$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft File: 027E626491D467F2D967FA80361028FA06A786F4.mft (raw, json) Hash identifier: eAE4BDDY8HrBkzX12zvJgS/CdntbjsH9oRItFsI3z7M= Subject key identifier: DE:4A:22:DC:4E:BA:66:EF:99:CD:A5:A1:4C:0F:D4:AA:B0:50:6A:08 Authority key identifier: 02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4 Certificate issuer: /CN=027E626491D467F2D967FA80361028FA06A786F4 Certificate serial: 17AB647FB59536C249B056EA464080FF18718242 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 22:53:28 +0000 Manifest this update: Thu 26 Mar 2026 22:48:28 +0000 Manifest next update: Sat 28 Mar 2026 01:56:28 +0000 Files and hashes: 1: 3130332e392e3135322e302f32342d3234203d3e203338333434.roa (hash: wdok/70+OGrA3z2KyLH5lq3UCizPf7CJzdwVC8v8n6w=) 2: 027E626491D467F2D967FA80361028FA06A786F4.crl (hash: WcAl7YOKlY1BFXa2wcHx4r2K+Z6SFInSWvM4plxdGg8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ab:64:7f:b5:95:36:c2:49:b0:56:ea:46:40:80:ff:18:71:82:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=027E626491D467F2D967FA80361028FA06A786F4 Validity Not Before: Mar 26 22:48:28 2026 GMT Not After : Mar 28 01:56:28 2026 GMT Subject: CN=DE4A22DC4EBA66EF99CDA5A14C0FD4AAB0506A08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c5:64:4f:27:77:e2:71:88:09:e6:ad:fb:ea: aa:86:78:20:16:ef:64:ba:e4:36:50:0c:d3:5d:55: 8e:70:f8:34:cf:47:1c:87:a8:4d:ff:f0:cd:70:59: ff:b3:59:d5:c0:44:05:37:f3:86:7c:9d:5f:a7:4a: 5e:15:1d:88:7b:04:74:5e:e9:7d:17:29:ae:39:ed: b7:f0:bc:e3:b4:a0:db:a5:c0:15:2d:6e:a5:6f:24: 6e:76:f3:60:c7:11:70:a5:71:f1:e7:23:85:5e:01: 92:a1:af:de:53:bd:ef:ae:d5:a5:85:60:56:9b:35: 53:85:ec:b0:6b:0e:07:53:79:a7:4e:87:19:9c:a5: dc:9f:57:9b:22:b0:17:b9:6a:1f:de:65:59:e9:f7: 6b:8c:63:3a:d4:13:a2:4a:64:80:5a:d3:cf:f7:a3: 35:b4:36:be:a7:a1:f6:29:4e:e8:43:1a:60:79:0b: c9:1d:2e:fc:13:a7:7c:a9:83:aa:81:ee:46:c0:ee: 45:cf:b8:2c:02:dc:99:f5:0f:78:df:5d:cf:90:f5: 05:88:cb:58:dc:9c:11:b0:25:83:e6:91:ff:05:e0: 94:16:f2:7d:2c:83:ab:5d:5b:4c:08:4e:74:83:93: 4d:11:59:0e:f0:9a:30:88:68:85:a7:30:18:be:1b: 9b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4A:22:DC:4E:BA:66:EF:99:CD:A5:A1:4C:0F:D4:AA:B0:50:6A:08 X509v3 Authority Key Identifier: keyid:02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:01:45:bd:c4:a7:dd:74:58:72:d1:5c:dd:78:1a:a0:b2:88: 72:f1:b7:6b:5a:28:82:eb:1e:3a:d0:ce:dd:7e:a7:7c:6e:90: 5d:20:2f:25:e5:e5:f5:df:65:d1:f0:de:5e:f9:d1:0b:c5:c3: 6c:a8:1f:d8:08:f5:33:b4:ad:1e:fd:75:5d:78:d0:f0:82:01: ba:07:00:e2:00:43:7a:45:de:6d:37:25:8b:4b:ea:0f:7f:ff: ae:45:c2:f7:8d:38:7f:03:c8:69:8f:6c:37:0f:e1:40:22:5b: 51:0a:a3:43:d0:cf:b0:4f:f1:07:32:92:ec:24:93:56:63:fe: 0e:6a:30:03:30:47:c7:a6:b6:1f:64:e9:b7:40:4c:1e:99:82: c7:9b:ca:f8:e7:8a:8c:f9:91:32:3b:c6:ad:ed:6a:70:c3:6f: 5a:ce:c9:dc:21:90:ef:80:d8:31:23:a7:61:5b:78:97:1d:70: 26:37:91:d7:3b:bc:a3:c0:13:b3:19:ed:e9:b2:8b:99:99:6d: 46:9b:e8:d0:0d:aa:bf:a0:4a:86:bc:59:20:95:48:25:16:d8: 33:41:af:83:07:77:d2:08:61:a7:a0:f0:8a:23:10:d6:e6:a6: 58:74:f2:0b:0e:69:a6:91:14:ce:68:0c:87:2f:b7:fe:77:f9: 37:60:84:d7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUF6tkf7WVNsJJsFbqRkCA/xhxgkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI3RTYyNjQ5MUQ0NjdGMkQ5NjdGQTgwMzYxMDI4RkEw NkE3ODZGNDAeFw0yNjAzMjYyMjQ4MjhaFw0yNjAzMjgwMTU2MjhaMDMxMTAvBgNV BAMTKERFNEEyMkRDNEVCQTY2RUY5OUNEQTVBMTRDMEZENEFBQjA1MDZBMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtxWRPJ3ficYgJ5q376qqGeCAW 72S65DZQDNNdVY5w+DTPRxyHqE3/8M1wWf+zWdXARAU384Z8nV+nSl4VHYh7BHRe 6X0XKa457bfwvOO0oNulwBUtbqVvJG5282DHEXClcfHnI4VeAZKhr95Tve+u1aWF YFabNVOF7LBrDgdTeadOhxmcpdyfV5sisBe5ah/eZVnp92uMYzrUE6JKZIBa08/3 ozW0Nr6nofYpTuhDGmB5C8kdLvwTp3ypg6qB7kbA7kXPuCwC3Jn1D3jfXc+Q9QWI y1jcnBGwJYPmkf8F4JQW8n0sg6tdW0wITnSDk00RWQ7wmjCIaIWnMBi+G5urAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3koi3E66Zu+ZzaWhTA/UqrBQaggwHwYDVR0j BBgwFoAUAn5iZJHUZ/LZZ/qANhAo+ganhvQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTI2OTI0OS8wLzAyN0U2MjY0OTFENDY3RjJEOTY3RkE4MDM2MTAy OEZBMDZBNzg2RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDI3RTYyNjQ5MUQ0NjdGMkQ5NjdGQTgwMzYxMDI4RkEwNkE3ODZGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjEyNjkyNDkvMC8wMjdFNjI2NDkxRDQ2 N0YyRDk2N0ZBODAzNjEwMjhGQTA2QTc4NkY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQFFvcSn3XRY ctFc3XgaoLKIcvG3a1ooguseOtDO3X6nfG6QXSAvJeXl9d9l0fDeXvnRC8XDbKgf 2Aj1M7StHv11XXjQ8IIBugcA4gBDekXebTcli0vqD3//rkXC9404fwPIaY9sNw/h QCJbUQqjQ9DPsE/xBzKS7CSTVmP+DmowAzBHx6a2H2Tpt0BMHpmCx5vK+OeKjPmR MjvGre1qcMNvWs7J3CGQ74DYMSOnYVt4lx1wJjeR1zu8o8ATsxnt6bKLmZltRpvo 0A2qv6BKhrxZIJVIJRbYM0Gvgwd30ghhp6DwiiMQ1uamWHTyCw5pppEUzmgMhy+3 /nf5N2CE1w== -----END CERTIFICATE-----Generated at Fri Mar 27 08:12:50 2026 by rpki-client