$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft File: 816C81988ECBEB701F4EA593D34F28951B10ABF2.mft (raw, json) Hash identifier: wjMRIix6e5Gs2z4udYIq1tDBM5t4FkQuhjPohS8yDgc= Subject key identifier: 83:3F:37:6E:B3:D0:0B:52:3A:D6:66:C9:89:E7:8A:48:0D:16:26:11 Authority key identifier: 81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2 Certificate issuer: /CN=816C81988ECBEB701F4EA593D34F28951B10ABF2 Certificate serial: 21CA847FBA3E7423E00F0941E2F8D71F8F2B8D78 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 04:39:39 +0000 Manifest this update: Fri 17 Apr 2026 04:34:39 +0000 Manifest next update: Sat 18 Apr 2026 07:14:39 +0000 Files and hashes: 1: 3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa (hash: 6URKjFRR2qwyPlFJN5f0XQRtR84QyHyhmK66ypB33K8=) 2: 3130332e3130332e33362e302f32322d3232203d3e20313331353431.roa (hash: xcZBgro6gTw3A6GIg7z78vFpQLq7KHZet7uMhtkrnY0=) 3: 816C81988ECBEB701F4EA593D34F28951B10ABF2.crl (hash: lhR67iVWcfFVqQMlW5asAL8W0tT9neYdkYlC4GUTDOo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 07:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ca:84:7f:ba:3e:74:23:e0:0f:09:41:e2:f8:d7:1f:8f:2b:8d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=816C81988ECBEB701F4EA593D34F28951B10ABF2 Validity Not Before: Apr 17 04:34:39 2026 GMT Not After : Apr 18 07:14:39 2026 GMT Subject: CN=833F376EB3D00B523AD666C989E78A480D162611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ba:06:d2:70:8d:3a:a8:69:d5:fd:0f:cc:97: db:15:86:c3:16:85:19:1f:97:77:0c:87:0b:8c:f3: bf:1f:15:c1:b0:38:ba:2b:60:99:93:81:00:a0:9f: fa:be:40:47:8f:90:93:43:c2:1b:b7:95:90:22:79: 0f:41:fc:07:3b:27:8b:cc:e8:8c:23:bc:e3:65:1c: c6:77:87:d3:b4:69:70:f5:12:af:40:30:d8:b4:bb: ee:2e:dc:ac:cf:bd:d2:61:7c:dd:12:bb:97:de:83: 8b:59:21:52:a0:3a:fb:bd:cb:4d:7c:a3:98:1a:50: d5:04:11:b1:de:d8:05:90:22:62:18:3a:9f:95:ee: f4:b8:5f:11:fa:a8:6d:26:d3:d1:fa:42:f4:82:1f: 51:9a:f4:2b:69:09:88:9a:82:27:63:55:f5:d4:dc: a0:56:e6:63:7b:9c:6b:a8:9a:1e:d7:7d:7e:02:46: fd:7e:a7:35:0a:e3:bd:16:77:79:05:f4:1d:4a:42: 2b:f4:44:82:15:d8:ed:71:58:dc:13:f6:7f:47:ca: 57:38:80:93:a6:c0:bc:b7:4a:c9:48:43:a6:de:f9: 0b:9a:28:8c:4c:14:33:4e:66:95:35:fc:8c:40:39: 36:43:dc:56:aa:5c:3b:91:5e:92:24:b5:e2:62:63: dd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3F:37:6E:B3:D0:0B:52:3A:D6:66:C9:89:E7:8A:48:0D:16:26:11 X509v3 Authority Key Identifier: keyid:81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:cb:a1:15:56:18:ab:cd:37:32:37:ac:8f:c4:9a:84:a5:ca: 92:cd:ee:e8:1e:e4:0d:cf:54:e8:65:a4:cd:cd:cb:93:5a:79: c7:b1:be:ec:0e:3a:2f:01:c3:2b:6d:f5:49:47:b1:7d:ff:35: 17:b5:60:48:e6:4a:c2:98:e2:ce:25:3e:b8:2a:90:57:50:f8: 4f:dc:03:2f:65:90:99:70:3a:5e:d7:1f:4d:50:2d:0c:0d:50: 7d:02:99:32:27:b9:c8:5a:53:51:6b:51:f2:5e:1d:0c:fb:c1: 45:d3:b8:ae:ac:94:24:e0:ed:d0:a0:f1:ae:fc:dd:e1:5f:46: 56:81:43:e1:81:c8:b2:d0:44:61:45:31:6c:13:7b:1a:f4:36: 1f:f2:18:e3:a9:d0:92:41:bf:aa:db:4a:75:85:bd:cd:27:0b: 44:d7:b1:4d:ab:89:7d:a1:cf:98:35:d6:b3:f5:a3:7d:9d:d1: 9c:26:dd:d7:b6:c6:53:04:2f:22:ee:19:ec:6f:cd:f3:07:5c: 02:e8:25:a9:96:09:68:46:44:b3:c8:2a:ad:5d:cf:bd:e3:79: 9b:a3:98:c7:36:94:27:d3:77:41:93:35:2f:a0:c6:b7:0f:9b: 73:be:9d:66:1c:48:31:5d:d0:cd:0b:3e:74:1f:83:6c:2e:13: 1c:50:1d:65 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIcqEf7o+dCPgDwlB4vjXH48rjXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE2QzgxOTg4RUNCRUI3MDFGNEVBNTkzRDM0RjI4OTUx QjEwQUJGMjAeFw0yNjA0MTcwNDM0MzlaFw0yNjA0MTgwNzE0MzlaMDMxMTAvBgNV BAMTKDgzM0YzNzZFQjNEMDBCNTIzQUQ2NjZDOTg5RTc4QTQ4MEQxNjI2MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ugbScI06qGnV/Q/Ml9sVhsMW hRkfl3cMhwuM878fFcGwOLorYJmTgQCgn/q+QEePkJNDwhu3lZAieQ9B/Ac7J4vM 6IwjvONlHMZ3h9O0aXD1Eq9AMNi0u+4u3KzPvdJhfN0Su5feg4tZIVKgOvu9y018 o5gaUNUEEbHe2AWQImIYOp+V7vS4XxH6qG0m09H6QvSCH1Ga9CtpCYiagidjVfXU 3KBW5mN7nGuomh7XfX4CRv1+pzUK470Wd3kF9B1KQiv0RIIV2O1xWNwT9n9Hylc4 gJOmwLy3SslIQ6be+QuaKIxMFDNOZpU1/IxAOTZD3FaqXDuRXpIkteJiY91nAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgz83brPQC1I61mbJieeKSA0WJhEwHwYDVR0j BBgwFoAUgWyBmI7L63AfTqWT008olRsQq/IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTk0MzQyNy8wLzgxNkM4MTk4OEVDQkVCNzAxRjRFQTU5M0QzNEYy ODk1MUIxMEFCRjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODE2QzgxOTg4RUNCRUI3MDFGNEVBNTkzRDM0RjI4OTUxQjEwQUJGMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzE5NDM0MjcvMC84MTZDODE5ODhFQ0JF QjcwMUY0RUE1OTNEMzRGMjg5NTFCMTBBQkYyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMuhFVYYq803 Mjesj8SahKXKks3u6B7kDc9U6GWkzc3Lk1p5x7G+7A46LwHDK231SUexff81F7Vg SOZKwpjiziU+uCqQV1D4T9wDL2WQmXA6XtcfTVAtDA1QfQKZMie5yFpTUWtR8l4d DPvBRdO4rqyUJODt0KDxrvzd4V9GVoFD4YHIstBEYUUxbBN7GvQ2H/IY46nQkkG/ qttKdYW9zScLRNexTauJfaHPmDXWs/WjfZ3RnCbd17bGUwQvIu4Z7G/N8wdcAugl qZYJaEZEs8gqrV3PveN5m6OYxzaUJ9N3QZM1L6DGtw+bc76dZhxIMV3QzQs+dB+D bC4THFAdZQ== -----END CERTIFICATE-----Generated at Sat Apr 18 01:23:45 2026 by rpki-client