$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft File: 727F645FC8FE158EB2755D7F914A4325882E78A0.mft (raw, json) Hash identifier: uL1fILz4CXB6JKDU6iTUcgwnx7Rn4FrdkJzFtfcaMUE= Subject key identifier: DC:E7:5C:E1:CD:E8:EC:49:81:88:F7:D7:5A:70:1D:1B:77:BE:E3:F3 Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0 Certificate issuer: /CN=727F645FC8FE158EB2755D7F914A4325882E78A0 Certificate serial: 6E729949A15DDCC3B568FF4CBE12864718FF574F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 12:28:28 +0000 Manifest this update: Thu 26 Mar 2026 12:23:28 +0000 Manifest next update: Fri 27 Mar 2026 14:01:28 +0000 Files and hashes: 1: 727F645FC8FE158EB2755D7F914A4325882E78A0.crl (hash: o9rb8LapbafLQ8tnH2rxz/N4FDqSUgkWeqdAhXm2ToE=) 2: 3230332e38332e31302e302f32342d3234203d3e20313332383833.roa (hash: FKZpZHJPFv7MN6aC3zTHDQHiGVZHy4K5UA40BFhhR10=) 3: 3230332e38332e392e302f32342d3234203d3e20313332383833.roa (hash: dHvh7EAR3ukAg4TNNo+1CAfQbE6hwuaVlWKsy7btzzw=) 4: 3230332e38332e382e302f32342d3234203d3e20313332383833.roa (hash: Gu5ie/X9E55m2Q6WtM52yvPaGRXbzNeYJ68hcvMny0U=) 5: 3230332e38332e31312e302f32342d3234203d3e20313332383833.roa (hash: OyoHEG8o3gNVgxiZc7NpaX+LGXqgquCj5WWVQUqvufA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:72:99:49:a1:5d:dc:c3:b5:68:ff:4c:be:12:86:47:18:ff:57:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0 Validity Not Before: Mar 26 12:23:28 2026 GMT Not After : Mar 27 14:01:28 2026 GMT Subject: CN=DCE75CE1CDE8EC498188F7D75A701D1B77BEE3F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:df:6c:ec:02:de:11:ac:93:91:4e:74:a7:e8: be:b6:1d:1d:ab:ce:1f:cc:58:78:8b:62:09:14:67: 0a:29:6d:e2:df:74:7d:ac:b3:89:b8:fe:6f:29:c1: 19:2f:72:41:c9:5c:4b:88:9a:30:33:6e:21:fb:0c: c9:52:69:63:98:e4:4f:c1:cf:0b:70:9e:04:5a:e4: 9e:9e:43:c4:fd:e0:b2:6f:c1:9c:b6:e6:f8:62:a0: 6b:2b:11:fe:f8:e4:b9:12:e6:89:8c:d4:89:a7:c9: 77:8d:58:a8:64:64:6d:a5:fe:f5:cd:77:21:88:cd: 3e:b9:94:ec:71:af:f6:4e:5d:1e:a0:f8:59:77:1f: 40:f6:78:58:4a:72:c8:f5:4f:26:1e:26:8f:c1:05: ae:e6:04:6e:1a:a7:e5:49:dc:49:f2:62:00:d6:79: 80:96:33:4f:62:c2:f4:75:9a:4d:cc:6b:79:48:ce: c5:55:c9:85:7c:65:f5:86:39:70:ba:18:88:86:dd: 9d:df:e2:a2:ac:88:00:c4:cd:73:22:d4:92:02:25: b7:62:17:82:67:05:a0:73:75:f8:eb:3e:86:a3:ea: 0a:df:28:a5:22:cb:4a:c2:ce:59:d9:22:be:45:24: fc:43:34:ba:06:1c:11:63:31:d8:d5:4f:50:bb:48: 7e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E7:5C:E1:CD:E8:EC:49:81:88:F7:D7:5A:70:1D:1B:77:BE:E3:F3 X509v3 Authority Key Identifier: keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ab:22:8f:b5:97:c7:fe:72:34:f2:ed:30:2c:4a:dd:9f:89: 54:8b:60:67:c4:12:08:dc:b1:ee:d8:1d:d4:37:1c:76:ab:7c: 08:77:2b:3a:71:87:3d:71:10:82:7c:1e:bc:d9:0b:62:f3:0b: 94:99:bc:b5:41:69:da:f0:ac:4b:d6:dc:d8:54:f1:2b:07:f6: 12:dc:97:50:43:7f:c9:d4:d4:73:40:3d:43:b8:44:7a:49:b4: 5b:60:6d:81:83:83:44:22:04:3a:6c:8f:d3:a0:a9:9b:38:ee: f9:16:fc:0f:16:e8:a0:75:78:ff:cd:f5:4b:47:2a:39:8f:bb: 0e:ce:f2:42:73:14:66:3d:c4:79:31:93:71:25:4a:15:e6:fb: 9c:e8:0f:9a:c9:cc:3f:40:da:e9:bf:3b:74:90:c3:e6:78:21: a5:05:87:e4:b5:9b:87:c1:63:87:34:0a:d1:a9:b6:41:f8:b7: 77:d8:08:0e:69:77:90:fe:cf:5b:b5:cf:1d:66:5a:71:51:6c: b2:e2:63:ae:22:f1:bf:99:33:42:e4:d3:dd:4c:c0:86:23:55: c8:91:74:7c:07:10:a6:be:f6:0c:3d:b4:3d:ab:bf:1a:a7:b5: 6a:2c:9a:8d:88:d5:3b:f3:02:9c:a8:c1:ed:e9:41:ed:34:70: 5f:a3:8a:3d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbnKZSaFd3MO1aP9MvhKGRxj/V08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3RjY0NUZDOEZFMTU4RUIyNzU1RDdGOTE0QTQzMjU4 ODJFNzhBMDAeFw0yNjAzMjYxMjIzMjhaFw0yNjAzMjcxNDAxMjhaMDMxMTAvBgNV BAMTKERDRTc1Q0UxQ0RFOEVDNDk4MTg4RjdENzVBNzAxRDFCNzdCRUUzRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI32zsAt4RrJORTnSn6L62HR2r zh/MWHiLYgkUZwopbeLfdH2ss4m4/m8pwRkvckHJXEuImjAzbiH7DMlSaWOY5E/B zwtwngRa5J6eQ8T94LJvwZy25vhioGsrEf745LkS5omM1ImnyXeNWKhkZG2l/vXN dyGIzT65lOxxr/ZOXR6g+Fl3H0D2eFhKcsj1TyYeJo/BBa7mBG4ap+VJ3EnyYgDW eYCWM09iwvR1mk3Ma3lIzsVVyYV8ZfWGOXC6GIiG3Z3f4qKsiADEzXMi1JICJbdi F4JnBaBzdfjrPoaj6grfKKUiy0rCzlnZIr5FJPxDNLoGHBFjMdjVT1C7SH4HAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3Odc4c3o7EmBiPfXWnAdG3e+4/MwHwYDVR0j BBgwFoAUcn9kX8j+FY6ydV1/kUpDJYgueKAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODI4ODAwMi8wLzcyN0Y2NDVGQzhGRTE1OEVCMjc1NUQ3RjkxNEE0 MzI1ODgyRTc4QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzI3RjY0NUZDOEZFMTU4RUIyNzU1RDdGOTE0QTQzMjU4ODJFNzhBMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgyODgwMDIvMC83MjdGNjQ1RkM4RkUx NThFQjI3NTVEN0Y5MTRBNDMyNTg4MkU3OEEwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqsij7WXx/5y NPLtMCxK3Z+JVItgZ8QSCNyx7tgd1Dccdqt8CHcrOnGHPXEQgnwevNkLYvMLlJm8 tUFp2vCsS9bc2FTxKwf2EtyXUEN/ydTUc0A9Q7hEekm0W2BtgYODRCIEOmyP06Cp mzju+Rb8DxbooHV4/831S0cqOY+7Ds7yQnMUZj3EeTGTcSVKFeb7nOgPmsnMP0Da 6b87dJDD5nghpQWH5LWbh8FjhzQK0am2Qfi3d9gIDml3kP7PW7XPHWZacVFssuJj riLxv5kzQuTT3UzAhiNVyJF0fAcQpr72DD20Pau/Gqe1aiyajYjVO/MCnKjB7elB 7TRwX6OKPQ== -----END CERTIFICATE-----Generated at Fri Mar 27 00:35:12 2026 by rpki-client