
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
File: 816C81988ECBEB701F4EA593D34F28951B10ABF2.mft (raw, json)
Hash identifier: yjvlm7v7Bi+EB284PzTBMm1IQuRTV60FaugRnB36HRM=
Subject key identifier: C7:85:8D:26:60:14:B4:45:90:A9:B9:AE:BE:DE:F3:4D:98:F5:A4:10
Authority key identifier: 81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2
Certificate issuer: /CN=816C81988ECBEB701F4EA593D34F28951B10ABF2
Certificate serial: 447F0CADF9DEB9957AD99A4259B8E16388758E97
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
Manifest number: 013A
Signing time: Sun 11 Oct 2026 01:40:07 +0000
Manifest this update: Sun 11 Oct 2026 01:35:07 +0000
Manifest next update: Wed 14 Oct 2026 11:01:07 +0000
Files and hashes: 1: 816C81988ECBEB701F4EA593D34F28951B10ABF2.crl (hash: CaDO7Ym9OAYXMVpTIwSRQV5RslXwziVQwsao4lQa4ss=)
2: 3130332e3130332e33362e302f32322d3232203d3e20313331353431.roa (hash: xcZBgro6gTw3A6GIg7z78vFpQLq7KHZet7uMhtkrnY0=)
3: 3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa (hash: 6URKjFRR2qwyPlFJN5f0XQRtR84QyHyhmK66ypB33K8=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:7f:0c:ad:f9:de:b9:95:7a:d9:9a:42:59:b8:e1:63:88:75:8e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816C81988ECBEB701F4EA593D34F28951B10ABF2
Validity
Not Before: Oct 11 01:35:07 2026 GMT
Not After : Oct 14 11:01:07 2026 GMT
Subject: CN=C7858D266014B44590A9B9AEBEDEF34D98F5A410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:09:d6:54:28:6b:cb:be:66:ab:ab:93:ec:
65:fd:6c:ae:e4:78:f9:af:d2:10:41:69:96:78:8a:
f7:36:da:8a:37:3c:00:a2:4a:a5:07:f8:f1:ba:b1:
de:7e:e4:e1:03:ca:69:cd:41:31:2d:28:ca:eb:02:
e7:87:ae:33:b5:61:ee:67:a9:b6:38:11:d8:01:bd:
d9:c5:b9:1b:4b:63:65:63:24:81:6a:3b:75:16:9c:
54:f6:4e:46:3a:57:d4:26:15:93:ed:44:fc:61:39:
f4:4a:af:c7:2d:2c:2a:fc:3d:85:af:11:00:73:39:
96:f9:f2:12:a0:f0:92:f1:04:20:2c:e8:a7:18:b2:
ea:ee:15:20:26:01:1e:30:6b:4a:30:23:ee:2f:95:
20:98:d7:05:0a:65:7b:2d:83:1a:ab:13:e4:20:63:
3a:a7:38:c6:96:24:4c:56:32:7f:28:d1:10:9d:7e:
11:be:38:c7:7d:46:70:ca:e0:d8:6f:31:1b:8a:20:
ce:73:ec:2d:c5:08:bd:24:7f:36:85:e3:f2:fa:f3:
77:7a:35:b2:94:d3:c5:26:3f:05:1f:2f:cb:17:b2:
c1:b0:ce:8f:20:fa:21:65:18:8f:39:28:8c:66:c3:
1e:42:2a:61:13:47:db:8d:c6:0b:fa:af:3e:3a:8d:
9b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:85:8D:26:60:14:B4:45:90:A9:B9:AE:BE:DE:F3:4D:98:F5:A4:10
X509v3 Authority Key Identifier:
keyid:81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:fd:5d:91:71:c5:f7:c3:53:e1:61:d2:57:2c:ba:99:ba:49:
8b:cb:2f:77:18:72:0b:7a:b3:db:1e:d4:11:82:25:33:96:ae:
4a:6c:43:6d:62:55:e9:57:b5:f0:77:d7:94:51:a2:45:64:26:
f6:f7:1c:61:38:36:36:ef:f1:59:21:e2:e6:83:17:9c:e4:81:
a1:a9:0c:47:58:ee:fc:ca:2a:83:4c:2d:aa:7a:14:4d:1a:8f:
4f:39:01:52:ef:98:2d:ad:28:14:27:94:fb:cd:dc:be:12:0c:
2c:c2:1f:f5:74:80:58:e1:5c:98:f0:50:07:ca:21:a2:09:f7:
99:33:ee:07:27:5e:7a:5e:f6:9b:05:cc:72:cb:f8:c8:40:0c:
a8:d5:d5:b0:86:e1:90:db:83:9f:37:80:76:d1:92:f6:a9:67:
91:87:2a:ab:b6:39:a6:d4:db:e4:27:87:bd:a6:7b:ea:f4:fe:
ff:81:08:6d:70:13:ee:fc:7c:8b:ed:39:c5:33:06:00:1b:15:
80:0d:29:96:78:67:75:9f:27:73:9e:24:1d:cb:b6:82:fd:1b:
61:7b:aa:f2:7d:e2:ad:a3:99:20:45:97:30:6f:fd:e1:d5:d6:
2c:2f:2a:a2:99:c8:3d:c4:78:9e:ca:6b:09:b8:6d:c1:da:52:
95:37:61:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:03:57 2026 by rpki-client