$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft File: 8421F0680EB1B3756485D0F7681F78067E9C172E.mft (raw, json) Hash identifier: QHewwVEYZOVep895QPysepgE/Ue3fEFL2a0vXRvq0DU= Subject key identifier: 4B:91:B4:8A:A8:AF:DD:64:F7:B3:54:CC:A2:1F:D0:61:97:23:70:B7 Authority key identifier: 84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E Certificate issuer: /CN=8421F0680EB1B3756485D0F7681F78067E9C172E Certificate serial: 1F02BC36175432F769689015EE1B63EE2B910311 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft Manifest number: 0101 Signing time: Tue 28 Jul 2026 19:52:39 +0000 Manifest this update: Tue 28 Jul 2026 19:47:39 +0000 Manifest next update: Wed 29 Jul 2026 20:29:39 +0000 Files and hashes: 1: 3131342e32382e3136302e302f31392d3139203d3e203435303631.roa (hash: TjgLKPNifN+3Wr/+k2dIOHUJlqXOKSiGUcoZKgFaxSY=) 2: 3131342e3134312e3136302e302f31392d3139203d3e203435303631.roa (hash: JCIREiuOF9Kv/Vlb/fhDKY/AqbnrP7VRNXpBzQfkI54=) 3: 3130332e31332e3234342e302f32322d3232203d3e203435303631.roa (hash: s7xNgeXINQ5XzPzluG6befi4PDsxGcgFDif9YN8Cjtc=) 4: 3131342e3134312e3134382e302f32322d3232203d3e203435303631.roa (hash: GAjhPK7uIzL9Jk1ZUM2oYaioJeK2HkXJIrHGIBCS68A=) 5: 34352e3131362e35322e302f32322d3232203d3e203435303631.roa (hash: Q2GLAzJCuXolF8zvE4SK4DiSfrkjkP04MyuCM9i3+zc=) 6: 3131342e32382e3132382e302f32302d3230203d3e2034383131.roa (hash: 7ctkGQpyisi9zH2u2VKxvHKRSH6rZz0X8ZJdtm7yPBk=) 7: 323430303a383230313a3a2f34382d313238203d3e203435303631.roa (hash: 36yhztcZ5Fu1fqVVziBV34gyTNeZzEm9a1ZFJhxb2Fs=) 8: 3130332e3235312e38342e302f32322d3232203d3e203435303631.roa (hash: Uqm3SQ0Upe1tVgTu+kaQINPzkGJ7F/HFSydp7geQGOU=) 9: 8421F0680EB1B3756485D0F7681F78067E9C172E.crl (hash: t9C4FNtWqP9lN4GS22KnDQFGM1gkAAviR+MJA7x6jeo=) 10: 34352e3131352e34342e302f32322d3232203d3e2034383131.roa (hash: y/MSFBJdojfDrNGDV6JXxCEFfy6JVkgRu8xQqlGA1+o=) 11: 323430303a383230303a3a2f33322d313238203d3e203435303631.roa (hash: OJuPzB78ELG7oWhjMKLWmQEkKhS3FsL77IA5FBEyGug=) 12: 3132312e35352e302e302f31382d3138203d3e203435303631.roa (hash: NhqqQJvDACKCKhJecfErnOqf7SHXIpNF0kxLCWZji7g=) 13: 3131342e32382e3134342e302f32302d3230203d3e2034383131.roa (hash: E1m38mZb/SG7oWaFlqcUfpVkwaATD41p5lliHG3KeOw=) 14: 3131342e32382e37322e302f32312d3231203d3e2034383131.roa (hash: z+KkAbE1tNzpn5jtmiDv8aWslLlp03fmv+ixrqjR+0c=) 15: 323430303a383230313a3a2f33322d313238203d3e203435303631.roa (hash: cCjZk6/D7FQRokzzWSYRnQwLRhmgRoE9l1n51OgrOrQ=) 16: 3131382e3132362e33322e302f31392d3139203d3e203435303631.roa (hash: oxCUlAGrmEVENEvphgoHrtULEK4PmQscKpU+wwYDSQQ=) 17: 3131342e32382e3133342e302f32342d3234203d3e2034383337.roa (hash: UYKWkrVdhnWPxrHTELoGMnyGsAs4tF9fFKf83dqOGqw=) 18: 3131342e3134312e3132382e302f31382d3138203d3e203435303631.roa (hash: //+6nQlQDBn0BXAXI99nw4HMz9l6KIJ4wurfWegCjHI=) 19: 3131342e32382e36382e302f32322d3232203d3e2034383131.roa (hash: k2DANdr4kGbHw5DbBF4H016ZNcLf5+VxwPnYFQBum2I=) 20: 3230322e3132322e3131322e302f32312d3231203d3e203435303631.roa (hash: p64OlJWN4xzR7Eauh13Kq9y9HsakhADFQc1EpncoPyA=) 21: 3131342e32382e3132382e302f31392d3139203d3e2034383132.roa (hash: xqw7IomjKxBRLvFlgY2UqqWMCB7OIYkSZ42ZB2kiYMc=) 22: 3131342e3134312e3132382e302f31392d3139203d3e203435303631.roa (hash: rX71zn663mC+PXbN9bZFqHBjL7EmPtxQN3yowzWIv7k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 20:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:02:bc:36:17:54:32:f7:69:68:90:15:ee:1b:63:ee:2b:91:03:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8421F0680EB1B3756485D0F7681F78067E9C172E Validity Not Before: Jul 28 19:47:39 2026 GMT Not After : Jul 29 20:29:39 2026 GMT Subject: CN=4B91B48AA8AFDD64F7B354CCA21FD061972370B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:31:02:10:3b:27:da:7f:08:92:fe:13:a1:01: 9d:72:51:4b:f6:98:7c:cd:ce:bc:a4:6c:e3:23:ab: f8:f3:1c:64:5f:d2:30:70:f5:94:5e:a3:c6:d3:40: ac:1a:03:ac:15:cc:6f:49:6b:0a:24:e8:fb:2d:55: 3e:79:71:30:02:35:ef:fd:5a:ba:19:ea:d4:30:fa: b7:b6:74:87:81:49:d2:64:cd:76:3e:a3:56:d6:c2: 65:35:b3:eb:aa:3e:82:17:2e:77:e6:6b:dc:f7:70: e8:9c:ed:57:0a:ba:5f:f1:3c:af:41:e2:02:43:ed: ad:4d:f1:99:a1:a5:e4:62:78:f7:46:d9:26:6c:b5: 5f:5a:36:59:51:1b:72:eb:26:ca:b1:4f:45:b0:5b: e9:60:46:84:25:e0:cb:22:b5:51:ac:00:d1:7b:84: be:0e:b2:6a:b2:12:6d:e9:c9:b2:06:4b:19:6f:23: 45:8b:c1:a1:de:d1:81:64:ea:cc:94:12:9a:cb:d7: 1e:e7:21:42:c9:33:ed:5b:ba:0c:ae:f6:31:f8:3b: 96:7a:ed:52:1c:45:dc:97:d1:42:4f:9a:52:ac:7c: 45:ad:24:29:19:e3:fa:b5:dc:b2:df:db:bf:ed:93: 91:55:66:27:ed:a7:53:91:0b:b0:5a:72:d2:e7:c0: ca:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:91:B4:8A:A8:AF:DD:64:F7:B3:54:CC:A2:1F:D0:61:97:23:70:B7 X509v3 Authority Key Identifier: keyid:84:21:F0:68:0E:B1:B3:75:64:85:D0:F7:68:1F:78:06:7E:9C:17:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8421F0680EB1B3756485D0F7681F78067E9C172E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947471873/0/8421F0680EB1B3756485D0F7681F78067E9C172E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:8c:01:75:a1:36:e6:8a:85:1c:f6:15:3d:71:85:10:d9:80: c7:53:0c:10:81:65:6e:c2:bd:8b:b1:86:b2:42:1b:b9:07:c4: 57:24:b2:8c:73:10:36:6e:a5:2d:dd:1c:16:9b:4d:ea:7e:42: 7f:68:66:4b:37:f2:60:18:69:3c:f7:66:60:43:f8:44:d7:ca: 8d:b3:6e:f0:52:02:95:71:65:a1:ee:65:d6:3b:f5:d4:62:9e: fe:73:fb:20:f8:1d:65:f4:d0:ad:30:9d:a7:bb:0d:59:06:6a: 11:49:41:20:7e:bd:ce:4b:21:e2:0a:0e:6a:b6:95:a4:90:4d: 66:e4:46:eb:21:ea:3c:69:9d:e6:ca:9a:13:c5:0f:dd:d9:75: c5:77:ef:2c:07:a6:5f:c6:f6:01:dc:35:7b:f2:cc:4a:54:8a: 61:13:fe:85:5f:26:32:6f:77:01:ff:ca:c4:f4:7b:63:eb:68: 7c:42:19:a3:0f:2d:6c:b7:cd:5c:6a:e5:5a:56:62:8a:a9:d7: 28:3a:38:32:c2:1a:4f:3a:0c:86:ab:43:25:e7:0c:98:2d:b2: 3d:23:4e:61:dd:8d:f4:9b:dd:8a:37:b9:16:a5:1a:4d:49:cd: 0f:62:1a:05:20:73:bd:6c:f1:1e:17:85:a5:d0:a1:c7:ad:aa: 13:ea:4a:0a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHwK8NhdUMvdpaJAV7htj7iuRAxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3 RTlDMTcyRTAeFw0yNjA3MjgxOTQ3MzlaFw0yNjA3MjkyMDI5MzlaMDMxMTAvBgNV BAMTKDRCOTFCNDhBQThBRkRENjRGN0IzNTRDQ0EyMUZEMDYxOTcyMzcwQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkMQIQOyfafwiS/hOhAZ1yUUv2 mHzNzrykbOMjq/jzHGRf0jBw9ZReo8bTQKwaA6wVzG9Jawok6PstVT55cTACNe/9 WroZ6tQw+re2dIeBSdJkzXY+o1bWwmU1s+uqPoIXLnfma9z3cOic7VcKul/xPK9B 4gJD7a1N8ZmhpeRiePdG2SZstV9aNllRG3LrJsqxT0WwW+lgRoQl4MsitVGsANF7 hL4OsmqyEm3pybIGSxlvI0WLwaHe0YFk6syUEprL1x7nIULJM+1bugyu9jH4O5Z6 7VIcRdyX0UJPmlKsfEWtJCkZ4/q13LLf27/tk5FVZiftp1ORC7BactLnwMoJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUS5G0iqiv3WT3s1TMoh/QYZcjcLcwHwYDVR0j BBgwFoAUhCHwaA6xs3VkhdD3aB94Bn6cFy4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzQ3MTg3My8wLzg0MjFGMDY4MEVCMUIzNzU2NDg1RDBGNzY4MUY3 ODA2N0U5QzE3MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODQyMUYwNjgwRUIxQjM3NTY0ODVEMEY3NjgxRjc4MDY3RTlDMTcyRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc0NzE4NzMvMC84NDIxRjA2ODBFQjFC Mzc1NjQ4NUQwRjc2ODFGNzgwNjdFOUMxNzJFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIwBdaE25oqF HPYVPXGFENmAx1MMEIFlbsK9i7GGskIbuQfEVySyjHMQNm6lLd0cFptN6n5Cf2hm SzfyYBhpPPdmYEP4RNfKjbNu8FIClXFloe5l1jv11GKe/nP7IPgdZfTQrTCdp7sN WQZqEUlBIH69zksh4goOaraVpJBNZuRG6yHqPGmd5sqaE8UP3dl1xXfvLAemX8b2 Adw1e/LMSlSKYRP+hV8mMm93Af/KxPR7Y+tofEIZow8tbLfNXGrlWlZiiqnXKDo4 MsIaTzoMhqtDJecMmC2yPSNOYd2N9Jvdije5FqUaTUnND2IaBSBzvWzxHheFpdCh x62qE+pKCg== -----END CERTIFICATE-----Generated at Wed Jul 29 06:12:13 2026 by rpki-client