$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft File: 816C81988ECBEB701F4EA593D34F28951B10ABF2.mft (raw, json) Hash identifier: qfUuaxuGy6cC4+9Z4vW6wSSIl01tjoSCJw8F83kF1kY= Subject key identifier: A1:35:32:9B:65:D0:92:F4:40:2D:B7:6F:6F:DF:D3:5C:92:63:06:F9 Authority key identifier: 81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2 Certificate issuer: /CN=816C81988ECBEB701F4EA593D34F28951B10ABF2 Certificate serial: 1115427D8616AE1192520826B56B8F999802CA17 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft Manifest number: 39 Signing time: Sun 01 Mar 2026 23:33:16 +0000 Manifest this update: Sun 01 Mar 2026 23:28:16 +0000 Manifest next update: Tue 03 Mar 2026 02:35:16 +0000 Files and hashes: 1: 3130332e3130332e33362e302f32322d3232203d3e20313331353431.roa (hash: xcZBgro6gTw3A6GIg7z78vFpQLq7KHZet7uMhtkrnY0=) 2: 816C81988ECBEB701F4EA593D34F28951B10ABF2.crl (hash: X7ueZ039B5aqoPIWkEsVTHRrXSojQ4QFp7GsyrGI9EY=) 3: 3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa (hash: 6URKjFRR2qwyPlFJN5f0XQRtR84QyHyhmK66ypB33K8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 02:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:15:42:7d:86:16:ae:11:92:52:08:26:b5:6b:8f:99:98:02:ca:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=816C81988ECBEB701F4EA593D34F28951B10ABF2 Validity Not Before: Mar 1 23:28:16 2026 GMT Not After : Mar 3 02:35:16 2026 GMT Subject: CN=A135329B65D092F4402DB76F6FDFD35C926306F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:51:46:cf:4c:70:3a:47:f9:f7:7d:64:f8: b5:71:2d:be:b7:95:d8:a4:c4:e9:71:82:be:ec:0b: f0:20:ed:53:b1:fe:b9:ee:e1:86:4a:fe:40:65:a2: 8f:1e:b3:d7:e0:f9:64:e0:3d:16:32:47:ef:8e:d6: 87:fc:f5:0a:0b:ed:07:b6:50:b8:32:e6:ae:fa:8c: 54:30:26:bf:d9:78:01:f1:d6:e4:81:c1:73:a4:d9: 93:b2:e5:80:cc:82:6a:43:1e:46:1f:1b:89:3e:10: 0e:89:2b:1c:b1:a6:8d:08:a2:a1:94:cb:56:dd:3e: ee:aa:fe:20:22:29:7e:01:88:4a:44:9a:af:29:b2: b1:da:71:ed:7e:32:be:8a:7f:14:44:1f:98:35:d9: 29:de:bb:1e:94:78:ac:d7:51:33:49:3a:1e:97:97: dd:2b:96:b3:70:18:80:0f:ac:c8:f5:29:02:90:cf: 77:52:ca:a1:1d:af:62:66:8d:71:6e:f4:43:da:a6: 68:91:7b:bc:1a:76:81:bd:54:9e:e7:06:e6:48:45: c6:cb:9a:d4:31:e0:e6:4e:ed:91:77:7c:e4:0d:08: 21:e3:d7:37:22:24:00:34:44:53:05:fe:07:fb:7f: 4c:fd:9d:be:2a:1b:f2:41:ff:b5:a5:21:1d:08:cf: d4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:35:32:9B:65:D0:92:F4:40:2D:B7:6F:6F:DF:D3:5C:92:63:06:F9 X509v3 Authority Key Identifier: keyid:81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:66:f5:fb:e4:f5:07:8b:ef:8d:61:b8:45:84:97:16:b5:4b: 90:bb:03:ed:37:50:27:76:59:7e:c7:fc:22:55:69:95:24:a0: f9:e7:82:2e:ca:f4:24:b3:bf:b1:87:dc:99:d8:d4:db:2a:a3: d2:4b:da:25:2b:d8:15:52:f3:9a:23:ad:61:20:4c:40:41:76: 60:a8:b4:a0:85:8f:ed:1c:44:6d:b6:16:87:62:c6:c2:70:2f: d8:d1:2c:06:90:d6:f2:57:2d:c1:1f:0d:38:9c:eb:a8:fc:8f: 41:72:ff:a9:7e:ba:fc:f9:5c:36:eb:8b:f6:4a:42:00:99:cc: be:45:9a:fc:fd:98:52:dd:f2:02:b4:b4:32:24:20:47:cd:ae: f7:d0:d1:0b:dc:c2:56:83:43:2f:8c:14:5e:ee:ea:a0:5b:c8: d8:55:d9:08:44:9f:33:ea:39:a5:82:1e:ce:96:76:0c:e6:fa: 27:95:46:6a:fc:81:69:ea:3e:b5:1c:fd:22:98:8d:b9:65:ab: a0:1e:24:64:ab:da:d4:e0:f5:33:55:ae:ff:6f:89:8b:1b:0d: 9a:2a:33:9e:40:f4:2b:73:4c:6b:8f:92:4a:0f:cd:16:5c:21: db:bf:cc:a3:ab:e2:3c:2e:31:cf:8b:dc:09:fc:0b:36:ae:e9: 0c:d7:b5:01 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUERVCfYYWrhGSUggmtWuPmZgCyhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE2QzgxOTg4RUNCRUI3MDFGNEVBNTkzRDM0RjI4OTUx QjEwQUJGMjAeFw0yNjAzMDEyMzI4MTZaFw0yNjAzMDMwMjM1MTZaMDMxMTAvBgNV BAMTKEExMzUzMjlCNjVEMDkyRjQ0MDJEQjc2RjZGREZEMzVDOTI2MzA2RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5r1FGz0xwOkf5931k+LVxLb63 ldikxOlxgr7sC/Ag7VOx/rnu4YZK/kBloo8es9fg+WTgPRYyR++O1of89QoL7Qe2 ULgy5q76jFQwJr/ZeAHx1uSBwXOk2ZOy5YDMgmpDHkYfG4k+EA6JKxyxpo0IoqGU y1bdPu6q/iAiKX4BiEpEmq8psrHace1+Mr6KfxREH5g12Sneux6UeKzXUTNJOh6X l90rlrNwGIAPrMj1KQKQz3dSyqEdr2JmjXFu9EPapmiRe7wadoG9VJ7nBuZIRcbL mtQx4OZO7ZF3fOQNCCHj1zciJAA0RFMF/gf7f0z9nb4qG/JB/7WlIR0Iz9QLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoTUym2XQkvRALbdvb9/TXJJjBvkwHwYDVR0j BBgwFoAUgWyBmI7L63AfTqWT008olRsQq/IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTk0MzQyNy8wLzgxNkM4MTk4OEVDQkVCNzAxRjRFQTU5M0QzNEYy ODk1MUIxMEFCRjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODE2QzgxOTg4RUNCRUI3MDFGNEVBNTkzRDM0RjI4OTUxQjEwQUJGMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzE5NDM0MjcvMC84MTZDODE5ODhFQ0JF QjcwMUY0RUE1OTNEMzRGMjg5NTFCMTBBQkYyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmb1++T1B4vv jWG4RYSXFrVLkLsD7TdQJ3ZZfsf8IlVplSSg+eeCLsr0JLO/sYfcmdjU2yqj0kva JSvYFVLzmiOtYSBMQEF2YKi0oIWP7RxEbbYWh2LGwnAv2NEsBpDW8lctwR8NOJzr qPyPQXL/qX66/PlcNuuL9kpCAJnMvkWa/P2YUt3yArS0MiQgR82u99DRC9zCVoND L4wUXu7qoFvI2FXZCESfM+o5pYIezpZ2DOb6J5VGavyBaeo+tRz9IpiNuWWroB4k ZKva1OD1M1Wu/2+JixsNmioznkD0K3NMa4+SSg/NFlwh27/Mo6viPC4xz4vcCfwL Nq7pDNe1AQ== -----END CERTIFICATE-----Generated at Mon Mar 2 18:46:16 2026 by rpki-client