
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
File: 816C81988ECBEB701F4EA593D34F28951B10ABF2.mft (raw, json)
Hash identifier: 5bmsvSwuTBedrg214gVz7KXxPKmfGjldmD75hfBlsgE=
Subject key identifier: 84:CF:71:81:4D:C1:A8:E2:47:40:79:36:E6:31:C4:86:FE:56:2C:8F
Authority key identifier: 81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2
Certificate issuer: /CN=816C81988ECBEB701F4EA593D34F28951B10ABF2
Certificate serial: 2223B7ADD1B7FFC1DE1E4D6390CB7F61D0F77B7C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
Manifest number: EB
Signing time: Tue 14 Jul 2026 03:25:18 +0000
Manifest this update: Tue 14 Jul 2026 03:20:18 +0000
Manifest next update: Wed 15 Jul 2026 05:15:18 +0000
Files and hashes: 1: 3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa (hash: 6URKjFRR2qwyPlFJN5f0XQRtR84QyHyhmK66ypB33K8=)
2: 3130332e3130332e33362e302f32322d3232203d3e20313331353431.roa (hash: xcZBgro6gTw3A6GIg7z78vFpQLq7KHZet7uMhtkrnY0=)
3: 816C81988ECBEB701F4EA593D34F28951B10ABF2.crl (hash: VBLwPy+i+ElsPgVED3nkKLOnOshK+rWKUSbWeryo10k=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl
rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 05:15:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:23:b7:ad:d1:b7:ff:c1:de:1e:4d:63:90:cb:7f:61:d0:f7:7b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816C81988ECBEB701F4EA593D34F28951B10ABF2
Validity
Not Before: Jul 14 03:20:18 2026 GMT
Not After : Jul 15 05:15:18 2026 GMT
Subject: CN=84CF71814DC1A8E247407936E631C486FE562C8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:ae:d5:2e:4a:88:40:f0:dc:be:38:c9:d0:
ea:e8:5c:86:1d:72:9e:9d:5c:49:65:e2:f3:3b:45:
c0:f5:5d:4a:ec:58:f8:29:5d:8b:b1:cf:d9:f7:d6:
c8:39:4e:c7:f8:f3:d0:3a:fe:79:e9:99:87:ee:ea:
61:a8:32:61:41:bc:e1:42:92:c7:ef:cc:ef:b9:b0:
44:d8:bc:fd:4a:c1:5b:46:18:bc:67:38:ab:10:18:
8f:1a:0c:a0:b7:82:0c:d4:ea:da:30:ba:68:42:e7:
92:25:fa:e9:95:e2:37:19:11:66:6e:96:ac:e8:d0:
2c:79:73:a4:16:1e:88:ad:15:e3:89:3c:7d:10:f2:
18:57:78:74:73:75:38:ce:f1:ce:fb:ed:55:0b:b2:
6a:03:02:27:67:cc:af:38:ef:cd:5c:78:7b:dc:51:
11:2d:d0:b7:81:3a:8b:30:2f:ea:b3:21:88:f6:0a:
c1:ec:ca:82:fb:68:3a:da:96:41:63:f5:a3:2e:af:
dd:03:3a:4a:15:6c:b1:e2:7c:8e:f5:49:51:c1:ab:
6e:d2:a5:7a:0b:34:1b:c8:b9:0a:bc:65:98:db:0e:
47:df:76:51:17:00:d8:a3:05:6f:4e:10:65:52:57:
69:8e:08:2f:1c:5c:96:76:fe:00:a8:ef:86:5b:0c:
dd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:CF:71:81:4D:C1:A8:E2:47:40:79:36:E6:31:C4:86:FE:56:2C:8F
X509v3 Authority Key Identifier:
keyid:81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:84:e9:4a:fb:19:8c:82:ce:26:93:25:81:c7:71:20:3b:95:
5f:30:c3:5c:73:2c:93:d1:9b:ca:59:70:0d:fd:8a:b2:5d:d6:
4f:cf:1e:3d:fa:68:07:35:6d:44:a9:e5:9c:b7:35:81:c3:5e:
fc:88:de:90:ba:dc:ec:4e:59:f4:f2:56:84:42:62:ab:91:3d:
9f:4b:6f:38:88:27:f6:a0:67:45:a9:ce:8d:72:ab:af:1d:e8:
6a:8b:0c:15:ff:8d:e7:be:e6:57:ff:83:47:f6:3b:cb:c6:88:
25:9a:1c:98:f4:72:32:b6:f9:fb:a2:10:32:ac:5d:cb:93:7b:
ee:ce:ae:c9:4a:f6:9f:fc:77:4e:b6:ab:f6:7f:09:e0:b9:3b:
99:dc:c8:e1:a1:75:d4:27:ba:66:d3:6e:37:e3:2d:67:c9:92:
9f:d9:51:25:c0:65:1f:64:57:3c:65:51:41:18:72:23:32:b9:
4f:a6:f7:dd:27:aa:a6:ba:eb:08:57:2a:4b:00:da:e9:c3:75:
fd:72:f6:94:76:db:6c:e4:90:c0:e2:a1:b8:b3:35:2c:c0:b6:
d6:c0:de:73:07:36:bd:b0:a9:25:2b:05:b6:48:07:9c:ee:1b:
83:e6:d5:3f:e5:74:4f:61:c3:26:ed:a9:0c:a1:93:c9:67:ca:
70:1f:25:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:04:16 2026 by rpki-client