$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft File: 16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft (raw, json) Hash identifier: 0jRPkxhyo1r2VlgWyM6ljZaa24i6i3arfmI3XagPgBI= Subject key identifier: 03:5B:D7:D0:C3:87:16:8C:6C:32:08:1B:37:EE:1A:04:89:7C:9C:B6 Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Certificate serial: 28A570D62EA0B269321EE865A27573FE3E158E31 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft Manifest number: C5 Signing time: Sun 27 Sep 2026 04:14:38 +0000 Manifest this update: Sun 27 Sep 2026 04:09:38 +0000 Manifest next update: Wed 30 Sep 2026 14:13:38 +0000 Files and hashes: 1: AS0.roa (hash: Oer0Yd953gEJm6UmIY9whhn9mB9MvyZJkfQPYXw4mx4=) 2: 16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl (hash: 9aZBkG38QoJPZFvRs7gVthwdzfDxOtJ6SeJRtxtDtkg=) 3: AS56040.roa (hash: wyLNjEr28XWMaCIeJV3ttVZdaqqq9B+3UZMGGkeItow=) 4: AS58466.roa (hash: r7bGmLBfvhXYayeMtM0xTPcAHPRkmPDxrEy0xZn8OrU=) 5: AS63648.roa (hash: 4HYSvuQVQQBqIHTS6osBvaTfMDnfx/q3IKZHUPbSGzo=) 6: AS136958.roa (hash: 5NVMdMzPvY4Sfxb4/r3IMRajbOXIUyEqGrPk010/sPY=) 7: AS23724.roa (hash: CQwubKmfLykOjSxoDWhA0d5uBDLTWUR9Ssr5fYI/K9k=) 8: AS63646.roa (hash: Ez4I298YPRwCv7r5zs5RQuk6RtwDSDsw4e9i9AxGQ58=) 9: AS13335.roa (hash: 9Hng9d3Qz7Lydzkg5+hOCdUoBzRae66YdJRsgOh6mY0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 14:13:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a5:70:d6:2e:a0:b2:69:32:1e:e8:65:a2:75:73:fe:3e:15:8e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Validity Not Before: Sep 27 04:09:38 2026 GMT Not After : Sep 30 14:13:38 2026 GMT Subject: CN=035BD7D0C387168C6C32081B37EE1A04897C9CB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:27:1a:ce:bb:3f:d9:dd:9f:5f:70:2f:7e:72: c9:bf:15:92:9d:8d:41:e6:ee:de:b5:b5:3d:1a:2c: 7e:46:ee:73:bf:18:c7:41:18:4c:e0:e2:0a:96:04: 2c:cf:b7:ad:fc:a2:15:da:13:e9:20:49:04:d3:03: ec:40:bb:22:48:9f:7a:98:4e:17:39:1d:31:49:04: 4c:10:8b:61:a2:7f:8d:66:50:8f:24:10:1e:21:dc: fd:bf:62:10:64:8c:27:20:41:ae:a7:75:54:41:1a: 47:34:d2:08:ef:ee:4a:fd:06:36:ad:72:5f:7f:31: 53:65:d6:4b:68:4d:06:81:5b:11:2f:70:b1:e1:81: e1:29:a0:44:e3:25:bd:1f:6b:6e:b3:3c:23:3e:e1: 51:bc:15:ff:19:69:f2:2e:0b:2d:53:fa:0e:c1:c0: e9:99:1d:95:a4:a8:fa:34:dd:9a:8a:c6:24:72:69: ab:2c:03:c2:fe:91:f0:25:3c:69:be:c1:bf:df:82: bc:37:de:e5:ad:80:e7:ce:21:c1:78:40:8d:94:70: 72:10:0c:5a:9b:8e:03:72:8a:a5:75:9f:24:33:b4: 49:a1:0b:56:73:a2:ed:06:46:44:33:f5:2a:1e:b2: 4b:3c:9c:68:6e:9d:0e:1f:de:ec:4d:d8:c1:9b:bc: 6f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5B:D7:D0:C3:87:16:8C:6C:32:08:1B:37:EE:1A:04:89:7C:9C:B6 X509v3 Authority Key Identifier: keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b4:a1:5a:fb:2c:b5:df:24:17:20:c9:63:00:98:d8:90:ea: 92:d7:4c:19:61:75:d3:ab:7e:93:6d:2f:b5:5a:0f:ea:c3:ce: ea:56:bf:93:18:52:18:08:72:5d:83:9f:54:f2:5c:9c:e4:f3: c4:88:92:cd:bf:57:ea:2e:30:a3:7b:09:88:15:f5:b9:91:01: 01:7c:fa:dd:cd:1c:92:01:f5:77:8f:27:d0:1f:76:42:0b:26: 9d:37:1a:ea:c5:f7:b1:b0:aa:95:0f:7c:dc:fd:08:58:b4:3f: 62:49:46:d2:5f:1d:af:0e:68:06:6a:a7:ba:6d:e7:9d:bf:57: fa:5e:5e:43:a5:2a:10:1e:e7:b6:5e:1d:67:b3:6d:6f:39:58: 8e:ec:95:4b:64:a5:51:ef:c0:dc:57:cf:24:15:f0:77:4d:1c: 0e:27:b7:bf:88:24:29:c1:c2:4d:65:64:64:e4:c1:8a:ab:09: d3:b1:c9:d4:ff:63:da:30:d0:97:5c:91:0e:cb:a6:db:a2:f1: 4c:94:7b:0a:6b:94:01:41:14:b6:5b:2f:24:6a:f3:61:ea:93: dc:2e:97:5a:a4:0f:cb:34:a5:7a:fb:16:b9:91:0c:c0:d7:69: 14:d7:ee:37:70:33:36:00:ef:98:4c:fa:5e:cf:a7:b2:6d:34: 0d:1d:51:40 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKKVw1i6gsmkyHuhlonVz/j4VjjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB N0QxNEI0MDAeFw0yNjA5MjcwNDA5MzhaFw0yNjA5MzAxNDEzMzhaMDMxMTAvBgNV BAMTKDAzNUJEN0QwQzM4NzE2OEM2QzMyMDgxQjM3RUUxQTA0ODk3QzlDQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7JxrOuz/Z3Z9fcC9+csm/FZKd jUHm7t61tT0aLH5G7nO/GMdBGEzg4gqWBCzPt638ohXaE+kgSQTTA+xAuyJIn3qY Thc5HTFJBEwQi2Gif41mUI8kEB4h3P2/YhBkjCcgQa6ndVRBGkc00gjv7kr9Bjat cl9/MVNl1ktoTQaBWxEvcLHhgeEpoETjJb0fa26zPCM+4VG8Ff8ZafIuCy1T+g7B wOmZHZWkqPo03ZqKxiRyaassA8L+kfAlPGm+wb/fgrw33uWtgOfOIcF4QI2UcHIQ DFqbjgNyiqV1nyQztEmhC1Zzou0GRkQz9Soesks8nGhunQ4f3uxN2MGbvG/BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUA1vX0MOHFoxsMggbN+4aBIl8nLYwHwYDVR0j BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk2MDI2MzYzNjcyMDAyNTkvMC8xNjU3Njc1NkYwQjAz QkY3NUVDRDZCQzQ0OUEzQkVGN0E3RDE0QjQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVLShWvsstd8k FyDJYwCY2JDqktdMGWF106t+k20vtVoP6sPO6la/kxhSGAhyXYOfVPJcnOTzxIiS zb9X6i4wo3sJiBX1uZEBAXz63c0ckgH1d48n0B92QgsmnTca6sX3sbCqlQ983P0I WLQ/YklG0l8drw5oBmqnum3nnb9X+l5eQ6UqEB7ntl4dZ7NtbzlYjuyVS2SlUe/A 3FfPJBXwd00cDie3v4gkKcHCTWVkZOTBiqsJ07HJ1P9j2jDQl1yRDsum26LxTJR7 CmuUAUEUtlsvJGrzYeqT3C6XWqQPyzSlevsWuZEMwNdpFNfuN3AzNgDvmEz6Xs+n sm00DR1RQA== -----END CERTIFICATE-----Generated at Tue Sep 29 11:50:31 2026 by rpki-client