
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
File: 727633DA248F6AC4626E0DF9B33145B74FD58F03.mft (raw, json)
Hash identifier: AatwGjQxQ90An/xtbITvbR6SaUpbjb95Ed+RTeFmoVU=
Subject key identifier: 21:E3:FE:9C:4B:76:61:21:6D:40:55:CC:86:29:49:1D:16:05:FB:9D
Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Certificate issuer: /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Certificate serial: 69B73C666CE3915AC9155F87B93305784940AE21
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
Manifest number: CC
Signing time: Sun 27 Sep 2026 00:54:32 +0000
Manifest this update: Sun 27 Sep 2026 00:49:32 +0000
Manifest next update: Wed 30 Sep 2026 12:16:32 +0000
Files and hashes: 1: 3231382e39382e3231342e302f32342d3234203d3e20313436383431.roa (hash: INioRRkxf3xa+grpqxBw9dO54uDwmH9qAz6YD6mDzno=)
2: 727633DA248F6AC4626E0DF9B33145B74FD58F03.crl (hash: Tr+5HiEc/38XPzXlny9pkj8m6XpnBb2vmkyr1jrXhkE=)
3: 3231382e39382e3137372e302f32342d3234203d3e203538353432.roa (hash: BxSgCE5UaiCEinToAh7HtaYOYFUIIUe9Fj7YHmDaEeY=)
4: 3231382e39382e3138312e302f32342d3234203d3e20313436383431.roa (hash: vLrt3AJ67GN9KG7EzWnUz0wi/QliKTTJODDo8xicHfo=)
5: 3231382e39382e3139332e302f32342d3234203d3e203538353432.roa (hash: qt4/6TOa7o32+dkGdPJJfaVcIo3Vl62WqM/O9RzlxHI=)
6: 3231382e39382e3230392e302f32342d3234203d3e20313436383431.roa (hash: R2FUehBztHdIvg3EWxnn9vSmNq2pxzwjM3Saq/Q0+P4=)
7: 3231382e39382e3137362e302f32342d3234203d3e20313436383431.roa (hash: W9YQVXCZAs9kS2UDOyKiYaw3OS4DRjkHfthCx48ARa8=)
8: 3231382e39382e3138332e302f32342d3234203d3e20313436383431.roa (hash: BWgtN9ZlNkUkI1/9ORhwYHGUf2fn6nY77N3GU7vIwKg=)
9: 3231382e39382e3137392e302f32342d3234203d3e20313436383431.roa (hash: ARWBa9IdK08EGnOSuh23uDfuB0JMI9PCXpZKCN/m7l4=)
10: 3231382e39382e3137372e302f32342d3234203d3e20313436383431.roa (hash: HCyPGKwa4eeE5ZjLHnpqql9PGySx5osAgA1FMWrBU+0=)
11: 3231382e39382e3231352e302f32342d3234203d3e20313436383431.roa (hash: aywp0tqCBgRXzid69Cf+hmOo2wFnk5gKkSw0y125MMI=)
12: 3231382e39382e3139322e302f32342d3234203d3e203538353432.roa (hash: ZXHCilq7M6t5w4oLyy7/q0uzHX7ckcRbYUXkDNUYUO0=)
13: 3231382e39382e3138302e302f32342d3234203d3e20313436383431.roa (hash: 8vnvx69UZI9UjNoNLKJj/mjRHvJ90Etw1BCB1sZRg4Y=)
14: 3231382e39382e3231302e302f32342d3234203d3e20313436383431.roa (hash: yyPoXI8TawnrApBjndo7j1KSbBtPvYmc36UAqXtEA8U=)
15: 3231382e39382e3138322e302f32342d3234203d3e20313436383431.roa (hash: 6znvLKLvv9KQQlxGvtEJcXW6b4MyVSay/jA4EVDpYhc=)
16: 3231382e39382e3137382e302f32342d3234203d3e20313436383431.roa (hash: h+7NMVJMGskysHGTL7ek7cRzWtLu2iBmcr8RhLJIuRo=)
17: 3231382e39382e3136302e302f32342d3234203d3e2034383337.roa (hash: 28ClLRNHc1ca5OaJY9IvDzg6NXbTQfy3ShDofWhJRXo=)
18: 3231382e39382e3231312e302f32342d3234203d3e20313436383431.roa (hash: DKgvwB10v2KlhQb9PUhUx7Cu1QGaNp7YFa9x57886nA=)
19: 3231382e39382e3137362e302f32342d3234203d3e2034383337.roa (hash: 6fIbINtNcGKIPP4RrSqGB51a1pyintd2JTCE/IScmZA=)
20: 3231382e39382e3230382e302f32342d3234203d3e20313436383431.roa (hash: V5WFXW8smGcHXMjpvp9LaOkbL4/Ei94lNvyV8nVmaL0=)
21: 3231382e39382e3137362e302f32342d3234203d3e203538353432.roa (hash: XFdMvu8G/zSKT5wrWBdxWp+W6TQONNq83QdMat+lt2k=)
22: 3231382e39382e3231322e302f32342d3234203d3e20313436383431.roa (hash: mh4howHx2myQ3DM1H8Q4i0fqcnXhCL5MgENCUx3z93s=)
23: 3231382e39382e3231332e302f32342d3234203d3e20313436383431.roa (hash: BQ36hCBywhGt28SwU89T+JTovsJVAPR6cNm45te4lfA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 12:16:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:b7:3c:66:6c:e3:91:5a:c9:15:5f:87:b9:33:05:78:49:40:ae:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Validity
Not Before: Sep 27 00:49:32 2026 GMT
Not After : Sep 30 12:16:32 2026 GMT
Subject: CN=21E3FE9C4B7661216D4055CC8629491D1605FB9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:53:28:c7:41:bc:ff:fb:30:67:25:b0:d4:
5b:32:62:02:bd:f4:0e:b0:70:b1:35:ee:ae:5a:c7:
79:44:1a:32:e9:a1:fe:49:d6:0d:97:7f:e5:15:1d:
6e:2d:54:1d:62:fc:b1:16:e6:46:ea:7f:1d:16:5f:
1e:00:83:d8:28:a5:f3:bf:04:a4:05:2d:2b:95:5d:
8e:ad:7b:46:1f:c9:2f:5b:59:ed:3f:cd:37:4e:50:
55:42:f4:40:fa:f6:07:fb:e8:dd:c5:e4:44:45:f3:
33:48:38:a7:71:b1:7e:8b:70:80:2a:d2:6b:0e:4b:
eb:35:7c:59:16:d4:ea:19:44:da:1a:01:18:81:54:
00:18:1b:2a:d9:6d:d1:aa:2a:11:80:5d:7c:9e:93:
43:70:5a:4a:f2:91:a7:7a:17:d7:ec:c1:25:25:63:
48:44:e7:98:d0:d0:38:3c:26:ef:a7:68:ea:0d:85:
c6:f5:eb:e2:c2:71:b7:0c:b1:0a:3c:51:6f:4a:3d:
52:62:b3:21:ad:64:93:15:37:fc:1d:d5:2d:69:38:
f2:9e:c6:fa:b6:1b:30:60:74:df:b8:a4:11:e4:92:
8d:6a:cc:4d:02:0f:b2:63:8e:9b:d0:c7:97:c0:0b:
8c:d1:3c:44:88:5c:06:39:ca:62:0c:72:39:94:7a:
3b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E3:FE:9C:4B:76:61:21:6D:40:55:CC:86:29:49:1D:16:05:FB:9D
X509v3 Authority Key Identifier:
keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e1:40:24:a1:35:4d:ac:1c:72:b4:cf:e2:7a:e7:b3:c3:8c:
07:a6:86:15:3d:f5:de:4b:38:5e:88:4b:8a:ed:a5:3d:d3:19:
00:da:da:e3:70:3c:a5:bd:16:17:9e:ce:e9:99:d1:6b:85:ef:
fc:0e:7e:1c:27:f4:91:9d:08:6a:03:f0:b4:75:73:d4:52:eb:
8c:73:93:09:e3:70:79:a5:82:86:33:f7:f9:fc:b1:e1:3e:f2:
6c:e9:1a:b5:fc:ba:c1:5a:35:1b:76:3e:cf:d7:dc:ac:20:d9:
60:ef:11:00:a6:62:38:89:72:77:49:ef:2d:15:63:d1:71:0e:
7c:36:55:7a:a4:f3:dd:5d:d7:76:45:51:e7:94:4e:ae:3b:48:
31:d3:59:d4:51:a9:86:6d:7c:5f:1f:54:6a:f6:b4:a2:ff:3e:
6c:07:e0:97:a5:c0:a8:a8:e0:49:b9:8d:a8:52:54:7c:70:b0:
2d:0a:ec:80:39:95:4f:8b:aa:37:60:66:86:23:3f:b0:ec:0f:
46:c1:7a:61:01:4a:e7:70:9c:bf:86:cd:25:68:ad:06:2b:1f:
a1:a3:ea:37:a5:c5:d5:c5:e3:cd:c2:f6:84:b3:1e:df:8d:65:
b3:fa:7e:d3:da:f1:9a:c8:7f:bf:c4:6f:70:2e:5d:d7:e9:f4:
0f:20:e6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:38:10 2026 by rpki-client