$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft File: 1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft (raw, json) Hash identifier: XjB7ywhCZfKRqXprWFOFNB/GhN7RRrNqzHF/5ciUTro= Subject key identifier: A7:DD:EC:8B:64:01:38:3F:E4:06:D3:80:D0:D3:BA:56:79:8F:90:10 Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F Certificate serial: 2F3D092495C55DADADD09C41A52DC1511E546C79 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft Manifest number: 0159 Signing time: Wed 23 Sep 2026 21:00:37 +0000 Manifest this update: Wed 23 Sep 2026 20:55:37 +0000 Manifest next update: Sun 27 Sep 2026 02:59:37 +0000 Files and hashes: 1: AS4808.roa (hash: CU0EgGGd2SKEp5zm8x3SKcQQoRSeVVhTtAN6N71pbEo=) 2: 1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl (hash: vnUuvSGRODU4gHhVWivI+zbSiBCh8ui9o8EPad7URok=) 3: AS17964.roa (hash: 0o66y8CAop9qB0opnrDd38kz8N3ZG7uIIdycGdC6aCE=) 4: AS4847.roa (hash: 0Ina+CzwJQwjEuUhvglREQvsgCccAVWBafW/3ynklIU=) 5: AS0.roa (hash: RSxUs5ZU8R/5Tt2wZ85816aThZjNhTTXPB/DV1zalNU=) 6: AS139128.roa (hash: Hf2+L5HEiYAU8V1aQ0mNqXM9xpZ3IJ5X6iRLcq15VHs=) 7: AS17621.roa (hash: nahdGimnu/0MkhQvX4dEgqzTzP3nDR2/FfUJ8y5zdRk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 02:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3d:09:24:95:c5:5d:ad:ad:d0:9c:41:a5:2d:c1:51:1e:54:6c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F Validity Not Before: Sep 23 20:55:37 2026 GMT Not After : Sep 27 02:59:37 2026 GMT Subject: CN=A7DDEC8B6401383FE406D380D0D3BA56798F9010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e0:39:a0:6a:77:b8:84:1e:56:3e:29:72:94: 6d:12:51:a5:93:b4:19:4f:5d:54:50:1d:24:42:91: 24:1d:44:d5:84:97:36:ec:5e:99:c6:13:8a:f7:13: 54:45:ea:d1:b4:a4:4d:29:c7:cc:60:32:a0:62:4e: 69:b8:bb:ae:f7:a7:f8:bf:f4:58:98:60:e6:8f:82: 89:f3:63:a8:8f:cb:a7:19:d2:1e:33:d4:7a:dc:d2: cc:c6:2c:12:4a:5a:1f:3a:89:1b:8c:8d:df:f7:08: c4:fc:84:4b:ef:68:9f:b1:5f:24:49:db:54:cb:f6: 61:a9:e2:26:f1:18:20:e8:29:1b:e8:d2:c9:fc:1c: aa:3d:d8:4b:b5:9f:07:b9:19:10:cb:e1:dd:5b:4b: 9f:3b:78:58:7c:8a:74:63:b5:3b:eb:bc:3c:79:f5: f9:2a:7b:47:39:9c:25:ae:da:d9:90:c3:58:25:9a: 43:1a:48:33:06:09:dd:b5:3c:b6:77:79:30:ca:ea: 00:91:b2:bf:bc:c2:a0:11:46:60:bb:6c:15:bd:9a: 87:eb:d2:44:9b:17:21:da:a4:1a:60:b7:a9:63:c1: 40:dd:9e:e3:08:85:22:47:1b:f2:5d:9c:68:bf:64: b6:e7:57:c7:91:0c:59:f1:42:69:10:ba:b2:81:be: 90:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:DD:EC:8B:64:01:38:3F:E4:06:D3:80:D0:D3:BA:56:79:8F:90:10 X509v3 Authority Key Identifier: keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:5f:70:8f:d5:f9:5f:87:df:a7:ee:2f:b4:72:b7:cf:7c:e4: e0:49:ed:ba:ad:86:41:c2:2d:2d:97:61:f8:ac:61:cf:77:6f: 44:f9:23:44:1b:93:12:45:9c:da:a4:a7:7a:52:9f:62:12:ca: f1:f7:be:7d:66:90:a4:51:ff:d2:0b:44:91:f9:57:c6:de:73: 15:35:79:d5:c1:cb:aa:5e:94:b8:28:73:1f:fc:d9:13:c5:43: cd:19:e9:39:ad:08:fb:81:24:98:8a:e3:e3:00:11:a2:76:28: 85:21:28:b9:ca:93:7c:34:38:48:50:bd:e4:e4:32:a1:fa:ed: 7a:76:a8:d4:18:2c:8a:a0:7b:56:60:8d:26:e9:74:7a:ab:55: d8:f9:f4:85:9f:28:c4:39:0a:b8:3e:25:c4:a4:23:d4:b8:49: c6:55:76:cb:80:01:2e:1c:11:95:d4:38:8a:44:53:e1:ce:ff: de:20:82:cc:d5:7a:56:62:35:01:e4:de:66:30:90:05:0f:57: e9:93:8f:a4:cb:3f:c4:e9:f4:92:00:de:85:0e:a0:dc:ca:78: 5d:81:c9:87:81:64:cc:33:72:64:1f:db:97:1d:ee:4d:b1:21: 35:c5:83:7f:92:57:6a:c6:23:e3:c0:41:c8:83:2b:52:a0:59: 32:58:2f:80 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULz0JJJXFXa2t0JxBpS3BUR5UbHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDky MjJFOEY5RjAeFw0yNjA5MjMyMDU1MzdaFw0yNjA5MjcwMjU5MzdaMDMxMTAvBgNV BAMTKEE3RERFQzhCNjQwMTM4M0ZFNDA2RDM4MEQwRDNCQTU2Nzk4RjkwMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb4Dmgane4hB5WPilylG0SUaWT tBlPXVRQHSRCkSQdRNWElzbsXpnGE4r3E1RF6tG0pE0px8xgMqBiTmm4u673p/i/ 9FiYYOaPgonzY6iPy6cZ0h4z1Hrc0szGLBJKWh86iRuMjd/3CMT8hEvvaJ+xXyRJ 21TL9mGp4ibxGCDoKRvo0sn8HKo92Eu1nwe5GRDL4d1bS587eFh8inRjtTvrvDx5 9fkqe0c5nCWu2tmQw1glmkMaSDMGCd21PLZ3eTDK6gCRsr+8wqARRmC7bBW9mofr 0kSbFyHapBpgt6ljwUDdnuMIhSJHG/JdnGi/ZLbnV8eRDFnxQmkQurKBvpCBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUp93si2QBOD/kBtOA0NO6VnmPkBAwHwYDVR0j BBgwFoAUGyfCb49+zlOXLYCTP1A8CSIuj58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MDk1NTkyNDA3MzU0NTczMS8wLzFCMjdDMjZGOEY3RUNFNTM5NzJEODA5MzNGNTAz QzA5MjIyRThGOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDkyMjJFOEY5Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzA5NTU5MjQwNzM1NDU3MzEvMC8xQjI3QzI2RjhGN0VD RTUzOTcyRDgwOTMzRjUwM0MwOTIyMkU4RjlGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcV9wj9X5X4ff p+4vtHK3z3zk4Entuq2GQcItLZdh+Kxhz3dvRPkjRBuTEkWc2qSnelKfYhLK8fe+ fWaQpFH/0gtEkflXxt5zFTV51cHLql6UuChzH/zZE8VDzRnpOa0I+4EkmIrj4wAR onYohSEoucqTfDQ4SFC95OQyofrtenao1BgsiqB7VmCNJul0eqtV2Pn0hZ8oxDkK uD4lxKQj1LhJxlV2y4ABLhwRldQ4ikRT4c7/3iCCzNV6VmI1AeTeZjCQBQ9X6ZOP pMs/xOn0kgDehQ6g3Mp4XYHJh4FkzDNyZB/blx3uTbEhNcWDf5JXasYj48BByIMr UqBZMlgvgA== -----END CERTIFICATE-----Generated at Fri Sep 25 04:04:45 2026 by rpki-client