$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft File: 921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft (raw, json) Hash identifier: lFFlnmn9tCGaxAxMmt8Xm2vUzLfaukYRiYE2hnjhTfM= Subject key identifier: F2:22:01:21:61:E2:AC:AB:DA:A4:11:3E:CA:43:D7:EB:86:41:70:8D Authority key identifier: 92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB Certificate issuer: /CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB Certificate serial: 2165DDC88BCA77B1711C540473D775E55E9F05BD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft Manifest number: 68 Signing time: Thu 23 Jul 2026 11:33:32 +0000 Manifest this update: Thu 23 Jul 2026 11:28:32 +0000 Manifest next update: Fri 24 Jul 2026 13:57:32 +0000 Files and hashes: 1: 921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl (hash: JRNll2NWKLNypSFPhmfBGyFBVsAoiCCwX0xGHUhnW6A=) 2: 3230322e3138392e332e302f32342d3234203d3e2034383437.roa (hash: 8ExX38dFJsGKMnDEN9NFSJMsrj0Y6q940RyHgciWJpw=) 3: 3230322e3138392e302e302f32322d3232203d3e2030.roa (hash: eGONjzo8uSWbtDzYQe2V6Q+IAVLW43fp8m2gPK9MrYI=) 4: 3130312e39362e3133302e302f32342d3234203d3e2034383437.roa (hash: ztj4TIPHcK5ivl+9NmAGeK2Itc9Oqt+5hlO18neMVjM=) 5: 3130312e39362e3134322e302f32332d3233203d3e2034383437.roa (hash: GfoCWx5sl+tSN4OQ9uHej6sNYOh8bKKVWlXIiY9CVU8=) 6: 3130312e39362e3133342e302f32342d3234203d3e2034383437.roa (hash: 726ofHardCPhPvBsnl7kwy8aBXb1yfomBTbl12Gkc3M=) 7: 3130312e39362e3133322e302f32332d3233203d3e2034383437.roa (hash: pyruQMwauadA5XEUz/CIqNbzDvE1Pt09dSU3KIN64Xo=) 8: 3130312e39362e3132382e302f32302d3230203d3e2030.roa (hash: 1xV9aP2gdc7Trs8xNwE/KOsAMShbKw7iwWZGWtS2IK0=) 9: 3130312e39362e3132382e302f32332d3233203d3e2034383437.roa (hash: BD4EXLsTPjgLNF/fO8rF/VtqmsIw5b2waeO1LupTlYg=) 10: 3138332e38312e3138302e302f32322d3232203d3e2034383437.roa (hash: 4n7ZEuacTY07r7KmCftnz6ytrp3giTJTSn68WneTiTE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:65:dd:c8:8b:ca:77:b1:71:1c:54:04:73:d7:75:e5:5e:9f:05:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB Validity Not Before: Jul 23 11:28:32 2026 GMT Not After : Jul 24 13:57:32 2026 GMT Subject: CN=F222012161E2ACABDAA4113ECA43D7EB8641708D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f9:eb:d5:43:7a:cd:82:5b:2a:f4:78:d0:44: a4:47:8a:23:65:4e:ed:14:a6:4a:45:90:43:ab:a8: d6:63:91:5a:0b:42:51:5c:75:14:e4:8b:be:91:55: e9:69:c7:21:40:46:e2:fe:34:8e:b7:b0:8b:da:92: 9c:8c:2d:8d:85:67:10:93:e3:b4:92:e3:b6:6d:de: 05:42:59:f8:1d:aa:ae:bc:e9:08:f1:01:32:be:69: 82:80:28:4d:32:d7:f8:c2:ab:52:78:07:d9:09:b4: 5b:68:c4:55:fd:62:b3:54:13:37:eb:af:58:42:b4: 07:d4:62:33:79:91:96:de:9e:ad:29:ea:23:eb:4a: 54:49:c5:e3:35:bc:a4:a1:91:77:14:9d:51:58:aa: 38:79:20:4e:24:a4:04:d0:6e:dd:6d:46:75:04:68: 16:a6:56:6c:1f:fc:01:60:12:30:47:67:b8:a7:ed: 9f:14:3e:0c:09:07:24:fe:a7:a1:52:f7:9f:72:b7: 60:08:63:83:fa:d3:00:cf:67:d5:bb:7d:f6:63:bb: ae:eb:14:48:fa:b3:2c:07:00:91:20:d4:45:7e:c7: 7c:c6:44:9c:9b:51:ab:cc:58:5b:95:ec:97:1e:16: 43:5e:f5:cd:10:82:02:53:aa:61:13:7e:ae:d1:fe: 19:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:22:01:21:61:E2:AC:AB:DA:A4:11:3E:CA:43:D7:EB:86:41:70:8D X509v3 Authority Key Identifier: keyid:92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:69:82:b4:8b:6d:35:25:4e:b9:e1:e6:7d:7a:c9:7b:25:fc: eb:f8:74:14:e9:f6:1d:80:03:1d:d9:bb:fe:7b:ad:5a:c0:4d: a4:66:23:44:16:02:94:48:fb:97:fc:87:04:2a:54:c0:ac:3d: 14:89:fa:96:16:9b:f9:3c:4a:5e:99:80:02:30:7e:0f:43:5f: 8e:26:56:8f:22:35:fb:8c:ad:f8:7d:5d:fb:b2:68:84:b8:b4: d1:a7:39:c1:42:c2:28:75:92:51:80:33:45:79:74:98:c5:44: 87:7e:e8:e7:d2:d6:39:1b:c9:c1:cf:9f:76:ee:ee:96:3a:bf: 39:73:50:6b:44:d8:78:ff:77:ac:e5:1d:b0:c6:ed:90:71:70: 0e:01:65:14:65:ca:b0:c8:82:7f:6a:3b:b5:de:f6:c8:78:4c: 36:16:63:1a:cc:e8:39:2f:aa:6f:fc:d0:86:0f:73:ad:b0:dd: 34:96:d7:4c:60:40:16:fc:ba:b9:03:8f:f6:be:1f:cb:4d:e4: 03:14:b3:d9:af:78:bc:d1:4b:e8:88:90:1b:1e:ad:51:17:d0: 29:14:7c:03:5c:59:da:1d:0d:86:fe:2d:4b:98:35:fe:a9:05: 82:df:0e:00:bc:c8:e0:b1:80:02:91:9c:11:3b:b2:bd:0a:30: 3a:e3:f6:07 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIWXdyIvKd7FxHFQEc9d15V6fBb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxRTdDQ0VGQURDOUEwNUJGQkU4QThCOUVFRDRDOTVE NEJBNzVFQjAeFw0yNjA3MjMxMTI4MzJaFw0yNjA3MjQxMzU3MzJaMDMxMTAvBgNV BAMTKEYyMjIwMTIxNjFFMkFDQUJEQUE0MTEzRUNBNDNEN0VCODY0MTcwOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS+evVQ3rNglsq9HjQRKRHiiNl Tu0UpkpFkEOrqNZjkVoLQlFcdRTki76RVelpxyFARuL+NI63sIvakpyMLY2FZxCT 47SS47Zt3gVCWfgdqq686QjxATK+aYKAKE0y1/jCq1J4B9kJtFtoxFX9YrNUEzfr r1hCtAfUYjN5kZbenq0p6iPrSlRJxeM1vKShkXcUnVFYqjh5IE4kpATQbt1tRnUE aBamVmwf/AFgEjBHZ7in7Z8UPgwJByT+p6FS959yt2AIY4P60wDPZ9W7ffZju67r FEj6sywHAJEg1EV+x3zGRJybUavMWFuV7JceFkNe9c0QggJTqmETfq7R/hlxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8iIBIWHirKvapBE+ykPX64ZBcI0wHwYDVR0j BBgwFoAUkh58zvrcmgW/voqLnu1MldS6deswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDk2ODA5NTE3ODQyNDMyNS8wLzkyMUU3Q0NFRkFEQzlBMDVCRkJFOEE4QjlFRUQ0 Qzk1RDRCQTc1RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTIxRTdDQ0VGQURDOUEwNUJGQkU4QThCOUVFRDRDOTVENEJBNzVFQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ5NjgwOTUxNzg0MjQzMjUvMC85MjFFN0NDRUZBREM5 QTA1QkZCRThBOEI5RUVENEM5NUQ0QkE3NUVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWmCtIttNSVO ueHmfXrJeyX86/h0FOn2HYADHdm7/nutWsBNpGYjRBYClEj7l/yHBCpUwKw9FIn6 lhab+TxKXpmAAjB+D0NfjiZWjyI1+4yt+H1d+7JohLi00ac5wULCKHWSUYAzRXl0 mMVEh37o59LWORvJwc+fdu7uljq/OXNQa0TYeP93rOUdsMbtkHFwDgFlFGXKsMiC f2o7td72yHhMNhZjGszoOS+qb/zQhg9zrbDdNJbXTGBAFvy6uQOP9r4fy03kAxSz 2a94vNFL6IiQGx6tURfQKRR8A1xZ2h0Nhv4tS5g1/qkFgt8OALzI4LGAApGcETuy vQowOuP2Bw== -----END CERTIFICATE-----Generated at Fri Jul 24 04:53:00 2026 by rpki-client