$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft File: 816C81988ECBEB701F4EA593D34F28951B10ABF2.mft (raw, json) Hash identifier: QRlOnAZhjJk3OQZtr8vyTqNm2Zn959+pyQcykOlu0Ls= Subject key identifier: 25:92:F8:2B:D9:56:E8:A1:7F:28:9B:D1:49:DE:51:BF:D2:52:A6:1B Authority key identifier: 81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2 Certificate issuer: /CN=816C81988ECBEB701F4EA593D34F28951B10ABF2 Certificate serial: 3F0EFC3EAE8B762524395966FE3073A40EE6F229 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft Manifest number: AF Signing time: Fri 29 May 2026 18:58:04 +0000 Manifest this update: Fri 29 May 2026 18:53:04 +0000 Manifest next update: Sat 30 May 2026 21:01:04 +0000 Files and hashes: 1: 3130332e3130332e33362e302f32322d3232203d3e20313331353431.roa (hash: xcZBgro6gTw3A6GIg7z78vFpQLq7KHZet7uMhtkrnY0=) 2: 816C81988ECBEB701F4EA593D34F28951B10ABF2.crl (hash: GS5a5pIrN5tLIgeasJ4FYdgW3XCy2Aulz+/IcJPpd0I=) 3: 3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa (hash: 6URKjFRR2qwyPlFJN5f0XQRtR84QyHyhmK66ypB33K8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:0e:fc:3e:ae:8b:76:25:24:39:59:66:fe:30:73:a4:0e:e6:f2:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=816C81988ECBEB701F4EA593D34F28951B10ABF2 Validity Not Before: May 29 18:53:04 2026 GMT Not After : May 30 21:01:04 2026 GMT Subject: CN=2592F82BD956E8A17F289BD149DE51BFD252A61B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6b:66:55:19:15:17:3c:b7:7e:7c:04:bc:e4: 31:cc:97:86:f2:98:9c:4b:ce:55:03:64:ce:be:23: 49:a6:35:6c:68:48:ee:f5:12:cd:e9:2a:a5:36:af: d4:73:1d:3e:47:2c:60:17:ad:83:02:aa:0f:b5:54: c2:ac:15:e1:7c:d1:3e:f0:e2:7b:cf:6d:45:42:46: 60:c4:4b:38:1c:5a:a1:a9:d4:46:b5:9d:89:24:3b: 88:10:2b:e2:f0:4c:df:21:1f:aa:15:7c:3a:0a:5b: 40:51:90:72:60:80:ff:f5:52:fe:5c:bc:c4:46:a8: d9:0b:d8:ee:db:32:b2:ed:0b:45:b1:c5:fe:07:db: 7d:35:a8:dc:8c:54:72:81:db:47:3a:98:bc:7e:1e: fe:87:da:97:dc:86:5e:38:32:24:e4:13:2a:22:b0: e8:22:68:72:c1:27:cf:02:9a:eb:b0:35:7d:0f:21: be:61:0f:c1:5e:5e:25:13:77:3e:5b:80:3c:63:0f: 7e:d8:dc:5c:c0:a6:03:00:75:f0:ba:54:a5:a9:a6: 03:a7:98:0e:f2:57:bf:12:72:bb:fd:8b:c2:f2:de: b1:33:a9:56:38:d7:d7:11:c6:aa:9a:57:af:6e:22: 33:6e:00:1f:65:e2:5e:96:cc:0a:70:a3:ff:e3:41: 4f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:92:F8:2B:D9:56:E8:A1:7F:28:9B:D1:49:DE:51:BF:D2:52:A6:1B X509v3 Authority Key Identifier: keyid:81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:6e:90:36:ef:b2:bf:b0:03:c9:16:0c:f7:08:c7:39:c6:b6: 98:9c:d3:8c:8d:55:a3:05:15:8b:90:60:a9:99:b0:ce:80:be: 30:21:cf:dc:5c:c7:34:b1:04:41:bd:b1:c8:73:86:3e:0d:8e: 15:5b:9e:d1:74:01:34:b2:a0:e0:61:7b:dc:c6:64:26:9d:e5: 23:1d:92:0f:2a:32:08:4f:21:41:28:48:51:87:ff:94:25:c8: ea:c8:83:d0:33:cb:2f:fe:12:d0:6b:f2:2c:4b:3a:fc:ab:85: 48:a1:25:b7:af:a0:e2:b9:83:a0:25:52:d3:11:9a:b5:35:b1: b3:8f:dd:26:ee:9e:e7:52:d7:40:58:65:ff:8c:69:d1:f2:f9: 72:e0:22:f2:29:78:a8:c9:44:f3:98:b4:d7:ef:e2:00:bf:6d: 4d:f6:81:cd:82:fb:25:72:92:bb:be:38:7b:63:73:e3:16:cc: 6d:68:c4:56:50:3d:13:a4:02:89:77:b6:8c:d3:f0:31:28:7d: a9:d8:53:0d:29:76:08:3e:ef:ec:3b:80:f4:d7:e8:be:1b:77: e1:75:3a:ee:b5:e8:b8:74:ba:a0:1e:dd:5c:1a:5d:18:ee:cf: 05:70:d5:9d:f5:02:b5:6c:3c:ce:93:86:c7:12:9c:77:e2:83: 38:44:d7:e4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPw78Pq6LdiUkOVlm/jBzpA7m8ikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE2QzgxOTg4RUNCRUI3MDFGNEVBNTkzRDM0RjI4OTUx QjEwQUJGMjAeFw0yNjA1MjkxODUzMDRaFw0yNjA1MzAyMTAxMDRaMDMxMTAvBgNV BAMTKDI1OTJGODJCRDk1NkU4QTE3RjI4OUJEMTQ5REU1MUJGRDI1MkE2MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCza2ZVGRUXPLd+fAS85DHMl4by mJxLzlUDZM6+I0mmNWxoSO71Es3pKqU2r9RzHT5HLGAXrYMCqg+1VMKsFeF80T7w 4nvPbUVCRmDESzgcWqGp1Ea1nYkkO4gQK+LwTN8hH6oVfDoKW0BRkHJggP/1Uv5c vMRGqNkL2O7bMrLtC0Wxxf4H2301qNyMVHKB20c6mLx+Hv6H2pfchl44MiTkEyoi sOgiaHLBJ88CmuuwNX0PIb5hD8FeXiUTdz5bgDxjD37Y3FzApgMAdfC6VKWppgOn mA7yV78Scrv9i8Ly3rEzqVY419cRxqqaV69uIjNuAB9l4l6WzApwo//jQU9BAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJZL4K9lW6KF/KJvRSd5Rv9JSphswHwYDVR0j BBgwFoAUgWyBmI7L63AfTqWT008olRsQq/IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTk0MzQyNy8wLzgxNkM4MTk4OEVDQkVCNzAxRjRFQTU5M0QzNEYy ODk1MUIxMEFCRjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODE2QzgxOTg4RUNCRUI3MDFGNEVBNTkzRDM0RjI4OTUxQjEwQUJGMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzE5NDM0MjcvMC84MTZDODE5ODhFQ0JF QjcwMUY0RUE1OTNEMzRGMjg5NTFCMTBBQkYyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFm6QNu+yv7AD yRYM9wjHOca2mJzTjI1VowUVi5BgqZmwzoC+MCHP3FzHNLEEQb2xyHOGPg2OFVue 0XQBNLKg4GF73MZkJp3lIx2SDyoyCE8hQShIUYf/lCXI6siD0DPLL/4S0GvyLEs6 /KuFSKElt6+g4rmDoCVS0xGatTWxs4/dJu6e51LXQFhl/4xp0fL5cuAi8il4qMlE 85i01+/iAL9tTfaBzYL7JXKSu744e2Nz4xbMbWjEVlA9E6QCiXe2jNPwMSh9qdhT DSl2CD7v7DuA9Nfovht34XU67rXouHS6oB7dXBpdGO7PBXDVnfUCtWw8zpOGxxKc d+KDOETX5A== -----END CERTIFICATE-----Generated at Fri May 29 22:05:22 2026 by rpki-client