$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft File: 816C81988ECBEB701F4EA593D34F28951B10ABF2.mft (raw, json) Hash identifier: yS3wTFhAa7Gl6whwtGiAo7Lr+OfZTUdJHuvYbVfO1Ro= Subject key identifier: 39:70:F1:FB:97:82:E4:C0:9F:49:CC:5D:C2:03:E4:ED:28:7A:24:2C Authority key identifier: 81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2 Certificate issuer: /CN=816C81988ECBEB701F4EA593D34F28951B10ABF2 Certificate serial: 079B61C47764BF09E003CEF0AA07AB4A68750572 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft Manifest number: 71 Signing time: Mon 13 Apr 2026 06:34:17 +0000 Manifest this update: Mon 13 Apr 2026 06:29:17 +0000 Manifest next update: Tue 14 Apr 2026 08:14:17 +0000 Files and hashes: 1: 3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa (hash: 6URKjFRR2qwyPlFJN5f0XQRtR84QyHyhmK66ypB33K8=) 2: 3130332e3130332e33362e302f32322d3232203d3e20313331353431.roa (hash: xcZBgro6gTw3A6GIg7z78vFpQLq7KHZet7uMhtkrnY0=) 3: 816C81988ECBEB701F4EA593D34F28951B10ABF2.crl (hash: 1TQT2d3ZnhKJk8dI2rmWcQcONVgDtHTUAVCPkjF19mQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:9b:61:c4:77:64:bf:09:e0:03:ce:f0:aa:07:ab:4a:68:75:05:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=816C81988ECBEB701F4EA593D34F28951B10ABF2 Validity Not Before: Apr 13 06:29:17 2026 GMT Not After : Apr 14 08:14:17 2026 GMT Subject: CN=3970F1FB9782E4C09F49CC5DC203E4ED287A242C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:73:ff:bc:c3:f4:ea:c4:ec:3a:13:4d:53:a1: 8c:0d:2d:9d:6f:db:84:4c:d3:7a:84:03:76:63:b6: f2:ae:fb:4d:95:14:d4:02:a5:ad:7a:8b:d9:2e:28: c9:70:d0:bc:72:64:0f:5e:c2:d0:aa:5a:08:40:ce: 2b:c5:66:f5:a9:02:d0:dc:19:17:76:24:d1:d8:8d: 5a:4e:5a:91:20:80:50:13:64:61:38:f5:70:0c:92: b2:72:a8:f5:a5:26:bb:1c:a0:b5:32:11:de:a2:6c: a4:8e:0b:ac:40:1f:b6:88:e3:dc:98:e1:67:36:02: 04:65:c7:58:ce:a8:04:81:10:3f:b2:ee:b9:f7:a4: 2b:30:c6:2f:02:69:8d:4d:30:d4:76:f7:f9:ae:e4: 54:29:8f:e1:95:e2:3f:e1:b8:d4:59:f9:c1:57:52: 2b:52:06:7b:f3:98:25:bd:24:18:63:d1:f0:a6:5c: fb:70:f2:68:3f:aa:28:8c:c7:65:03:df:02:4c:6a: 67:ce:ee:71:06:44:4c:e0:9f:b3:a4:79:de:f5:95: dd:ea:8e:75:6d:68:73:a5:7a:d7:47:de:89:a2:43: ad:ba:8b:27:bf:a0:12:f1:41:50:7a:42:51:60:cc: c1:da:41:ad:d8:e8:4c:56:d3:0a:08:77:aa:69:0a: e4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:70:F1:FB:97:82:E4:C0:9F:49:CC:5D:C2:03:E4:ED:28:7A:24:2C X509v3 Authority Key Identifier: keyid:81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:7c:57:99:ad:23:ac:78:de:be:ed:ec:bb:5f:1c:a5:d1:f1: 76:9a:d8:d6:8b:8e:3b:6a:d9:48:7d:a3:c3:01:44:2b:d6:03: 74:76:04:5c:99:d6:05:9a:d1:70:97:e5:c2:7f:df:35:40:1e: 44:c1:e0:b8:a9:45:b8:5a:fe:0e:f3:a4:7a:12:b0:5b:7f:66: f5:54:06:e0:89:10:c3:96:49:11:90:58:39:d0:75:56:d3:b6: b1:15:8a:4f:8a:f3:97:4c:24:72:9e:d2:26:74:0c:e3:03:b2: 8e:3f:b0:96:38:04:af:bf:62:3d:87:2f:6b:32:7f:79:3c:bb: ea:ca:22:0d:f0:b2:fa:fb:82:d4:85:f1:d7:d1:c5:d8:b2:09: 3f:4a:b8:db:21:52:51:47:bc:2a:bd:d4:95:f2:d0:2a:8f:21: f4:26:3f:fd:87:f9:da:46:b9:64:ee:0f:5f:55:b9:41:6d:94: de:89:86:8c:b8:e1:af:6b:3b:0f:63:4d:1d:4d:d9:63:36:0f: 4f:f6:36:db:d1:a1:de:30:c7:14:06:c2:9f:f9:ff:78:69:ff: 2a:e4:3c:41:08:66:23:e1:02:aa:b9:fc:3f:c3:96:83:68:a6: ea:77:21:76:09:10:d5:e2:fb:80:02:2f:e8:8f:6c:1b:ad:63: a5:97:74:ba -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUB5thxHdkvwngA87wqgerSmh1BXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE2QzgxOTg4RUNCRUI3MDFGNEVBNTkzRDM0RjI4OTUx QjEwQUJGMjAeFw0yNjA0MTMwNjI5MTdaFw0yNjA0MTQwODE0MTdaMDMxMTAvBgNV BAMTKDM5NzBGMUZCOTc4MkU0QzA5RjQ5Q0M1REMyMDNFNEVEMjg3QTI0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHc/+8w/TqxOw6E01ToYwNLZ1v 24RM03qEA3ZjtvKu+02VFNQCpa16i9kuKMlw0LxyZA9ewtCqWghAzivFZvWpAtDc GRd2JNHYjVpOWpEggFATZGE49XAMkrJyqPWlJrscoLUyEd6ibKSOC6xAH7aI49yY 4Wc2AgRlx1jOqASBED+y7rn3pCswxi8CaY1NMNR29/mu5FQpj+GV4j/huNRZ+cFX UitSBnvzmCW9JBhj0fCmXPtw8mg/qiiMx2UD3wJMamfO7nEGREzgn7Oked71ld3q jnVtaHOletdH3omiQ626iye/oBLxQVB6QlFgzMHaQa3Y6ExW0woId6ppCuRjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOXDx+5eC5MCfScxdwgPk7Sh6JCwwHwYDVR0j BBgwFoAUgWyBmI7L63AfTqWT008olRsQq/IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTk0MzQyNy8wLzgxNkM4MTk4OEVDQkVCNzAxRjRFQTU5M0QzNEYy ODk1MUIxMEFCRjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODE2QzgxOTg4RUNCRUI3MDFGNEVBNTkzRDM0RjI4OTUxQjEwQUJGMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzE5NDM0MjcvMC84MTZDODE5ODhFQ0JF QjcwMUY0RUE1OTNEMzRGMjg5NTFCMTBBQkYyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHxXma0jrHje vu3su18cpdHxdprY1ouOO2rZSH2jwwFEK9YDdHYEXJnWBZrRcJflwn/fNUAeRMHg uKlFuFr+DvOkehKwW39m9VQG4IkQw5ZJEZBYOdB1VtO2sRWKT4rzl0wkcp7SJnQM 4wOyjj+wljgEr79iPYcvazJ/eTy76soiDfCy+vuC1IXx19HF2LIJP0q42yFSUUe8 Kr3UlfLQKo8h9CY//Yf52ka5ZO4PX1W5QW2U3omGjLjhr2s7D2NNHU3ZYzYPT/Y2 29Gh3jDHFAbCn/n/eGn/KuQ8QQhmI+ECqrn8P8OWg2im6nchdgkQ1eL7gAIv6I9s G61jpZd0ug== -----END CERTIFICATE-----Generated at Mon Apr 13 11:04:52 2026 by rpki-client