$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft File: 1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft (raw, json) Hash identifier: iqT397widxrNqCAqKY1nv8rSvVHzwzkg9ludp/hGXbk= Subject key identifier: F3:A6:9B:20:FD:19:A1:49:FE:E1:EF:B9:E2:24:39:AE:48:48:BB:D1 Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F Certificate serial: 59EDA19EC6571DE86107A211C774A6EC189906AB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft Manifest number: 0157 Signing time: Sat 19 Sep 2026 09:00:55 +0000 Manifest this update: Sat 19 Sep 2026 08:55:55 +0000 Manifest next update: Tue 22 Sep 2026 14:54:55 +0000 Files and hashes: 1: AS17621.roa (hash: nahdGimnu/0MkhQvX4dEgqzTzP3nDR2/FfUJ8y5zdRk=) 2: AS139128.roa (hash: Hf2+L5HEiYAU8V1aQ0mNqXM9xpZ3IJ5X6iRLcq15VHs=) 3: AS17964.roa (hash: 0o66y8CAop9qB0opnrDd38kz8N3ZG7uIIdycGdC6aCE=) 4: 1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl (hash: NyzcB6aCi6JOXl/PNHwa2dgd6fRZ7B/hKcggge2uYU8=) 5: AS4808.roa (hash: CU0EgGGd2SKEp5zm8x3SKcQQoRSeVVhTtAN6N71pbEo=) 6: AS0.roa (hash: RSxUs5ZU8R/5Tt2wZ85816aThZjNhTTXPB/DV1zalNU=) 7: AS4847.roa (hash: 0Ina+CzwJQwjEuUhvglREQvsgCccAVWBafW/3ynklIU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 14:54:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:ed:a1:9e:c6:57:1d:e8:61:07:a2:11:c7:74:a6:ec:18:99:06:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F Validity Not Before: Sep 19 08:55:55 2026 GMT Not After : Sep 22 14:54:55 2026 GMT Subject: CN=F3A69B20FD19A149FEE1EFB9E22439AE4848BBD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d5:5b:1f:4b:2b:00:32:98:74:bc:21:71:7b: 91:5d:6f:99:62:34:91:6f:5e:86:37:35:03:9c:e7: 23:e0:6b:5f:c4:a9:e6:53:8f:ae:6d:a9:b3:43:8a: 6e:61:b6:63:b2:bb:79:94:e7:47:58:0e:16:df:29: d7:b9:9e:03:fb:02:a6:80:f5:5a:60:aa:37:b2:60: 04:61:bc:ba:c7:03:07:7f:53:1a:61:de:50:4b:22: e7:59:7b:af:16:39:23:cb:26:4f:9b:f8:e9:66:c3: a0:3a:cd:ff:01:0c:d8:bc:61:65:d0:67:f7:1b:83: 79:6f:52:4b:04:bd:8d:9f:d7:cb:b5:9f:bb:ec:be: 98:d7:e1:e2:eb:d8:1f:8a:f2:c9:2d:26:a8:35:84: c2:69:e3:29:29:23:09:20:4c:5d:6b:2b:d7:20:c9: 70:54:fa:ff:ef:08:64:c3:b6:49:fd:b0:37:88:fe: d5:cc:e1:4c:c3:b8:9d:9b:44:0e:4a:36:aa:95:91: d4:df:af:7a:2b:a5:e0:6e:78:9b:7c:30:87:8f:5f: 6a:b0:b8:3e:db:12:8d:f4:76:f2:83:37:33:0b:2f: 1a:f7:c1:b8:0b:a4:03:66:98:12:0c:de:b4:85:f8: 9b:41:eb:50:9c:39:cd:ab:61:74:89:4b:06:e3:a2: 28:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A6:9B:20:FD:19:A1:49:FE:E1:EF:B9:E2:24:39:AE:48:48:BB:D1 X509v3 Authority Key Identifier: keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:9b:ee:d9:4b:e6:39:d6:51:2f:bb:e5:08:1c:55:eb:4e:95: d8:66:6e:da:17:f3:89:08:54:47:f9:df:64:ac:f3:dd:bc:a8: c4:a7:23:92:cf:57:49:ab:e3:49:93:eb:d3:d8:d3:51:8f:95: bb:e6:05:c5:fc:aa:d6:37:ba:27:7a:b3:f0:e2:54:19:45:4b: 0f:a8:bc:0f:c4:d4:24:2d:69:10:bc:c5:dd:3c:b4:16:1c:18: f0:b9:c0:da:64:b1:c3:cb:68:8d:5e:44:4a:50:9a:0b:5c:92: d2:12:47:0f:fd:93:19:40:64:22:aa:b7:03:a7:78:a3:7f:f2: a5:0a:85:df:80:91:07:a4:01:36:e0:ad:73:2e:58:db:4e:fe: 4b:f6:43:e9:ef:6a:00:00:58:12:5f:20:70:c2:00:6b:3c:34: 6b:c1:f7:49:b9:2a:96:ff:a9:2b:bb:17:2e:00:bb:f1:b6:0a: 03:e3:26:55:d0:4a:64:ef:12:82:af:93:6e:ca:08:09:2e:11: 69:d4:f6:d2:b3:04:45:56:01:de:29:ef:75:c5:0f:b8:00:97: 84:b8:08:d6:a4:2e:bc:6e:0a:68:d5:23:47:f0:b6:50:68:a5: 9f:48:2b:0d:27:03:75:10:4d:cd:7d:89:7c:b7:04:04:73:84: f0:4f:f0:d2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWe2hnsZXHehhB6IRx3Sm7BiZBqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDky MjJFOEY5RjAeFw0yNjA5MTkwODU1NTVaFw0yNjA5MjIxNDU0NTVaMDMxMTAvBgNV BAMTKEYzQTY5QjIwRkQxOUExNDlGRUUxRUZCOUUyMjQzOUFFNDg0OEJCRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt1VsfSysAMph0vCFxe5Fdb5li NJFvXoY3NQOc5yPga1/EqeZTj65tqbNDim5htmOyu3mU50dYDhbfKde5ngP7AqaA 9VpgqjeyYARhvLrHAwd/Uxph3lBLIudZe68WOSPLJk+b+Olmw6A6zf8BDNi8YWXQ Z/cbg3lvUksEvY2f18u1n7vsvpjX4eLr2B+K8sktJqg1hMJp4ykpIwkgTF1rK9cg yXBU+v/vCGTDtkn9sDeI/tXM4UzDuJ2bRA5KNqqVkdTfr3orpeBueJt8MIePX2qw uD7bEo30dvKDNzMLLxr3wbgLpANmmBIM3rSF+JtB61CcOc2rYXSJSwbjoiizAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU86abIP0ZoUn+4e+54iQ5rkhIu9EwHwYDVR0j BBgwFoAUGyfCb49+zlOXLYCTP1A8CSIuj58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MDk1NTkyNDA3MzU0NTczMS8wLzFCMjdDMjZGOEY3RUNFNTM5NzJEODA5MzNGNTAz QzA5MjIyRThGOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDkyMjJFOEY5Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzA5NTU5MjQwNzM1NDU3MzEvMC8xQjI3QzI2RjhGN0VD RTUzOTcyRDgwOTMzRjUwM0MwOTIyMkU4RjlGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZvu2UvmOdZR L7vlCBxV606V2GZu2hfziQhUR/nfZKzz3byoxKcjks9XSavjSZPr09jTUY+Vu+YF xfyq1je6J3qz8OJUGUVLD6i8D8TUJC1pELzF3Ty0FhwY8LnA2mSxw8tojV5ESlCa C1yS0hJHD/2TGUBkIqq3A6d4o3/ypQqF34CRB6QBNuCtcy5Y207+S/ZD6e9qAABY El8gcMIAazw0a8H3Sbkqlv+pK7sXLgC78bYKA+MmVdBKZO8Sgq+TbsoICS4RadT2 0rMERVYB3invdcUPuACXhLgI1qQuvG4KaNUjR/C2UGiln0grDScDdRBNzX2JfLcE BHOE8E/w0g== -----END CERTIFICATE-----Generated at Mon Sep 21 09:14:22 2026 by rpki-client