$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft File: 027E626491D467F2D967FA80361028FA06A786F4.mft (raw, json) Hash identifier: tXn6atHdt897CvAnE+Tsa5zn4gIWeIF3J4pVurXrNXg= Subject key identifier: 39:A9:B7:1A:7A:48:C0:54:A4:11:67:BB:82:41:6F:A1:8B:1A:0F:28 Authority key identifier: 02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4 Certificate issuer: /CN=027E626491D467F2D967FA80361028FA06A786F4 Certificate serial: 27C6CA03DD004AE5BFD5E86CB337F54111F06F92 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 19:29:48 +0000 Manifest this update: Fri 17 Apr 2026 19:24:48 +0000 Manifest next update: Sat 18 Apr 2026 21:19:48 +0000 Files and hashes: 1: 3130332e392e3135322e302f32342d3234203d3e203338333434.roa (hash: wdok/70+OGrA3z2KyLH5lq3UCizPf7CJzdwVC8v8n6w=) 2: 027E626491D467F2D967FA80361028FA06A786F4.crl (hash: ybuJu19RwBkE+eE3J8OQwLwlHJgh+QdqNXQC1iPVzSY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c6:ca:03:dd:00:4a:e5:bf:d5:e8:6c:b3:37:f5:41:11:f0:6f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=027E626491D467F2D967FA80361028FA06A786F4 Validity Not Before: Apr 17 19:24:48 2026 GMT Not After : Apr 18 21:19:48 2026 GMT Subject: CN=39A9B71A7A48C054A41167BB82416FA18B1A0F28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3c:50:34:22:8b:34:34:f6:ec:d5:e9:ed:e9: e6:5c:b7:38:d8:d3:81:5f:aa:ba:64:f3:eb:b5:24: cf:55:ac:7e:f7:18:93:80:cd:36:b6:9b:0f:d9:bf: cd:9d:d7:6d:c7:9c:a2:9b:b3:ff:8f:9b:c6:66:04: ea:e3:87:5b:45:01:bc:0b:71:ed:d1:24:45:ad:dd: a7:52:0d:a9:ba:6b:b7:ba:f0:67:14:08:c8:5a:59: 21:1b:b0:b3:c7:e2:24:c9:c2:b8:a7:11:6a:8c:34: b3:ee:b2:25:f7:00:f5:5a:a4:3c:75:44:4b:c0:bc: 2d:5c:5d:a9:1d:be:d8:85:43:d9:ee:3f:10:8a:d4: 76:44:67:58:09:51:d5:db:03:74:46:b7:eb:a4:0f: c3:00:1c:2f:dc:de:9c:2d:92:54:a2:93:38:bb:21: ad:86:52:73:35:5d:b5:5b:69:b0:ea:64:e6:da:f9: 91:f7:74:8d:f9:d3:17:62:2b:1d:af:0a:ce:9f:56: 7f:0f:83:1c:73:82:9d:7b:d2:5a:69:fa:f1:6b:bf: e5:4b:f0:ab:42:ba:8a:71:c5:e7:f4:71:20:20:f6: e7:e6:27:00:0c:df:d5:e8:12:43:3c:cb:69:4a:2f: 98:63:c7:cc:90:89:58:94:de:09:2a:95:b7:02:da: b9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A9:B7:1A:7A:48:C0:54:A4:11:67:BB:82:41:6F:A1:8B:1A:0F:28 X509v3 Authority Key Identifier: keyid:02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:86:0e:5f:62:e1:38:53:11:5a:84:c2:5c:ea:9c:d4:6c:39: 64:77:a2:57:60:84:22:1f:7a:96:c7:6c:0d:03:b0:34:0a:12: 54:51:b9:d6:da:09:b4:ef:76:28:26:c4:fb:f3:b1:cb:d0:0e: 3b:13:c7:04:a1:bb:34:b9:4a:60:72:36:32:1d:7e:da:7d:8d: 09:f6:32:85:3b:b9:7f:48:4a:a0:91:96:85:96:25:75:72:08: 7c:6b:7d:0c:c3:d7:57:c5:58:0d:53:95:d3:6a:12:4e:d0:a1: cb:98:50:41:d3:25:90:9c:fb:ec:2b:cc:ca:52:4e:54:d6:74: 09:45:97:d0:cd:58:ba:1c:6b:13:8f:28:cd:43:47:3f:bd:97: 70:90:c7:9b:80:78:cc:3b:37:cd:e0:fa:27:60:f4:92:ca:ac: 1a:11:48:4c:7c:83:cc:d2:22:36:01:9c:20:01:05:00:86:78: dc:a3:61:1e:4b:3f:11:63:48:8b:5f:c5:fe:f0:2c:22:27:31: e8:d5:59:eb:59:a5:28:22:b7:62:c2:70:b6:9e:c8:f8:8d:fb: 7b:19:c4:2c:3f:12:90:8c:3b:ed:a5:79:52:3f:b9:4f:02:de: 59:7d:24:3e:93:9c:26:08:a6:1c:fb:9a:44:83:a3:b9:a6:c4: f1:76:98:7f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJ8bKA90ASuW/1ehsszf1QRHwb5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI3RTYyNjQ5MUQ0NjdGMkQ5NjdGQTgwMzYxMDI4RkEw NkE3ODZGNDAeFw0yNjA0MTcxOTI0NDhaFw0yNjA0MTgyMTE5NDhaMDMxMTAvBgNV BAMTKDM5QTlCNzFBN0E0OEMwNTRBNDExNjdCQjgyNDE2RkExOEIxQTBGMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsPFA0Ios0NPbs1ent6eZctzjY 04Ffqrpk8+u1JM9VrH73GJOAzTa2mw/Zv82d123HnKKbs/+Pm8ZmBOrjh1tFAbwL ce3RJEWt3adSDam6a7e68GcUCMhaWSEbsLPH4iTJwrinEWqMNLPusiX3APVapDx1 REvAvC1cXakdvtiFQ9nuPxCK1HZEZ1gJUdXbA3RGt+ukD8MAHC/c3pwtklSikzi7 Ia2GUnM1XbVbabDqZOba+ZH3dI350xdiKx2vCs6fVn8Pgxxzgp170lpp+vFrv+VL 8KtCuopxxef0cSAg9ufmJwAM39XoEkM8y2lKL5hjx8yQiViU3gkqlbcC2rlHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOam3GnpIwFSkEWe7gkFvoYsaDygwHwYDVR0j BBgwFoAUAn5iZJHUZ/LZZ/qANhAo+ganhvQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTI2OTI0OS8wLzAyN0U2MjY0OTFENDY3RjJEOTY3RkE4MDM2MTAy OEZBMDZBNzg2RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDI3RTYyNjQ5MUQ0NjdGMkQ5NjdGQTgwMzYxMDI4RkEwNkE3ODZGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjEyNjkyNDkvMC8wMjdFNjI2NDkxRDQ2 N0YyRDk2N0ZBODAzNjEwMjhGQTA2QTc4NkY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtoYOX2LhOFMR WoTCXOqc1Gw5ZHeiV2CEIh96lsdsDQOwNAoSVFG51toJtO92KCbE+/Oxy9AOOxPH BKG7NLlKYHI2Mh1+2n2NCfYyhTu5f0hKoJGWhZYldXIIfGt9DMPXV8VYDVOV02oS TtChy5hQQdMlkJz77CvMylJOVNZ0CUWX0M1YuhxrE48ozUNHP72XcJDHm4B4zDs3 zeD6J2D0ksqsGhFITHyDzNIiNgGcIAEFAIZ43KNhHks/EWNIi1/F/vAsIicx6NVZ 61mlKCK3YsJwtp7I+I37exnELD8SkIw77aV5Uj+5TwLeWX0kPpOcJgimHPuaRIOj uabE8XaYfw== -----END CERTIFICATE-----Generated at Sat Apr 18 01:57:48 2026 by rpki-client