$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft File: 027E626491D467F2D967FA80361028FA06A786F4.mft (raw, json) Hash identifier: oO6F+BwZrfLSGd/y+y2CvqD5JUNpVqT+7VfiHdqztNE= Subject key identifier: 5D:2E:43:65:CB:60:15:25:A3:32:37:6B:DF:6E:B7:42:12:10:93:DF Authority key identifier: 02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4 Certificate issuer: /CN=027E626491D467F2D967FA80361028FA06A786F4 Certificate serial: 0390447A5FEC5CFE332464638F241660D6EF5A9B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft Manifest number: 0100 Signing time: Wed 29 Jul 2026 15:54:44 +0000 Manifest this update: Wed 29 Jul 2026 15:49:44 +0000 Manifest next update: Thu 30 Jul 2026 18:05:44 +0000 Files and hashes: 1: 3130332e392e3135322e302f32342d3234203d3e203338333434.roa (hash: wdok/70+OGrA3z2KyLH5lq3UCizPf7CJzdwVC8v8n6w=) 2: 027E626491D467F2D967FA80361028FA06A786F4.crl (hash: kt4C0jTn2RgMZCJIWIG8qfcVhDG0WuA6ZV7zmb+BlU0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 18:05:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:90:44:7a:5f:ec:5c:fe:33:24:64:63:8f:24:16:60:d6:ef:5a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=027E626491D467F2D967FA80361028FA06A786F4 Validity Not Before: Jul 29 15:49:44 2026 GMT Not After : Jul 30 18:05:44 2026 GMT Subject: CN=5D2E4365CB601525A332376BDF6EB742121093DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:04:82:f7:f3:62:10:a1:1d:60:9d:51:58:4a: 16:71:37:11:4a:15:80:b6:1a:69:e9:bd:77:d6:d1: 08:1a:63:84:22:f7:c2:e4:ad:fa:58:24:d1:9b:0a: 7a:38:4b:5c:50:e4:6c:69:bb:f4:b4:52:18:d2:4d: de:22:3b:be:57:04:25:20:43:af:c8:3f:4f:57:8a: d2:1f:75:02:c9:58:b7:ec:95:ae:f2:17:70:2f:e7: fd:c1:c5:1a:7b:d3:ea:3c:ae:f4:6c:6e:df:08:89: dd:fc:89:3e:e9:3a:b9:db:b1:7d:50:d9:12:d5:73: 62:a7:cc:9a:ed:af:52:44:5f:bd:39:86:52:c8:8c: 82:c7:d6:d9:38:f7:4f:ed:49:a8:ec:97:b9:bb:d1: fe:ce:b8:55:71:c0:bb:41:ee:e0:2a:29:9b:d6:a7: 61:71:ff:17:93:cb:87:f4:07:ab:a3:da:bf:7d:05: 00:6b:da:69:1f:d2:f8:1c:0a:0a:df:42:d8:04:91: 0b:18:90:6c:5e:4c:08:09:a0:1f:39:35:e7:53:00: 26:ed:61:94:6e:ce:be:80:8c:0e:07:51:bd:db:9d: cd:2a:f0:b5:49:54:ce:62:72:c9:99:31:8b:6b:99: d5:d1:ed:7e:c8:d3:c1:68:59:df:33:41:bd:61:e1: 60:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2E:43:65:CB:60:15:25:A3:32:37:6B:DF:6E:B7:42:12:10:93:DF X509v3 Authority Key Identifier: keyid:02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:19:5d:6a:c3:18:02:d8:23:fd:21:94:39:ba:37:b2:74:3c: 2b:9f:96:b5:04:32:12:b3:4d:3d:ca:f8:8a:8d:64:ab:a2:4b: 50:b1:d2:71:27:9e:6a:88:f8:e2:73:f6:4c:26:43:3d:2a:a1: b6:c8:f6:b3:b0:a6:04:db:7d:db:1b:31:cf:8b:21:ca:3b:70: de:d1:71:13:a3:17:f5:8a:dd:d5:6a:68:a1:77:2c:93:b6:e4: b4:bb:d2:d7:27:72:c7:6c:72:73:53:5b:d1:b0:02:2f:f3:53: 01:3e:eb:d4:e2:e5:65:62:8c:b7:10:f6:fa:0b:59:ed:47:f5: b3:a0:e9:f5:64:70:2b:74:87:77:86:e8:cb:aa:80:2b:5d:b4: 98:39:f6:4e:65:1a:d4:e0:84:6d:24:e7:64:07:73:4e:60:bf: 3f:00:db:56:27:58:8e:55:65:b7:ca:e1:44:84:03:5f:5b:14: 52:9c:e6:3e:f2:ca:f4:9b:01:e8:09:8d:ca:d9:29:56:9b:67: 23:92:25:99:de:18:eb:a1:d2:2f:56:44:0e:70:30:0b:3b:36: 4d:09:52:bf:e0:25:83:d2:b2:b5:58:34:60:8d:93:b5:d9:2e: 8b:61:3d:d7:6c:10:f7:e2:0c:8e:fb:9f:55:f3:6a:ff:bf:54: 5c:76:68:26 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUA5BEel/sXP4zJGRjjyQWYNbvWpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI3RTYyNjQ5MUQ0NjdGMkQ5NjdGQTgwMzYxMDI4RkEw NkE3ODZGNDAeFw0yNjA3MjkxNTQ5NDRaFw0yNjA3MzAxODA1NDRaMDMxMTAvBgNV BAMTKDVEMkU0MzY1Q0I2MDE1MjVBMzMyMzc2QkRGNkVCNzQyMTIxMDkzREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIBIL382IQoR1gnVFYShZxNxFK FYC2GmnpvXfW0QgaY4Qi98LkrfpYJNGbCno4S1xQ5Gxpu/S0UhjSTd4iO75XBCUg Q6/IP09XitIfdQLJWLfsla7yF3Av5/3BxRp70+o8rvRsbt8Iid38iT7pOrnbsX1Q 2RLVc2KnzJrtr1JEX705hlLIjILH1tk490/tSajsl7m70f7OuFVxwLtB7uAqKZvW p2Fx/xeTy4f0B6uj2r99BQBr2mkf0vgcCgrfQtgEkQsYkGxeTAgJoB85NedTACbt YZRuzr6AjA4HUb3bnc0q8LVJVM5icsmZMYtrmdXR7X7I08FoWd8zQb1h4WB5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXS5DZctgFSWjMjdr3263QhIQk98wHwYDVR0j BBgwFoAUAn5iZJHUZ/LZZ/qANhAo+ganhvQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTI2OTI0OS8wLzAyN0U2MjY0OTFENDY3RjJEOTY3RkE4MDM2MTAy OEZBMDZBNzg2RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDI3RTYyNjQ5MUQ0NjdGMkQ5NjdGQTgwMzYxMDI4RkEwNkE3ODZGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjEyNjkyNDkvMC8wMjdFNjI2NDkxRDQ2 N0YyRDk2N0ZBODAzNjEwMjhGQTA2QTc4NkY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhldasMYAtgj /SGUObo3snQ8K5+WtQQyErNNPcr4io1kq6JLULHScSeeaoj44nP2TCZDPSqhtsj2 s7CmBNt92xsxz4shyjtw3tFxE6MX9Yrd1WpooXcsk7bktLvS1ydyx2xyc1Nb0bAC L/NTAT7r1OLlZWKMtxD2+gtZ7Uf1s6Dp9WRwK3SHd4boy6qAK120mDn2TmUa1OCE bSTnZAdzTmC/PwDbVidYjlVlt8rhRIQDX1sUUpzmPvLK9JsB6AmNytkpVptnI5Il md4Y66HSL1ZEDnAwCzs2TQlSv+Alg9KytVg0YI2Ttdkui2E912wQ9+IMjvufVfNq /79UXHZoJg== -----END CERTIFICATE-----Generated at Wed Jul 29 23:09:20 2026 by rpki-client