$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft File: 16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft (raw, json) Hash identifier: d84QSQXc19UOH5Hoc9ZwksADrZI+4WQc8CH/onFTAvE= Subject key identifier: 51:23:16:FC:F0:11:5D:58:38:67:08:3B:E3:8F:25:A2:85:E8:DA:F9 Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Certificate serial: 436E24DEBBE55BD8ADDC5614193F6C28B37FF840 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft Manifest number: C9 Signing time: Tue 06 Oct 2026 13:05:13 +0000 Manifest this update: Tue 06 Oct 2026 13:00:13 +0000 Manifest next update: Sat 10 Oct 2026 01:02:13 +0000 Files and hashes: 1: AS0.roa (hash: Oer0Yd953gEJm6UmIY9whhn9mB9MvyZJkfQPYXw4mx4=) 2: AS56040.roa (hash: wyLNjEr28XWMaCIeJV3ttVZdaqqq9B+3UZMGGkeItow=) 3: AS13335.roa (hash: 9Hng9d3Qz7Lydzkg5+hOCdUoBzRae66YdJRsgOh6mY0=) 4: AS136958.roa (hash: 5NVMdMzPvY4Sfxb4/r3IMRajbOXIUyEqGrPk010/sPY=) 5: AS58466.roa (hash: r7bGmLBfvhXYayeMtM0xTPcAHPRkmPDxrEy0xZn8OrU=) 6: AS63646.roa (hash: Ez4I298YPRwCv7r5zs5RQuk6RtwDSDsw4e9i9AxGQ58=) 7: AS63648.roa (hash: 4HYSvuQVQQBqIHTS6osBvaTfMDnfx/q3IKZHUPbSGzo=) 8: AS23724.roa (hash: CQwubKmfLykOjSxoDWhA0d5uBDLTWUR9Ssr5fYI/K9k=) 9: 16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl (hash: eV8XUzqJljijsbWD0DtWp8Q2cQ3WRIWX9pL+JmhZo14=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 22:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:6e:24:de:bb:e5:5b:d8:ad:dc:56:14:19:3f:6c:28:b3:7f:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Oct 10 01:02:13 2026 GMT Subject: CN=512316FCF0115D583867083BE38F25A285E8DAF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9c:bf:28:bb:75:bd:9b:1e:9f:ee:27:bf:e8: 5f:dd:fb:e3:1c:4c:ac:94:c6:a4:88:08:fc:d7:32: 19:a0:18:fa:6d:2e:08:b1:d8:18:6b:31:3b:3d:3d: a7:30:9d:1a:09:ba:2c:98:79:ad:98:9c:39:46:6d: 1d:1b:b0:15:29:b1:81:3e:a7:2e:2b:49:d0:13:c4: 33:36:fd:47:5c:98:cb:4d:e3:4a:39:67:0e:70:b3: 11:b3:fe:67:81:5d:55:fe:fb:5d:8e:4a:76:c0:5c: 2f:67:16:22:9b:84:22:a3:b7:c1:d6:a5:49:9d:9f: dd:d1:9a:f9:48:20:2a:f2:75:01:db:82:53:c5:c9: 17:d3:fa:5a:d2:c8:ab:a5:2c:e8:27:1e:bd:25:88: 35:78:e3:28:a1:e1:fa:f6:0c:88:02:01:1f:ac:f3: 2b:9c:f3:94:03:46:a8:84:36:74:84:38:6b:ba:bb: bd:d7:2e:13:65:12:80:48:1a:f1:8a:9a:99:05:c2: 40:2c:7c:81:20:81:a9:fc:cf:e6:76:65:10:20:4c: c3:ba:13:0e:2e:85:f0:21:0b:2a:05:a4:66:2f:80: f5:c4:92:c6:3c:66:6e:ca:dc:99:68:dc:fa:bf:7e: eb:16:89:93:de:ed:fa:3c:7a:9d:3b:9b:98:04:c0: 26:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:23:16:FC:F0:11:5D:58:38:67:08:3B:E3:8F:25:A2:85:E8:DA:F9 X509v3 Authority Key Identifier: keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:0d:b4:a8:07:e4:69:73:e6:c6:78:9e:01:56:0e:ee:a1:ff: d5:b8:c3:8c:65:83:a0:18:7f:da:44:98:6b:48:69:06:98:0a: d0:41:b6:33:26:b0:b1:ae:aa:94:5d:fd:57:5f:ae:9d:2e:7b: 77:47:4f:d1:bf:03:26:68:91:68:c6:1a:ad:3b:c2:b9:21:10: 6a:13:a4:6c:c8:7d:66:3f:f1:e6:17:81:b9:f8:a1:9d:f8:46: 70:95:e4:a9:40:c7:62:82:a6:7d:66:83:37:00:41:f1:24:a2: 98:cd:ab:46:05:95:40:09:59:9a:4b:79:4f:79:df:a1:57:e9: 65:ba:eb:8c:2b:ce:5a:f5:bf:84:f1:4b:b7:86:42:d0:4f:09: 12:06:cf:77:30:24:8e:b7:47:b4:54:34:58:58:85:e3:90:88: 0c:b0:a5:da:11:98:81:1b:1f:af:8f:03:7c:64:f1:1f:b0:f7: fc:05:79:5b:e1:2e:f6:58:ee:ef:d5:d8:12:23:61:c2:e3:a5: 87:b3:6a:d2:99:a9:5c:fd:a1:92:8c:4e:cb:0f:ee:44:06:89: 8c:7d:df:6f:70:27:82:d6:a6:ef:e2:eb:d8:ad:d6:ee:20:8c: 37:d3:84:8d:b6:3d:4b:23:53:48:50:db:88:a8:4d:29:a0:60: 10:a6:e9:6d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQ24k3rvlW9it3FYUGT9sKLN/+EAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB N0QxNEI0MDAeFw0yNjEwMDYxMzAwMTNaFw0yNjEwMTAwMTAyMTNaMDMxMTAvBgNV BAMTKDUxMjMxNkZDRjAxMTVENTgzODY3MDgzQkUzOEYyNUEyODVFOERBRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRnL8ou3W9mx6f7ie/6F/d++Mc TKyUxqSICPzXMhmgGPptLgix2BhrMTs9PacwnRoJuiyYea2YnDlGbR0bsBUpsYE+ py4rSdATxDM2/UdcmMtN40o5Zw5wsxGz/meBXVX++12OSnbAXC9nFiKbhCKjt8HW pUmdn93RmvlIICrydQHbglPFyRfT+lrSyKulLOgnHr0liDV44yih4fr2DIgCAR+s 8yuc85QDRqiENnSEOGu6u73XLhNlEoBIGvGKmpkFwkAsfIEggan8z+Z2ZRAgTMO6 Ew4uhfAhCyoFpGYvgPXEksY8Zm7K3Jlo3Pq/fusWiZPe7fo8ep07m5gEwCaTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUSMW/PARXVg4Zwg7448looXo2vkwHwYDVR0j BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTk2MDI2MzYzNjcyMDAyNTkvMC8xNjU3Njc1NkYwQjAz QkY3NUVDRDZCQzQ0OUEzQkVGN0E3RDE0QjQwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArA20qAfkaXPm xnieAVYO7qH/1bjDjGWDoBh/2kSYa0hpBpgK0EG2Myawsa6qlF39V1+unS57d0dP 0b8DJmiRaMYarTvCuSEQahOkbMh9Zj/x5heBufihnfhGcJXkqUDHYoKmfWaDNwBB 8SSimM2rRgWVQAlZmkt5T3nfoVfpZbrrjCvOWvW/hPFLt4ZC0E8JEgbPdzAkjrdH tFQ0WFiF45CIDLCl2hGYgRsfr48DfGTxH7D3/AV5W+Eu9lju79XYEiNhwuOlh7Nq 0pmpXP2hkoxOyw/uRAaJjH3fb3Angtam7+Lr2K3W7iCMN9OEjbY9SyNTSFDbiKhN KaBgEKbpbQ== -----END CERTIFICATE-----Generated at Thu Oct 8 01:31:19 2026 by rpki-client