
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
File: 1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft (raw, json)
Hash identifier: syZXRWge4dHYFKxBAv6wChis+GJdwJCoIVXinr0KTro=
Subject key identifier: CC:A1:4C:F1:87:03:71:44:82:2A:D2:95:54:96:8B:B8:CE:0F:1E:AB
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial: 02E4E44E3EBD89184D7FB4B899441067C1BEB2E1
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
Manifest number: 011D
Signing time: Thu 23 Jul 2026 12:13:38 +0000
Manifest this update: Thu 23 Jul 2026 12:08:38 +0000
Manifest next update: Fri 24 Jul 2026 12:51:38 +0000
Files and hashes: 1: AS0.roa (hash: RSxUs5ZU8R/5Tt2wZ85816aThZjNhTTXPB/DV1zalNU=)
2: AS4808.roa (hash: CU0EgGGd2SKEp5zm8x3SKcQQoRSeVVhTtAN6N71pbEo=)
3: 1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl (hash: JYUltkXHQR++zb/Fl9ATcIIKbMTR58muAOiQ7TjYAWA=)
4: AS139128.roa (hash: Hf2+L5HEiYAU8V1aQ0mNqXM9xpZ3IJ5X6iRLcq15VHs=)
5: AS17964.roa (hash: 0o66y8CAop9qB0opnrDd38kz8N3ZG7uIIdycGdC6aCE=)
6: AS4847.roa (hash: 0Ina+CzwJQwjEuUhvglREQvsgCccAVWBafW/3ynklIU=)
7: AS17621.roa (hash: nahdGimnu/0MkhQvX4dEgqzTzP3nDR2/FfUJ8y5zdRk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 12:51:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e4:e4:4e:3e:bd:89:18:4d:7f:b4:b8:99:44:10:67:c1:be:b2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Validity
Not Before: Jul 23 12:08:38 2026 GMT
Not After : Jul 24 12:51:38 2026 GMT
Subject: CN=CCA14CF187037144822AD29554968BB8CE0F1EAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4a:57:a8:42:46:73:85:a5:7f:d8:62:cf:c7:
9d:f2:f8:b4:81:a4:d8:47:ff:50:f8:8f:4c:e0:c0:
c5:59:23:76:54:d3:39:d9:d3:f2:da:5a:90:35:bb:
9e:02:1c:eb:6f:43:33:4f:2e:fe:42:99:38:16:24:
c8:54:d8:37:63:3a:6f:9b:7b:3a:95:41:25:75:d9:
4a:0a:48:52:c9:40:b8:1a:63:ee:27:8f:37:30:a8:
2c:eb:09:c8:fa:69:6e:8f:c4:36:21:6c:7b:da:b5:
8f:24:f7:8a:ee:c1:cb:54:1a:a1:59:01:5e:10:bf:
bf:18:44:ae:a6:b7:b8:59:9f:dd:e5:68:60:0c:0e:
4c:30:af:14:35:27:52:c8:14:09:f3:e1:2b:ef:73:
12:a4:14:e6:e7:46:24:ab:d2:6c:f0:97:33:1b:38:
bb:76:3b:2d:d2:20:67:3d:a9:75:ff:1f:33:c6:ab:
98:12:ab:14:5f:bc:b7:1c:38:25:fc:6a:31:a6:a7:
2b:15:db:55:4d:09:5a:88:0c:9d:9f:c7:ef:19:09:
9c:e3:1d:d1:44:f7:ad:17:8b:a2:bf:4b:96:61:76:
9d:ba:57:b1:4c:42:fc:05:05:cd:88:34:7f:9a:ba:
7e:26:f5:5d:01:a5:7c:74:7d:df:76:e7:33:e1:30:
37:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A1:4C:F1:87:03:71:44:82:2A:D2:95:54:96:8B:B8:CE:0F:1E:AB
X509v3 Authority Key Identifier:
keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c0:44:c1:c7:de:66:41:82:37:21:fc:4a:04:98:8f:72:00:
9c:8e:4f:2a:d3:4f:8f:8e:7e:b2:86:da:83:c2:60:55:c7:f0:
54:7a:10:bd:d9:9c:fa:2b:1a:c4:35:09:2b:e1:b2:92:10:bc:
d3:f9:da:dc:17:db:9f:45:0d:dd:f5:d6:72:36:ac:89:42:a1:
37:dd:af:5b:34:02:4c:12:71:27:5a:65:7e:8d:fa:15:4a:08:
48:3e:15:43:a9:c7:cc:c0:d9:ce:ab:d8:d9:8f:f0:9a:00:8e:
3b:d2:7c:d2:5e:3f:d3:24:5f:f3:75:69:9c:cd:1e:3f:e9:5a:
8f:b0:98:6c:b8:5c:24:14:f7:a0:df:81:6f:4b:cb:80:37:f4:
38:5c:8e:aa:c5:d5:6a:5b:c7:fb:9d:cd:2c:d5:f8:f4:6d:de:
cb:ee:65:b6:88:c8:3f:b4:75:c1:07:7f:b3:11:55:2e:2d:f0:
bd:2f:7c:cf:ae:0a:51:f8:81:c7:da:5a:09:9c:36:95:df:f2:
35:e3:df:53:f4:2a:50:8a:8d:0a:74:b6:b1:d5:54:04:73:3e:
d7:f1:80:0f:88:4f:06:b8:04:f5:e4:85:c8:a2:a5:c6:01:cc:
88:a0:a1:cb:22:c0:9b:74:97:b9:ac:dd:f2:36:07:fd:60:00:
83:25:a0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:03 2026 by rpki-client