$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft File: 16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft (raw, json) Hash identifier: clCP/lcaGOazNbqrRDJSZQCJWLRFbT3YD3MpBpuNV8M= Subject key identifier: 01:FB:EF:89:BF:59:5D:2D:CB:A5:1B:5A:B3:24:32:61:47:FF:28:5F Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Certificate serial: 26D64E98D13DC8DB6750EA42414F048D25E2156C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft Manifest number: 89 Signing time: Fri 24 Jul 2026 09:35:55 +0000 Manifest this update: Fri 24 Jul 2026 09:30:55 +0000 Manifest next update: Sat 25 Jul 2026 11:48:55 +0000 Files and hashes: 1: AS0.roa (hash: Oer0Yd953gEJm6UmIY9whhn9mB9MvyZJkfQPYXw4mx4=) 2: AS63646.roa (hash: Ez4I298YPRwCv7r5zs5RQuk6RtwDSDsw4e9i9AxGQ58=) 3: 16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl (hash: C5Fo1D77wGCMcaZqXKkPQSrW2IE34C4LRkQNvYo4zx4=) 4: AS63648.roa (hash: 4HYSvuQVQQBqIHTS6osBvaTfMDnfx/q3IKZHUPbSGzo=) 5: AS58466.roa (hash: r7bGmLBfvhXYayeMtM0xTPcAHPRkmPDxrEy0xZn8OrU=) 6: AS13335.roa (hash: 9Hng9d3Qz7Lydzkg5+hOCdUoBzRae66YdJRsgOh6mY0=) 7: AS136958.roa (hash: 5NVMdMzPvY4Sfxb4/r3IMRajbOXIUyEqGrPk010/sPY=) 8: AS56040.roa (hash: wyLNjEr28XWMaCIeJV3ttVZdaqqq9B+3UZMGGkeItow=) 9: AS23724.roa (hash: CQwubKmfLykOjSxoDWhA0d5uBDLTWUR9Ssr5fYI/K9k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:d6:4e:98:d1:3d:c8:db:67:50:ea:42:41:4f:04:8d:25:e2:15:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Validity Not Before: Jul 24 09:30:55 2026 GMT Not After : Jul 25 11:48:55 2026 GMT Subject: CN=01FBEF89BF595D2DCBA51B5AB324326147FF285F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:77:6f:5d:ce:e4:7d:5e:ec:85:02:4f:7a:8b: 93:4d:9e:89:89:fb:b1:03:15:3f:d8:33:c9:67:29: 21:62:1b:a6:4d:cb:37:14:b1:c7:ca:ac:d7:f4:0a: 5b:13:2b:c3:de:d4:ba:c8:f9:59:3f:fb:0e:9f:b2: 69:d5:91:c5:71:22:51:b5:e8:cc:72:aa:e0:89:28: 05:ae:00:2d:7a:4c:19:92:47:de:24:b3:0c:88:2e: b3:96:a1:99:71:48:08:da:25:21:64:33:20:12:6b: 1f:99:1f:7a:f7:00:47:62:3f:b6:e9:28:c2:06:19: cb:66:7a:76:0e:cd:24:27:65:c3:0c:11:14:f5:f8: c3:19:cb:70:5a:96:25:24:75:0e:4f:99:83:15:02: 13:ce:75:84:67:e1:4c:88:cd:4b:00:35:ab:0d:b2: 52:63:eb:a0:b5:81:a8:28:c2:e9:76:50:70:8d:14: c3:7b:26:5c:d2:e0:6b:6f:38:b5:b5:67:77:25:d7: 17:73:02:ba:83:98:0e:a3:3e:b1:46:d4:33:f0:14: 98:f2:b1:00:03:40:9f:20:65:83:eb:55:b7:3b:ef: ef:8f:1f:c0:53:23:b3:f8:f8:d0:9b:49:43:64:fa: 6a:da:c1:35:ae:b7:cd:2f:5f:f7:30:1f:39:da:e5: 6b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FB:EF:89:BF:59:5D:2D:CB:A5:1B:5A:B3:24:32:61:47:FF:28:5F X509v3 Authority Key Identifier: keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:ac:65:12:18:fe:8b:b1:ca:95:c0:74:75:fb:70:97:40:bd: da:bc:e8:d5:9d:d7:4a:c4:6f:11:d0:3a:f5:ed:3b:a9:ea:96: d6:8d:21:27:c3:6d:a5:25:fa:0d:17:51:c8:27:5f:3c:da:f3: 20:1b:e9:07:04:e5:d3:ba:95:43:ee:67:2e:b5:e7:fe:97:b7: 42:a3:44:28:ad:b9:05:8a:27:cc:ad:49:38:cb:58:74:62:1e: fb:b4:82:e3:c2:2c:87:8d:8f:ed:c5:a7:5e:91:bc:54:f3:9d: a3:25:60:c3:b1:24:5e:b0:e9:1b:49:53:91:eb:1f:8f:47:03: 33:25:a1:9c:f0:42:c3:40:e1:12:f1:91:86:ad:e8:f4:61:c7: e6:24:21:ae:db:40:b4:b2:5d:44:4b:c3:0b:a8:7f:d5:bc:dd: e0:30:ce:76:2a:9a:b8:fb:20:b8:02:62:17:a5:47:53:70:93: c6:90:83:8c:f9:48:b1:31:8f:37:f0:7b:ed:b0:db:08:0b:72: 42:7d:20:cb:fa:77:b1:b0:67:0a:56:9c:8a:52:90:43:b5:98: c8:df:ce:67:7d:bb:5d:da:14:e7:9c:a8:b0:fb:39:0d:1f:2f: 0c:e2:b0:5e:f5:6d:73:50:4e:c4:bf:5d:ce:d3:99:21:84:1d: 5a:ff:5f:4d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJtZOmNE9yNtnUOpCQU8EjSXiFWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB N0QxNEI0MDAeFw0yNjA3MjQwOTMwNTVaFw0yNjA3MjUxMTQ4NTVaMDMxMTAvBgNV BAMTKDAxRkJFRjg5QkY1OTVEMkRDQkE1MUI1QUIzMjQzMjYxNDdGRjI4NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4d29dzuR9XuyFAk96i5NNnomJ +7EDFT/YM8lnKSFiG6ZNyzcUscfKrNf0ClsTK8Pe1LrI+Vk/+w6fsmnVkcVxIlG1 6MxyquCJKAWuAC16TBmSR94kswyILrOWoZlxSAjaJSFkMyASax+ZH3r3AEdiP7bp KMIGGctmenYOzSQnZcMMERT1+MMZy3BaliUkdQ5PmYMVAhPOdYRn4UyIzUsANasN slJj66C1gagowul2UHCNFMN7JlzS4GtvOLW1Z3cl1xdzArqDmA6jPrFG1DPwFJjy sQADQJ8gZYPrVbc77++PH8BTI7P4+NCbSUNk+mrawTWut80vX/cwHzna5WtbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUAfvvib9ZXS3LpRtasyQyYUf/KF8wHwYDVR0j BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk2MDI2MzYzNjcyMDAyNTkvMC8xNjU3Njc1NkYwQjAz QkY3NUVDRDZCQzQ0OUEzQkVGN0E3RDE0QjQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANaxlEhj+i7HK lcB0dftwl0C92rzo1Z3XSsRvEdA69e07qeqW1o0hJ8NtpSX6DRdRyCdfPNrzIBvp BwTl07qVQ+5nLrXn/pe3QqNEKK25BYonzK1JOMtYdGIe+7SC48Ish42P7cWnXpG8 VPOdoyVgw7EkXrDpG0lTkesfj0cDMyWhnPBCw0DhEvGRhq3o9GHH5iQhrttAtLJd REvDC6h/1bzd4DDOdiqauPsguAJiF6VHU3CTxpCDjPlIsTGPN/B77bDbCAtyQn0g y/p3sbBnClacilKQQ7WYyN/OZ327XdoU55yosPs5DR8vDOKwXvVtc1BOxL9dztOZ IYQdWv9fTQ== -----END CERTIFICATE-----Generated at Fri Jul 24 17:03:25 2026 by rpki-client