$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft File: 8421F0680EB1B3756485D0F7681F78067E9C172E.mft (raw, json) Hash identifier: sZoq6VoxanuFts2lIXLx4nJIjatE5dtydBAZ4bDwT1k= Subject key identifier: 55:3B:4B:5D:C1:08:CE:90:E3:D6:68:4A:55:11:28:48:B3:80:71:85 Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E Certificate serial: 717BC19999AAE3A1C049987ECF71DF8F3543EE1C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft Manifest number: 0136 Signing time: Fri 25 Sep 2026 06:42:29 +0000 Manifest this update: Fri 25 Sep 2026 06:37:29 +0000 Manifest next update: Mon 28 Sep 2026 14:49:29 +0000 Files and hashes: 1: 3131342e3134312e3136302e302f31392d3139203d3e203435303631.roa (hash: JCIREiuOF9Kv/Vlb/fhDKY/AqbnrP7VRNXpBzQfkI54=) 2: 323430303a383230303a3a2f33322d313238203d3e203435303631.roa (hash: OJuPzB78ELG7oWhjMKLWmQEkKhS3FsL77IA5FBEyGug=) 3: 34352e3131362e35322e302f32322d3232203d3e203435303631.roa (hash: Q2GLAzJCuXolF8zvE4SK4DiSfrkjkP04MyuCM9i3+zc=) 4: 3131342e32382e3134342e302f32302d3230203d3e2034383131.roa (hash: E1m38mZb/SG7oWaFlqcUfpVkwaATD41p5lliHG3KeOw=) 5: 3131342e32382e3132382e302f31392d3139203d3e2034383132.roa (hash: xqw7IomjKxBRLvFlgY2UqqWMCB7OIYkSZ42ZB2kiYMc=) 6: 3131342e32382e36382e302f32322d3232203d3e2034383131.roa (hash: k2DANdr4kGbHw5DbBF4H016ZNcLf5+VxwPnYFQBum2I=) 7: 3130332e3235312e38342e302f32322d3232203d3e203435303631.roa (hash: Uqm3SQ0Upe1tVgTu+kaQINPzkGJ7F/HFSydp7geQGOU=) 8: 3132312e35352e302e302f31382d3138203d3e203435303631.roa (hash: NhqqQJvDACKCKhJecfErnOqf7SHXIpNF0kxLCWZji7g=) 9: 3131342e3134312e3132382e302f31392d3139203d3e203435303631.roa (hash: rX71zn663mC+PXbN9bZFqHBjL7EmPtxQN3yowzWIv7k=) 10: 323430303a383230313a3a2f34382d313238203d3e203435303631.roa (hash: 36yhztcZ5Fu1fqVVziBV34gyTNeZzEm9a1ZFJhxb2Fs=) 11: 3131342e32382e3132382e302f32302d3230203d3e2034383131.roa (hash: 7ctkGQpyisi9zH2u2VKxvHKRSH6rZz0X8ZJdtm7yPBk=) 12: 3131382e3132362e33322e302f31392d3139203d3e203435303631.roa (hash: oxCUlAGrmEVENEvphgoHrtULEK4PmQscKpU+wwYDSQQ=) 13: 3131342e32382e3136302e302f31392d3139203d3e203435303631.roa (hash: TjgLKPNifN+3Wr/+k2dIOHUJlqXOKSiGUcoZKgFaxSY=) 14: 3230322e3132322e3131322e302f32312d3231203d3e203435303631.roa (hash: p64OlJWN4xzR7Eauh13Kq9y9HsakhADFQc1EpncoPyA=) 15: 3131342e32382e37322e302f32312d3231203d3e2034383131.roa (hash: z+KkAbE1tNzpn5jtmiDv8aWslLlp03fmv+ixrqjR+0c=) 16: 323430303a383230313a3a2f33322d313238203d3e203435303631.roa (hash: cCjZk6/D7FQRokzzWSYRnQwLRhmgRoE9l1n51OgrOrQ=) 17: 3131342e3134312e3132382e302f31382d3138203d3e203435303631.roa (hash: //+6nQlQDBn0BXAXI99nw4HMz9l6KIJ4wurfWegCjHI=) 18: 3131342e3134312e3134382e302f32322d3232203d3e203435303631.roa (hash: GAjhPK7uIzL9Jk1ZUM2oYaioJeK2HkXJIrHGIBCS68A=) 19: 34352e3131352e34342e302f32322d3232203d3e2034383131.roa (hash: y/MSFBJdojfDrNGDV6JXxCEFfy6JVkgRu8xQqlGA1+o=) 20: 3130332e31332e3234342e302f32322d3232203d3e203435303631.roa (hash: s7xNgeXINQ5XzPzluG6befi4PDsxGcgFDif9YN8Cjtc=) 21: 8421F0680EB1B3756485D0F7681F78067E9C172E.crl (hash: se69bmeMPLi3CKcvS62NbHYxGwQJHgdTOUMxq5t7gj4=) 22: 3131342e32382e3133342e302f32342d3234203d3e2034383337.roa (hash: UYKWkrVdhnWPxrHTELoGMnyGsAs4tF9fFKf83dqOGqw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 14:49:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:7b:c1:99:99:aa:e3:a1:c0:49:98:7e:cf:71:df:8f:35:43:ee:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E Validity Not Before: Sep 25 06:37:29 2026 GMT Not After : Sep 28 14:49:29 2026 GMT Subject: CN=553B4B5DC108CE90E3D6684A55112848B3807185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:25:39:dc:b8:2d:f2:e4:74:60:e2:ba:3f:84: 8f:c1:c6:c6:d6:71:1c:c9:ab:46:1b:b1:58:86:34: 13:6f:fa:45:e6:67:ea:2a:55:02:e6:8b:16:7a:e2: 9f:b8:10:53:b8:df:29:21:01:6c:5e:8b:0d:45:51: b2:44:e4:2f:5e:a2:37:0b:7d:a5:d7:de:ce:b5:35: 4a:07:26:31:89:32:66:99:66:22:79:39:6c:6b:93: 1d:c6:c7:6d:2a:61:7f:64:5b:c0:20:6a:01:b6:6e: aa:41:53:c1:b3:95:06:ac:57:03:35:e9:e0:9e:c7: 0d:2f:dd:30:a1:d2:fe:e0:1c:ee:d3:53:6d:63:0b: 4d:b3:34:69:a4:cc:b3:79:76:70:36:b3:f0:55:c7: 4a:13:e1:87:4a:48:ae:e6:f8:f1:28:ba:e0:49:63: 5e:82:66:fe:ab:48:29:79:d7:7c:b8:95:d6:ed:49: 6b:fc:77:6b:4a:a3:79:3e:bf:c8:2e:1a:ca:42:dd: e8:74:af:26:61:7f:3d:0f:bc:4e:cf:81:0c:1c:e9: 6f:01:19:4e:61:b2:d7:1b:2b:4b:25:0e:36:25:1a: 03:ea:88:21:c4:01:ca:0b:a9:fe:96:7d:25:f4:6e: d0:e1:50:3a:df:39:bf:8d:aa:9e:ef:58:89:d9:41: 97:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3B:4B:5D:C1:08:CE:90:E3:D6:68:4A:55:11:28:48:B3:80:71:85 X509v3 Authority Key Identifier: keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:4e:36:98:2a:78:f4:a5:7c:a9:f8:04:fb:76:5b:ba:c9:12: f6:a6:72:a7:12:4a:36:90:d3:c2:26:c9:67:79:3b:4c:15:c0: 76:ec:4d:34:13:6b:b2:23:32:b3:87:70:a7:4d:6f:f2:1d:08: 21:64:32:46:5f:fb:4a:41:a0:42:a7:58:f6:64:48:f5:ab:56: f3:e0:62:da:86:7d:ef:a9:b1:2f:18:3d:b1:d2:5f:82:10:f0: 7a:b6:c7:7a:f1:3f:21:42:84:34:9c:d2:7a:4e:03:71:36:ee: b2:77:06:51:39:dc:ef:b2:7b:5c:cb:5f:37:0c:87:de:52:b2: 6c:2b:22:1f:4e:ef:47:04:e1:5c:4d:b6:7c:e2:76:a2:0e:c8: 6e:3f:3e:38:40:31:d8:d9:03:51:64:e7:19:10:d9:af:24:f5: 21:cd:c0:2d:02:9c:e2:d8:0f:e4:6c:7c:56:f9:3b:fb:3b:08: a3:37:d2:51:4c:d1:65:e0:83:0f:ab:4f:4d:4c:aa:73:83:3d: 49:bd:aa:a2:e5:09:dc:79:2e:82:12:84:ec:23:d0:5c:1a:b0: fe:0e:ee:ff:2c:92:be:b1:cc:52:aa:8e:33:ce:dd:4a:ae:dd: 08:19:0e:27:0b:d7:1a:dc:71:1c:1c:7d:66:d4:8c:cc:0a:ce: 24:04:c6:68 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcXvBmZmq46HASZh+z3HfjzVD7hwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3 RTlDMTcyRTAeFw0yNjA5MjUwNjM3MjlaFw0yNjA5MjgxNDQ5MjlaMDMxMTAvBgNV BAMTKDU1M0I0QjVEQzEwOENFOTBFM0Q2Njg0QTU1MTEyODQ4QjM4MDcxODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JTncuC3y5HRg4ro/hI/BxsbW cRzJq0YbsViGNBNv+kXmZ+oqVQLmixZ64p+4EFO43ykhAWxeiw1FUbJE5C9eojcL faXX3s61NUoHJjGJMmaZZiJ5OWxrkx3Gx20qYX9kW8AgagG2bqpBU8GzlQasVwM1 6eCexw0v3TCh0v7gHO7TU21jC02zNGmkzLN5dnA2s/BVx0oT4YdKSK7m+PEouuBJ Y16CZv6rSCl513y4ldbtSWv8d2tKo3k+v8guGspC3eh0ryZhfz0PvE7PgQwc6W8B GU5hstcbK0slDjYlGgPqiCHEAcoLqf6WfSX0btDhUDrfOb+Nqp7vWInZQZc/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVTtLXcEIzpDj1mhKVREoSLOAcYUwHwYDVR0j BBgwFoAUhCHwaA6xs3VkhdD3aB94Bn6cFy4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQ3MTg3My8wLzg0MjFGMDY4MEVCMUIzNzU2NDg1RDBGNzY4MUY3 ODA2N0U5QzE3MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3RTlDMTcyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc0NzE4NzMvMC84NDIxRjA2ODBFQjFC Mzc1NjQ4NUQwRjc2ODFGNzgwNjdFOUMxNzJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKU42mCp49KV8 qfgE+3ZbuskS9qZypxJKNpDTwibJZ3k7TBXAduxNNBNrsiMys4dwp01v8h0IIWQy Rl/7SkGgQqdY9mRI9atW8+Bi2oZ976mxLxg9sdJfghDwerbHevE/IUKENJzSek4D cTbusncGUTnc77J7XMtfNwyH3lKybCsiH07vRwThXE22fOJ2og7Ibj8+OEAx2NkD UWTnGRDZryT1Ic3ALQKc4tgP5Gx8Vvk7+zsIozfSUUzRZeCDD6tPTUyqc4M9Sb2q ouUJ3HkughKE7CPQXBqw/g7u/yySvrHMUqqOM87dSq7dCBkOJwvXGtxxHBx9ZtSM zArOJATGaA== -----END CERTIFICATE-----Generated at Sat Sep 26 15:36:48 2026 by rpki-client