Manifest

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
File:                     16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft (raw, json)
Hash identifier:          lf/hqF8Yz1Z3iWHr6/hR0tNimcx+M/0s/t+Moe1sHXo=
Subject key identifier:   57:AC:C2:99:85:0B:A2:EC:92:62:0D:E7:49:F6:0B:86:AE:CC:89:CB
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Certificate issuer:       /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial:       69960E05ECCCC0A2FD23C430E0A85F488E223F7A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
Manifest number:          75
Signing time:             Thu 16 Apr 2026 08:03:41 +0000
Manifest this update:     Thu 16 Apr 2026 07:58:41 +0000
Manifest next update:     Fri 17 Apr 2026 10:11:41 +0000
Files and hashes:         1: 3133392e3232312e302e302f31362d3234203d3e2030.roa (hash: A3/3svz8ZVlEUrpbhDtDBNLSQOnMdWuy39azscZxYW0=)
                          2: 16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl (hash: QICkHHat1p4m03BM57YEprnZV7LZL9TWIWzibKC6Qjo=)
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 10:11:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:96:0e:05:ec:cc:c0:a2:fd:23:c4:30:e0:a8:5f:48:8e:22:3f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
        Validity
            Not Before: Apr 16 07:58:41 2026 GMT
            Not After : Apr 17 10:11:41 2026 GMT
        Subject: CN=57ACC299850BA2EC92620DE749F60B86AECC89CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5b:d6:f2:72:b1:96:c5:78:92:e7:e4:65:ca:
                    c6:b4:1e:e2:66:e6:10:96:aa:f7:bb:43:6d:ce:85:
                    9d:cd:11:8e:fa:ab:c4:ff:3d:8f:7f:60:9c:78:c5:
                    54:6a:80:96:e6:dc:5f:73:fc:e4:d8:23:88:92:79:
                    f2:e6:d2:48:5b:8a:88:09:c9:d0:ae:ac:21:05:33:
                    49:33:4d:91:e2:f2:47:1c:61:44:1d:d1:1f:8a:78:
                    51:31:79:3c:6a:53:92:0a:c8:10:2f:f4:3d:5e:70:
                    d8:95:1d:3b:9b:27:76:bd:b3:0f:4e:f7:e2:f9:cb:
                    f5:ce:a8:bd:b5:be:8d:9c:b4:b5:5c:13:17:90:05:
                    71:dc:33:7f:3e:52:bf:ef:1a:6e:68:1d:a1:55:62:
                    4e:98:6e:51:e0:27:1b:54:1d:6e:8f:b2:d7:3f:76:
                    66:5d:42:47:fa:ea:e4:05:5a:a3:ca:66:5b:c8:90:
                    4c:e9:bc:0e:a0:27:e0:1b:b5:29:8b:fc:d9:f7:2a:
                    e2:23:00:f1:51:a3:83:47:d1:ab:7b:86:24:df:1c:
                    da:75:c4:69:86:7f:02:5f:f4:8e:01:f2:a1:0f:23:
                    60:d9:d1:a4:4b:51:7a:e7:a9:46:09:20:be:e0:5f:
                    5e:5d:cd:3c:0f:e2:c8:cd:8e:32:dc:2d:92:6b:b2:
                    05:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AC:C2:99:85:0B:A2:EC:92:62:0D:E7:49:F6:0B:86:AE:CC:89:CB
            X509v3 Authority Key Identifier:
                keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:6b:17:7b:a1:8c:ab:23:bf:e6:70:1e:16:58:8f:d2:ab:5b:
         00:b8:09:15:69:4e:24:f2:4a:ee:8e:21:67:21:8c:0b:43:81:
         66:87:8b:3c:1c:12:7f:40:94:34:e8:1a:10:f6:40:00:e3:8f:
         06:9b:28:80:ea:6c:90:74:9f:df:d7:08:96:3e:11:23:71:71:
         2d:f2:7c:ba:c0:6a:b7:35:e0:49:30:2f:26:ce:f9:94:f9:de:
         94:49:21:e9:5c:70:70:99:c8:c9:08:72:29:9b:72:fe:91:18:
         7c:d2:df:10:ee:99:1c:a9:33:cd:46:af:03:19:f1:78:9a:11:
         3b:bc:47:5e:2e:df:13:7a:de:b9:f7:95:9c:82:76:a7:70:cf:
         32:7e:d8:ed:fc:66:a7:8f:eb:8d:16:32:77:62:f7:22:c6:f3:
         4d:47:4c:26:74:78:38:b8:93:1d:1f:cc:f7:0a:dd:aa:9e:4d:
         35:81:ea:19:a7:0b:b3:1d:71:9b:7a:8a:d4:3a:04:72:11:60:
         77:b6:39:0f:a1:c9:9c:77:4e:0f:71:a4:75:b1:e6:00:2f:e0:
         35:80:c3:67:ee:f8:e6:31:7f:2d:68:60:f0:11:39:da:5a:2d:
         89:5c:08:0d:db:b4:d5:ad:48:1e:db:c9:42:b5:0a:89:b1:e1:
         ab:25:f3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:56:38 2026 by rpki-client