$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft File: 921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft (raw, json) Hash identifier: rxHJXDyZj9ZrpA1eP8UWbW7YUDCh7KCajveS2phe1LE= Subject key identifier: B9:E2:1A:5D:36:A4:9F:0E:B1:B3:02:9D:72:1B:42:CB:10:03:60:AB Authority key identifier: 92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB Certificate issuer: /CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB Certificate serial: 54DB696A8787FE65FC2AE26D1200E4DDC18C487C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft Manifest number: A3 Signing time: Fri 25 Sep 2026 03:17:27 +0000 Manifest this update: Fri 25 Sep 2026 03:12:27 +0000 Manifest next update: Mon 28 Sep 2026 04:31:27 +0000 Files and hashes: 1: 3130312e39362e3132382e302f32302d3230203d3e2030.roa (hash: 1xV9aP2gdc7Trs8xNwE/KOsAMShbKw7iwWZGWtS2IK0=) 2: 3230322e3138392e302e302f32322d3232203d3e2030.roa (hash: eGONjzo8uSWbtDzYQe2V6Q+IAVLW43fp8m2gPK9MrYI=) 3: 3130312e39362e3132382e302f32332d3233203d3e2034383437.roa (hash: BD4EXLsTPjgLNF/fO8rF/VtqmsIw5b2waeO1LupTlYg=) 4: 3130312e39362e3134322e302f32332d3233203d3e2034383437.roa (hash: GfoCWx5sl+tSN4OQ9uHej6sNYOh8bKKVWlXIiY9CVU8=) 5: 921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl (hash: k2I1dPX1iSCdCYXKuRF9fqBS0g1ZzhEvuUIYhjCWL2I=) 6: 3130312e39362e3133342e302f32342d3234203d3e2034383437.roa (hash: 726ofHardCPhPvBsnl7kwy8aBXb1yfomBTbl12Gkc3M=) 7: 3230322e3138392e332e302f32342d3234203d3e2034383437.roa (hash: 8ExX38dFJsGKMnDEN9NFSJMsrj0Y6q940RyHgciWJpw=) 8: 3130312e39362e3133322e302f32332d3233203d3e2034383437.roa (hash: pyruQMwauadA5XEUz/CIqNbzDvE1Pt09dSU3KIN64Xo=) 9: 3138332e38312e3138302e302f32322d3232203d3e2034383437.roa (hash: 4n7ZEuacTY07r7KmCftnz6ytrp3giTJTSn68WneTiTE=) 10: 3130312e39362e3133302e302f32342d3234203d3e2034383437.roa (hash: ztj4TIPHcK5ivl+9NmAGeK2Itc9Oqt+5hlO18neMVjM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:db:69:6a:87:87:fe:65:fc:2a:e2:6d:12:00:e4:dd:c1:8c:48:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB Validity Not Before: Sep 25 03:12:27 2026 GMT Not After : Sep 28 04:31:27 2026 GMT Subject: CN=B9E21A5D36A49F0EB1B3029D721B42CB100360AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e6:ee:00:48:f2:74:c5:1d:07:7f:52:54:29: 4b:4e:c6:be:87:b9:79:67:b6:34:11:71:e9:94:5e: 23:da:7d:af:27:2b:7a:85:37:8d:02:c9:7f:ae:d1: c3:dd:11:13:b1:4f:d5:75:57:dc:1b:19:5a:f4:a8: aa:f1:ac:d7:49:bf:e4:10:46:8c:05:94:2f:51:01: f3:3f:f5:dd:78:6c:0a:00:a4:14:7c:c7:56:ed:cc: 5f:15:bd:1e:bf:de:67:f7:3e:cd:ec:61:76:85:ec: 4d:2b:9f:48:49:8c:34:30:0a:7c:e5:41:fd:0b:76: 92:b6:dc:5f:b9:2d:fb:c8:ea:97:5a:13:99:0f:a1: 17:87:3c:d2:ee:bb:25:26:56:6a:1e:40:16:c6:2d: 67:90:0a:56:56:d3:4a:47:e2:9a:ed:dd:92:3e:28: 23:8e:61:b6:60:76:1a:65:ae:a3:72:0c:08:6f:ef: c5:0d:b6:34:8f:4b:4d:7f:a2:83:69:0c:86:e0:90: e2:2f:be:64:48:d0:2a:a5:9d:e8:f1:ad:5b:61:a7: 4f:0c:be:4b:9b:07:36:74:ad:a6:89:89:24:6a:fd: ec:c2:62:53:2f:fc:bc:19:9a:64:ee:9a:f6:11:38: 08:0e:13:7e:02:da:bf:82:2d:42:88:84:e2:dc:07: 02:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E2:1A:5D:36:A4:9F:0E:B1:B3:02:9D:72:1B:42:CB:10:03:60:AB X509v3 Authority Key Identifier: keyid:92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:9b:12:10:6f:da:86:d2:54:28:24:60:71:e7:f7:db:9c:0e: 7c:8a:52:b5:58:1d:f0:c0:88:51:e7:f5:bf:74:0c:a3:50:78: 05:c8:85:6f:80:12:13:83:4a:c4:e5:52:55:b9:f7:1e:4b:e9: f9:eb:ce:1d:ba:da:d5:1a:28:f0:66:fb:5a:e5:7f:00:a6:65: 6e:1f:72:4d:ba:76:82:b3:56:76:18:e4:51:44:86:a3:fe:c2: fa:e0:08:92:6c:6c:2d:ac:19:be:1e:21:e9:0e:96:01:75:63: 94:96:ca:d5:c0:2c:0d:f3:95:8f:23:e7:e1:ca:fc:7f:ee:40: 6d:27:aa:d5:fa:bb:0e:73:9f:a3:ce:ef:ce:c2:7c:58:f5:d3: f3:15:29:b0:63:04:3e:ba:20:0a:93:3b:98:13:d7:46:28:54: 4e:8e:a3:58:20:34:25:cd:ea:6d:c3:a0:5c:71:e0:28:13:69: 6b:2b:03:c1:c6:48:ca:75:5e:90:98:bc:6f:59:be:29:fd:e7: 35:6c:6e:4e:ad:ac:25:7a:40:2e:8f:ed:f3:cf:21:ca:de:a3: d5:c1:0c:0e:8c:96:71:a8:ee:d3:ab:1a:e7:fd:95:73:88:88: 62:28:92:d5:43:a4:f9:4a:5d:4d:e3:14:1f:9b:84:fa:2e:a0: 98:ce:2d:62 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVNtpaoeH/mX8KuJtEgDk3cGMSHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxRTdDQ0VGQURDOUEwNUJGQkU4QThCOUVFRDRDOTVE NEJBNzVFQjAeFw0yNjA5MjUwMzEyMjdaFw0yNjA5MjgwNDMxMjdaMDMxMTAvBgNV BAMTKEI5RTIxQTVEMzZBNDlGMEVCMUIzMDI5RDcyMUI0MkNCMTAwMzYwQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs5u4ASPJ0xR0Hf1JUKUtOxr6H uXlntjQRcemUXiPafa8nK3qFN40CyX+u0cPdEROxT9V1V9wbGVr0qKrxrNdJv+QQ RowFlC9RAfM/9d14bAoApBR8x1btzF8VvR6/3mf3Ps3sYXaF7E0rn0hJjDQwCnzl Qf0LdpK23F+5LfvI6pdaE5kPoReHPNLuuyUmVmoeQBbGLWeQClZW00pH4prt3ZI+ KCOOYbZgdhplrqNyDAhv78UNtjSPS01/ooNpDIbgkOIvvmRI0CqlnejxrVthp08M vkubBzZ0raaJiSRq/ezCYlMv/LwZmmTumvYROAgOE34C2r+CLUKIhOLcBwLPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUueIaXTaknw6xswKdchtCyxADYKswHwYDVR0j BBgwFoAUkh58zvrcmgW/voqLnu1MldS6deswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDk2ODA5NTE3ODQyNDMyNS8wLzkyMUU3Q0NFRkFEQzlBMDVCRkJFOEE4QjlFRUQ0 Qzk1RDRCQTc1RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTIxRTdDQ0VGQURDOUEwNUJGQkU4QThCOUVFRDRDOTVENEJBNzVFQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ5NjgwOTUxNzg0MjQzMjUvMC85MjFFN0NDRUZBREM5 QTA1QkZCRThBOEI5RUVENEM5NUQ0QkE3NUVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5sSEG/ahtJU KCRgcef325wOfIpStVgd8MCIUef1v3QMo1B4BciFb4ASE4NKxOVSVbn3Hkvp+evO Hbra1Roo8Gb7WuV/AKZlbh9yTbp2grNWdhjkUUSGo/7C+uAIkmxsLawZvh4h6Q6W AXVjlJbK1cAsDfOVjyPn4cr8f+5AbSeq1fq7DnOfo87vzsJ8WPXT8xUpsGMEProg CpM7mBPXRihUTo6jWCA0Jc3qbcOgXHHgKBNpaysDwcZIynVekJi8b1m+Kf3nNWxu Tq2sJXpALo/t888hyt6j1cEMDoyWcaju06sa5/2Vc4iIYiiS1UOk+UpdTeMUH5uE +i6gmM4tYg== -----END CERTIFICATE-----Generated at Sat Sep 26 04:01:14 2026 by rpki-client