$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft File: 816C81988ECBEB701F4EA593D34F28951B10ABF2.mft (raw, json) Hash identifier: 71XY+fisM9UVOXGRTH6mFkQfWLGuxWXoInge51hjr14= Subject key identifier: 5C:C3:36:6F:FA:3A:79:5F:07:AD:D7:59:5D:D7:D2:8A:DA:12:03:73 Authority key identifier: 81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2 Certificate issuer: /CN=816C81988ECBEB701F4EA593D34F28951B10ABF2 Certificate serial: 71E4CB5F76BC1141DDF942C120C7E597B4013C93 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft Manifest number: 99 Signing time: Wed 13 May 2026 12:06:04 +0000 Manifest this update: Wed 13 May 2026 12:01:04 +0000 Manifest next update: Thu 14 May 2026 12:14:04 +0000 Files and hashes: 1: 816C81988ECBEB701F4EA593D34F28951B10ABF2.crl (hash: f7qhhUy7IxIDGvsHYT2xKjXKou7peItGrjrT2o9kX/c=) 2: 3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa (hash: 6URKjFRR2qwyPlFJN5f0XQRtR84QyHyhmK66ypB33K8=) 3: 3130332e3130332e33362e302f32322d3232203d3e20313331353431.roa (hash: xcZBgro6gTw3A6GIg7z78vFpQLq7KHZet7uMhtkrnY0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:e4:cb:5f:76:bc:11:41:dd:f9:42:c1:20:c7:e5:97:b4:01:3c:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=816C81988ECBEB701F4EA593D34F28951B10ABF2 Validity Not Before: May 13 12:01:04 2026 GMT Not After : May 14 12:14:04 2026 GMT Subject: CN=5CC3366FFA3A795F07ADD7595DD7D28ADA120373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:46:20:bd:db:7d:40:39:83:8d:9f:99:44:17: b5:c1:95:c1:5a:92:5a:d1:c4:a6:ec:e1:24:24:50: 1e:55:e0:95:b7:d3:a0:df:2d:a0:00:06:f5:9d:c8: 9e:ca:eb:ef:fe:80:5c:69:15:9a:1e:1c:80:e3:05: d3:56:7f:47:95:41:d9:66:9c:ad:d7:a7:1f:2c:fa: 9f:ee:55:2b:c3:92:d8:d1:f2:53:58:67:3f:9f:5d: 80:ed:08:a3:97:ab:0f:c3:0f:ea:51:c1:f7:0b:34: 38:1c:0d:cc:4c:3f:ed:ad:90:4f:d8:48:a8:ce:bb: 86:ec:ac:15:f5:a3:e0:ce:4a:2f:ac:a7:77:9b:c4: f7:07:9b:06:5d:0c:f3:ca:f3:f0:15:81:2d:94:35: 92:b0:37:bb:3e:03:7c:d9:e9:7d:f7:32:0e:bf:76: 52:60:be:37:2c:d3:3c:43:54:bf:e9:7e:fe:02:24: be:3f:25:b0:3a:e9:d2:6a:b0:ad:7e:e9:20:a1:a0: ad:f6:e2:89:ab:1d:54:ae:b7:98:43:66:23:58:ec: dc:63:22:61:47:de:65:f4:e0:40:94:22:d1:0a:ea: 7c:9b:aa:53:a0:70:77:c1:c1:9b:9b:b7:41:41:3e: be:e5:9c:31:d4:3d:28:1f:47:fd:d4:23:44:86:8a: da:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C3:36:6F:FA:3A:79:5F:07:AD:D7:59:5D:D7:D2:8A:DA:12:03:73 X509v3 Authority Key Identifier: keyid:81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:41:2a:f4:50:9c:14:0c:d8:49:51:57:c3:9a:90:97:fa:9f: 6f:64:3d:81:c2:00:4e:69:03:ca:db:b7:13:66:c3:05:19:09: 4c:2d:1e:8b:70:99:ec:5a:b3:be:f4:21:14:8c:a7:1e:4e:14: ba:75:62:56:13:ab:26:77:d0:81:22:9c:c9:3f:05:97:64:2e: 5c:9d:8c:d8:86:d7:82:a2:ca:bc:09:e1:ea:13:44:78:0c:a2: 0e:74:90:bb:8a:71:bd:35:70:3b:47:4c:c3:ff:50:a8:e0:b8: c9:7e:04:8a:ee:d4:e6:64:ce:75:1c:aa:e1:60:1c:d8:c5:5d: 9a:7e:04:b1:db:3f:9f:ac:35:d4:6b:40:8c:a9:00:18:24:9b: f5:b2:2c:6c:26:2d:09:47:8f:a8:77:c2:ef:51:2f:f9:8d:eb: ea:b0:25:82:1f:03:d3:f0:35:c3:19:1c:37:2b:74:34:8b:95: 95:cf:a0:6a:db:44:95:5a:f0:42:81:70:f7:db:37:de:31:c6: 0c:92:65:a6:62:5b:d9:75:23:72:a1:f9:7e:8a:a3:95:2c:f4: 44:42:66:66:d8:c9:36:7a:aa:c2:48:f2:f8:36:7c:fe:27:17: 1a:af:d8:c8:1a:34:02:86:4f:fd:f6:56:e4:6e:31:29:ff:49: 79:f6:19:51 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUceTLX3a8EUHd+ULBIMfll7QBPJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE2QzgxOTg4RUNCRUI3MDFGNEVBNTkzRDM0RjI4OTUx QjEwQUJGMjAeFw0yNjA1MTMxMjAxMDRaFw0yNjA1MTQxMjE0MDRaMDMxMTAvBgNV BAMTKDVDQzMzNjZGRkEzQTc5NUYwN0FERDc1OTVERDdEMjhBREExMjAzNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXRiC9231AOYONn5lEF7XBlcFa klrRxKbs4SQkUB5V4JW306DfLaAABvWdyJ7K6+/+gFxpFZoeHIDjBdNWf0eVQdlm nK3Xpx8s+p/uVSvDktjR8lNYZz+fXYDtCKOXqw/DD+pRwfcLNDgcDcxMP+2tkE/Y SKjOu4bsrBX1o+DOSi+sp3ebxPcHmwZdDPPK8/AVgS2UNZKwN7s+A3zZ6X33Mg6/ dlJgvjcs0zxDVL/pfv4CJL4/JbA66dJqsK1+6SChoK324omrHVSut5hDZiNY7Nxj ImFH3mX04ECUItEK6nybqlOgcHfBwZubt0FBPr7lnDHUPSgfR/3UI0SGitqRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXMM2b/o6eV8HrddZXdfSitoSA3MwHwYDVR0j BBgwFoAUgWyBmI7L63AfTqWT008olRsQq/IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTk0MzQyNy8wLzgxNkM4MTk4OEVDQkVCNzAxRjRFQTU5M0QzNEYy ODk1MUIxMEFCRjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODE2QzgxOTg4RUNCRUI3MDFGNEVBNTkzRDM0RjI4OTUxQjEwQUJGMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzE5NDM0MjcvMC84MTZDODE5ODhFQ0JF QjcwMUY0RUE1OTNEMzRGMjg5NTFCMTBBQkYyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs0Eq9FCcFAzY SVFXw5qQl/qfb2Q9gcIATmkDytu3E2bDBRkJTC0ei3CZ7FqzvvQhFIynHk4UunVi VhOrJnfQgSKcyT8Fl2QuXJ2M2IbXgqLKvAnh6hNEeAyiDnSQu4pxvTVwO0dMw/9Q qOC4yX4Eiu7U5mTOdRyq4WAc2MVdmn4Esds/n6w11GtAjKkAGCSb9bIsbCYtCUeP qHfC71Ev+Y3r6rAlgh8D0/A1wxkcNyt0NIuVlc+gattElVrwQoFw99s33jHGDJJl pmJb2XUjcqH5foqjlSz0REJmZtjJNnqqwkjy+DZ8/icXGq/YyBo0AoZP/fZW5G4x Kf9JefYZUQ== -----END CERTIFICATE-----Generated at Wed May 13 21:35:37 2026 by rpki-client