$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft File: 16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft (raw, json) Hash identifier: 2L7hBHeULQEmH/Mq/j5Ny0tJSHofYUiRMMNPKCJ/Ohc= Subject key identifier: 2B:47:B8:60:7C:C1:F3:A1:22:C9:68:60:FE:DB:EA:BE:F9:F5:8F:7D Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Certificate serial: 49D7C0EF52A62298BFE54E99A813776554944DED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft Manifest number: 58 Signing time: Thu 26 Mar 2026 08:13:28 +0000 Manifest this update: Thu 26 Mar 2026 08:08:28 +0000 Manifest next update: Fri 27 Mar 2026 09:00:28 +0000 Files and hashes: 1: 16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl (hash: BCb/x3CNQOym/a84K8mbxn4DMr2rVVrQU9og7dTd0g8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 09:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d7:c0:ef:52:a6:22:98:bf:e5:4e:99:a8:13:77:65:54:94:4d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC Validity Not Before: Mar 26 08:08:28 2026 GMT Not After : Mar 27 09:00:28 2026 GMT Subject: CN=2B47B8607CC1F3A122C96860FEDBEABEF9F58F7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:37:12:9b:ec:e6:f1:8f:78:a2:58:89:e6:ad: fb:75:ce:c2:c6:09:ed:cd:03:e3:7a:48:19:ac:82: d9:1b:ef:d8:8a:9b:79:b2:25:dd:f2:6d:c7:a2:70: d3:c5:2a:cf:dd:a5:e6:89:0c:c8:9e:25:1d:6c:7c: fd:85:53:50:a3:77:a2:f0:ce:94:e8:51:55:ca:e0: e9:13:d7:3a:24:b5:04:9c:44:b5:9f:74:62:fd:39: 7c:62:11:95:42:07:d7:be:c9:df:e7:39:76:f7:5e: 9e:c4:ab:3a:f2:ca:47:59:8b:a1:d0:0c:b4:90:1a: 7c:e1:3f:62:76:6e:12:0e:d3:c8:ca:fd:8f:3d:29: 0e:4a:cd:e6:0a:26:72:ca:ba:15:2a:7e:45:98:65: b7:37:cb:15:c4:2c:77:c1:80:e5:80:0e:5f:36:86: 2d:43:17:8e:46:f8:0e:be:ee:cb:b2:8c:d3:01:80: 5a:c4:a6:93:71:06:d1:39:c6:ea:6a:19:c9:eb:53: f2:89:88:e6:27:dd:cc:4e:67:e4:e7:24:97:7f:71: 17:a1:e1:5b:85:9a:6f:ba:08:7f:fd:0d:60:8a:6e: ad:aa:27:1b:9d:95:41:f2:29:92:51:2e:bf:52:91: 9d:da:b3:48:0e:e7:a9:1d:41:3e:48:a9:01:58:0c: a5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:47:B8:60:7C:C1:F3:A1:22:C9:68:60:FE:DB:EA:BE:F9:F5:8F:7D X509v3 Authority Key Identifier: keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:e2:36:0f:59:7e:ae:86:7b:bf:6f:03:93:df:53:a8:ac:d0: f9:af:e2:71:3e:91:22:9f:8a:c0:12:bd:f4:f8:6c:03:ae:ed: e5:22:eb:e9:fa:d9:db:40:aa:0d:6c:49:ff:15:8c:d0:c9:d4: 0f:88:87:0b:e3:bd:37:0a:23:2b:20:6a:59:c9:48:95:4b:24: 01:19:e6:d4:b6:5b:bf:13:89:bc:e5:b9:af:0c:85:68:7e:cb: af:c5:9e:21:b2:1e:32:65:88:0c:ff:2c:07:ab:0a:ec:a5:20: 30:fa:8b:10:87:62:77:ad:15:24:45:a3:7c:a0:be:33:b5:7d: 44:3d:5f:6d:97:5d:77:23:c8:3c:e9:72:cf:e2:cf:45:dd:a6: 45:97:cc:05:6b:2e:15:ee:f0:06:ce:6f:fa:db:5a:69:db:6e: a3:86:20:62:0b:68:6d:58:d0:44:ce:48:25:0e:d3:be:0e:7a: dd:15:a5:ba:80:f4:70:e6:c8:57:2f:f1:52:93:84:a1:2e:b5: e3:23:b6:62:be:5f:40:03:15:2c:25:a3:0d:64:20:80:1c:ce: 0d:06:31:84:b6:e9:84:ba:97:10:a8:29:74:4e:5a:b7:dd:05: 39:87:94:5c:f5:d8:6e:c5:ed:5a:de:9a:ec:9f:70:91:6e:7d: 44:47:09:f6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSdfA71KmIpi/5U6ZqBN3ZVSUTe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3 MzdGQjNFQzAeFw0yNjAzMjYwODA4MjhaFw0yNjAzMjcwOTAwMjhaMDMxMTAvBgNV BAMTKDJCNDdCODYwN0NDMUYzQTEyMkM5Njg2MEZFREJFQUJFRjlGNThGN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQNxKb7Obxj3iiWInmrft1zsLG Ce3NA+N6SBmsgtkb79iKm3myJd3ybceicNPFKs/dpeaJDMieJR1sfP2FU1Cjd6Lw zpToUVXK4OkT1zoktQScRLWfdGL9OXxiEZVCB9e+yd/nOXb3Xp7EqzryykdZi6HQ DLSQGnzhP2J2bhIO08jK/Y89KQ5KzeYKJnLKuhUqfkWYZbc3yxXELHfBgOWADl82 hi1DF45G+A6+7suyjNMBgFrEppNxBtE5xupqGcnrU/KJiOYn3cxOZ+TnJJd/cReh 4VuFmm+6CH/9DWCKbq2qJxudlUHyKZJRLr9SkZ3as0gO56kdQT5IqQFYDKXVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUK0e4YHzB86EiyWhg/tvqvvn1j30wHwYDVR0j BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1 NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzYxOTk5NDgyNzE2MTkvMS8xNkI3MkMzNzYxOEJE ODRBRTQxMkRFMjhBQzMyNTREQTczN0ZCM0VDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvOI2D1l+roZ7 v28Dk99TqKzQ+a/icT6RIp+KwBK99PhsA67t5SLr6frZ20CqDWxJ/xWM0MnUD4iH C+O9NwojKyBqWclIlUskARnm1LZbvxOJvOW5rwyFaH7Lr8WeIbIeMmWIDP8sB6sK 7KUgMPqLEIdid60VJEWjfKC+M7V9RD1fbZdddyPIPOlyz+LPRd2mRZfMBWsuFe7w Bs5v+ttaadtuo4YgYgtobVjQRM5IJQ7Tvg563RWluoD0cObIVy/xUpOEoS614yO2 Yr5fQAMVLCWjDWQggBzODQYxhLbphLqXEKgpdE5at90FOYeUXPXYbsXtWt6a7J9w kW59REcJ9g== -----END CERTIFICATE-----Generated at Thu Mar 26 23:43:50 2026 by rpki-client