$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft File: 027E626491D467F2D967FA80361028FA06A786F4.mft (raw, json) Hash identifier: Ub/J/jqN/njGqz7u0bc/j7+KkTyhMG+dpblWY29msOQ= Subject key identifier: 1D:CE:C6:02:E9:67:BB:73:EA:8B:1F:60:F9:F3:7F:B6:7B:60:03:0F Authority key identifier: 02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4 Certificate issuer: /CN=027E626491D467F2D967FA80361028FA06A786F4 Certificate serial: 2519DB0771EB7105B4D6113BE29F899CE4E42F21 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft Manifest number: F9 Signing time: Fri 24 Jul 2026 10:20:57 +0000 Manifest this update: Fri 24 Jul 2026 10:15:57 +0000 Manifest next update: Sat 25 Jul 2026 10:48:57 +0000 Files and hashes: 1: 3130332e392e3135322e302f32342d3234203d3e203338333434.roa (hash: wdok/70+OGrA3z2KyLH5lq3UCizPf7CJzdwVC8v8n6w=) 2: 027E626491D467F2D967FA80361028FA06A786F4.crl (hash: 8p8QUTbhYWcWP7PNZS+aoerR9KrUzmrwY7b6wjfw39k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:19:db:07:71:eb:71:05:b4:d6:11:3b:e2:9f:89:9c:e4:e4:2f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=027E626491D467F2D967FA80361028FA06A786F4 Validity Not Before: Jul 24 10:15:57 2026 GMT Not After : Jul 25 10:48:57 2026 GMT Subject: CN=1DCEC602E967BB73EA8B1F60F9F37FB67B60030F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0c:ab:61:23:52:a8:f3:94:86:13:35:d8:cc: 05:bd:9a:15:f2:00:fd:25:de:2f:77:f5:9d:d7:af: f3:e1:8e:bb:44:10:71:45:b9:1b:3d:67:41:2b:62: 05:ab:ce:de:94:40:53:a4:bd:7c:0f:5e:4c:80:38: b1:51:6c:e9:33:da:8f:d1:87:23:12:a0:90:b7:21: 96:87:99:41:db:89:7d:a5:84:9c:5b:85:dd:34:40: 2f:c3:fe:37:7c:09:3d:f9:b0:4e:2a:54:49:3a:7f: c4:a7:fa:79:e3:6f:73:68:c7:b0:33:32:68:87:f1: 59:11:0f:d1:05:66:8b:c9:59:c7:af:11:a3:32:77: af:d0:d2:51:a4:b1:a2:0a:db:c8:7c:73:f9:bc:3f: 39:53:c4:87:bc:fd:5a:89:b6:a6:da:72:4f:7f:fc: 8f:e1:d7:a2:1a:62:ce:bc:7b:c0:9f:85:5d:bd:f2: a9:11:09:3e:a8:db:fa:cc:3b:d4:9c:e0:7f:82:42: 29:47:30:46:85:81:6e:66:cc:50:36:bc:e5:0a:28: 9b:fb:60:98:48:47:ab:9d:6c:ef:2f:8e:a9:a0:16: 9c:45:73:31:c5:00:c7:4e:63:6e:9d:99:c8:83:aa: e4:9c:e3:69:b8:24:98:24:0a:da:85:2e:7a:1a:73: 1d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CE:C6:02:E9:67:BB:73:EA:8B:1F:60:F9:F3:7F:B6:7B:60:03:0F X509v3 Authority Key Identifier: keyid:02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:9b:1e:4d:bc:6b:86:7e:fd:c1:f5:1b:9d:cf:d2:35:37:5a: ce:9e:aa:86:a4:f4:10:25:f7:dc:3a:68:9c:8c:d4:0e:63:10: f5:63:c4:d3:82:bc:06:95:7f:96:a1:3c:8e:98:e7:5e:cc:81: 76:d3:c6:2c:b7:9f:92:b1:ef:ef:39:af:f5:4a:d5:86:ea:31: 0d:f3:64:7d:e8:50:4c:fc:b2:1d:63:a8:43:7b:8d:08:f2:9f: b5:ab:bb:ae:c9:46:2f:2e:75:f4:04:3b:81:9a:7c:25:5f:8e: 7e:58:63:02:42:57:74:b3:92:46:55:f5:06:33:03:d6:bb:52: c4:05:04:a3:bd:f3:a7:b9:eb:61:8a:c0:82:60:a6:17:4e:97: ff:2a:32:81:62:0f:2b:31:17:ee:a1:3b:99:7b:cd:ed:36:69: 43:de:11:91:48:88:47:b0:fc:cb:5b:37:ff:ce:09:ea:7c:bb: 0a:8e:93:37:64:42:d4:1d:e1:75:f5:6e:87:05:37:db:29:3d: f6:9f:f0:9d:11:4c:7b:99:70:4e:77:82:2b:90:68:65:49:a8: f5:8b:1f:b7:78:1f:4b:30:9c:71:ae:be:51:7c:07:54:50:17: 97:6f:77:c9:2b:b6:0e:08:03:ce:f5:b0:c1:2b:c9:66:a3:2b: 2f:d9:11:ca -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJRnbB3HrcQW01hE74p+JnOTkLyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI3RTYyNjQ5MUQ0NjdGMkQ5NjdGQTgwMzYxMDI4RkEw NkE3ODZGNDAeFw0yNjA3MjQxMDE1NTdaFw0yNjA3MjUxMDQ4NTdaMDMxMTAvBgNV BAMTKDFEQ0VDNjAyRTk2N0JCNzNFQThCMUY2MEY5RjM3RkI2N0I2MDAzMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDKthI1Ko85SGEzXYzAW9mhXy AP0l3i939Z3Xr/PhjrtEEHFFuRs9Z0ErYgWrzt6UQFOkvXwPXkyAOLFRbOkz2o/R hyMSoJC3IZaHmUHbiX2lhJxbhd00QC/D/jd8CT35sE4qVEk6f8Sn+nnjb3Nox7Az MmiH8VkRD9EFZovJWcevEaMyd6/Q0lGksaIK28h8c/m8PzlTxIe8/VqJtqback9/ /I/h16IaYs68e8CfhV298qkRCT6o2/rMO9Sc4H+CQilHMEaFgW5mzFA2vOUKKJv7 YJhIR6udbO8vjqmgFpxFczHFAMdOY26dmciDquSc42m4JJgkCtqFLnoacx0hAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHc7GAulnu3Pqix9g+fN/tntgAw8wHwYDVR0j BBgwFoAUAn5iZJHUZ/LZZ/qANhAo+ganhvQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTI2OTI0OS8wLzAyN0U2MjY0OTFENDY3RjJEOTY3RkE4MDM2MTAy OEZBMDZBNzg2RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDI3RTYyNjQ5MUQ0NjdGMkQ5NjdGQTgwMzYxMDI4RkEwNkE3ODZGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjEyNjkyNDkvMC8wMjdFNjI2NDkxRDQ2 N0YyRDk2N0ZBODAzNjEwMjhGQTA2QTc4NkY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJseTbxrhn79 wfUbnc/SNTdazp6qhqT0ECX33DponIzUDmMQ9WPE04K8BpV/lqE8jpjnXsyBdtPG LLefkrHv7zmv9UrVhuoxDfNkfehQTPyyHWOoQ3uNCPKftau7rslGLy519AQ7gZp8 JV+OflhjAkJXdLOSRlX1BjMD1rtSxAUEo73zp7nrYYrAgmCmF06X/yoygWIPKzEX 7qE7mXvN7TZpQ94RkUiIR7D8y1s3/84J6ny7Co6TN2RC1B3hdfVuhwU32yk99p/w nRFMe5lwTneCK5BoZUmo9Ysft3gfSzCcca6+UXwHVFAXl293ySu2DggDzvWwwSvJ ZqMrL9kRyg== -----END CERTIFICATE-----Generated at Fri Jul 24 19:56:18 2026 by rpki-client