$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft File: 816C81988ECBEB701F4EA593D34F28951B10ABF2.mft (raw, json) Hash identifier: szefS+SoqdMTiNOQu7ckf5uXiMoUUOyoOfgIhDxNZT8= Subject key identifier: 32:A2:BE:50:91:05:95:41:09:02:25:85:5F:94:61:96:F5:F1:DD:DF Authority key identifier: 81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2 Certificate issuer: /CN=816C81988ECBEB701F4EA593D34F28951B10ABF2 Certificate serial: 38E027ABBEDD2773913868847C60B11E03365D17 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft Manifest number: F8 Signing time: Fri 24 Jul 2026 03:40:16 +0000 Manifest this update: Fri 24 Jul 2026 03:35:16 +0000 Manifest next update: Sat 25 Jul 2026 04:09:16 +0000 Files and hashes: 1: 816C81988ECBEB701F4EA593D34F28951B10ABF2.crl (hash: WbAMpTyH0iScloo47zEm98yp/uelpsZuMc0aHXTbu7E=) 2: 3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa (hash: 6URKjFRR2qwyPlFJN5f0XQRtR84QyHyhmK66ypB33K8=) 3: 3130332e3130332e33362e302f32322d3232203d3e20313331353431.roa (hash: xcZBgro6gTw3A6GIg7z78vFpQLq7KHZet7uMhtkrnY0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:09:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e0:27:ab:be:dd:27:73:91:38:68:84:7c:60:b1:1e:03:36:5d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=816C81988ECBEB701F4EA593D34F28951B10ABF2 Validity Not Before: Jul 24 03:35:16 2026 GMT Not After : Jul 25 04:09:16 2026 GMT Subject: CN=32A2BE5091059541090225855F946196F5F1DDDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d1:3d:a0:00:96:01:c7:fd:60:16:63:51:60: 1e:a8:55:0a:33:36:3c:3e:8a:37:d1:6d:a3:26:2c: 3e:5d:54:e1:88:97:66:2a:44:64:75:5f:26:a8:6b: 4f:c7:6e:61:06:e1:1a:26:4e:67:6e:5c:63:6b:a9: 3b:e9:c9:c7:68:e8:ae:12:48:30:08:2a:05:c8:15: 54:7a:9d:09:aa:f5:d0:51:3a:ae:9e:83:89:24:48: 60:f3:75:16:ff:f5:7b:2b:5c:e3:85:61:49:b3:30: 7f:9f:f4:46:e3:cc:10:0f:e4:43:9c:75:38:a6:57: c5:17:94:75:d6:20:65:b3:f1:2d:6c:38:24:f6:24: e0:fd:0a:1d:15:50:38:be:d3:4c:42:83:d3:78:52: 73:0e:1b:50:ba:b4:3b:49:0b:26:2c:64:11:3b:49: 72:e9:b0:27:1b:2b:29:92:1a:14:b7:cf:a0:8a:91: 1b:b4:20:23:f1:51:6b:cb:ea:76:b7:2d:3b:a6:5a: 13:ba:89:b5:9a:7e:89:dd:37:d3:a7:47:37:a4:df: d1:2f:ce:6a:1a:f9:ea:f6:eb:98:bb:6c:17:46:95: f2:5b:6a:82:09:0c:fe:06:0a:a2:5a:45:2d:f8:46: 10:03:e7:6f:4f:d6:00:c3:f6:fb:bf:4d:74:28:77: 86:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A2:BE:50:91:05:95:41:09:02:25:85:5F:94:61:96:F5:F1:DD:DF X509v3 Authority Key Identifier: keyid:81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:22:4d:31:26:3a:b8:0e:e4:31:80:5e:9f:1f:10:5c:5e:d8: 21:fa:eb:f6:6c:88:a5:1d:2f:b1:03:58:0d:11:d3:2e:59:b3: 74:60:e1:66:55:65:d2:69:cb:1f:e4:19:86:5a:0f:41:be:5f: 14:c1:f4:79:7d:ff:34:46:57:a6:80:7e:b4:b9:f9:b7:5d:07: 12:35:f5:ae:5f:c4:d4:7c:4e:5d:ca:6d:b1:2f:cc:19:2b:11: 85:76:d0:db:d6:14:6b:fa:5e:89:c6:74:08:26:93:8e:33:17: 17:dd:12:bc:21:71:01:b1:e3:27:b6:4e:28:3c:56:7a:5d:c7: d5:5d:b6:01:75:f5:a4:04:e8:79:f4:c3:8a:54:89:3c:fd:67: b2:4f:89:06:fa:8a:75:55:72:45:16:28:51:66:a6:1a:15:68: 4c:1c:c5:42:d6:90:f9:8b:6e:1f:c9:46:2c:0c:41:89:a9:ef: a1:d3:bd:91:8f:79:e1:a3:f5:aa:36:41:be:22:29:dc:8c:a7: 79:74:8a:6f:c0:6b:9c:ce:d5:e1:88:70:98:0c:3a:16:4b:60: 43:5c:7d:ab:a4:1e:7c:19:a0:4d:49:56:99:7e:23:8c:e2:a2: 0b:b1:34:5d:ef:68:4f:a7:ad:e8:f1:f0:23:00:6a:52:87:10: c7:97:2b:42 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOOAnq77dJ3OROGiEfGCxHgM2XRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE2QzgxOTg4RUNCRUI3MDFGNEVBNTkzRDM0RjI4OTUx QjEwQUJGMjAeFw0yNjA3MjQwMzM1MTZaFw0yNjA3MjUwNDA5MTZaMDMxMTAvBgNV BAMTKDMyQTJCRTUwOTEwNTk1NDEwOTAyMjU4NTVGOTQ2MTk2RjVGMUREREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf0T2gAJYBx/1gFmNRYB6oVQoz Njw+ijfRbaMmLD5dVOGIl2YqRGR1Xyaoa0/HbmEG4RomTmduXGNrqTvpycdo6K4S SDAIKgXIFVR6nQmq9dBROq6eg4kkSGDzdRb/9XsrXOOFYUmzMH+f9EbjzBAP5EOc dTimV8UXlHXWIGWz8S1sOCT2JOD9Ch0VUDi+00xCg9N4UnMOG1C6tDtJCyYsZBE7 SXLpsCcbKymSGhS3z6CKkRu0ICPxUWvL6na3LTumWhO6ibWafondN9OnRzek39Ev zmoa+er265i7bBdGlfJbaoIJDP4GCqJaRS34RhAD529P1gDD9vu/TXQod4ZfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMqK+UJEFlUEJAiWFX5RhlvXx3d8wHwYDVR0j BBgwFoAUgWyBmI7L63AfTqWT008olRsQq/IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTk0MzQyNy8wLzgxNkM4MTk4OEVDQkVCNzAxRjRFQTU5M0QzNEYy ODk1MUIxMEFCRjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODE2QzgxOTg4RUNCRUI3MDFGNEVBNTkzRDM0RjI4OTUxQjEwQUJGMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzE5NDM0MjcvMC84MTZDODE5ODhFQ0JF QjcwMUY0RUE1OTNEMzRGMjg5NTFCMTBBQkYyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiJNMSY6uA7k MYBenx8QXF7YIfrr9myIpR0vsQNYDRHTLlmzdGDhZlVl0mnLH+QZhloPQb5fFMH0 eX3/NEZXpoB+tLn5t10HEjX1rl/E1HxOXcptsS/MGSsRhXbQ29YUa/peicZ0CCaT jjMXF90SvCFxAbHjJ7ZOKDxWel3H1V22AXX1pAToefTDilSJPP1nsk+JBvqKdVVy RRYoUWamGhVoTBzFQtaQ+YtuH8lGLAxBianvodO9kY954aP1qjZBviIp3IyneXSK b8BrnM7V4YhwmAw6FktgQ1x9q6QefBmgTUlWmX4jjOKiC7E0Xe9oT6et6PHwIwBq UocQx5crQg== -----END CERTIFICATE-----Generated at Fri Jul 24 19:50:00 2026 by rpki-client