$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft File: 027E626491D467F2D967FA80361028FA06A786F4.mft (raw, json) Hash identifier: g3RJdnQC5NYYGiKQgQjbWHxIusuV5lb6vC97lt5KEiI= Subject key identifier: 4A:E8:CD:5F:EA:A5:83:92:DD:CD:F8:23:99:EA:30:3D:32:10:44:3F Authority key identifier: 02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4 Certificate issuer: /CN=027E626491D467F2D967FA80361028FA06A786F4 Certificate serial: 050CD272071571192F68CB03CD4C5E702F14B1CA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 18:48:17 +0000 Manifest this update: Mon 02 Mar 2026 18:43:17 +0000 Manifest next update: Tue 03 Mar 2026 19:00:17 +0000 Files and hashes: 1: 3130332e392e3135322e302f32342d3234203d3e203338333434.roa (hash: wdok/70+OGrA3z2KyLH5lq3UCizPf7CJzdwVC8v8n6w=) 2: 027E626491D467F2D967FA80361028FA06A786F4.crl (hash: xrhBhxwWiv2e5tV4S/Db4vTMIP+iC5L8PRg7QtWqObs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:0c:d2:72:07:15:71:19:2f:68:cb:03:cd:4c:5e:70:2f:14:b1:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=027E626491D467F2D967FA80361028FA06A786F4 Validity Not Before: Mar 2 18:43:17 2026 GMT Not After : Mar 3 19:00:17 2026 GMT Subject: CN=4AE8CD5FEAA58392DDCDF82399EA303D3210443F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b6:48:c5:8d:0a:3f:5a:47:7c:23:20:a7:46: 28:b8:30:e6:4d:62:07:86:24:38:c8:a9:cc:5c:e8: 00:e6:ac:00:3b:3a:58:d9:f6:e8:07:04:ae:6f:9b: b9:bd:85:bb:3f:27:62:df:22:04:ee:36:16:89:35: c5:37:24:60:50:50:4b:7d:da:c9:2f:f2:de:97:9e: b8:b4:43:b7:3b:84:91:f2:c6:f6:37:d1:d6:79:3b: 92:97:25:94:bb:7e:5a:de:75:ee:6e:3f:bc:c9:26: 73:ac:cd:4e:cc:69:38:21:80:37:bf:d3:3c:07:94: 9a:13:fb:f4:4e:6f:ee:f7:7f:60:bc:2c:28:92:51: fc:69:19:7d:69:21:95:a7:41:92:e1:c9:d4:23:53: 78:7b:b3:11:99:35:dd:14:fe:9c:77:bc:0c:b1:22: 44:73:b4:78:0c:59:d4:3d:44:0e:4d:12:49:44:5a: 2c:c9:a5:dc:78:54:d7:e7:40:60:9b:2a:0b:e8:03: d2:c4:e5:72:24:26:46:8e:d8:43:3b:c9:6f:7b:b9: 4c:5e:ae:aa:e1:69:7c:93:9e:ba:f9:59:10:35:4c: c0:43:94:bb:0c:7f:45:25:cd:de:0d:18:5a:47:31: 48:1a:de:70:8d:95:91:5b:8a:46:39:a9:1b:d6:e4: 87:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E8:CD:5F:EA:A5:83:92:DD:CD:F8:23:99:EA:30:3D:32:10:44:3F X509v3 Authority Key Identifier: keyid:02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:98:4a:83:9c:45:1b:04:e6:45:92:53:31:ee:d4:3f:10:77: f5:82:fe:2d:6b:13:3a:fb:36:ec:93:50:d7:f4:25:91:a8:bd: 78:42:63:5d:c8:9c:8e:a6:d7:d2:78:6c:ac:c1:1a:6f:8b:a6: f8:fd:03:01:6d:d8:34:d4:cb:d2:02:ac:70:b1:df:76:c5:ec: a2:7f:f8:35:b6:72:30:40:fd:1a:7a:16:61:6f:89:b3:31:b4: 49:56:bc:a9:b5:d0:bd:7d:3d:cf:ff:f4:8d:75:95:f1:62:fb: 83:68:13:13:33:e8:dd:e6:57:63:95:c3:5e:03:9d:df:c2:65: fe:c8:23:f4:aa:eb:c0:11:ba:95:ff:7d:3d:13:67:02:15:e7: 71:6e:33:ed:3c:75:4c:0b:55:18:a0:bd:04:ef:58:94:21:2a: 33:c2:13:f8:a3:a9:f6:ae:7e:a6:cf:5f:c5:8e:e2:e7:b5:d2: c9:dd:a2:4f:89:7b:c3:24:d3:a3:b6:cf:8b:b4:98:1a:2a:a6: 34:d5:79:de:b2:19:ae:b4:82:7c:79:43:ae:95:bb:06:ff:7c: 6b:ba:7d:bc:45:ab:3e:44:7e:31:81:6b:99:2b:b6:78:1a:d9: 3f:b7:4b:53:8d:31:90:01:b1:59:2a:5e:d6:6e:3b:ff:b3:62: 26:0e:4e:56 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBQzScgcVcRkvaMsDzUxecC8UscowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI3RTYyNjQ5MUQ0NjdGMkQ5NjdGQTgwMzYxMDI4RkEw NkE3ODZGNDAeFw0yNjAzMDIxODQzMTdaFw0yNjAzMDMxOTAwMTdaMDMxMTAvBgNV BAMTKDRBRThDRDVGRUFBNTgzOTJERENERjgyMzk5RUEzMDNEMzIxMDQ0M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCptkjFjQo/Wkd8IyCnRii4MOZN YgeGJDjIqcxc6ADmrAA7OljZ9ugHBK5vm7m9hbs/J2LfIgTuNhaJNcU3JGBQUEt9 2skv8t6Xnri0Q7c7hJHyxvY30dZ5O5KXJZS7flrede5uP7zJJnOszU7MaTghgDe/ 0zwHlJoT+/ROb+73f2C8LCiSUfxpGX1pIZWnQZLhydQjU3h7sxGZNd0U/px3vAyx IkRztHgMWdQ9RA5NEklEWizJpdx4VNfnQGCbKgvoA9LE5XIkJkaO2EM7yW97uUxe rqrhaXyTnrr5WRA1TMBDlLsMf0Ulzd4NGFpHMUga3nCNlZFbikY5qRvW5IfXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSujNX+qlg5LdzfgjmeowPTIQRD8wHwYDVR0j BBgwFoAUAn5iZJHUZ/LZZ/qANhAo+ganhvQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTI2OTI0OS8wLzAyN0U2MjY0OTFENDY3RjJEOTY3RkE4MDM2MTAy OEZBMDZBNzg2RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDI3RTYyNjQ5MUQ0NjdGMkQ5NjdGQTgwMzYxMDI4RkEwNkE3ODZGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjEyNjkyNDkvMC8wMjdFNjI2NDkxRDQ2 N0YyRDk2N0ZBODAzNjEwMjhGQTA2QTc4NkY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5hKg5xFGwTm RZJTMe7UPxB39YL+LWsTOvs27JNQ1/Qlkai9eEJjXcicjqbX0nhsrMEab4um+P0D AW3YNNTL0gKscLHfdsXson/4NbZyMED9GnoWYW+JszG0SVa8qbXQvX09z//0jXWV 8WL7g2gTEzPo3eZXY5XDXgOd38Jl/sgj9KrrwBG6lf99PRNnAhXncW4z7Tx1TAtV GKC9BO9YlCEqM8IT+KOp9q5+ps9fxY7i57XSyd2iT4l7wyTTo7bPi7SYGiqmNNV5 3rIZrrSCfHlDrpW7Bv98a7p9vEWrPkR+MYFrmSu2eBrZP7dLU40xkAGxWSpe1m47 /7NiJg5OVg== -----END CERTIFICATE-----Generated at Mon Mar 2 22:15:57 2026 by rpki-client