
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
File: 16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft (raw, json)
Hash identifier: 6Vs22qhPJbuEsRKtBTuV9bRfRj+MevVScnmjvb/nv7Y=
Subject key identifier: E6:B7:45:D6:DA:49:E9:2C:13:3F:DD:75:5F:77:09:E4:54:3B:10:FE
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial: 3C26A78068032C3C2E0DE42BA5054D7AA2F5D1D3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
Manifest number: 8F
Signing time: Tue 28 Jul 2026 19:22:37 +0000
Manifest this update: Tue 28 Jul 2026 19:17:37 +0000
Manifest next update: Wed 29 Jul 2026 19:47:37 +0000
Files and hashes: 1: 16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl (hash: ky6zXHh1dqsB9jLLMUaOL21eZ7EnmC7XmMUxnjw/APQ=)
2: AS0.roa (hash: Oer0Yd953gEJm6UmIY9whhn9mB9MvyZJkfQPYXw4mx4=)
3: AS63648.roa (hash: 4HYSvuQVQQBqIHTS6osBvaTfMDnfx/q3IKZHUPbSGzo=)
4: AS23724.roa (hash: CQwubKmfLykOjSxoDWhA0d5uBDLTWUR9Ssr5fYI/K9k=)
5: AS136958.roa (hash: 5NVMdMzPvY4Sfxb4/r3IMRajbOXIUyEqGrPk010/sPY=)
6: AS63646.roa (hash: Ez4I298YPRwCv7r5zs5RQuk6RtwDSDsw4e9i9AxGQ58=)
7: AS58466.roa (hash: r7bGmLBfvhXYayeMtM0xTPcAHPRkmPDxrEy0xZn8OrU=)
8: AS56040.roa (hash: wyLNjEr28XWMaCIeJV3ttVZdaqqq9B+3UZMGGkeItow=)
9: AS13335.roa (hash: 9Hng9d3Qz7Lydzkg5+hOCdUoBzRae66YdJRsgOh6mY0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:11:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:26:a7:80:68:03:2c:3c:2e:0d:e4:2b:a5:05:4d:7a:a2:f5:d1:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Validity
Not Before: Jul 28 19:17:37 2026 GMT
Not After : Jul 29 19:47:37 2026 GMT
Subject: CN=E6B745D6DA49E92C133FDD755F7709E4543B10FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5f:09:f9:3a:de:8d:72:08:e9:c1:29:7a:eb:
13:f7:2c:96:3c:b2:d1:2c:87:8b:7e:58:e9:41:13:
da:91:3c:ed:05:d5:29:c6:f6:79:97:ce:d6:17:75:
95:bd:81:5d:f2:b7:8d:d4:04:3e:5b:d4:72:3d:88:
c4:23:4f:f1:c6:73:f4:19:0c:46:b1:2a:f1:66:a0:
10:a4:1e:23:61:d5:db:dc:66:a3:4c:7f:9e:bc:c5:
12:91:9a:55:4f:0e:26:33:1d:5a:21:d9:c9:4a:b5:
98:3d:7d:f5:e5:50:ed:f1:12:33:3d:b5:17:57:3a:
48:af:4f:62:bc:8a:8a:a3:60:54:3a:0f:49:29:76:
db:bf:e6:f3:d3:2c:39:51:1b:00:4c:d2:01:d2:36:
d4:eb:bb:9f:c6:9f:3f:91:4b:77:70:1c:e9:f2:07:
0e:69:e8:ff:44:86:21:06:31:7f:8c:7d:f3:89:f2:
f3:f6:f5:06:0e:4f:e9:5a:60:18:1f:bf:54:68:bf:
2e:50:87:25:8f:e0:d9:b2:c7:47:50:9f:6b:56:4f:
ba:39:e7:0e:0f:89:5b:12:43:28:4d:1c:9e:bd:04:
40:43:2b:84:66:28:3d:12:24:20:38:7c:75:de:94:
7f:a4:78:c3:3d:79:ea:62:7c:08:bf:a6:c6:6a:87:
da:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B7:45:D6:DA:49:E9:2C:13:3F:DD:75:5F:77:09:E4:54:3B:10:FE
X509v3 Authority Key Identifier:
keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:84:96:6f:b7:a5:86:88:c9:ec:4c:36:2b:c3:1f:f6:04:bf:
95:33:59:ed:cb:3a:7a:ec:c3:fd:27:4b:64:60:37:62:c5:91:
f0:a2:a7:61:c7:1f:3e:53:73:ae:79:e7:11:80:a2:68:3a:d6:
8d:c6:2a:9a:3d:0b:62:cd:0a:7c:94:89:23:1d:31:c4:2c:cd:
4e:85:2d:2e:43:b4:3a:14:ec:b6:41:4f:4f:77:ec:51:d9:8a:
bc:1d:ea:69:ba:25:a4:17:87:99:d7:46:31:96:04:ab:da:1f:
31:af:bc:2b:98:4b:ad:58:81:fc:cf:02:53:c7:8d:1a:f7:a0:
ec:76:4c:33:ab:fb:07:77:a1:6b:2d:ab:19:4e:4f:2d:bb:56:
75:af:e2:7e:d9:87:85:cb:cd:9f:67:50:b2:bb:74:1c:d0:8c:
3b:93:66:d8:3f:0f:7f:1c:59:04:ed:9d:9e:d9:e1:3a:5c:c5:
ad:19:63:8a:1c:a9:c1:2b:10:67:c8:90:cd:69:8a:1b:f2:61:
c3:8b:07:5e:2b:fe:a7:02:45:8b:e4:b6:b5:04:e6:61:48:7e:
20:f5:b0:01:1f:55:cc:f6:e1:f4:e1:32:84:1d:37:c2:e6:14:
39:30:c3:87:4c:0a:58:d8:a3:31:d2:af:32:f3:aa:8a:9d:2f:
17:4a:b1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:36:22 2026 by rpki-client