$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft File: 16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft (raw, json) Hash identifier: 8EhiqgwZtWc8N8LkuU+KJgfkPmjzdIdizUuCdy6s0Sg= Subject key identifier: CD:11:D8:5E:64:47:24:59:2F:8C:8E:2F:7C:5C:81:81:82:47:50:22 Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Certificate serial: 6C08EF6AF39A538A9CAF9E9164261896697F4B43 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft Manifest number: AF Signing time: Fri 21 Aug 2026 16:40:09 +0000 Manifest this update: Fri 21 Aug 2026 16:35:09 +0000 Manifest next update: Sat 22 Aug 2026 17:36:09 +0000 Files and hashes: 1: AS58466.roa (hash: r7bGmLBfvhXYayeMtM0xTPcAHPRkmPDxrEy0xZn8OrU=) 2: 16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl (hash: MlUTBoswgIC0fBv6i3rZmi8JyHFxPBbGMTTSBlH8mk8=) 3: AS136958.roa (hash: 5NVMdMzPvY4Sfxb4/r3IMRajbOXIUyEqGrPk010/sPY=) 4: AS13335.roa (hash: 9Hng9d3Qz7Lydzkg5+hOCdUoBzRae66YdJRsgOh6mY0=) 5: AS63646.roa (hash: Ez4I298YPRwCv7r5zs5RQuk6RtwDSDsw4e9i9AxGQ58=) 6: AS0.roa (hash: Oer0Yd953gEJm6UmIY9whhn9mB9MvyZJkfQPYXw4mx4=) 7: AS63648.roa (hash: 4HYSvuQVQQBqIHTS6osBvaTfMDnfx/q3IKZHUPbSGzo=) 8: AS23724.roa (hash: CQwubKmfLykOjSxoDWhA0d5uBDLTWUR9Ssr5fYI/K9k=) 9: AS56040.roa (hash: wyLNjEr28XWMaCIeJV3ttVZdaqqq9B+3UZMGGkeItow=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 15:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:08:ef:6a:f3:9a:53:8a:9c:af:9e:91:64:26:18:96:69:7f:4b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Validity Not Before: Aug 21 16:35:09 2026 GMT Not After : Aug 22 17:36:09 2026 GMT Subject: CN=CD11D85E644724592F8C8E2F7C5C818182475022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f5:16:fe:50:f1:a3:6c:cb:33:db:84:1f:4a: 40:35:77:74:13:c5:87:89:6b:cb:71:8a:ab:a0:f3: 06:20:55:5a:89:96:df:0c:6d:08:46:ab:a9:e8:71: 2c:f9:df:33:7b:7b:a8:2f:35:a6:2d:15:23:d8:87: a4:c6:08:0a:63:ff:6c:a8:e9:d9:9b:4b:11:45:77: 54:5c:b5:1a:91:49:fc:4e:a9:1c:a7:20:b0:b2:02: ef:db:a6:20:04:61:b9:fe:16:a8:f5:d5:78:59:20: 52:12:5f:b5:85:c1:98:92:0c:9d:0e:80:2f:eb:34: 3d:d6:43:95:26:c2:89:79:c8:e7:74:9b:96:12:6d: 6d:9d:32:61:e6:de:f4:57:27:8a:1e:e9:a3:06:b9: 0a:bd:c4:0c:7b:94:d7:37:86:69:23:0c:35:78:69: 41:f1:12:eb:91:83:1a:a2:5e:b4:34:d2:49:7b:6b: fa:11:77:b2:48:00:79:07:33:1a:67:3c:c4:a6:c7: cd:a5:6d:e0:d2:a8:79:94:e2:2e:ea:d9:4f:94:87: 05:fe:14:e9:36:0f:87:65:84:99:5d:0e:42:90:e0: d1:59:76:ec:65:68:d9:6f:1f:29:40:ab:6f:50:c2: 3a:d0:bb:34:2e:d1:8f:9d:b3:74:d3:a5:1c:bb:7d: c0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:11:D8:5E:64:47:24:59:2F:8C:8E:2F:7C:5C:81:81:82:47:50:22 X509v3 Authority Key Identifier: keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:4a:65:7f:84:dd:64:91:a7:a8:65:2e:67:d6:44:50:6a:19: 25:64:d8:63:28:e8:14:af:15:34:cf:54:75:f3:7e:e9:81:86: 77:fd:77:da:dd:07:e0:e4:68:cf:34:d9:c2:dd:6b:76:6c:ff: 3e:a4:f8:c6:5b:af:2b:e7:69:6a:f3:07:36:1a:8d:9e:ea:f6: 8c:3a:31:e0:75:26:b2:fd:50:ec:de:fb:a1:d2:5a:3d:8b:4c: c5:b8:f2:11:b5:66:83:fd:56:ea:b6:58:c0:4a:7c:c7:d4:fc: 10:68:ed:27:95:8e:c7:7d:09:d4:fa:14:38:99:70:cb:18:3d: 00:49:e2:e1:c6:91:18:69:84:35:71:e1:98:1e:7d:5b:9a:09: 67:6f:7a:52:de:fb:30:58:1f:f6:f5:f6:4a:80:dc:ae:e5:44: 3d:6e:9e:0d:1d:bf:24:53:8f:f0:ea:66:80:b1:76:48:75:37: 62:69:8f:bf:ca:18:8d:06:b1:8e:69:11:ac:9c:5b:43:c7:6d: 53:44:ac:8d:15:8b:a0:d3:d2:96:0d:df:ca:85:00:b7:6d:c3: 62:db:b2:e3:73:e2:b5:a4:5b:f3:ab:17:b7:5c:2b:2e:13:63: 14:7d:b3:d4:ed:d8:ba:32:d2:97:1b:5b:96:da:bb:84:15:c4: ef:4c:81:9e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbAjvavOaU4qcr56RZCYYlml/S0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB N0QxNEI0MDAeFw0yNjA4MjExNjM1MDlaFw0yNjA4MjIxNzM2MDlaMDMxMTAvBgNV BAMTKENEMTFEODVFNjQ0NzI0NTkyRjhDOEUyRjdDNUM4MTgxODI0NzUwMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ9Rb+UPGjbMsz24QfSkA1d3QT xYeJa8txiqug8wYgVVqJlt8MbQhGq6nocSz53zN7e6gvNaYtFSPYh6TGCApj/2yo 6dmbSxFFd1RctRqRSfxOqRynILCyAu/bpiAEYbn+Fqj11XhZIFISX7WFwZiSDJ0O gC/rND3WQ5Umwol5yOd0m5YSbW2dMmHm3vRXJ4oe6aMGuQq9xAx7lNc3hmkjDDV4 aUHxEuuRgxqiXrQ00kl7a/oRd7JIAHkHMxpnPMSmx82lbeDSqHmU4i7q2U+UhwX+ FOk2D4dlhJldDkKQ4NFZduxlaNlvHylAq29QwjrQuzQu0Y+ds3TTpRy7fcB/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzRHYXmRHJFkvjI4vfFyBgYJHUCIwHwYDVR0j BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk2MDI2MzYzNjcyMDAyNTkvMC8xNjU3Njc1NkYwQjAz QkY3NUVDRDZCQzQ0OUEzQkVGN0E3RDE0QjQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA30plf4TdZJGn qGUuZ9ZEUGoZJWTYYyjoFK8VNM9UdfN+6YGGd/132t0H4ORozzTZwt1rdmz/PqT4 xluvK+dpavMHNhqNnur2jDox4HUmsv1Q7N77odJaPYtMxbjyEbVmg/1W6rZYwEp8 x9T8EGjtJ5WOx30J1PoUOJlwyxg9AEni4caRGGmENXHhmB59W5oJZ296Ut77MFgf 9vX2SoDcruVEPW6eDR2/JFOP8OpmgLF2SHU3YmmPv8oYjQaxjmkRrJxbQ8dtU0Ss jRWLoNPSlg3fyoUAt23DYtuy43PitaRb86sXt1wrLhNjFH2z1O3YujLSlxtbltq7 hBXE70yBng== -----END CERTIFICATE-----Generated at Fri Aug 21 23:10:52 2026 by rpki-client