$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft File: 921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft (raw, json) Hash identifier: mQrIbIDYfgVn/ZzbRpaF2A0b7COB+t1lUTr66hOdyV4= Subject key identifier: E1:4F:2A:AB:F7:58:2B:29:43:B8:60:6E:E9:AD:98:4B:FB:12:C6:97 Authority key identifier: 92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB Certificate issuer: /CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB Certificate serial: 532CBAD8858D0BA09BD350700846FE399CE64C90 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft Manifest number: 32 Signing time: Fri 12 Jun 2026 22:15:51 +0000 Manifest this update: Fri 12 Jun 2026 22:10:51 +0000 Manifest next update: Sun 14 Jun 2026 00:37:51 +0000 Files and hashes: 1: 3130312e39362e3133302e302f32342d3234203d3e2034383437.roa (hash: ztj4TIPHcK5ivl+9NmAGeK2Itc9Oqt+5hlO18neMVjM=) 2: 3130312e39362e3133322e302f32332d3233203d3e2034383437.roa (hash: pyruQMwauadA5XEUz/CIqNbzDvE1Pt09dSU3KIN64Xo=) 3: 3138332e38312e3138302e302f32322d3232203d3e2034383437.roa (hash: 4n7ZEuacTY07r7KmCftnz6ytrp3giTJTSn68WneTiTE=) 4: 3130312e39362e3132382e302f32332d3233203d3e2034383437.roa (hash: BD4EXLsTPjgLNF/fO8rF/VtqmsIw5b2waeO1LupTlYg=) 5: 3230322e3138392e332e302f32342d3234203d3e2034383437.roa (hash: 8ExX38dFJsGKMnDEN9NFSJMsrj0Y6q940RyHgciWJpw=) 6: 921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl (hash: 39FFO9N6toAWNL7l6nvWPAeu1L+H7Ee16vksFRt7Tos=) 7: 3130312e39362e3134322e302f32332d3233203d3e2034383437.roa (hash: GfoCWx5sl+tSN4OQ9uHej6sNYOh8bKKVWlXIiY9CVU8=) 8: 3130312e39362e3132382e302f32302d3230203d3e2030.roa (hash: 1xV9aP2gdc7Trs8xNwE/KOsAMShbKw7iwWZGWtS2IK0=) 9: 3230322e3138392e302e302f32322d3232203d3e2030.roa (hash: eGONjzo8uSWbtDzYQe2V6Q+IAVLW43fp8m2gPK9MrYI=) 10: 3130312e39362e3133342e302f32342d3234203d3e2034383437.roa (hash: 726ofHardCPhPvBsnl7kwy8aBXb1yfomBTbl12Gkc3M=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 23:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:2c:ba:d8:85:8d:0b:a0:9b:d3:50:70:08:46:fe:39:9c:e6:4c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB Validity Not Before: Jun 12 22:10:51 2026 GMT Not After : Jun 14 00:37:51 2026 GMT Subject: CN=E14F2AABF7582B2943B8606EE9AD984BFB12C697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e2:5e:1d:d7:69:c8:cc:7f:a9:2c:b1:27:8c: ee:a5:8a:11:1d:d3:72:35:ef:66:2d:3b:c5:0d:a6: 08:e1:6f:cf:b8:13:56:c5:69:9a:ed:f8:1d:78:26: 60:d2:b8:50:22:e7:60:00:67:b1:c7:7e:62:d2:dc: 27:21:d8:ee:fc:9e:c0:53:e9:92:79:52:09:4b:88: 65:13:ad:d9:1a:ff:df:67:de:6e:b6:52:49:68:6e: 1b:bc:53:6f:b6:bb:44:8d:7c:5e:cb:19:9d:f2:ae: ff:10:31:c7:b8:1d:ae:b5:ca:25:55:2e:cb:dd:db: 3b:6c:b0:2d:01:be:1f:45:c4:88:2e:7f:87:06:b5: 85:79:27:0c:e7:15:72:f3:5d:24:cb:5b:dc:20:b0: 62:e6:da:a0:de:ff:0b:fd:bc:1f:17:1c:2b:d9:66: f7:e0:39:ce:e7:cf:f6:f5:77:8b:d7:83:88:12:8f: e6:c4:58:9a:99:e1:2f:9c:7a:26:e6:c3:14:78:39: 22:40:c7:2e:04:bb:00:6c:48:bd:ea:f4:d5:39:4d: 64:3e:34:05:be:b8:40:5e:6e:fa:a8:b8:c3:e7:2f: 23:61:99:7b:93:8f:24:fa:e4:cc:41:cb:49:7a:f6: 09:b3:62:1e:66:40:04:a3:5f:7b:de:f0:e4:49:d2: be:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4F:2A:AB:F7:58:2B:29:43:B8:60:6E:E9:AD:98:4B:FB:12:C6:97 X509v3 Authority Key Identifier: keyid:92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:dd:0c:c6:14:1a:27:e4:bc:09:93:f6:05:64:3f:04:d7:4a: a6:1c:cf:44:ca:07:7d:74:6d:4b:75:58:76:2a:a7:f4:a7:a7: 3c:88:59:5b:bb:65:0f:8f:e3:cf:df:b6:a7:4e:da:4a:de:6a: 9e:1f:a3:3f:97:0b:b6:63:a7:b3:5e:8a:3a:89:64:ab:8c:5f: 31:86:42:04:8a:df:36:b8:7e:fe:21:66:2f:65:a4:2d:da:5f: 06:ce:ea:73:28:d6:0d:bf:3f:25:a9:4a:34:35:27:6f:48:87: 22:b9:fc:a4:c9:18:e9:4e:d8:61:78:eb:cb:08:08:ab:a0:fa: 9a:c6:23:71:95:92:ef:d5:06:8f:98:d6:3e:a2:54:9d:31:89: 84:e3:81:a8:64:d6:f1:a0:81:3f:c6:77:cd:13:f8:e5:f2:57: 95:c1:02:db:96:e3:87:ff:aa:d7:0d:f4:b5:15:a0:39:09:9b: a2:bf:50:29:02:09:fe:2d:7d:f2:2f:de:4a:32:9d:ce:7a:c1: 87:14:b2:99:b7:a1:b1:40:7b:45:14:65:5b:f5:ed:12:d7:bb: 7c:ce:f6:b7:06:ef:2a:cb:98:d8:59:22:40:2c:37:c2:47:a7: de:44:4b:e6:50:86:c6:ec:e8:6d:7f:cc:73:9a:29:c1:07:4c: de:28:7d:96 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUyy62IWNC6Cb01BwCEb+OZzmTJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxRTdDQ0VGQURDOUEwNUJGQkU4QThCOUVFRDRDOTVE NEJBNzVFQjAeFw0yNjA2MTIyMjEwNTFaFw0yNjA2MTQwMDM3NTFaMDMxMTAvBgNV BAMTKEUxNEYyQUFCRjc1ODJCMjk0M0I4NjA2RUU5QUQ5ODRCRkIxMkM2OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu4l4d12nIzH+pLLEnjO6lihEd 03I172YtO8UNpgjhb8+4E1bFaZrt+B14JmDSuFAi52AAZ7HHfmLS3Cch2O78nsBT 6ZJ5UglLiGUTrdka/99n3m62Uklobhu8U2+2u0SNfF7LGZ3yrv8QMce4Ha61yiVV Lsvd2ztssC0Bvh9FxIguf4cGtYV5JwznFXLzXSTLW9wgsGLm2qDe/wv9vB8XHCvZ ZvfgOc7nz/b1d4vXg4gSj+bEWJqZ4S+ceibmwxR4OSJAxy4EuwBsSL3q9NU5TWQ+ NAW+uEBebvqouMPnLyNhmXuTjyT65MxBy0l69gmzYh5mQASjX3ve8ORJ0r5xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU4U8qq/dYKylDuGBu6a2YS/sSxpcwHwYDVR0j BBgwFoAUkh58zvrcmgW/voqLnu1MldS6deswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDk2ODA5NTE3ODQyNDMyNS8wLzkyMUU3Q0NFRkFEQzlBMDVCRkJFOEE4QjlFRUQ0 Qzk1RDRCQTc1RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTIxRTdDQ0VGQURDOUEwNUJGQkU4QThCOUVFRDRDOTVENEJBNzVFQi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ5NjgwOTUxNzg0MjQzMjUvMC85MjFFN0NDRUZBREM5 QTA1QkZCRThBOEI5RUVENEM5NUQ0QkE3NUVCLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL90MxhQaJ+S8 CZP2BWQ/BNdKphzPRMoHfXRtS3VYdiqn9KenPIhZW7tlD4/jz9+2p07aSt5qnh+j P5cLtmOns16KOolkq4xfMYZCBIrfNrh+/iFmL2WkLdpfBs7qcyjWDb8/JalKNDUn b0iHIrn8pMkY6U7YYXjrywgIq6D6msYjcZWS79UGj5jWPqJUnTGJhOOBqGTW8aCB P8Z3zRP45fJXlcEC25bjh/+q1w30tRWgOQmbor9QKQIJ/i198i/eSjKdznrBhxSy mbehsUB7RRRlW/XtEte7fM72twbvKsuY2FkiQCw3wken3kRL5lCGxuzobX/Mc5op wQdM3ih9lg== -----END CERTIFICATE-----Generated at Sat Jun 13 14:46:07 2026 by rpki-client