$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft File: 727F645FC8FE158EB2755D7F914A4325882E78A0.mft (raw, json) Hash identifier: 1p4nD1jtvYncsiWpv7ng7x4/iRZ2eqWHkQa0bUoKgbU= Subject key identifier: 44:E5:70:5C:A8:0E:45:75:CA:24:2F:90:91:30:65:CE:62:83:41:03 Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0 Certificate issuer: /CN=727F645FC8FE158EB2755D7F914A4325882E78A0 Certificate serial: 575E57C0BE868E985B5DB1B92875EA75450BA6E7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 07:18:16 +0000 Manifest this update: Mon 02 Mar 2026 07:13:16 +0000 Manifest next update: Tue 03 Mar 2026 10:39:16 +0000 Files and hashes: 1: 727F645FC8FE158EB2755D7F914A4325882E78A0.crl (hash: Es4OQCiHuNrPH+qrhM9S/3xNrvTMlmf2lJS8dPBAJw0=) 2: 3230332e38332e31312e302f32342d3234203d3e20313332383833.roa (hash: OyoHEG8o3gNVgxiZc7NpaX+LGXqgquCj5WWVQUqvufA=) 3: 3230332e38332e31302e302f32342d3234203d3e20313332383833.roa (hash: FKZpZHJPFv7MN6aC3zTHDQHiGVZHy4K5UA40BFhhR10=) 4: 3230332e38332e382e302f32342d3234203d3e20313332383833.roa (hash: Gu5ie/X9E55m2Q6WtM52yvPaGRXbzNeYJ68hcvMny0U=) 5: 3230332e38332e392e302f32342d3234203d3e20313332383833.roa (hash: dHvh7EAR3ukAg4TNNo+1CAfQbE6hwuaVlWKsy7btzzw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:5e:57:c0:be:86:8e:98:5b:5d:b1:b9:28:75:ea:75:45:0b:a6:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0 Validity Not Before: Mar 2 07:13:16 2026 GMT Not After : Mar 3 10:39:16 2026 GMT Subject: CN=44E5705CA80E4575CA242F90913065CE62834103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:98:47:42:f0:68:81:fe:f1:cf:03:d5:ac:33: 22:9f:59:72:81:3e:90:b0:b1:9b:cc:a7:97:33:90: 3d:62:f6:ca:b1:c5:83:28:78:02:16:6f:ad:0e:48: 8f:18:28:25:22:69:d3:7c:78:5a:24:3a:90:a0:99: 2b:10:53:24:6a:65:7d:5a:ee:95:f3:9f:53:a3:de: db:8e:24:10:a3:2f:a1:44:a2:df:d9:ae:8d:fa:e9: 93:ac:41:f7:20:fa:9a:37:88:4b:5a:48:a8:51:30: 36:f2:de:5b:a6:e6:2c:bd:47:62:3f:d6:d5:c4:5b: 19:da:81:c6:26:70:36:d2:c0:b1:99:29:d7:94:8f: ba:16:66:73:51:a5:4a:eb:7a:bb:8d:1e:2a:c7:c3: b6:6e:67:fd:a6:4d:c7:c3:f1:5c:50:88:47:91:7b: 4b:0f:98:fa:f6:22:7b:aa:cf:c3:b6:60:e0:34:0e: 8e:9d:66:39:8e:de:43:de:d6:ee:0c:f5:dd:cb:7b: 5a:26:ed:20:04:22:9e:1a:45:44:00:8e:20:02:dd: ec:06:6e:7d:42:c6:3e:e6:df:92:5a:e2:97:cf:91: af:73:df:a6:e5:2e:d8:84:ec:c3:02:d0:4b:24:ae: 7d:c7:61:d7:85:c3:a1:d2:43:8f:08:13:15:b7:fa: fb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E5:70:5C:A8:0E:45:75:CA:24:2F:90:91:30:65:CE:62:83:41:03 X509v3 Authority Key Identifier: keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:9a:cd:54:11:ec:73:8b:ba:5d:6c:ef:02:d1:4c:7c:6f:d2: 76:43:c5:61:9d:92:e5:0d:bd:26:94:05:e9:af:bd:48:03:54: d2:c5:86:10:1f:64:67:05:51:99:92:e4:f2:22:d5:66:94:d2: 19:cb:21:af:c7:58:07:a7:63:52:5d:6d:77:d5:7a:1a:ed:b9: 32:70:e4:d5:5f:47:c6:84:1a:a5:1b:5b:d9:ad:a7:ba:00:ee: 59:f4:fd:ea:d5:cc:8e:4d:ab:2d:cf:f8:db:69:fd:86:4f:92: 5e:1c:63:82:08:de:fd:f5:49:74:08:1f:03:53:a6:a4:5c:74: f1:cf:34:6d:90:20:46:38:a3:5c:74:30:33:ea:90:f0:9f:be: 66:35:0f:21:ac:2f:d5:c9:d5:9b:df:09:1a:2b:3b:2f:27:bf: 35:bc:59:1d:a7:84:cf:13:bc:6c:c0:1d:f9:a9:a4:b6:cf:1a: 88:74:61:68:ae:b7:f6:27:a7:e5:9d:18:a6:58:3a:44:07:f3: cd:73:d8:56:17:8e:33:67:e0:f6:85:3e:ac:27:31:93:51:b9: 36:76:80:f5:03:71:16:68:f9:ca:1a:32:11:a9:d6:46:f0:62: c3:e2:b6:1f:4e:e0:2a:3f:73:87:71:47:b1:8c:c4:0b:57:95: fd:a0:21:f6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUV15XwL6GjphbXbG5KHXqdUULpucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3RjY0NUZDOEZFMTU4RUIyNzU1RDdGOTE0QTQzMjU4 ODJFNzhBMDAeFw0yNjAzMDIwNzEzMTZaFw0yNjAzMDMxMDM5MTZaMDMxMTAvBgNV BAMTKDQ0RTU3MDVDQTgwRTQ1NzVDQTI0MkY5MDkxMzA2NUNFNjI4MzQxMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtmEdC8GiB/vHPA9WsMyKfWXKB PpCwsZvMp5czkD1i9sqxxYMoeAIWb60OSI8YKCUiadN8eFokOpCgmSsQUyRqZX1a 7pXzn1Oj3tuOJBCjL6FEot/Zro366ZOsQfcg+po3iEtaSKhRMDby3lum5iy9R2I/ 1tXEWxnagcYmcDbSwLGZKdeUj7oWZnNRpUrreruNHirHw7ZuZ/2mTcfD8VxQiEeR e0sPmPr2Inuqz8O2YOA0Do6dZjmO3kPe1u4M9d3Le1om7SAEIp4aRUQAjiAC3ewG bn1Cxj7m35Ja4pfPka9z36blLtiE7MMC0Eskrn3HYdeFw6HSQ48IExW3+vuzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUROVwXKgORXXKJC+QkTBlzmKDQQMwHwYDVR0j BBgwFoAUcn9kX8j+FY6ydV1/kUpDJYgueKAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODI4ODAwMi8wLzcyN0Y2NDVGQzhGRTE1OEVCMjc1NUQ3RjkxNEE0 MzI1ODgyRTc4QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzI3RjY0NUZDOEZFMTU4RUIyNzU1RDdGOTE0QTQzMjU4ODJFNzhBMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgyODgwMDIvMC83MjdGNjQ1RkM4RkUx NThFQjI3NTVEN0Y5MTRBNDMyNTg4MkU3OEEwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJrNVBHsc4u6 XWzvAtFMfG/SdkPFYZ2S5Q29JpQF6a+9SANU0sWGEB9kZwVRmZLk8iLVZpTSGcsh r8dYB6djUl1td9V6Gu25MnDk1V9HxoQapRtb2a2nugDuWfT96tXMjk2rLc/422n9 hk+SXhxjggje/fVJdAgfA1OmpFx08c80bZAgRjijXHQwM+qQ8J++ZjUPIawv1cnV m98JGis7Lye/NbxZHaeEzxO8bMAd+amkts8aiHRhaK639ien5Z0Yplg6RAfzzXPY VheOM2fg9oU+rCcxk1G5NnaA9QNxFmj5yhoyEanWRvBiw+K2H07gKj9zh3FHsYzE C1eV/aAh9g== -----END CERTIFICATE-----Generated at Mon Mar 2 13:28:08 2026 by rpki-client