$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft File: 16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft (raw, json) Hash identifier: S+lYzuK/b6g4WZraegFwdTE9Q7e28VUXTbZVKe98Y7A= Subject key identifier: 8F:4C:F3:D1:F0:4C:D2:EC:35:FC:C1:A4:02:59:AE:50:02:50:80:64 Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Certificate serial: 33A5982CBB9A16BBFBEB6D3941EBE2BEFB959879 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft Manifest number: 72 Signing time: Tue 07 Jul 2026 07:38:39 +0000 Manifest this update: Tue 07 Jul 2026 07:33:39 +0000 Manifest next update: Wed 08 Jul 2026 09:48:39 +0000 Files and hashes: 1: 16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl (hash: FcsKQBiCdAkylcV4qHku278hzDnffKZMFqd6rLkwtTU=) 2: AS56040.roa (hash: wyLNjEr28XWMaCIeJV3ttVZdaqqq9B+3UZMGGkeItow=) 3: AS136958.roa (hash: 5NVMdMzPvY4Sfxb4/r3IMRajbOXIUyEqGrPk010/sPY=) 4: AS0.roa (hash: Oer0Yd953gEJm6UmIY9whhn9mB9MvyZJkfQPYXw4mx4=) 5: AS58466.roa (hash: r7bGmLBfvhXYayeMtM0xTPcAHPRkmPDxrEy0xZn8OrU=) 6: AS63646.roa (hash: Ez4I298YPRwCv7r5zs5RQuk6RtwDSDsw4e9i9AxGQ58=) 7: AS23724.roa (hash: CQwubKmfLykOjSxoDWhA0d5uBDLTWUR9Ssr5fYI/K9k=) 8: AS63648.roa (hash: 4HYSvuQVQQBqIHTS6osBvaTfMDnfx/q3IKZHUPbSGzo=) 9: AS13335.roa (hash: 9Hng9d3Qz7Lydzkg5+hOCdUoBzRae66YdJRsgOh6mY0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 07:06:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a5:98:2c:bb:9a:16:bb:fb:eb:6d:39:41:eb:e2:be:fb:95:98:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Validity Not Before: Jul 7 07:33:39 2026 GMT Not After : Jul 8 09:48:39 2026 GMT Subject: CN=8F4CF3D1F04CD2EC35FCC1A40259AE5002508064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d9:c4:c8:44:47:ef:93:9e:83:08:44:02:24: 56:c6:a1:a5:3a:be:e2:9e:30:c2:4c:53:c6:0f:94: 98:c0:12:39:67:3e:0a:e8:37:27:28:c4:3c:b0:02: a9:84:7f:d4:4e:09:3c:ec:09:be:ec:28:c9:51:e3: 52:1d:f6:8f:67:91:0f:ee:2e:58:7b:52:4a:12:34: 48:5f:63:87:f2:59:3e:36:5b:df:7a:5e:d2:33:fe: 9e:79:23:40:7a:9e:62:ae:fb:05:20:08:66:36:15: 42:77:a5:72:91:5d:50:ff:21:75:73:1a:d9:89:0a: 93:35:09:90:02:0f:c9:0c:19:53:89:69:ec:07:d4: b4:c4:d8:1e:22:55:0e:1c:7b:49:79:70:52:d4:c5: e3:be:1b:7f:5f:6b:a7:fe:5d:04:1c:f9:54:81:27: 9e:76:ff:75:f4:17:25:3d:be:23:1d:5a:3e:e7:25: 00:c8:86:02:0d:c8:60:fe:9d:f7:ce:93:9b:6c:f9: fe:96:23:c4:fd:85:39:6e:e4:32:35:07:74:91:eb: c6:d3:28:b5:5d:c1:77:7e:a1:57:d7:11:42:6a:87: bd:4d:37:be:c4:f2:73:44:15:89:34:40:63:c0:52: 00:a7:3e:73:ef:18:c1:52:e0:95:d4:a3:df:61:8d: ed:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4C:F3:D1:F0:4C:D2:EC:35:FC:C1:A4:02:59:AE:50:02:50:80:64 X509v3 Authority Key Identifier: keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:66:ff:be:0a:49:12:cc:61:bf:31:27:9e:0b:cf:d2:9e:7f: f6:7c:c9:50:51:89:99:e0:92:a2:a3:1d:51:52:ad:bf:05:81: 69:72:a2:21:dd:e2:2a:a6:74:72:69:49:52:40:66:92:11:ec: 36:8b:e7:0d:60:24:a4:04:cd:a2:fa:f6:d1:d5:75:11:a1:50: e1:89:f6:fa:30:30:b3:40:cd:c7:6f:0b:86:5d:64:10:42:25: e7:4f:bb:bd:46:ce:e7:62:a7:92:bd:d4:a3:ec:56:12:cb:96: af:67:0e:bc:c4:61:85:de:fb:51:81:35:f2:45:d7:cf:a0:0d: 05:52:af:c4:ba:63:21:0a:95:d2:9f:9d:a8:6d:58:f2:be:55: c9:eb:ca:9b:9e:61:19:75:79:63:e4:dd:4e:5b:7e:bf:ed:03: 5e:3f:3f:9d:ca:d3:a4:b2:f4:08:d8:a5:d0:7c:6c:dc:98:1e: be:78:31:1e:31:f3:45:ea:20:ff:e0:62:37:83:90:c4:b2:99: 2c:85:d6:f7:ae:33:e2:f7:43:fb:96:35:93:b8:ed:cf:9d:3d: c4:63:fd:85:c2:fd:ae:0d:f2:bc:8c:e0:b6:09:b3:2d:e1:ed: 87:6e:3e:44:6c:7f:cb:de:54:e8:69:97:f9:e9:f7:35:95:7e: 50:cb:4f:14 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUM6WYLLuaFrv76205QevivvuVmHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB N0QxNEI0MDAeFw0yNjA3MDcwNzMzMzlaFw0yNjA3MDgwOTQ4MzlaMDMxMTAvBgNV BAMTKDhGNENGM0QxRjA0Q0QyRUMzNUZDQzFBNDAyNTlBRTUwMDI1MDgwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb2cTIREfvk56DCEQCJFbGoaU6 vuKeMMJMU8YPlJjAEjlnPgroNycoxDywAqmEf9ROCTzsCb7sKMlR41Id9o9nkQ/u Llh7UkoSNEhfY4fyWT42W996XtIz/p55I0B6nmKu+wUgCGY2FUJ3pXKRXVD/IXVz GtmJCpM1CZACD8kMGVOJaewH1LTE2B4iVQ4ce0l5cFLUxeO+G39fa6f+XQQc+VSB J552/3X0FyU9viMdWj7nJQDIhgINyGD+nffOk5ts+f6WI8T9hTlu5DI1B3SR68bT KLVdwXd+oVfXEUJqh71NN77E8nNEFYk0QGPAUgCnPnPvGMFS4JXUo99hje05AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUj0zz0fBM0uw1/MGkAlmuUAJQgGQwHwYDVR0j BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk2MDI2MzYzNjcyMDAyNTkvMC8xNjU3Njc1NkYwQjAz QkY3NUVDRDZCQzQ0OUEzQkVGN0E3RDE0QjQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE2b/vgpJEsxh vzEnngvP0p5/9nzJUFGJmeCSoqMdUVKtvwWBaXKiId3iKqZ0cmlJUkBmkhHsNovn DWAkpATNovr20dV1EaFQ4Yn2+jAws0DNx28Lhl1kEEIl50+7vUbO52Knkr3Uo+xW EsuWr2cOvMRhhd77UYE18kXXz6ANBVKvxLpjIQqV0p+dqG1Y8r5VyevKm55hGXV5 Y+TdTlt+v+0DXj8/ncrTpLL0CNil0Hxs3JgevngxHjHzReog/+BiN4OQxLKZLIXW 964z4vdD+5Y1k7jtz509xGP9hcL9rg3yvIzgtgmzLeHth24+RGx/y95U6GmX+en3 NZV+UMtPFA== -----END CERTIFICATE-----Generated at Tue Jul 7 10:46:53 2026 by rpki-client