$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft File: 816C81988ECBEB701F4EA593D34F28951B10ABF2.mft (raw, json) Hash identifier: UYobqxZLKU5jg+R+voWr/D/86nQaC5ZvrBmPnzE5DyQ= Subject key identifier: FF:D8:2D:74:3A:5F:EA:A7:E4:B8:5A:12:BB:42:8C:5B:5D:FE:F3:0A Authority key identifier: 81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2 Certificate issuer: /CN=816C81988ECBEB701F4EA593D34F28951B10ABF2 Certificate serial: 3B2F6DE642D17D0F936C7599D0E707E369FFED99 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft Manifest number: FF Signing time: Wed 29 Jul 2026 09:03:57 +0000 Manifest this update: Wed 29 Jul 2026 08:58:57 +0000 Manifest next update: Thu 30 Jul 2026 09:40:57 +0000 Files and hashes: 1: 3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa (hash: 6URKjFRR2qwyPlFJN5f0XQRtR84QyHyhmK66ypB33K8=) 2: 3130332e3130332e33362e302f32322d3232203d3e20313331353431.roa (hash: xcZBgro6gTw3A6GIg7z78vFpQLq7KHZet7uMhtkrnY0=) 3: 816C81988ECBEB701F4EA593D34F28951B10ABF2.crl (hash: chgQrL6mQXxyFHzPOZEYE/ckZFwrLEyzCulfzQo2bMk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 09:40:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:2f:6d:e6:42:d1:7d:0f:93:6c:75:99:d0:e7:07:e3:69:ff:ed:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=816C81988ECBEB701F4EA593D34F28951B10ABF2 Validity Not Before: Jul 29 08:58:57 2026 GMT Not After : Jul 30 09:40:57 2026 GMT Subject: CN=FFD82D743A5FEAA7E4B85A12BB428C5B5DFEF30A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:06:98:d1:50:2e:df:46:ad:b0:a5:14:d2:b3: d7:4f:07:86:da:3e:64:d1:11:68:96:05:99:10:57: ff:3b:5e:fc:75:02:e6:a6:d3:94:dd:ed:d5:a2:a8: 3b:1d:a5:66:8b:5d:16:3a:8f:11:a6:b0:44:17:58: 92:17:eb:17:f1:4f:ea:13:a6:a6:54:70:48:bf:81: 5d:d8:78:ab:68:06:8d:48:86:ba:48:ae:8a:89:6e: 5b:56:da:f6:bf:72:14:02:43:5f:c2:67:a5:10:a2: 8f:64:1f:95:0d:d1:70:d5:f7:aa:d9:7e:2d:c4:26: fa:2c:55:d0:94:66:b9:9a:c2:fe:48:2f:b4:38:93: 58:9a:bb:c4:59:1b:43:86:6b:22:ac:be:94:b7:96: 01:38:d9:e0:5a:ff:27:1e:62:8a:49:7d:13:a1:ef: 5a:94:af:be:0c:97:87:13:b5:14:3c:0c:24:79:ea: 64:0c:ff:ad:69:dc:d4:0e:af:9c:5f:83:53:90:58: 3c:b5:7c:e2:73:e3:88:cd:40:fd:f4:90:0c:20:3f: 83:8f:c8:99:37:7f:1a:1a:66:f6:54:6c:06:1d:8b: d7:ad:ca:d9:17:a9:06:61:fd:35:d1:d5:b2:ca:51: 77:b4:77:ef:c9:8e:80:4a:1e:b4:74:18:68:fe:f4: 59:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D8:2D:74:3A:5F:EA:A7:E4:B8:5A:12:BB:42:8C:5B:5D:FE:F3:0A X509v3 Authority Key Identifier: keyid:81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:75:24:fd:24:3a:f6:84:14:53:e0:2f:38:74:4a:36:8a:d0: 5a:9f:41:bf:0d:80:6f:dd:31:c2:eb:fe:41:f8:24:81:e1:44: 0f:9a:c8:11:32:8a:80:92:39:57:df:77:e8:15:15:bf:03:35: dc:5f:f4:6c:ca:ac:9f:ed:ce:63:f2:d3:6a:56:ac:68:66:d3: 7b:81:35:63:20:4e:64:6c:c2:50:7b:fa:db:fa:b5:70:36:d8: 61:17:47:25:02:42:9b:b2:27:fb:9a:e9:92:07:0e:36:05:57: c5:d4:ac:eb:f5:1f:75:0a:d3:2f:61:5a:64:15:81:91:9c:68: 98:17:68:1a:00:de:ab:7c:f3:f4:c5:ca:c7:b6:ba:6f:d0:7d: 0f:4d:a6:d6:97:83:c8:2e:4c:01:98:55:1b:29:76:49:7c:b8: 44:23:6c:0a:07:0c:eb:9b:58:c8:6b:03:35:6f:53:d2:2c:24: 56:4d:d6:c2:78:8d:c8:8e:48:22:6f:42:b5:fd:e0:4f:0a:72: 97:42:3e:7e:3a:f4:0b:a7:4b:b4:91:36:ac:63:8d:30:54:f5: 8c:f7:f1:b8:a8:29:58:28:84:35:ea:b2:1b:db:33:2e:3e:af: a7:80:95:ae:69:21:f5:ec:cd:ca:f4:a9:d4:5e:41:de:62:4a: 91:1e:6e:06 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOy9t5kLRfQ+TbHWZ0OcH42n/7ZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE2QzgxOTg4RUNCRUI3MDFGNEVBNTkzRDM0RjI4OTUx QjEwQUJGMjAeFw0yNjA3MjkwODU4NTdaFw0yNjA3MzAwOTQwNTdaMDMxMTAvBgNV BAMTKEZGRDgyRDc0M0E1RkVBQTdFNEI4NUExMkJCNDI4QzVCNURGRUYzMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBBpjRUC7fRq2wpRTSs9dPB4ba PmTREWiWBZkQV/87Xvx1Auam05Td7dWiqDsdpWaLXRY6jxGmsEQXWJIX6xfxT+oT pqZUcEi/gV3YeKtoBo1IhrpIroqJbltW2va/chQCQ1/CZ6UQoo9kH5UN0XDV96rZ fi3EJvosVdCUZrmawv5IL7Q4k1iau8RZG0OGayKsvpS3lgE42eBa/yceYopJfROh 71qUr74Ml4cTtRQ8DCR56mQM/61p3NQOr5xfg1OQWDy1fOJz44jNQP30kAwgP4OP yJk3fxoaZvZUbAYdi9etytkXqQZh/TXR1bLKUXe0d+/JjoBKHrR0GGj+9FkhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/9gtdDpf6qfkuFoSu0KMW13+8wowHwYDVR0j BBgwFoAUgWyBmI7L63AfTqWT008olRsQq/IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTk0MzQyNy8wLzgxNkM4MTk4OEVDQkVCNzAxRjRFQTU5M0QzNEYy ODk1MUIxMEFCRjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODE2QzgxOTg4RUNCRUI3MDFGNEVBNTkzRDM0RjI4OTUxQjEwQUJGMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzE5NDM0MjcvMC84MTZDODE5ODhFQ0JF QjcwMUY0RUE1OTNEMzRGMjg5NTFCMTBBQkYyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAynUk/SQ69oQU U+AvOHRKNorQWp9Bvw2Ab90xwuv+QfgkgeFED5rIETKKgJI5V9936BUVvwM13F/0 bMqsn+3OY/LTalasaGbTe4E1YyBOZGzCUHv62/q1cDbYYRdHJQJCm7In+5rpkgcO NgVXxdSs6/UfdQrTL2FaZBWBkZxomBdoGgDeq3zz9MXKx7a6b9B9D02m1peDyC5M AZhVGyl2SXy4RCNsCgcM65tYyGsDNW9T0iwkVk3WwniNyI5IIm9Ctf3gTwpyl0I+ fjr0C6dLtJE2rGONMFT1jPfxuKgpWCiENeqyG9szLj6vp4CVrmkh9ezNyvSp1F5B 3mJKkR5uBg== -----END CERTIFICATE-----Generated at Wed Jul 29 23:02:39 2026 by rpki-client