$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft File: 816C81988ECBEB701F4EA593D34F28951B10ABF2.mft (raw, json) Hash identifier: BFp13mbBN7yXHJ6e3oLAgijbuJgiYskTFCXpOlcX+Vg= Subject key identifier: CD:54:A8:A5:87:56:8B:63:7A:4E:35:29:5A:86:CF:3F:F1:2E:F2:F4 Authority key identifier: 81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2 Certificate issuer: /CN=816C81988ECBEB701F4EA593D34F28951B10ABF2 Certificate serial: 4F20CA767B6E54BD03FC9AF5085B2AE174FE53DF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft Manifest number: 0127 Signing time: Fri 28 Aug 2026 06:47:53 +0000 Manifest this update: Fri 28 Aug 2026 06:42:53 +0000 Manifest next update: Mon 31 Aug 2026 09:33:53 +0000 Files and hashes: 1: 3130332e3130332e33362e302f32342d3234203d3e20313331353431.roa (hash: 6URKjFRR2qwyPlFJN5f0XQRtR84QyHyhmK66ypB33K8=) 2: 816C81988ECBEB701F4EA593D34F28951B10ABF2.crl (hash: CiDIKC/xRd+zeZ8UkzBTDOp6tazbOdYugX3eKe4XcVY=) 3: 3130332e3130332e33362e302f32322d3232203d3e20313331353431.roa (hash: xcZBgro6gTw3A6GIg7z78vFpQLq7KHZet7uMhtkrnY0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 09:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:20:ca:76:7b:6e:54:bd:03:fc:9a:f5:08:5b:2a:e1:74:fe:53:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=816C81988ECBEB701F4EA593D34F28951B10ABF2 Validity Not Before: Aug 28 06:42:53 2026 GMT Not After : Aug 31 09:33:53 2026 GMT Subject: CN=CD54A8A587568B637A4E35295A86CF3FF12EF2F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:19:04:4c:c4:ce:0b:fe:80:00:17:01:0a:c9: a6:6d:61:04:5d:ab:2c:24:fe:3e:1f:10:7f:1c:8b: fd:e1:8c:03:5e:0b:b3:a7:cd:d2:e7:c8:c0:81:99: 8c:d3:54:4e:1e:e6:75:21:f6:a4:94:fb:33:62:4e: 61:27:4b:6e:b4:c7:7a:bf:22:49:7f:cb:9c:42:3b: c8:1d:7f:ad:f5:ad:66:da:9c:45:51:26:83:ed:e2: 83:3d:cd:4f:a1:b2:7f:e1:f7:a7:c9:60:95:fa:f7: bf:3d:a1:eb:76:0d:ed:5e:de:c2:aa:c3:c6:98:3d: 0b:df:a0:d3:15:06:a1:72:10:ab:68:9c:6a:38:27: 76:39:c2:cc:fb:c8:e6:74:0f:b7:fe:ea:ed:a1:27: 79:91:a7:e5:9c:ba:f5:bc:7e:f1:d7:f6:59:ca:71: a1:c9:65:92:6e:22:ed:00:e9:9d:5d:fc:e7:a1:26: 78:48:6d:23:f6:b4:b8:93:08:19:b9:ec:cc:b1:97: 0b:39:8b:31:4a:d5:fc:47:79:83:12:82:7f:c8:af: c7:30:97:90:24:13:c9:2e:f2:da:68:53:56:20:65: 72:1c:9f:7f:a8:3c:bf:f1:da:a0:43:3f:79:51:45: 6b:1d:d9:44:fb:bb:88:ee:24:45:b4:9e:e9:44:00: 7c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:54:A8:A5:87:56:8B:63:7A:4E:35:29:5A:86:CF:3F:F1:2E:F2:F4 X509v3 Authority Key Identifier: keyid:81:6C:81:98:8E:CB:EB:70:1F:4E:A5:93:D3:4F:28:95:1B:10:AB:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/816C81988ECBEB701F4EA593D34F28951B10ABF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221971943427/0/816C81988ECBEB701F4EA593D34F28951B10ABF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b7:b9:ed:4f:a1:e7:db:46:f9:68:ca:68:04:83:f9:23:78: 7d:bf:64:f6:49:4a:10:bd:ed:4f:c6:c0:a1:e1:fe:5e:63:24: ed:05:e7:ee:25:44:c2:b3:36:d9:d5:4b:41:4f:0b:de:b3:1b: f0:09:02:41:64:f6:e9:06:e0:e5:4b:bc:a3:4a:e2:37:13:67: d4:5a:38:c1:d2:b6:51:1b:c9:d5:d3:bb:e4:61:4e:b0:22:4e: 24:3d:68:13:fe:13:91:c8:78:bb:d0:7f:dd:35:17:c9:69:4b: a3:45:33:11:62:9f:07:8a:0b:80:1c:a4:2a:56:f2:d0:ab:38: d5:88:c8:bc:9c:0f:90:96:31:37:3f:fa:73:6b:b9:5d:66:89: 3c:41:94:a7:4f:9c:0c:bd:c5:b7:06:4c:55:d6:51:77:c3:30: 2d:34:7d:be:d1:6d:18:fe:31:9e:31:9f:ca:f8:cc:bf:c9:01: d7:9e:a5:11:ba:d0:fe:eb:6e:d8:09:a1:ec:60:c9:74:0f:4b: 63:80:0e:a1:05:23:1f:08:da:f4:7f:a6:3b:e7:75:0e:ea:a1: ad:8e:e1:5a:21:e4:af:8a:76:8d:21:77:50:eb:22:52:9a:7a: 75:9a:14:ca:ef:29:cf:11:28:4a:4f:4e:39:4c:02:8b:4e:58: 43:83:7d:6c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTyDKdntuVL0D/Jr1CFsq4XT+U98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE2QzgxOTg4RUNCRUI3MDFGNEVBNTkzRDM0RjI4OTUx QjEwQUJGMjAeFw0yNjA4MjgwNjQyNTNaFw0yNjA4MzEwOTMzNTNaMDMxMTAvBgNV BAMTKENENTRBOEE1ODc1NjhCNjM3QTRFMzUyOTVBODZDRjNGRjEyRUYyRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGQRMxM4L/oAAFwEKyaZtYQRd qywk/j4fEH8ci/3hjANeC7OnzdLnyMCBmYzTVE4e5nUh9qSU+zNiTmEnS260x3q/ Ikl/y5xCO8gdf631rWbanEVRJoPt4oM9zU+hsn/h96fJYJX69789oet2De1e3sKq w8aYPQvfoNMVBqFyEKtonGo4J3Y5wsz7yOZ0D7f+6u2hJ3mRp+WcuvW8fvHX9lnK caHJZZJuIu0A6Z1d/OehJnhIbSP2tLiTCBm57Myxlws5izFK1fxHeYMSgn/Ir8cw l5AkE8ku8tpoU1YgZXIcn3+oPL/x2qBDP3lRRWsd2UT7u4juJEW0nulEAHwXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzVSopYdWi2N6TjUpWobPP/Eu8vQwHwYDVR0j BBgwFoAUgWyBmI7L63AfTqWT008olRsQq/IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MTk0MzQyNy8wLzgxNkM4MTk4OEVDQkVCNzAxRjRFQTU5M0QzNEYy ODk1MUIxMEFCRjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODE2QzgxOTg4RUNCRUI3MDFGNEVBNTkzRDM0RjI4OTUxQjEwQUJGMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODMyMjE5NzE5NDM0MjcvMC84MTZDODE5ODhFQ0JF QjcwMUY0RUE1OTNEMzRGMjg5NTFCMTBBQkYyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlre57U+h59tG +WjKaASD+SN4fb9k9klKEL3tT8bAoeH+XmMk7QXn7iVEwrM22dVLQU8L3rMb8AkC QWT26Qbg5Uu8o0riNxNn1Fo4wdK2URvJ1dO75GFOsCJOJD1oE/4Tkch4u9B/3TUX yWlLo0UzEWKfB4oLgBykKlby0Ks41YjIvJwPkJYxNz/6c2u5XWaJPEGUp0+cDL3F twZMVdZRd8MwLTR9vtFtGP4xnjGfyvjMv8kB156lEbrQ/utu2Amh7GDJdA9LY4AO oQUjHwja9H+mO+d1DuqhrY7hWiHkr4p2jSF3UOsiUpp6dZoUyu8pzxEoSk9OOUwC i05YQ4N9bA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:23 2026 by rpki-client