
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
File: 16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft (raw, json)
Hash identifier: toj+EU3yVEigt8p8ldBhPFqkMjeCcCcdITisiWLUwac=
Subject key identifier: 18:B1:0E:A2:1A:8A:9B:8C:90:FC:6F:F7:09:79:07:22:EC:F2:D9:D3
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial: 445E386B2D25E04E6534859E25C05F1939489F88
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
Manifest number: 38
Signing time: Mon 02 Mar 2026 08:28:17 +0000
Manifest this update: Mon 02 Mar 2026 08:23:17 +0000
Manifest next update: Tue 03 Mar 2026 10:48:17 +0000
Files and hashes: 1: 16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl (hash: 8Ir+2Ety1ZErZvXXT2VGTLkJuHkhjla8fyTqMWdfqGQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 06:59:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:5e:38:6b:2d:25:e0:4e:65:34:85:9e:25:c0:5f:19:39:48:9f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Validity
Not Before: Mar 2 08:23:17 2026 GMT
Not After : Mar 3 10:48:17 2026 GMT
Subject: CN=18B10EA21A8A9B8C90FC6FF709790722ECF2D9D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0e:ac:12:cd:2d:80:ab:c3:65:82:bc:69:d2:
49:a9:60:fd:47:a2:a6:7f:75:bc:6c:49:9d:80:57:
ea:38:f1:87:e3:4d:9b:50:3b:da:88:32:2f:50:aa:
09:2e:3f:74:c0:cc:94:7d:b6:1a:7d:7d:8a:0a:c8:
5e:52:9a:0f:7e:a8:73:b2:d9:f4:30:bb:ea:96:2f:
ad:11:83:e3:f6:ab:3e:8e:f1:50:42:c5:1c:d4:93:
90:ba:5e:3f:92:f0:76:4d:93:b2:f6:dc:5b:06:87:
69:71:1f:f0:57:b0:5f:8d:93:c3:44:0f:b1:30:a9:
d1:82:8f:53:19:4d:3c:8c:62:ee:f9:e5:d1:65:9c:
02:1c:84:10:a9:7a:d9:d3:6e:f3:65:f2:73:c3:90:
b6:03:c5:5b:19:19:98:ce:36:98:dd:37:a4:95:a2:
0e:95:74:87:37:f4:a6:3d:31:79:56:be:3e:24:4b:
1b:16:d6:78:b3:7d:9d:69:ea:bb:fa:2d:f7:a9:aa:
1b:ea:24:51:c0:2b:21:6f:7f:26:49:75:ff:2b:b2:
3a:20:c5:ee:e1:8d:e1:4f:e6:4b:34:e1:0e:e4:2c:
66:2f:c4:cf:85:2d:25:6c:20:41:bc:5f:06:d0:cd:
99:31:8c:92:d6:7d:2b:10:03:1a:5c:b8:1b:e3:88:
99:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B1:0E:A2:1A:8A:9B:8C:90:FC:6F:F7:09:79:07:22:EC:F2:D9:D3
X509v3 Authority Key Identifier:
keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0d:61:6a:dc:02:c6:23:83:98:d0:bd:17:18:b4:cb:a2:5f:
f8:da:6c:58:1d:2d:32:5e:4b:dd:90:31:d8:2e:ab:93:a6:9b:
f3:9a:0e:47:0b:4e:7d:1e:13:68:f2:1f:6e:fd:01:40:68:5c:
cb:1f:2e:89:72:c2:cc:8b:bf:d9:f6:b9:ff:c1:cd:3a:a7:d8:
64:ca:8d:fd:ca:78:2b:26:f1:5d:a9:0c:95:b6:bc:bd:40:32:
7d:01:5e:9c:64:62:7e:57:89:d4:17:84:10:63:62:64:28:f6:
84:b7:89:45:d3:51:e6:4a:ab:2c:2b:d0:08:4a:26:c9:f5:cf:
bb:44:86:66:c3:55:45:d3:c6:3f:86:2f:18:36:ed:0a:e4:e5:
4f:b1:9e:ff:03:22:e0:d3:eb:e6:8e:63:2f:1b:6f:df:f8:86:
bf:b8:f6:66:58:2e:69:8c:ca:c7:8f:b3:3d:85:91:7d:95:71:
6f:f7:1f:3b:07:d1:6f:88:41:33:a1:0a:80:db:95:5f:05:30:
e5:43:8e:a8:7b:b7:77:1e:b6:8c:e8:f1:69:d7:0e:ad:57:36:
a7:ee:be:4c:33:96:2e:6a:81:8b:b4:38:a2:a6:e8:70:a5:6d:
60:e8:3f:a3:31:3a:57:f6:73:77:02:94:2e:80:69:bf:a7:0c:
bd:1b:bb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:58:02 2026 by rpki-client