$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft File: 727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft (raw, json) Hash identifier: mtU7LJWMqRdZawt1E7r4AVV8JXU/mnWZgayiImROnow= Subject key identifier: 8C:C7:D9:BC:93:B5:9D:0F:78:27:DB:5B:3C:3E:3F:DC:E5:3F:DF:3B Authority key identifier: 72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D Certificate issuer: /CN=727CC49FFE2FAF9584C2E103AC6FD293020DD07D Certificate serial: 204D13508B13613E7881D29D2397AA0A53F2EE9D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft Manifest number: D0 Signing time: Tue 28 Jul 2026 22:12:51 +0000 Manifest this update: Tue 28 Jul 2026 22:07:51 +0000 Manifest next update: Thu 30 Jul 2026 01:18:51 +0000 Files and hashes: 1: 727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl (hash: cVzx0FYSn7OPzsV0i6vCV8C2CBedKrViSOo51NHMhXE=) 2: 3133392e3137362e302e302f31362d3136203d3e2039383033.roa (hash: rprXfo+mQWYwe2oVBzgwFN7TztyCOZlqUd+lE3fdHj0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:4d:13:50:8b:13:61:3e:78:81:d2:9d:23:97:aa:0a:53:f2:ee:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727CC49FFE2FAF9584C2E103AC6FD293020DD07D Validity Not Before: Jul 28 22:07:51 2026 GMT Not After : Jul 30 01:18:51 2026 GMT Subject: CN=8CC7D9BC93B59D0F7827DB5B3C3E3FDCE53FDF3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:98:3a:68:b0:82:b1:10:7f:2e:66:6f:9e:1c: 40:e0:7e:41:b6:b1:8e:9e:c1:bd:39:a9:18:3c:5f: 7e:10:10:fd:40:50:8c:f7:2d:fb:b7:6c:91:2e:38: eb:73:8c:1e:fa:1e:93:6a:7b:e6:aa:6c:c3:cf:b0: 53:7a:07:7a:f6:94:a1:82:6d:63:22:81:c9:84:e7: c3:07:f7:0a:d6:bd:fa:5d:96:17:9d:78:e2:92:73: d7:7c:97:ce:9d:b6:cf:4a:2c:01:55:34:58:ad:1f: 63:77:bb:04:a1:c8:aa:53:62:df:0a:48:10:11:f0: 41:c3:1d:e2:fd:52:1b:bc:95:3f:b7:64:89:ce:9d: 04:0f:12:e6:04:25:91:76:c9:04:77:7d:5c:fc:57: 9f:76:4b:88:f7:94:66:a6:62:d9:6c:a8:cd:73:1e: d6:6e:44:ca:11:de:47:8e:73:74:2e:78:11:a1:e5: d8:d7:31:93:6c:b9:49:30:f6:6f:f9:c1:9c:12:de: 1b:29:94:39:97:5e:b7:66:91:2a:72:4c:d3:07:f7: a3:34:83:4d:5b:5b:66:bf:3a:1c:29:ad:c3:b7:39: 5a:0f:0a:08:1b:81:0c:c3:e5:03:ad:64:c1:f1:92: ce:6c:e6:a2:26:a7:18:a6:a6:f7:9f:a7:2c:c8:a8: 5e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C7:D9:BC:93:B5:9D:0F:78:27:DB:5B:3C:3E:3F:DC:E5:3F:DF:3B X509v3 Authority Key Identifier: keyid:72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:85:6b:07:46:74:23:24:ca:b4:ab:55:11:d3:9b:37:16:69: 00:0b:95:da:7d:f2:25:52:fc:6e:ce:df:fe:3f:bd:90:9b:34: d8:38:10:05:f8:03:f4:64:20:1f:54:b7:29:73:99:22:99:fa: 5f:3a:0b:65:dd:d9:83:7f:7e:5c:9e:25:9c:ca:b8:6c:40:ba: b6:26:cf:13:cd:6d:6c:c9:8c:dc:b6:c5:46:9e:ad:21:4d:77: 67:7b:22:01:b5:79:34:14:f3:46:2f:2f:9a:d6:72:2e:d3:45: fc:9c:ec:52:a9:fd:1d:51:f5:d0:b6:96:07:69:c2:fc:34:e2: 7d:65:54:f5:0f:9b:c1:70:8f:92:ba:a1:07:a0:62:0d:ab:11: a6:ff:cd:b0:dd:27:50:9c:16:a0:2e:31:dc:4e:ea:a0:db:f1: 54:a1:b2:c1:b7:96:86:03:cd:75:fb:bd:67:69:3f:bd:45:c1: d2:d1:61:50:1d:f1:b0:8a:ca:3f:25:2b:f2:7b:4a:fd:e9:a9: 1d:b6:f1:3f:64:7c:d7:c0:3b:4c:80:c8:57:c0:42:39:f6:e6: 80:64:b9:c6:51:5f:59:4b:0b:c1:7e:6a:a3:6f:77:10:0c:a1: 82:d8:5b:04:c8:b5:f4:61:a7:50:57:28:6d:bf:73:2f:a3:e7: b1:f1:de:5a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIE0TUIsTYT54gdKdI5eqClPy7p0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3Q0M0OUZGRTJGQUY5NTg0QzJFMTAzQUM2RkQyOTMw MjBERDA3RDAeFw0yNjA3MjgyMjA3NTFaFw0yNjA3MzAwMTE4NTFaMDMxMTAvBgNV BAMTKDhDQzdEOUJDOTNCNTlEMEY3ODI3REI1QjNDM0UzRkRDRTUzRkRGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRmDposIKxEH8uZm+eHEDgfkG2 sY6ewb05qRg8X34QEP1AUIz3Lfu3bJEuOOtzjB76HpNqe+aqbMPPsFN6B3r2lKGC bWMigcmE58MH9wrWvfpdlhedeOKSc9d8l86dts9KLAFVNFitH2N3uwShyKpTYt8K SBAR8EHDHeL9Uhu8lT+3ZInOnQQPEuYEJZF2yQR3fVz8V592S4j3lGamYtlsqM1z HtZuRMoR3keOc3QueBGh5djXMZNsuUkw9m/5wZwS3hsplDmXXrdmkSpyTNMH96M0 g01bW2a/OhwprcO3OVoPCggbgQzD5QOtZMHxks5s5qImpximpvefpyzIqF5LAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjMfZvJO1nQ94J9tbPD4/3OU/3zswHwYDVR0j BBgwFoAUcnzEn/4vr5WEwuEDrG/SkwIN0H0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkyMDAwNjk1NDIyMTU2OS8wLzcyN0NDNDlGRkUyRkFGOTU4NEMyRTEwM0FDNkZE MjkzMDIwREQwN0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNzI3Q0M0OUZGRTJGQUY5NTg0QzJFMTAzQUM2RkQyOTMwMjBERDA3RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5MjAwMDY5NTQyMjE1NjkvMC83MjdDQzQ5RkZFMkZB Rjk1ODRDMkUxMDNBQzZGRDI5MzAyMEREMDdELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsIVrB0Z0IyTK tKtVEdObNxZpAAuV2n3yJVL8bs7f/j+9kJs02DgQBfgD9GQgH1S3KXOZIpn6XzoL Zd3Zg39+XJ4lnMq4bEC6tibPE81tbMmM3LbFRp6tIU13Z3siAbV5NBTzRi8vmtZy LtNF/JzsUqn9HVH10LaWB2nC/DTifWVU9Q+bwXCPkrqhB6BiDasRpv/NsN0nUJwW oC4x3E7qoNvxVKGywbeWhgPNdfu9Z2k/vUXB0tFhUB3xsIrKPyUr8ntK/empHbbx P2R818A7TIDIV8BCOfbmgGS5xlFfWUsLwX5qo293EAyhgthbBMi19GGnUFcobb9z L6PnsfHeWg== -----END CERTIFICATE-----Generated at Wed Jul 29 15:47:15 2026 by rpki-client