E0:47:1D:91:01:9F:44 Authority key identifier: 92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB Certificate issuer: /CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB Certificate serial: 271294F15730358C92FA9409A7614A101C211FB0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft Manifest number: 08 Signing time: Wed 13 May 2026 13:41:05 +0000 Manifest this update: Wed 13 May 2026 13:36:05 +0000 Manifest next update: Thu 14 May 2026 16:28:05 +0000 Files and hashes: 1: 921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl (hash: ewXNVlFYQuQSTomRSHROXcMLavnGIevlBIIjXD1Rx8w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:12:94:f1:57:30:35:8c:92:fa:94:09:a7:61:4a:10:1c:21:1f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB Validity Not Before: May 13 13:36:05 2026 GMT Not After : May 14 16:28:05 2026 GMT Subject: CN=74BED8499BF25A95D7E836C92EE0471D91019F44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c1:27:66:37:e2:55:26:24:b0:c1:65:ea:42: b5:e7:fb:21:30:f3:f1:2d:c2:03:09:89:95:ea:6a: 59:e2:9e:1b:aa:bc:86:1b:82:85:37:1b:19:ef:4a: 98:6e:4c:d1:cb:ff:15:e8:b2:b0:aa:fc:29:08:63: 0c:da:af:98:ad:ff:39:9e:18:2e:fd:19:f5:ce:d1: 4b:8a:7c:31:56:00:b2:b0:9a:08:94:55:c4:65:ed: 31:47:11:7a:05:1b:e4:50:62:c4:a1:c7:02:84:c0: 70:de:3b:70:fa:b1:95:e6:c3:72:1f:0f:d8:87:df: 37:1e:8d:22:d9:3a:d0:11:5f:41:9d:c9:7b:ab:6e: 7e:3b:43:ef:89:fd:0e:00:74:dc:94:21:44:af:28: c1:30:c9:fa:51:38:81:6a:f0:f4:0a:d8:51:81:fe: 97:bc:3a:80:67:a6:f2:02:c0:86:b4:96:c3:2c:0b: 55:7c:79:a2:b3:20:f8:43:36:17:6a:70:8a:39:10: d5:b2:67:a3:a1:30:eb:3c:c2:12:3a:94:f3:7d:d7: d6:6b:f4:85:29:7c:d3:bc:c8:78:05:57:d8:56:71: 77:33:9d:e7:31:fe:19:77:63:f6:0d:46:52:02:3f: 42:7f:eb:e0:6c:af:2d:63:93:b5:d2:78:36:1e:f0: 7e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BE:D8:49:9B:F2:5A:95:D7:E8:36:C9:2E:E0:47:1D:91:01:9F:44 X509v3 Authority Key Identifier: keyid:92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:6d:96:18:11:da:17:8b:8a:4e:6f:80:57:dd:f3:34:d2:d6: 90:c4:c8:ea:4d:6b:97:0e:5c:6b:c0:0a:a1:b5:23:f3:84:58: a5:e5:30:34:bf:72:b2:97:0d:ab:b4:59:37:1f:47:38:66:92: 09:cf:4a:23:b0:d2:02:67:db:c4:be:1a:a7:79:6c:41:e1:88: 08:05:12:61:24:c3:2e:ae:37:2c:94:8d:0d:19:74:83:b1:b9: ce:c8:a8:07:70:86:55:30:3f:ac:d7:07:d4:63:a4:0b:75:f1: 3e:bc:ef:f9:3b:ce:2e:b1:73:96:3d:04:e0:ac:7d:06:76:50: 57:fd:28:77:06:f8:15:05:a9:1f:35:5a:77:98:54:95:db:d1: 61:67:c7:e1:79:bd:6a:a7:7a:00:ae:9e:ee:62:89:23:eb:33: 42:88:54:18:39:46:e6:38:ee:00:c3:19:d3:fa:c2:59:a9:8b: 6f:0f:ca:18:56:bf:07:11:67:d2:c5:fd:5c:f5:a1:d4:e9:d7: 55:26:95:64:c9:27:4b:81:a4:29:16:22:b7:dc:33:8e:71:1b: 12:d6:07:78:19:20:67:de:61:4b:89:76:4f:8d:e6:bb:a6:a9: 20:af:ae:1e:da:31:ea:d2:0c:e0:80:36:54:1b:35:66:1f:8f: de:ef:bc:47 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJxKU8VcwNYyS+pQJp2FKEBwhH7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxRTdDQ0VGQURDOUEwNUJGQkU4QThCOUVFRDRDOTVE NEJBNzVFQjAeFw0yNjA1MTMxMzM2MDVaFw0yNjA1MTQxNjI4MDVaMDMxMTAvBgNV BAMTKDc0QkVEODQ5OUJGMjVBOTVEN0U4MzZDOTJFRTA0NzFEOTEwMTlGNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4wSdmN+JVJiSwwWXqQrXn+yEw 8/EtwgMJiZXqalninhuqvIYbgoU3GxnvSphuTNHL/xXosrCq/CkIYwzar5it/zme GC79GfXO0UuKfDFWALKwmgiUVcRl7TFHEXoFG+RQYsShxwKEwHDeO3D6sZXmw3If D9iH3zcejSLZOtARX0GdyXurbn47Q++J/Q4AdNyUIUSvKMEwyfpROIFq8PQK2FGB /pe8OoBnpvICwIa0lsMsC1V8eaKzIPhDNhdqcIo5ENWyZ6OhMOs8whI6lPN919Zr 9IUpfNO8yHgFV9hWcXcznecx/hl3Y/YNRlICP0J/6+Bsry1jk7XSeDYe8H75AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdL7YSZvyWpXX6DbJLuBHHZEBn0QwHwYDVR0j BBgwFoAUkh58zvrcmgW/voqLnu1MldS6deswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDk2ODA5NTE3ODQyNDMyNS8wLzkyMUU3Q0NFRkFEQzlBMDVCRkJFOEE4QjlFRUQ0 Qzk1RDRCQTc1RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTIxRTdDQ0VGQURDOUEwNUJGQkU4QThCOUVFRDRDOTVENEJBNzVFQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ5NjgwOTUxNzg0MjQzMjUvMC85MjFFN0NDRUZBREM5 QTA1QkZCRThBOEI5RUVENEM5NUQ0QkE3NUVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACm2WGBHaF4uK Tm+AV93zNNLWkMTI6k1rlw5ca8AKobUj84RYpeUwNL9yspcNq7RZNx9HOGaSCc9K I7DSAmfbxL4ap3lsQeGICAUSYSTDLq43LJSNDRl0g7G5zsioB3CGVTA/rNcH1GOk C3XxPrzv+TvOLrFzlj0E4Kx9BnZQV/0odwb4FQWpHzVad5hUldvRYWfH4Xm9aqd6 AK6e7mKJI+szQohUGDlG5jjuAMMZ0/rCWamLbw/KGFa/BxFn0sX9XPWh1OnXVSaV ZMknS4GkKRYit9wzjnEbEtYHeBkgZ95hS4l2T43mu6apIK+uHtox6tIM4IA2VBs1 Zh+P3u+8Rw== -----END CERTIFICATE-----Generated at Wed May 13 20:55:06 2026 by rpki-client