$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft File: 727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft (raw, json) Hash identifier: YzGp/Fude6uByJS9r0wcPG9idYjJp980foIlD+5PcAI= Subject key identifier: 85:EA:12:E2:77:63:47:14:4C:C1:51:4C:2E:6D:B5:2B:E7:BD:54:7A Authority key identifier: 72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D Certificate issuer: /CN=727CC49FFE2FAF9584C2E103AC6FD293020DD07D Certificate serial: 4A0009F54A1CF0F29514FD4A5ED46B0300089B69 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft Manifest number: 47 Signing time: Fri 17 Apr 2026 17:14:43 +0000 Manifest this update: Fri 17 Apr 2026 17:09:43 +0000 Manifest next update: Sat 18 Apr 2026 17:43:43 +0000 Files and hashes: 1: 727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl (hash: tHvn9vQ0SzXApypZOvVw/x7wvpr7R4JJzIB2G9x6cXY=) 2: 3133392e3137362e302e302f31362d3136203d3e2039383033.roa (hash: rprXfo+mQWYwe2oVBzgwFN7TztyCOZlqUd+lE3fdHj0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:00:09:f5:4a:1c:f0:f2:95:14:fd:4a:5e:d4:6b:03:00:08:9b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727CC49FFE2FAF9584C2E103AC6FD293020DD07D Validity Not Before: Apr 17 17:09:43 2026 GMT Not After : Apr 18 17:43:43 2026 GMT Subject: CN=85EA12E2776347144CC1514C2E6DB52BE7BD547A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2e:a8:01:f8:94:44:89:83:5d:21:3b:7a:23: a7:92:c6:98:56:72:51:fa:02:94:86:ed:c3:51:3e: 4b:50:e2:61:75:e5:34:14:b0:1d:c9:d5:14:a4:d8: b6:b7:fb:29:87:66:6a:f2:f4:ad:8c:8d:62:f2:23: 82:b9:23:13:63:d2:36:cf:3c:34:71:a1:ac:80:e6: 93:09:10:75:66:77:10:bd:6c:80:1f:a6:a9:16:c6: 43:6d:94:0b:2a:10:de:31:b4:9a:67:de:12:bd:ee: 38:b5:d6:b7:27:5a:08:67:55:9b:8c:e9:a8:87:6b: 96:fa:69:69:8d:cb:0b:c6:e7:58:76:32:d3:71:91: 2d:6a:81:d3:0a:b8:ac:85:7f:9a:9d:e1:cd:1e:ac: 00:26:59:25:ac:c7:84:6f:3c:5d:ee:00:77:33:5f: 2f:50:27:e8:2d:fe:5e:cd:46:8d:3e:96:fe:5c:74: ed:f4:37:31:14:1b:fd:0a:74:d4:5a:ab:ff:0a:a6: 70:e7:7a:bb:80:b5:8a:94:07:9b:da:3c:6e:2f:e3: a8:33:b9:4d:90:2b:45:96:e7:05:e6:be:95:14:f3: 8c:0e:77:88:91:25:b4:a3:7f:50:c9:ac:30:b1:ad: f4:78:b5:87:73:47:9d:3b:1a:2a:fb:4e:fa:8d:41: 85:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EA:12:E2:77:63:47:14:4C:C1:51:4C:2E:6D:B5:2B:E7:BD:54:7A X509v3 Authority Key Identifier: keyid:72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:1e:82:be:2f:54:6b:7b:6a:6f:38:69:2c:b3:73:a0:fb:b0: 4a:4b:98:44:67:20:56:96:cf:5d:77:f4:90:d3:08:67:60:6f: f9:48:db:cd:73:09:0e:71:fb:78:73:a6:17:b5:94:f1:8d:86: b9:1b:f3:7b:ff:3c:74:ea:1b:3c:44:86:80:1a:e7:7d:c8:58: c5:7e:a4:75:50:e6:bb:76:d1:ff:89:e5:04:9f:5e:05:2a:e7: 8f:5a:ef:89:f9:90:6a:bb:df:e3:e7:94:57:32:ed:c2:b7:60: cd:c9:f5:67:7a:2f:07:01:b3:d0:63:e3:8d:e3:b6:74:6c:3e: eb:ac:00:ee:86:b7:d0:3b:36:b2:2a:8e:30:c4:d0:2b:51:85: c3:57:e7:5d:57:6b:b1:88:53:9e:ea:4c:c9:e8:20:f0:17:11: a6:47:97:eb:d8:17:db:bc:30:37:31:c8:f4:ce:e2:f8:de:2e: 00:27:9a:e3:f9:f3:ce:db:5c:2c:f7:03:e2:b4:6b:cb:88:c5: 54:7a:e7:f7:ab:28:a3:4f:a4:91:33:3d:37:8d:3d:97:6b:0e: 85:01:6b:72:9e:30:26:d0:55:95:f0:60:c5:9f:89:b9:50:bb: 55:a9:a0:77:40:8f:dc:98:f1:8d:98:e6:2f:22:01:d8:ae:46: a0:c2:8c:07 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSgAJ9Uoc8PKVFP1KXtRrAwAIm2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3Q0M0OUZGRTJGQUY5NTg0QzJFMTAzQUM2RkQyOTMw MjBERDA3RDAeFw0yNjA0MTcxNzA5NDNaFw0yNjA0MTgxNzQzNDNaMDMxMTAvBgNV BAMTKDg1RUExMkUyNzc2MzQ3MTQ0Q0MxNTE0QzJFNkRCNTJCRTdCRDU0N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8LqgB+JREiYNdITt6I6eSxphW clH6ApSG7cNRPktQ4mF15TQUsB3J1RSk2La3+ymHZmry9K2MjWLyI4K5IxNj0jbP PDRxoayA5pMJEHVmdxC9bIAfpqkWxkNtlAsqEN4xtJpn3hK97ji11rcnWghnVZuM 6aiHa5b6aWmNywvG51h2MtNxkS1qgdMKuKyFf5qd4c0erAAmWSWsx4RvPF3uAHcz Xy9QJ+gt/l7NRo0+lv5cdO30NzEUG/0KdNRaq/8KpnDneruAtYqUB5vaPG4v46gz uU2QK0WW5wXmvpUU84wOd4iRJbSjf1DJrDCxrfR4tYdzR507Gir7TvqNQYXxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUheoS4ndjRxRMwVFMLm21K+e9VHowHwYDVR0j BBgwFoAUcnzEn/4vr5WEwuEDrG/SkwIN0H0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkyMDAwNjk1NDIyMTU2OS8wLzcyN0NDNDlGRkUyRkFGOTU4NEMyRTEwM0FDNkZE MjkzMDIwREQwN0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNzI3Q0M0OUZGRTJGQUY5NTg0QzJFMTAzQUM2RkQyOTMwMjBERDA3RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5MjAwMDY5NTQyMjE1NjkvMC83MjdDQzQ5RkZFMkZB Rjk1ODRDMkUxMDNBQzZGRDI5MzAyMEREMDdELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVR6Cvi9Ua3tq bzhpLLNzoPuwSkuYRGcgVpbPXXf0kNMIZ2Bv+UjbzXMJDnH7eHOmF7WU8Y2GuRvz e/88dOobPESGgBrnfchYxX6kdVDmu3bR/4nlBJ9eBSrnj1rvifmQarvf4+eUVzLt wrdgzcn1Z3ovBwGz0GPjjeO2dGw+66wA7oa30Ds2siqOMMTQK1GFw1fnXVdrsYhT nupMyegg8BcRpkeX69gX27wwNzHI9M7i+N4uACea4/nzzttcLPcD4rRry4jFVHrn 96soo0+kkTM9N409l2sOhQFrcp4wJtBVlfBgxZ+JuVC7Vamgd0CP3JjxjZjmLyIB 2K5GoMKMBw== -----END CERTIFICATE-----Generated at Fri Apr 17 22:40:02 2026 by rpki-client