
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft
File: 027E626491D467F2D967FA80361028FA06A786F4.mft (raw, json)
Hash identifier: SMKnp+btHLJgGPzVjRTE9KjG45aAeDqyx2hGPpF470Q=
Subject key identifier: BC:B5:A5:C8:2A:FA:D3:E0:C9:A1:DD:15:D1:FF:01:C2:EA:97:CB:3D
Authority key identifier: 02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4
Certificate issuer: /CN=027E626491D467F2D967FA80361028FA06A786F4
Certificate serial: 5B6E3B87E9FC0A2BC3B87DA43E113FFBB0D378CF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft
Manifest number: C3
Signing time: Sun 14 Jun 2026 03:37:40 +0000
Manifest this update: Sun 14 Jun 2026 03:32:40 +0000
Manifest next update: Mon 15 Jun 2026 06:35:40 +0000
Files and hashes: 1: 3130332e392e3135322e302f32342d3234203d3e203338333434.roa (hash: wdok/70+OGrA3z2KyLH5lq3UCizPf7CJzdwVC8v8n6w=)
2: 027E626491D467F2D967FA80361028FA06A786F4.crl (hash: LHvWeA5L5a9TyN3L2CRu8aoyoJb6vVGvOmQ8jRkC8z4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:6e:3b:87:e9:fc:0a:2b:c3:b8:7d:a4:3e:11:3f:fb:b0:d3:78:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027E626491D467F2D967FA80361028FA06A786F4
Validity
Not Before: Jun 14 03:32:40 2026 GMT
Not After : Jun 15 06:35:40 2026 GMT
Subject: CN=BCB5A5C82AFAD3E0C9A1DD15D1FF01C2EA97CB3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2f:fd:78:45:e1:e6:ce:4b:70:de:b7:ff:c1:
6c:a6:4a:06:a9:84:72:a8:e6:ec:f3:00:78:60:20:
36:9c:88:67:5d:48:61:48:1d:f6:d1:72:06:3a:dd:
c9:10:4c:90:ad:0d:c6:f5:21:77:34:9e:06:99:2c:
6f:18:b5:f7:63:f7:67:d2:a1:26:50:0f:be:ef:6e:
a2:ae:4f:3b:79:50:ef:4d:f3:1a:11:54:bf:1b:a9:
41:0d:8e:68:73:e3:2b:ad:ad:11:95:81:2e:d7:aa:
66:b4:06:ce:20:36:1c:fe:1b:85:58:37:d6:de:15:
f2:15:20:a6:1a:d5:2d:ff:ce:b1:19:60:2d:2d:04:
c0:99:12:67:75:99:4c:6f:d2:8b:0c:18:44:85:66:
8b:7f:51:06:ec:38:ad:68:25:88:32:77:f3:c3:ad:
02:ce:57:41:90:68:94:d3:e0:b4:17:e8:08:69:c1:
70:74:27:94:98:8f:f7:60:d1:f5:92:44:1d:11:78:
78:d8:62:8d:db:65:79:99:f0:55:3b:f2:3f:a5:86:
11:f0:22:d2:88:3d:cd:29:a4:fd:9f:c0:dc:8a:73:
ae:92:a9:ca:47:14:f1:1c:f7:5a:61:28:51:50:4f:
28:ce:17:32:ad:c7:28:22:55:69:6d:f3:d7:e2:79:
ea:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B5:A5:C8:2A:FA:D3:E0:C9:A1:DD:15:D1:FF:01:C2:EA:97:CB:3D
X509v3 Authority Key Identifier:
keyid:02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:36:9c:12:34:93:1e:4c:ea:3a:d9:1d:4e:f9:94:34:9b:e1:
65:6d:a3:bd:83:bd:66:37:13:4c:9e:7d:ec:5d:10:f6:b3:3d:
e5:2d:67:f0:4b:70:e6:88:3e:1e:b5:cf:41:40:05:15:e4:10:
fe:2c:48:93:c8:50:fc:58:d8:22:9b:17:bc:d5:6f:e2:46:93:
e0:4a:a8:9a:45:51:34:27:d3:45:c6:87:c1:ec:a9:07:d5:b5:
a6:93:6e:cd:73:63:0a:ca:67:a8:cd:a7:87:47:1d:80:15:84:
c1:5c:6c:57:0a:36:73:be:94:e5:b7:28:78:1a:2d:76:22:67:
b7:80:0c:61:1c:05:b8:02:d0:75:59:c0:3d:8a:e7:e2:c3:c1:
29:af:22:e0:31:84:5c:1a:6e:98:6c:65:29:cd:07:3b:b8:9e:
b1:58:39:bf:e2:bb:2e:7c:30:7b:4b:84:3a:aa:37:c1:f8:22:
23:aa:b5:19:63:23:c1:13:98:3f:13:4b:ed:6a:06:07:ae:6a:
d0:5b:65:63:c4:38:fb:b3:25:80:33:5c:07:fa:a0:92:90:70:
8c:9d:be:4c:46:36:7a:81:37:f0:5e:b7:a8:d6:09:6c:0c:56:
d9:c2:89:d2:59:92:19:50:51:92:5f:be:48:e8:e2:3a:8f:88:
18:f1:1a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:38:41 2026 by rpki-client