
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
File: 2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft (raw, json)
Hash identifier: z3bGgZZmqTNpKeNvvaJSFnABPKg5JrbXuMWk2IPP1Lc=
Subject key identifier: BB:A8:93:7A:1C:42:4B:85:A4:96:32:85:D0:71:58:43:77:40:E9:C7
Authority key identifier: 26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6
Certificate issuer: /CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6
Certificate serial: 69F8C1983F4DE966E4787022ADC81EF70A2EF0A5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
Manifest number: 77
Signing time: Wed 29 Jul 2026 21:30:17 +0000
Manifest this update: Wed 29 Jul 2026 21:25:17 +0000
Manifest next update: Thu 30 Jul 2026 21:53:17 +0000
Files and hashes: 1: 34352e3131362e3135322e302f32322d3232203d3e20313331353635.roa (hash: HOfOfgw/0tw8uL48WO+lG0vSL+fX5+Bi8T2yXk4uMzw=)
2: 3130332e3233302e3230302e302f32322d3232203d3e20313331353635.roa (hash: r42RnGBeCl6YkTG2opLn9O58WhJSoIZybnJyVr/dKgQ=)
3: 34352e3131392e3131362e302f32322d3232203d3e20313331353635.roa (hash: ErdNqCr6rLUUPtehXJutXA4Dm9q+vnzD7jD/bqmUhp0=)
4: 3230322e3136342e302e302f32302d3230203d3e20313331353635.roa (hash: vqj7rCCg8K7t73KdbXfT3onF+TOCWcPf4hcIJvcwdsI=)
5: 34332e3235342e3136382e302f32322d3232203d3e20313331353635.roa (hash: MfiLKwC97r6IDlGtJuLI5ZnoR+6BkyMB1qUC1zGkb38=)
6: 3130332e35352e3232382e302f32322d3232203d3e20313331353635.roa (hash: 7HRLarWGgnBDjlECd+4RsFmaJ0KCNtnMIG+jEZ4BYb0=)
7: 34352e3131352e3230302e302f32322d3232203d3e20313331353635.roa (hash: rLCj0HBQYOVbcabzmYNkYLw4AhULEsHLtpCZIKNuZW4=)
8: 2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl (hash: pGKBaw8k1NTLL2tEAExCwErXLncCHdqN1jswtdhS7dk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl
rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 21:53:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:f8:c1:98:3f:4d:e9:66:e4:78:70:22:ad:c8:1e:f7:0a:2e:f0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6
Validity
Not Before: Jul 29 21:25:17 2026 GMT
Not After : Jul 30 21:53:17 2026 GMT
Subject: CN=BBA8937A1C424B85A4963285D07158437740E9C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:a7:49:01:1a:1d:62:56:3f:f6:c8:cc:da:
b5:89:05:a8:ae:a3:76:5e:b4:1f:a2:f0:ca:7c:15:
29:33:e3:44:f8:b3:69:63:2d:26:e9:bf:45:90:f4:
f7:80:db:e6:fc:7f:de:b2:4e:11:7d:b3:62:e0:ce:
1c:d9:72:6c:93:20:47:55:da:c0:f4:ca:6c:dd:77:
ef:35:a0:0c:9a:e2:22:7d:6e:75:b0:30:33:94:13:
8a:c5:d7:ac:72:94:9d:55:b9:ea:9d:6a:29:a7:c9:
35:b6:e4:83:7b:12:28:b6:fa:1f:2a:4e:6d:d9:82:
1d:c0:ed:b6:23:e0:6b:8a:c0:df:57:5e:98:a9:2d:
7f:49:02:d9:5f:40:09:1a:45:e6:ab:fb:a8:7b:9c:
98:42:35:ca:07:64:90:58:56:7a:ad:f9:51:46:84:
ee:c0:50:b8:29:b4:3c:5b:01:a1:9c:e4:80:d2:f4:
8c:37:63:d9:c2:af:e8:ea:cd:f3:ea:40:e9:f4:b5:
fc:77:35:0f:de:b9:6e:41:00:23:72:84:64:5f:b0:
18:82:b5:42:7e:15:62:39:0e:bb:44:85:ef:38:1d:
82:8f:4e:6c:bd:2a:88:3e:81:a1:93:aa:f2:0c:4c:
5f:b0:6d:53:f7:44:3a:df:1d:87:ef:45:dd:f9:72:
fd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A8:93:7A:1C:42:4B:85:A4:96:32:85:D0:71:58:43:77:40:E9:C7
X509v3 Authority Key Identifier:
keyid:26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ea:31:f0:bf:ef:9f:e1:6f:9e:fb:bf:e5:69:60:3d:bb:c1:
b6:d4:85:52:a8:39:b6:71:84:98:99:ee:23:07:b7:97:76:c8:
b7:26:ba:6e:d7:dc:a9:66:73:0c:8c:7e:61:9e:b1:c5:fc:ac:
a7:7d:79:a3:fb:8e:a3:45:26:5e:fb:7a:c0:91:00:41:0c:95:
4e:37:6a:a4:a8:a9:4b:f6:07:32:fa:82:8f:61:27:c0:f3:13:
62:2e:6a:2c:72:71:8e:c6:c0:5b:42:cc:f3:86:83:ab:c2:64:
90:88:c5:c5:ed:f5:1a:e2:d9:d2:c4:3a:ac:d1:4a:d0:6a:81:
6b:ac:b6:46:a5:07:b4:1a:bc:90:52:e6:0b:b0:5a:d6:c2:e9:
e3:bf:ae:39:6b:12:69:2c:33:2c:2d:de:b5:fc:d3:d5:3a:69:
6f:2f:48:ef:10:91:b6:40:a0:ec:3c:6f:1a:78:4e:5a:11:25:
16:fc:67:a4:2b:30:1c:20:30:3c:8e:21:4a:fa:4d:7b:e6:35:
bb:31:6d:9f:dd:16:6b:5a:8a:f6:ac:2e:b7:74:a7:3e:dc:a0:
56:20:a1:91:0d:19:a5:9e:b3:b4:ee:fe:a0:70:9f:89:6d:3a:
ff:b3:bd:10:60:9d:fc:82:66:9f:c5:73:82:f0:5a:82:c8:83:
63:23:62:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:13:43 2026 by rpki-client