
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
File: 816C81988ECBEB701F4EA593D34F28951B10ABF2.mft (raw, json)
Hash identifier: 9QBlniS73QbtwVaY59T+zkTVHmf2jTEaJhKRHE6PC6U=
Subject key identifier: 6B:EF:8B:BE:4C:40:EE:D4:68:63:C8:BB:8E:7E:71:C1:BF:4C:9E:1A
Authority key identifier: 81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2
Certificate issuer: /CN=816C81988ECBEB701F4EA593D34F28951B10ABF2
Certificate serial: 0A641486D0928B962CBB53B80B0D0CFA6284DB17
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
Manifest number: 013B
Signing time: Tue 13 Oct 2026 11:02:55 +0000
Manifest this update: Tue 13 Oct 2026 10:57:55 +0000
Manifest next update: Fri 16 Oct 2026 18:57:55 +0000
Files and hashes: 1: 3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa (hash: 6URKjFRR2qwyPlFJN5f0XQRtR84QyHyhmK66ypB33K8=)
2: 3130332e3130332e33362e302f32322d3232203d3e20313331353431.roa (hash: xcZBgro6gTw3A6GIg7z78vFpQLq7KHZet7uMhtkrnY0=)
3: 816C81988ECBEB701F4EA593D34F28951B10ABF2.crl (hash: BYXH03p2PZhA1k84hFYu+qnqYgMGo0g8z11T/dBJe2A=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 01:08:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:64:14:86:d0:92:8b:96:2c:bb:53:b8:0b:0d:0c:fa:62:84:db:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816C81988ECBEB701F4EA593D34F28951B10ABF2
Validity
Not Before: Oct 13 10:57:55 2026 GMT
Not After : Oct 16 18:57:55 2026 GMT
Subject: CN=6BEF8BBE4C40EED46863C8BB8E7E71C1BF4C9E1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:80:f4:47:73:ca:50:c7:a1:f7:dd:61:f5:
8b:04:92:f2:e5:ce:35:a8:e5:46:1e:83:2c:b1:f3:
4c:3e:04:3b:f4:b9:3f:d7:89:07:36:94:d7:26:91:
28:cc:bf:70:4f:cd:e9:eb:bf:4b:ab:2c:78:c0:7f:
59:37:23:4f:1d:32:57:d6:a2:70:80:4a:db:e0:be:
b9:e3:0d:2f:2c:12:42:d1:a7:32:ba:df:38:09:2e:
bb:88:38:6d:83:95:b1:79:43:1c:2a:3f:5e:e7:51:
f1:00:6b:d3:f2:b9:8c:88:7c:28:4c:a4:e8:a5:09:
7b:47:dc:db:d3:98:92:30:01:47:44:f1:92:ac:30:
9c:d8:e5:ba:72:80:52:ca:d9:fc:ce:5e:d4:64:f7:
8b:99:ae:7a:7f:dc:b6:04:0c:23:bd:fb:6c:28:05:
9f:1c:0b:67:0f:78:a2:5b:0d:34:13:f1:23:ab:04:
14:22:a0:a2:2a:ba:59:52:59:f5:8a:e9:c2:89:b8:
d0:83:9f:f9:7c:ae:40:4a:2d:85:92:80:db:9e:88:
40:06:b8:88:26:37:36:4c:29:1c:4d:ef:87:78:e7:
d2:10:35:41:84:d2:3b:26:7b:0d:f5:64:56:e6:d8:
1d:d8:ed:24:7c:07:14:7d:1e:03:49:71:c9:79:ea:
c4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EF:8B:BE:4C:40:EE:D4:68:63:C8:BB:8E:7E:71:C1:BF:4C:9E:1A
X509v3 Authority Key Identifier:
keyid:81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:17:d9:f7:8c:fc:ec:21:d6:dd:1b:d2:6d:b2:de:a1:b6:69:
76:f4:16:6c:b5:11:a6:14:af:2f:e7:e6:fd:92:a7:8e:a1:e4:
24:ab:02:56:f5:7f:22:8a:f8:f6:10:ac:97:e8:8d:e2:35:fa:
35:aa:70:94:e6:3f:f1:25:1d:41:eb:c8:fb:5b:3b:f8:63:69:
ef:09:86:61:c5:e1:bd:3e:fa:f4:a3:b8:39:ad:09:ae:28:10:
6c:e9:aa:7b:f6:b1:d1:20:df:b6:6c:80:05:2b:2b:0b:61:23:
62:de:dd:fd:b1:b2:70:da:bb:29:95:a0:a9:c8:9d:da:4a:65:
13:fe:e6:24:75:b1:17:90:1f:c3:ad:51:86:08:b7:dc:03:8e:
23:b3:39:91:57:2f:0c:44:e0:fd:a8:93:e1:39:7e:9a:9b:05:
fe:f7:6d:8b:81:a4:ad:39:ee:5e:60:f8:d5:75:a3:e9:82:38:
43:86:52:67:aa:ea:f8:70:c8:f2:c5:60:01:00:7d:28:7a:b4:
a8:0c:56:80:92:3e:49:7f:d1:5c:79:cf:a7:23:58:c1:05:34:
7d:e7:6a:fc:bd:e1:d2:09:f3:4a:0c:08:69:0a:4e:7e:39:4d:
bf:04:a5:14:05:c4:4e:f9:2a:ec:2e:cc:08:c2:19:c3:6a:76:
16:1c:27:44
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUCmQUhtCSi5Ysu1O4Cw0M+mKE2xcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE2QzgxOTg4RUNCRUI3MDFGNEVBNTkzRDM0RjI4OTUx
QjEwQUJGMjAeFw0yNjEwMTMxMDU3NTVaFw0yNjEwMTYxODU3NTVaMDMxMTAvBgNV
BAMTKDZCRUY4QkJFNEM0MEVFRDQ2ODYzQzhCQjhFN0U3MUMxQkY0QzlFMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaMYD0R3PKUMeh991h9YsEkvLl
zjWo5UYegyyx80w+BDv0uT/XiQc2lNcmkSjMv3BPzenrv0urLHjAf1k3I08dMlfW
onCAStvgvrnjDS8sEkLRpzK63zgJLruIOG2DlbF5QxwqP17nUfEAa9PyuYyIfChM
pOilCXtH3NvTmJIwAUdE8ZKsMJzY5bpygFLK2fzOXtRk94uZrnp/3LYEDCO9+2wo
BZ8cC2cPeKJbDTQT8SOrBBQioKIqullSWfWK6cKJuNCDn/l8rkBKLYWSgNueiEAG
uIgmNzZMKRxN74d459IQNUGE0jsmew31ZFbm2B3Y7SR8BxR9HgNJccl56sS5AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUa++LvkxA7tRoY8i7jn5xwb9MnhowHwYDVR0j
BBgwFoAUgWyBmI7L63AfTqWT008olRsQq/IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MzIyMTk3MTk0MzQyNy8wLzgxNkM4MTk4OEVDQkVCNzAxRjRFQTU5M0QzNEYy
ODk1MUIxMEFCRjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODE2QzgxOTg4RUNCRUI3MDFGNEVBNTkzRDM0RjI4OTUxQjEwQUJGMi5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzE5NDM0MjcvMC84MTZDODE5ODhFQ0JF
QjcwMUY0RUE1OTNEMzRGMjg5NTFCMTBBQkYyLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxfZ94z87CHW
3RvSbbLeobZpdvQWbLURphSvL+fm/ZKnjqHkJKsCVvV/Ior49hCsl+iN4jX6Napw
lOY/8SUdQevI+1s7+GNp7wmGYcXhvT769KO4Oa0JrigQbOmqe/ax0SDftmyABSsr
C2EjYt7d/bGycNq7KZWgqcid2kplE/7mJHWxF5Afw61Rhgi33AOOI7M5kVcvDETg
/aiT4Tl+mpsF/vdti4GkrTnuXmD41XWj6YI4Q4ZSZ6rq+HDI8sVgAQB9KHq0qAxW
gJI+SX/RXHnPpyNYwQU0fedq/L3h0gnzSgwIaQpOfjlNvwSlFAXETvkq7C7MCMIZ
w2p2FhwnRA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 22:50:16 2026 by rpki-client