
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
File: 16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft (raw, json)
Hash identifier: Ih2QZaEbr+sHcdbuAYbjcE8Oom2dCOdX2AGSUvLmrs0=
Subject key identifier: 41:59:22:97:16:A1:86:D7:0E:A5:5B:1A:7B:56:46:C9:F1:D7:34:91
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial: 055FC51403D9F5CE87904761EC1BB9B37E5096F1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
Manifest number: 52
Signing time: Sat 13 Jun 2026 07:21:27 +0000
Manifest this update: Sat 13 Jun 2026 07:16:27 +0000
Manifest next update: Sun 14 Jun 2026 09:00:27 +0000
Files and hashes: 1: AS0.roa (hash: Oer0Yd953gEJm6UmIY9whhn9mB9MvyZJkfQPYXw4mx4=)
2: AS58466.roa (hash: r7bGmLBfvhXYayeMtM0xTPcAHPRkmPDxrEy0xZn8OrU=)
3: AS136958.roa (hash: 5NVMdMzPvY4Sfxb4/r3IMRajbOXIUyEqGrPk010/sPY=)
4: AS23724.roa (hash: CQwubKmfLykOjSxoDWhA0d5uBDLTWUR9Ssr5fYI/K9k=)
5: AS63646.roa (hash: Ez4I298YPRwCv7r5zs5RQuk6RtwDSDsw4e9i9AxGQ58=)
6: 16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl (hash: SzmtumkY1ZTfmBjHXjADwxvKettChnFsrAxiTjjJnEs=)
7: AS56040.roa (hash: wyLNjEr28XWMaCIeJV3ttVZdaqqq9B+3UZMGGkeItow=)
8: AS63648.roa (hash: 4HYSvuQVQQBqIHTS6osBvaTfMDnfx/q3IKZHUPbSGzo=)
9: AS13335.roa (hash: 9Hng9d3Qz7Lydzkg5+hOCdUoBzRae66YdJRsgOh6mY0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:5f:c5:14:03:d9:f5:ce:87:90:47:61:ec:1b:b9:b3:7e:50:96:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Validity
Not Before: Jun 13 07:16:27 2026 GMT
Not After : Jun 14 09:00:27 2026 GMT
Subject: CN=4159229716A186D70EA55B1A7B5646C9F1D73491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b0:83:99:7d:e2:a5:cc:91:6a:29:44:c8:f2:
c8:fe:90:02:a0:e0:da:86:28:72:d8:0c:ff:18:61:
75:74:59:22:01:d7:43:af:2e:bb:84:53:47:19:6a:
5b:7a:86:94:a2:e7:08:fa:f4:de:87:31:96:a1:e1:
e4:c8:6e:0e:41:bc:1d:63:62:a1:b1:67:29:42:61:
44:2c:bf:d6:c6:69:b0:d9:73:27:f9:35:aa:66:37:
a3:56:9e:ae:d3:c8:81:42:97:9b:39:cb:27:d8:03:
ec:34:f9:43:37:08:c1:98:41:b6:e1:2e:66:0d:5d:
bc:33:23:fa:59:78:3a:12:3b:fc:a2:b7:01:ff:9c:
51:b7:0d:a0:9a:4a:b3:05:b5:74:8f:51:5f:5d:26:
a2:58:d6:12:f5:47:aa:9c:a0:82:bc:e2:86:b3:74:
c5:5c:31:5d:a6:c2:70:39:6e:b8:c3:47:5a:28:a3:
6e:c7:5f:b2:6f:e8:a7:e0:e6:1b:3b:cc:ee:db:4f:
2f:48:24:96:6e:4c:2a:29:9f:71:68:5e:16:8c:65:
82:3b:37:82:b4:8d:bf:de:39:01:23:67:bd:ac:eb:
19:fa:cd:66:68:e3:1c:4e:d0:fb:88:cf:dc:ae:ea:
2b:c7:d6:f1:01:ef:d0:f3:ab:3c:a5:df:cc:a9:99:
6d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:59:22:97:16:A1:86:D7:0E:A5:5B:1A:7B:56:46:C9:F1:D7:34:91
X509v3 Authority Key Identifier:
keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a8:91:5d:d8:8c:29:2a:c4:dc:db:86:2d:6f:c5:87:d5:e7:
76:2e:b3:1d:c0:92:15:c7:98:56:e1:19:41:eb:0e:dc:ad:4f:
69:60:18:be:f1:2a:49:27:1d:bf:e7:fa:ef:86:14:bd:df:90:
87:62:70:c8:ac:8d:ad:56:06:93:d7:1e:47:51:d8:7f:1a:8d:
88:37:d2:7d:be:eb:85:c7:30:20:38:53:f0:61:44:3b:23:46:
d1:36:26:67:39:24:a8:1b:f1:a2:1f:c2:43:12:0d:57:d3:f4:
b2:50:5e:3b:75:a7:6e:ee:87:17:e9:65:6e:e8:3c:cd:1d:62:
3f:9d:d8:5a:84:fc:fc:8f:1c:d0:37:c4:d1:63:c4:6d:d1:38:
70:ba:34:54:25:a4:63:4a:64:e5:f7:71:ca:f1:00:4e:5d:0b:
66:b0:d5:5a:8c:ca:5f:4c:e8:25:fd:bf:37:fc:f3:a1:49:69:
e1:eb:40:24:6b:6b:20:cd:b6:81:4d:8f:d2:f3:08:03:0e:52:
c1:45:aa:5a:3a:30:c5:b0:ca:de:ea:78:8a:7f:0d:49:7b:2f:
43:57:72:5f:1d:6c:a5:fb:50:49:de:6e:b3:64:2e:6d:30:10:
60:00:d8:60:57:df:48:3e:1c:8e:cd:e0:2b:3f:f9:b9:89:9e:
c7:29:b7:7a
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUBV/FFAPZ9c6HkEdh7Bu5s35QlvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB
N0QxNEI0MDAeFw0yNjA2MTMwNzE2MjdaFw0yNjA2MTQwOTAwMjdaMDMxMTAvBgNV
BAMTKDQxNTkyMjk3MTZBMTg2RDcwRUE1NUIxQTdCNTY0NkM5RjFENzM0OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfsIOZfeKlzJFqKUTI8sj+kAKg
4NqGKHLYDP8YYXV0WSIB10OvLruEU0cZalt6hpSi5wj69N6HMZah4eTIbg5BvB1j
YqGxZylCYUQsv9bGabDZcyf5NapmN6NWnq7TyIFCl5s5yyfYA+w0+UM3CMGYQbbh
LmYNXbwzI/pZeDoSO/yitwH/nFG3DaCaSrMFtXSPUV9dJqJY1hL1R6qcoIK84oaz
dMVcMV2mwnA5brjDR1ooo27HX7Jv6Kfg5hs7zO7bTy9IJJZuTCopn3FoXhaMZYI7
N4K0jb/eOQEjZ72s6xn6zWZo4xxO0PuIz9yu6ivH1vEB79Dzqzyl38ypmW1xAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUQVkilxahhtcOpVsae1ZGyfHXNJEwHwYDVR0j
BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC
RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTk2MDI2MzYzNjcyMDAyNTkvMC8xNjU3Njc1NkYwQjAz
QkY3NUVDRDZCQzQ0OUEzQkVGN0E3RDE0QjQwLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqiRXdiMKSrE
3NuGLW/Fh9Xndi6zHcCSFceYVuEZQesO3K1PaWAYvvEqSScdv+f674YUvd+Qh2Jw
yKyNrVYGk9ceR1HYfxqNiDfSfb7rhccwIDhT8GFEOyNG0TYmZzkkqBvxoh/CQxIN
V9P0slBeO3Wnbu6HF+llbug8zR1iP53YWoT8/I8c0DfE0WPEbdE4cLo0VCWkY0pk
5fdxyvEATl0LZrDVWozKX0zoJf2/N/zzoUlp4etAJGtrIM22gU2P0vMIAw5SwUWq
WjowxbDK3up4in8NSXsvQ1dyXx1spftQSd5us2QubTAQYADYYFffSD4cjs3gKz/5
uYmexym3eg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:06:19 2026 by rpki-client