$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft File: 16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft (raw, json) Hash identifier: nZAu3r5bEpugVbHFj6lMpWKFCz6opXUHpM+G/RSVJhw= Subject key identifier: 3F:F5:81:8A:42:58:1A:2A:28:E3:94:57:4C:A2:D9:45:8E:58:42:09 Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Certificate serial: 560862E5DD28BABB222FCD34B56AF4C87B7A1CA7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft Manifest number: 33 Signing time: Fri 22 May 2026 12:52:03 +0000 Manifest this update: Fri 22 May 2026 12:47:03 +0000 Manifest next update: Sat 23 May 2026 14:34:03 +0000 Files and hashes: 1: AS63648.roa (hash: /u/urR9q2mNEOHxl1FFbkM4Ca3odHWCMxoBjQ1MNo20=) 2: AS63646.roa (hash: Ez4I298YPRwCv7r5zs5RQuk6RtwDSDsw4e9i9AxGQ58=) 3: 16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl (hash: F18GVmKOUS4nDOBN8RE35cYxpGzK8VqEHWCA5nyPpFE=) 4: AS13335.roa (hash: 9Hng9d3Qz7Lydzkg5+hOCdUoBzRae66YdJRsgOh6mY0=) 5: AS58466.roa (hash: r7bGmLBfvhXYayeMtM0xTPcAHPRkmPDxrEy0xZn8OrU=) 6: AS0.roa (hash: Oer0Yd953gEJm6UmIY9whhn9mB9MvyZJkfQPYXw4mx4=) 7: AS136958.roa (hash: 5NVMdMzPvY4Sfxb4/r3IMRajbOXIUyEqGrPk010/sPY=) 8: AS56040.roa (hash: wyLNjEr28XWMaCIeJV3ttVZdaqqq9B+3UZMGGkeItow=) 9: AS23724.roa (hash: CQwubKmfLykOjSxoDWhA0d5uBDLTWUR9Ssr5fYI/K9k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 14:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:08:62:e5:dd:28:ba:bb:22:2f:cd:34:b5:6a:f4:c8:7b:7a:1c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Validity Not Before: May 22 12:47:03 2026 GMT Not After : May 23 14:34:03 2026 GMT Subject: CN=3FF5818A42581A2A28E394574CA2D9458E584209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d1:01:e9:e4:46:fd:8d:73:b8:2f:ff:0b:98: 77:f2:c3:04:3b:70:49:82:f7:c8:e7:7d:d6:a6:6f: 04:63:ce:6e:9a:8c:1c:1f:83:8b:c4:61:6b:54:aa: fa:0d:13:0d:d7:fb:ec:5e:ab:86:74:20:a3:63:c3: b3:fb:94:85:fa:9e:56:50:9f:78:7b:0c:23:23:1e: 30:f1:82:86:88:31:4f:82:f1:80:b9:5e:d9:f1:c7: 2b:79:d1:d5:2b:41:27:a1:63:59:c6:90:2d:bc:8a: 1d:0e:b0:36:e9:83:a5:d4:eb:e2:13:bf:b0:d1:3b: 3d:80:57:d9:cf:c8:be:04:48:61:38:03:3e:d1:48: 10:8d:6e:44:dd:7e:88:d3:c1:72:6b:31:d9:41:79: 35:12:4a:3f:e2:2c:b9:99:e9:9a:6c:6a:75:0e:f0: 6a:b9:85:b9:0e:9e:8e:f8:a6:4f:4a:40:b2:7a:6e: 66:01:4a:3d:ab:cd:c9:f6:00:12:6e:f5:06:94:45: ef:2e:84:4b:bc:e6:8e:06:ad:10:3f:c1:6f:39:92: 99:ae:2d:3b:c3:b1:50:8d:3c:23:40:36:79:9e:e1: 70:c5:8a:31:1a:7a:58:b1:65:a2:b9:f7:6c:4a:5b: d9:a8:50:0b:7a:85:31:65:20:1f:6c:2b:5d:48:0f: 5e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F5:81:8A:42:58:1A:2A:28:E3:94:57:4C:A2:D9:45:8E:58:42:09 X509v3 Authority Key Identifier: keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:f7:76:d3:a9:06:19:eb:66:bf:5b:dd:09:33:01:a4:c3:b6: 43:fc:d1:6c:54:5c:bc:41:7c:9b:9a:64:97:8c:8c:4d:f6:bd: 58:c3:dd:d3:eb:73:6b:2f:43:4d:90:69:02:e0:40:c2:9e:21: a2:96:40:8f:2b:5b:f3:45:92:79:72:8c:2c:9d:f8:3f:18:77: db:16:b8:2d:06:81:20:da:f8:4b:23:b8:1f:e5:bc:25:7d:92: 0f:aa:c9:46:f2:1b:25:3b:b4:eb:51:0c:57:ee:64:af:5e:0d: 18:06:dc:7b:9a:b8:c2:30:83:e4:17:5f:e6:b5:ab:ae:4e:96: ff:20:ba:10:a3:b2:3a:67:90:be:5a:60:e5:53:6a:fd:4a:70: fd:e5:bf:c1:c5:cd:01:03:10:e6:65:c4:12:87:4e:bc:fc:79: d9:f9:fc:ae:b1:b6:b4:22:92:cc:07:f8:03:27:59:ae:ad:d1: 7b:1b:43:4f:8d:34:2c:d5:04:79:48:d4:59:60:4c:8d:0f:a0: 9c:4e:e6:34:86:f8:9d:c0:39:cc:99:cd:70:64:50:a7:54:88: d7:65:e1:3e:c1:54:cf:77:c8:bf:c0:08:da:13:cb:25:2b:e9: c6:44:47:4b:a2:63:c8:22:03:80:87:92:26:07:dc:27:49:5f: e4:d6:f2:a0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVghi5d0oursiL800tWr0yHt6HKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB N0QxNEI0MDAeFw0yNjA1MjIxMjQ3MDNaFw0yNjA1MjMxNDM0MDNaMDMxMTAvBgNV BAMTKDNGRjU4MThBNDI1ODFBMkEyOEUzOTQ1NzRDQTJEOTQ1OEU1ODQyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC30QHp5Eb9jXO4L/8LmHfywwQ7 cEmC98jnfdambwRjzm6ajBwfg4vEYWtUqvoNEw3X++xeq4Z0IKNjw7P7lIX6nlZQ n3h7DCMjHjDxgoaIMU+C8YC5Xtnxxyt50dUrQSehY1nGkC28ih0OsDbpg6XU6+IT v7DROz2AV9nPyL4ESGE4Az7RSBCNbkTdfojTwXJrMdlBeTUSSj/iLLmZ6ZpsanUO 8Gq5hbkOno74pk9KQLJ6bmYBSj2rzcn2ABJu9QaURe8uhEu85o4GrRA/wW85kpmu LTvDsVCNPCNANnme4XDFijEaelixZaK592xKW9moUAt6hTFlIB9sK11ID17fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUP/WBikJYGioo45RXTKLZRY5YQgkwHwYDVR0j BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk2MDI2MzYzNjcyMDAyNTkvMC8xNjU3Njc1NkYwQjAz QkY3NUVDRDZCQzQ0OUEzQkVGN0E3RDE0QjQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArvd206kGGetm v1vdCTMBpMO2Q/zRbFRcvEF8m5pkl4yMTfa9WMPd0+tzay9DTZBpAuBAwp4hopZA jytb80WSeXKMLJ34Pxh32xa4LQaBINr4SyO4H+W8JX2SD6rJRvIbJTu061EMV+5k r14NGAbce5q4wjCD5Bdf5rWrrk6W/yC6EKOyOmeQvlpg5VNq/Upw/eW/wcXNAQMQ 5mXEEodOvPx52fn8rrG2tCKSzAf4AydZrq3RextDT400LNUEeUjUWWBMjQ+gnE7m NIb4ncA5zJnNcGRQp1SI12XhPsFUz3fIv8AI2hPLJSvpxkRHS6JjyCIDgIeSJgfc J0lf5NbyoA== -----END CERTIFICATE-----Generated at Sat May 23 03:44:44 2026 by rpki-client