
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft
File: 727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft (raw, json)
Hash identifier: ckrmS274CZm/EHU7UvAL/doovzGGQBv6g4uvMvH+iRc=
Subject key identifier: 8E:12:06:BB:7B:B2:50:B0:71:96:9C:BC:2C:F8:66:8B:CD:67:FC:EF
Authority key identifier: 72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D
Certificate issuer: /CN=727CC49FFE2FAF9584C2E103AC6FD293020DD07D
Certificate serial: 7D088882C5EE84167CF71AC152E0D0246F9A61F5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft
Manifest number: 010D
Signing time: Mon 12 Oct 2026 03:56:27 +0000
Manifest this update: Mon 12 Oct 2026 03:51:27 +0000
Manifest next update: Thu 15 Oct 2026 12:26:27 +0000
Files and hashes: 1: 3133392e3137362e302e302f31362d3136203d3e2039383033.roa (hash: rprXfo+mQWYwe2oVBzgwFN7TztyCOZlqUd+lE3fdHj0=)
2: 727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl (hash: rbM9Sy9trkkC5YmyjpsmCCnAY/vA4g7qTYiOqlHFAqk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl
rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 10:58:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:08:88:82:c5:ee:84:16:7c:f7:1a:c1:52:e0:d0:24:6f:9a:61:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727CC49FFE2FAF9584C2E103AC6FD293020DD07D
Validity
Not Before: Oct 12 03:51:27 2026 GMT
Not After : Oct 15 12:26:27 2026 GMT
Subject: CN=8E1206BB7BB250B071969CBC2CF8668BCD67FCEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:ad:ec:de:3f:08:28:4c:e4:2f:9e:14:ac:
38:9b:e3:1e:87:c6:90:29:17:3f:03:da:36:0c:f9:
d2:20:ab:32:1b:59:fe:85:d1:72:3f:6e:bd:ec:b3:
7f:f0:be:01:35:27:cb:31:3d:32:34:e8:22:2e:d3:
1b:6e:53:59:4e:bd:8a:1c:48:70:b9:63:06:b5:48:
b7:28:1a:4a:33:49:7b:9b:a1:1f:10:8a:bc:35:03:
dc:56:f4:23:f8:1b:d8:63:c5:16:44:a9:9d:8c:a9:
78:c2:76:82:fa:a0:e2:25:7e:52:ce:f8:62:33:bf:
0a:f2:27:bc:ff:3c:e0:5e:5b:25:3b:77:d6:68:3f:
21:b6:ef:ea:96:61:e1:96:e5:36:87:f2:ab:1f:45:
3c:15:bd:d4:31:19:38:2d:96:40:37:d5:cd:9c:23:
d3:00:e1:c7:c2:fa:f9:5c:4d:4b:bc:d1:71:73:6f:
9a:e7:56:cd:51:e3:50:d1:ae:a0:84:c6:38:31:48:
0a:4e:85:ec:7f:54:54:67:14:73:ba:f6:81:ab:06:
f7:bf:17:a5:69:20:89:2a:04:4d:02:bd:ce:3c:7a:
75:74:b1:41:1f:63:04:19:60:c2:ab:08:13:11:3a:
21:50:20:08:87:e5:f4:a3:e2:f7:48:c6:78:16:1e:
e8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:12:06:BB:7B:B2:50:B0:71:96:9C:BC:2C:F8:66:8B:CD:67:FC:EF
X509v3 Authority Key Identifier:
keyid:72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:71:e2:81:af:19:78:57:58:10:76:4b:2b:5d:d1:51:09:ab:
5c:a1:64:b3:28:76:0d:64:f4:1d:59:c4:ac:c5:0e:81:c0:5a:
e1:f8:2f:53:47:3a:0a:52:1f:35:9a:42:da:d7:a3:90:3a:97:
ed:de:61:77:79:bb:45:b4:b1:d8:59:0c:0e:46:f6:8d:dd:c9:
3c:35:7d:b4:08:7f:76:f6:8a:7c:83:b8:f0:79:74:c6:ed:f1:
e5:4a:51:0b:47:91:86:ea:ee:0d:73:7f:8d:1e:55:12:0a:ad:
41:92:ce:dc:84:73:f8:07:eb:45:da:bf:2a:7f:e6:2b:d1:2a:
4d:ef:00:8e:15:69:d5:36:db:79:73:ae:fd:60:6a:34:ed:12:
3f:49:c4:aa:ca:fd:3e:6e:b5:cc:12:9e:d6:b0:35:7f:ce:1c:
44:39:6f:fa:e2:9f:53:a1:dc:3f:e3:5d:e3:cd:ea:f1:2e:f3:
0f:6e:cb:4e:45:ed:1b:42:71:37:98:8b:92:2f:6b:51:c7:2e:
ff:99:cd:f2:29:a6:c8:61:ca:06:89:09:7e:4c:60:80:6c:fa:
e5:10:03:06:d6:c7:f1:f2:6f:57:04:95:67:d6:18:9c:cd:61:
f6:94:20:bd:b7:90:63:36:64:61:1d:0a:6d:63:e9:39:64:b7:
56:5b:1a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:44:35 2026 by rpki-client