
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
File: 727633DA248F6AC4626E0DF9B33145B74FD58F03.mft (raw, json)
Hash identifier: yk8Ldk3zibE6Ny10Ys7MRAv33uL5Y0jxj2o9Vl/ZzEs=
Subject key identifier: 5B:63:07:21:C4:38:BE:B8:FF:E8:98:92:7F:31:B0:4D:3D:63:B9:0B
Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Certificate issuer: /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Certificate serial: 742FBB8B2D1E32842313510A8779EFB844ADD095
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
Manifest number: D2
Signing time: Sun 11 Oct 2026 00:55:05 +0000
Manifest this update: Sun 11 Oct 2026 00:50:05 +0000
Manifest next update: Wed 14 Oct 2026 05:16:05 +0000
Files and hashes: 1: 3231382e39382e3137382e302f32342d3234203d3e20313436383431.roa (hash: h+7NMVJMGskysHGTL7ek7cRzWtLu2iBmcr8RhLJIuRo=)
2: 3231382e39382e3137362e302f32342d3234203d3e2034383337.roa (hash: 6fIbINtNcGKIPP4RrSqGB51a1pyintd2JTCE/IScmZA=)
3: 3231382e39382e3231302e302f32342d3234203d3e20313436383431.roa (hash: yyPoXI8TawnrApBjndo7j1KSbBtPvYmc36UAqXtEA8U=)
4: 3231382e39382e3231352e302f32342d3234203d3e20313436383431.roa (hash: aywp0tqCBgRXzid69Cf+hmOo2wFnk5gKkSw0y125MMI=)
5: 3231382e39382e3137372e302f32342d3234203d3e20313436383431.roa (hash: HCyPGKwa4eeE5ZjLHnpqql9PGySx5osAgA1FMWrBU+0=)
6: 3231382e39382e3138302e302f32342d3234203d3e20313436383431.roa (hash: 8vnvx69UZI9UjNoNLKJj/mjRHvJ90Etw1BCB1sZRg4Y=)
7: 3231382e39382e3231342e302f32342d3234203d3e20313436383431.roa (hash: INioRRkxf3xa+grpqxBw9dO54uDwmH9qAz6YD6mDzno=)
8: 3231382e39382e3139332e302f32342d3234203d3e203538353432.roa (hash: qt4/6TOa7o32+dkGdPJJfaVcIo3Vl62WqM/O9RzlxHI=)
9: 3231382e39382e3137372e302f32342d3234203d3e203538353432.roa (hash: BxSgCE5UaiCEinToAh7HtaYOYFUIIUe9Fj7YHmDaEeY=)
10: 3231382e39382e3137362e302f32342d3234203d3e203538353432.roa (hash: XFdMvu8G/zSKT5wrWBdxWp+W6TQONNq83QdMat+lt2k=)
11: 3231382e39382e3230382e302f32342d3234203d3e20313436383431.roa (hash: V5WFXW8smGcHXMjpvp9LaOkbL4/Ei94lNvyV8nVmaL0=)
12: 3231382e39382e3138312e302f32342d3234203d3e20313436383431.roa (hash: vLrt3AJ67GN9KG7EzWnUz0wi/QliKTTJODDo8xicHfo=)
13: 3231382e39382e3139322e302f32342d3234203d3e203538353432.roa (hash: ZXHCilq7M6t5w4oLyy7/q0uzHX7ckcRbYUXkDNUYUO0=)
14: 3231382e39382e3137392e302f32342d3234203d3e20313436383431.roa (hash: ARWBa9IdK08EGnOSuh23uDfuB0JMI9PCXpZKCN/m7l4=)
15: 3231382e39382e3230392e302f32342d3234203d3e20313436383431.roa (hash: R2FUehBztHdIvg3EWxnn9vSmNq2pxzwjM3Saq/Q0+P4=)
16: 727633DA248F6AC4626E0DF9B33145B74FD58F03.crl (hash: JlohTtlBfuUubda+kV9xi8o4hGnEA9IOkOxVg2H++0Y=)
17: 3231382e39382e3137362e302f32342d3234203d3e20313436383431.roa (hash: W9YQVXCZAs9kS2UDOyKiYaw3OS4DRjkHfthCx48ARa8=)
18: 3231382e39382e3231312e302f32342d3234203d3e20313436383431.roa (hash: DKgvwB10v2KlhQb9PUhUx7Cu1QGaNp7YFa9x57886nA=)
19: 3231382e39382e3138332e302f32342d3234203d3e20313436383431.roa (hash: BWgtN9ZlNkUkI1/9ORhwYHGUf2fn6nY77N3GU7vIwKg=)
20: 3231382e39382e3138322e302f32342d3234203d3e20313436383431.roa (hash: 6znvLKLvv9KQQlxGvtEJcXW6b4MyVSay/jA4EVDpYhc=)
21: 3231382e39382e3231332e302f32342d3234203d3e20313436383431.roa (hash: BQ36hCBywhGt28SwU89T+JTovsJVAPR6cNm45te4lfA=)
22: 3231382e39382e3136302e302f32342d3234203d3e2034383337.roa (hash: 28ClLRNHc1ca5OaJY9IvDzg6NXbTQfy3ShDofWhJRXo=)
23: 3231382e39382e3231322e302f32342d3234203d3e20313436383431.roa (hash: mh4howHx2myQ3DM1H8Q4i0fqcnXhCL5MgENCUx3z93s=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 05:16:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:2f:bb:8b:2d:1e:32:84:23:13:51:0a:87:79:ef:b8:44:ad:d0:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Validity
Not Before: Oct 11 00:50:05 2026 GMT
Not After : Oct 14 05:16:05 2026 GMT
Subject: CN=5B630721C438BEB8FFE898927F31B04D3D63B90B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:a6:74:78:e6:bf:ca:f3:a3:6e:c3:2a:df:
33:6f:58:08:f0:68:c1:e1:14:a5:6c:45:e4:20:70:
9a:61:9a:08:68:f1:b2:6e:18:82:ed:27:73:16:9c:
0c:5c:c7:ee:41:33:ee:a8:0b:25:ce:5e:43:d7:70:
f4:42:38:80:9d:57:e1:b0:9a:45:c0:99:f4:9c:4a:
a4:cb:5c:3c:63:b7:10:08:68:5e:63:98:da:c4:7e:
03:af:bd:17:8f:25:04:05:d0:4e:a7:a9:67:78:55:
51:c2:17:af:e1:3d:37:a2:78:6b:ab:bd:6d:6d:a1:
1d:51:0a:9f:28:1f:79:07:32:fc:7b:f6:d4:09:e6:
3c:f0:eb:ac:28:9b:71:a5:0d:62:b2:94:a4:81:4c:
c0:1b:05:07:3b:21:3d:41:96:24:2a:bf:f3:63:86:
77:c0:b4:6a:66:22:08:58:42:53:a4:63:7c:cc:27:
41:fc:1e:8b:37:ab:48:55:e4:74:d2:81:a1:2d:7d:
d1:81:e5:bb:52:5f:24:b0:ac:8b:62:0d:21:a5:8c:
1a:7e:d7:da:f2:d2:15:25:dd:aa:bd:5f:1c:2d:09:
51:5f:4e:42:67:f6:6f:ce:38:0f:30:4a:0a:58:3d:
26:ed:7e:04:11:e9:c7:2a:a2:aa:8b:a6:02:52:46:
48:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:63:07:21:C4:38:BE:B8:FF:E8:98:92:7F:31:B0:4D:3D:63:B9:0B
X509v3 Authority Key Identifier:
keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4f:0b:6f:78:e7:01:5b:a4:f1:17:67:2f:f0:f4:73:ed:69:
5d:24:be:69:04:09:92:55:71:93:04:d2:87:ea:ed:b6:68:cf:
23:eb:21:cf:d7:a6:54:de:e5:5d:61:46:3e:df:20:c9:b6:29:
01:7b:65:28:f1:01:46:ec:15:cb:9b:40:70:31:aa:b6:cc:a0:
f0:77:1a:bd:fd:0d:3b:3c:56:c3:09:af:c7:b9:69:5d:01:8b:
b3:85:94:70:d5:2a:bb:ad:62:b5:2b:64:8e:54:bc:a2:ad:9f:
9b:2b:b2:fa:56:a5:0b:d9:de:17:23:5d:c5:4d:40:e5:f4:3e:
9a:70:e3:52:31:45:d6:9c:ae:ea:81:7e:0d:52:59:97:9d:a5:
68:83:b1:d5:55:44:4c:19:aa:44:2d:93:a7:d9:cb:2f:2f:39:
e6:f6:0c:57:38:df:e8:65:52:97:06:6f:1f:37:92:e5:27:73:
66:ee:4a:1e:d9:76:94:bd:21:63:bc:f8:94:5f:2b:f6:4f:36:
e7:a1:9f:26:14:2f:2e:4d:e8:02:52:8f:4c:b7:26:3c:8b:88:
59:9a:76:d9:bf:3d:0e:f8:b9:fb:01:bc:19:cb:87:d3:fa:5a:
2e:a5:66:f6:af:db:18:23:18:70:cb:c4:89:a1:8d:b3:7f:31:
ae:ff:e8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 10:00:57 2026 by rpki-client