
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
File: 727F645FC8FE158EB2755D7F914A4325882E78A0.mft (raw, json)
Hash identifier: FmMoIl2iNfw2v37YpcqFRqEwPTCB5hpPnbRpd/ctrm4=
Subject key identifier: 3A:CC:B7:AF:DC:BF:83:A0:DB:8E:19:2A:92:2C:9F:63:D2:EB:E1:13
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Certificate issuer: /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial: 4031763D1B239144F9439BB9B7A09711B6A41283
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
Manifest number: 0137
Signing time: Sat 26 Sep 2026 02:13:05 +0000
Manifest this update: Sat 26 Sep 2026 02:08:05 +0000
Manifest next update: Tue 29 Sep 2026 02:45:05 +0000
Files and hashes: 1: 34352e3131352e3233362e302f32342d3234203d3e20313332383833.roa (hash: jYHqIibRxNto8LGE4Mom2FW7lFyDAAkjiq2bhNO5hG8=)
2: 34352e3131352e3233372e302f32342d3234203d3e20313332383833.roa (hash: sMkeGT1XRln9oOEfmFJ8Em5N9owCBnlr5+e52vYRV68=)
3: 34332e3235312e3233362e302f32342d3234203d3e20313332383833.roa (hash: mykK8in4gkNBTc8c/xTtkT3MIICTpH8yR5T2MvvUOPo=)
4: 727F645FC8FE158EB2755D7F914A4325882E78A0.crl (hash: L1/IWOSR4G0Cd0Vy8L2RnGg8l0A6pMxZ5JABbgaf8Oo=)
5: 3130332e35362e31392e302f32342d3234203d3e20313332383833.roa (hash: 1YJQRH0LvPTZzFLUFb+cHm2Zd2QxEA1deAqqleduAqg=)
6: 3230332e38332e31312e302f32342d3234203d3e20313332383833.roa (hash: OyoHEG8o3gNVgxiZc7NpaX+LGXqgquCj5WWVQUqvufA=)
7: 3130332e34332e31392e302f32342d3234203d3e20313332383833.roa (hash: 8Eq0oLTh31AxDX0nHXIbnNmbdSMznta0FdMSV4iVE/g=)
8: 34332e3235312e3233372e302f32342d3234203d3e20313332383833.roa (hash: Sw6wLQbg5UOeroFPC15hffs2jWYywjmXzXsJ3KN/Sxk=)
9: 3130332e34332e31372e302f32342d3234203d3e20313332383833.roa (hash: Y4bLyzOvB8vpCyqmm35FxBPPUZj7MRs9fRKs/nZam7U=)
10: 3130332e35362e31372e302f32342d3234203d3e20313332383833.roa (hash: e95du5dQAXHhRcCTJIAb2GAlVK1fBfDxgvojfnogAHM=)
11: 34332e3235312e3233392e302f32342d3234203d3e20313332383833.roa (hash: fMUQM/+CpcOFdrcqDjYJfrTT7Jhon7Kh0D2jc0fdqRs=)
12: 34332e3235312e3233382e302f32342d3234203d3e20313332383833.roa (hash: /Rx6e3CvoxQocrTNIXHYHjqGpVbwOniUCq31GunObTQ=)
13: 3230332e38332e382e302f32342d3234203d3e20313332383833.roa (hash: Gu5ie/X9E55m2Q6WtM52yvPaGRXbzNeYJ68hcvMny0U=)
14: 3230332e38332e31302e302f32342d3234203d3e20313332383833.roa (hash: FKZpZHJPFv7MN6aC3zTHDQHiGVZHy4K5UA40BFhhR10=)
15: 34352e3131352e3233392e302f32342d3234203d3e20313332383833.roa (hash: 4ttlBoSWVe9ZNF/Zp9jHRsWrZKXi+CTyy/+lqvgHOAk=)
16: 34352e3131352e3233382e302f32342d3234203d3e20313332383833.roa (hash: HwzMyeQYMuzIuzxpk1Q3jUVoUZQgEPe90jhs2V97W6M=)
17: 3130332e34332e31382e302f32342d3234203d3e20313332383833.roa (hash: 5mwMibMLPPK4nG8lkrPfet4YTWk4RP5rDtRZx3ikwqQ=)
18: 3130332e35362e31382e302f32342d3234203d3e20313332383833.roa (hash: IoAWP1pWwIIOw8P6s089HG6MEfk3dnUjqltYsSmtshM=)
19: 3230332e38332e392e302f32342d3234203d3e20313332383833.roa (hash: dHvh7EAR3ukAg4TNNo+1CAfQbE6hwuaVlWKsy7btzzw=)
20: 3130332e35362e31362e302f32342d3234203d3e20313332383833.roa (hash: VOqIkMc+kKB+0g4MsxguR78fkJ8eSZV8sD7HTViTEJg=)
21: 3130332e34332e31362e302f32342d3234203d3e20313332383833.roa (hash: H08bHPcp2tMjVqJhHN2ydkVYNAV8s4aWv5IHR9cqa7I=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 02:45:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:31:76:3d:1b:23:91:44:f9:43:9b:b9:b7:a0:97:11:b6:a4:12:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Validity
Not Before: Sep 26 02:08:05 2026 GMT
Not After : Sep 29 02:45:05 2026 GMT
Subject: CN=3ACCB7AFDCBF83A0DB8E192A922C9F63D2EBE113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:07:51:74:87:07:85:0c:f1:99:eb:c2:e8:4d:
9e:68:db:f7:6e:54:2b:53:9e:39:43:4c:e5:4c:09:
0c:af:42:39:f8:b5:75:ee:d6:4b:2b:f1:7b:f6:bb:
a7:26:09:23:81:02:d9:5e:d6:c0:31:07:6d:14:f1:
e6:a1:f2:ff:58:51:94:cb:94:f8:2f:f8:86:41:da:
69:f5:90:9a:ac:28:40:e9:4a:d1:d3:fd:e0:22:50:
31:5d:20:e4:c5:be:c0:33:3a:85:62:1d:18:ad:fb:
e6:ef:d9:0a:3e:10:bc:0c:a9:7b:3a:b2:8f:2d:f0:
01:6a:bc:8d:56:a3:e4:41:23:ba:04:4f:5a:9c:48:
88:91:8e:a5:bf:75:8f:8e:2c:02:ff:c1:4a:5d:6b:
7a:15:00:78:f2:c2:6d:63:58:d9:9d:64:5d:d8:75:
84:a2:48:e8:20:75:bb:7e:06:cb:85:f5:91:9f:91:
72:04:62:e0:92:cf:99:ab:2b:45:af:5b:4a:16:fc:
52:cf:2b:35:ac:ad:19:e7:bf:3f:76:cf:ed:d9:99:
58:ec:61:29:6c:0d:c0:77:79:9e:4f:7b:b2:44:52:
d5:56:dc:f7:20:e8:e9:bd:5e:7e:f7:ae:67:fd:ee:
b6:4a:93:be:16:38:18:c9:30:b6:b6:41:aa:cf:59:
97:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:CC:B7:AF:DC:BF:83:A0:DB:8E:19:2A:92:2C:9F:63:D2:EB:E1:13
X509v3 Authority Key Identifier:
keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:0a:b3:fc:55:3c:a7:aa:a7:8a:9d:5d:f0:40:0c:6a:3c:ff:
13:6a:ec:bf:8a:5a:1a:95:f6:09:df:2a:3a:47:49:bb:88:c5:
3a:95:68:57:55:c9:38:2a:6c:f3:ec:aa:4d:36:78:6e:73:c1:
86:b5:a4:e9:8c:54:1f:52:48:fa:7e:89:0c:f5:e4:0d:e8:31:
a2:79:68:a9:b1:c8:41:ce:0b:04:89:86:63:bb:09:0c:b8:2a:
d1:63:94:bb:c8:8e:74:f9:8c:bf:d7:43:07:9f:48:a6:7f:b3:
db:3d:1c:35:8d:e6:a7:b3:57:18:49:c1:8a:da:8f:00:d1:fc:
70:fb:22:7f:d7:60:e6:29:53:b6:00:7b:bb:95:9f:b4:4d:14:
27:b8:86:92:9c:79:a4:11:90:1a:01:aa:8c:fe:ff:8c:21:08:
eb:e6:b3:be:da:a6:4e:d9:68:8c:66:05:02:7b:43:5d:1f:ea:
95:5e:80:eb:ba:e3:de:c1:7f:b3:53:88:9a:61:2c:3c:65:ac:
63:a6:65:f6:41:e3:89:91:1f:30:af:cf:49:4c:c9:9f:3b:ff:
ef:96:b3:96:25:7f:7f:ce:b5:49:f2:3f:d8:60:ec:a8:81:2c:
f5:cb:0c:3d:f8:ad:d4:24:23:37:09:f9:dd:37:fe:d6:67:33:
da:64:a2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:17:51 2026 by rpki-client