$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft File: 2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft (raw, json) Hash identifier: in44sD+YSlWC/+++bzpQGSVBOHIoNzS6mMp32DGMdr8= Subject key identifier: E8:4E:FE:B5:F7:BE:50:D0:F7:48:1D:28:3A:5B:B5:E5:72:6D:23:07 Authority key identifier: 26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6 Certificate issuer: /CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6 Certificate serial: 1E6D892724B0B34D169166CB683FDC0BDCF42B75 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft Manifest number: B5 Signing time: Fri 16 Oct 2026 08:32:22 +0000 Manifest this update: Fri 16 Oct 2026 08:27:22 +0000 Manifest next update: Mon 19 Oct 2026 16:07:22 +0000 Files and hashes: 1: 34352e3131362e3135322e302f32322d3232203d3e20313331353635.roa (hash: HOfOfgw/0tw8uL48WO+lG0vSL+fX5+Bi8T2yXk4uMzw=) 2: 3130332e3233302e3230302e302f32322d3232203d3e20313331353635.roa (hash: r42RnGBeCl6YkTG2opLn9O58WhJSoIZybnJyVr/dKgQ=) 3: 34352e3131392e3131362e302f32322d3232203d3e20313331353635.roa (hash: ErdNqCr6rLUUPtehXJutXA4Dm9q+vnzD7jD/bqmUhp0=) 4: 34332e3235342e3136382e302f32322d3232203d3e20313331353635.roa (hash: MfiLKwC97r6IDlGtJuLI5ZnoR+6BkyMB1qUC1zGkb38=) 5: 34352e3131352e3230302e302f32322d3232203d3e20313331353635.roa (hash: rLCj0HBQYOVbcabzmYNkYLw4AhULEsHLtpCZIKNuZW4=) 6: 2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl (hash: +6CxdfqZHCLWptIa1vD06pQPfNOHH2nZ2SsbadtgbwE=) 7: 3130332e35352e3232382e302f32322d3232203d3e20313331353635.roa (hash: 7HRLarWGgnBDjlECd+4RsFmaJ0KCNtnMIG+jEZ4BYb0=) 8: 3230322e3136342e302e302f32302d3230203d3e20313331353635.roa (hash: vqj7rCCg8K7t73KdbXfT3onF+TOCWcPf4hcIJvcwdsI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 11:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:6d:89:27:24:b0:b3:4d:16:91:66:cb:68:3f:dc:0b:dc:f4:2b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6 Validity Not Before: Oct 16 08:27:22 2026 GMT Not After : Oct 19 16:07:22 2026 GMT Subject: CN=E84EFEB5F7BE50D0F7481D283A5BB5E5726D2307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:18:4c:46:ca:f7:ae:3c:d8:25:b1:9c:b3: 48:20:f5:f3:45:b8:8f:68:6d:69:42:79:13:41:d5: 68:a6:6c:d7:d6:01:d4:f4:99:4d:cc:19:ed:6e:d0: be:a2:37:e0:f9:1a:4c:70:5f:ad:2a:4b:4c:b6:fb: 7d:e4:8f:34:a3:48:46:f4:43:1a:93:d9:28:21:04: a3:8a:8f:f2:f9:ab:3b:5b:44:94:bc:75:95:c9:c7: 9f:8f:3a:c7:f6:77:ce:4a:54:7d:fb:26:91:d7:27: 76:43:6d:ed:8a:ad:f2:9c:82:48:0e:53:06:38:68: dc:34:9b:16:ab:a7:d9:d3:f0:a5:1c:b4:ff:9b:a9: 8e:ec:54:5c:c1:70:90:63:5f:72:70:cd:17:1f:5b: 4a:69:8b:d0:4c:b1:85:a9:2e:15:67:ee:aa:23:de: f3:9c:d7:2c:01:e9:f6:13:53:19:18:70:66:8e:a7: 53:88:83:6a:e6:e5:d5:a8:c6:0b:db:ef:2f:53:75: 14:2e:3a:45:d3:c0:c3:0d:95:64:9a:df:3d:31:60: f8:e7:76:91:7b:dd:18:5c:c3:71:65:35:12:84:44: 45:05:06:bc:0e:83:8b:ac:d6:96:26:92:ff:80:c5: 20:c7:24:e5:6d:ba:ab:29:dc:f1:b1:7c:9f:1b:0e: c3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4E:FE:B5:F7:BE:50:D0:F7:48:1D:28:3A:5B:B5:E5:72:6D:23:07 X509v3 Authority Key Identifier: keyid:26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e4:b6:c1:ea:7f:81:12:35:64:c4:2c:47:d8:c0:7a:82:99: a1:42:f9:32:b9:2d:42:1e:a6:aa:99:c4:39:d3:a9:0b:69:d4: 30:73:6e:4c:14:e0:41:94:35:46:c1:e7:0f:13:0f:b4:c3:fe: 64:51:ea:ab:db:48:b2:0a:1c:96:83:af:af:3a:30:33:e0:8c: c6:71:7b:9d:33:af:77:44:69:85:18:c9:7e:f8:d3:ce:07:20: 24:b1:46:40:cb:7d:5e:04:1e:e2:0f:c6:ce:15:03:cb:d0:e2: 54:64:f2:3e:b4:9e:ad:c1:0f:9d:4f:44:4c:a2:7b:88:22:92: 59:8a:de:1b:4a:aa:97:08:48:5e:56:70:a8:02:6b:62:3f:d6: 8c:b1:88:2c:44:06:4c:3a:ef:d5:50:1f:85:fa:1b:df:41:cf: 54:0d:49:bc:48:2b:38:54:5f:29:f9:09:64:c9:79:3b:ef:f5: 88:d8:2c:32:ac:fa:17:10:36:59:b1:30:4d:6f:0c:34:99:1d: 7b:18:c9:e1:73:87:9b:46:04:1f:52:a7:6c:d0:2c:d9:bc:f7: 23:f7:d8:88:29:d6:93:b8:9c:17:d5:a0:d4:4b:6c:95:0c:64: 14:0d:cc:66:40:6f:f4:c4:d8:60:c1:64:96:08:82:d2:82:e1: e4:c7:54:07 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHm2JJySws00WkWbLaD/cC9z0K3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjYyN0E1NTZEMzdCRjM2OTZFRjVFQTlCMEZGMjhBNjE1 NUVBMEFBNjAeFw0yNjEwMTYwODI3MjJaFw0yNjEwMTkxNjA3MjJaMDMxMTAvBgNV BAMTKEU4NEVGRUI1RjdCRTUwRDBGNzQ4MUQyODNBNUJCNUU1NzI2RDIzMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGjBhMRsr3rjzYJbGcs0gg9fNF uI9obWlCeRNB1WimbNfWAdT0mU3MGe1u0L6iN+D5GkxwX60qS0y2+33kjzSjSEb0 QxqT2SghBKOKj/L5qztbRJS8dZXJx5+POsf2d85KVH37JpHXJ3ZDbe2KrfKcgkgO UwY4aNw0mxarp9nT8KUctP+bqY7sVFzBcJBjX3JwzRcfW0ppi9BMsYWpLhVn7qoj 3vOc1ywB6fYTUxkYcGaOp1OIg2rm5dWoxgvb7y9TdRQuOkXTwMMNlWSa3z0xYPjn dpF73Rhcw3FlNRKEREUFBrwOg4us1pYmkv+AxSDHJOVtuqsp3PGxfJ8bDsPfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6E7+tfe+UND3SB0oOlu15XJtIwcwHwYDVR0j BBgwFoAUJielVtN782lu9eqbD/KKYVXqCqYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDYwODE4ODEyNjE5OTgxNS8wLzI2MjdBNTU2RDM3QkYzNjk2RUY1RUE5QjBGRjI4 QTYxNTVFQTBBQTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjYyN0E1NTZEMzdCRjM2OTZFRjVFQTlCMEZGMjhBNjE1NUVBMEFBNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ2MDgxODgxMjYxOTk4MTUvMC8yNjI3QTU1NkQzN0JG MzY5NkVGNUVBOUIwRkYyOEE2MTU1RUEwQUE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+S2wep/gRI1 ZMQsR9jAeoKZoUL5MrktQh6mqpnEOdOpC2nUMHNuTBTgQZQ1RsHnDxMPtMP+ZFHq q9tIsgocloOvrzowM+CMxnF7nTOvd0RphRjJfvjTzgcgJLFGQMt9XgQe4g/GzhUD y9DiVGTyPrSercEPnU9ETKJ7iCKSWYreG0qqlwhIXlZwqAJrYj/WjLGILEQGTDrv 1VAfhfob30HPVA1JvEgrOFRfKfkJZMl5O+/1iNgsMqz6FxA2WbEwTW8MNJkdexjJ 4XOHm0YEH1KnbNAs2bz3I/fYiCnWk7icF9Wg1EtslQxkFA3MZkBv9MTYYMFklgiC 0oLh5MdUBw== -----END CERTIFICATE-----Generated at Sat Oct 17 01:31:45 2026 by rpki-client