
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
File: 727633DA248F6AC4626E0DF9B33145B74FD58F03.mft (raw, json)
Hash identifier: oblktAZmSUEEVvRaGD4FoQc2yp1o4VXTtneAjKckQa4=
Subject key identifier: F9:DD:81:B1:DB:2D:04:0D:E2:8B:D8:21:21:5A:57:01:E2:4A:10:48
Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Certificate issuer: /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Certificate serial: 1DC3D6DF72354E8E2A3F4A98348E24D3CC00643A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
Manifest number: 90
Signing time: Fri 24 Jul 2026 17:51:49 +0000
Manifest this update: Fri 24 Jul 2026 17:46:49 +0000
Manifest next update: Sat 25 Jul 2026 19:23:49 +0000
Files and hashes: 1: 3231382e39382e3137362e302f32342d3234203d3e203538353432.roa (hash: XFdMvu8G/zSKT5wrWBdxWp+W6TQONNq83QdMat+lt2k=)
2: 3231382e39382e3137362e302f32342d3234203d3e20313436383431.roa (hash: W9YQVXCZAs9kS2UDOyKiYaw3OS4DRjkHfthCx48ARa8=)
3: 3231382e39382e3137392e302f32342d3234203d3e20313436383431.roa (hash: ARWBa9IdK08EGnOSuh23uDfuB0JMI9PCXpZKCN/m7l4=)
4: 3231382e39382e3137372e302f32342d3234203d3e20313436383431.roa (hash: HCyPGKwa4eeE5ZjLHnpqql9PGySx5osAgA1FMWrBU+0=)
5: 3231382e39382e3230392e302f32342d3234203d3e20313436383431.roa (hash: R2FUehBztHdIvg3EWxnn9vSmNq2pxzwjM3Saq/Q0+P4=)
6: 3231382e39382e3231332e302f32342d3234203d3e20313436383431.roa (hash: BQ36hCBywhGt28SwU89T+JTovsJVAPR6cNm45te4lfA=)
7: 3231382e39382e3138302e302f32342d3234203d3e20313436383431.roa (hash: 8vnvx69UZI9UjNoNLKJj/mjRHvJ90Etw1BCB1sZRg4Y=)
8: 3231382e39382e3231322e302f32342d3234203d3e20313436383431.roa (hash: mh4howHx2myQ3DM1H8Q4i0fqcnXhCL5MgENCUx3z93s=)
9: 3231382e39382e3139322e302f32342d3234203d3e203538353432.roa (hash: ZXHCilq7M6t5w4oLyy7/q0uzHX7ckcRbYUXkDNUYUO0=)
10: 3231382e39382e3138312e302f32342d3234203d3e20313436383431.roa (hash: vLrt3AJ67GN9KG7EzWnUz0wi/QliKTTJODDo8xicHfo=)
11: 3231382e39382e3139332e302f32342d3234203d3e203538353432.roa (hash: qt4/6TOa7o32+dkGdPJJfaVcIo3Vl62WqM/O9RzlxHI=)
12: 3231382e39382e3231342e302f32342d3234203d3e20313436383431.roa (hash: INioRRkxf3xa+grpqxBw9dO54uDwmH9qAz6YD6mDzno=)
13: 3231382e39382e3138322e302f32342d3234203d3e20313436383431.roa (hash: 6znvLKLvv9KQQlxGvtEJcXW6b4MyVSay/jA4EVDpYhc=)
14: 3231382e39382e3137382e302f32342d3234203d3e20313436383431.roa (hash: h+7NMVJMGskysHGTL7ek7cRzWtLu2iBmcr8RhLJIuRo=)
15: 3231382e39382e3136302e302f32342d3234203d3e2034383337.roa (hash: 28ClLRNHc1ca5OaJY9IvDzg6NXbTQfy3ShDofWhJRXo=)
16: 3231382e39382e3231302e302f32342d3234203d3e20313436383431.roa (hash: yyPoXI8TawnrApBjndo7j1KSbBtPvYmc36UAqXtEA8U=)
17: 727633DA248F6AC4626E0DF9B33145B74FD58F03.crl (hash: NUmjM64UQJBIbchUme6LoSMbq+lEwaLV02gMD0z7qsE=)
18: 3231382e39382e3231312e302f32342d3234203d3e20313436383431.roa (hash: DKgvwB10v2KlhQb9PUhUx7Cu1QGaNp7YFa9x57886nA=)
19: 3231382e39382e3137372e302f32342d3234203d3e203538353432.roa (hash: BxSgCE5UaiCEinToAh7HtaYOYFUIIUe9Fj7YHmDaEeY=)
20: 3231382e39382e3138332e302f32342d3234203d3e20313436383431.roa (hash: BWgtN9ZlNkUkI1/9ORhwYHGUf2fn6nY77N3GU7vIwKg=)
21: 3231382e39382e3137362e302f32342d3234203d3e2034383337.roa (hash: 6fIbINtNcGKIPP4RrSqGB51a1pyintd2JTCE/IScmZA=)
22: 3231382e39382e3231352e302f32342d3234203d3e20313436383431.roa (hash: aywp0tqCBgRXzid69Cf+hmOo2wFnk5gKkSw0y125MMI=)
23: 3231382e39382e3230382e302f32342d3234203d3e20313436383431.roa (hash: V5WFXW8smGcHXMjpvp9LaOkbL4/Ei94lNvyV8nVmaL0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:c3:d6:df:72:35:4e:8e:2a:3f:4a:98:34:8e:24:d3:cc:00:64:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Validity
Not Before: Jul 24 17:46:49 2026 GMT
Not After : Jul 25 19:23:49 2026 GMT
Subject: CN=F9DD81B1DB2D040DE28BD821215A5701E24A1048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:91:75:9b:b6:4a:43:4c:cd:32:c4:13:a9:
54:d2:3e:c3:5c:56:73:8b:b2:eb:6f:c3:da:87:c0:
90:e0:2f:c7:fb:1f:3b:e2:b9:7e:0a:8a:bf:a4:97:
47:40:14:54:ab:86:e7:33:31:3d:ac:b7:4e:71:a1:
de:5c:b6:99:07:c8:06:b6:8f:b8:94:1e:ea:47:c9:
96:45:6e:3e:06:9d:0f:ee:40:0e:8d:b1:d0:7f:30:
08:a7:ed:d7:e3:78:6a:02:90:7e:f4:12:10:6a:6d:
86:cb:1e:a9:c8:06:3c:b6:51:25:94:75:07:90:1c:
57:7e:b6:d7:9d:6d:67:21:d2:96:a9:19:d9:74:40:
15:27:8a:09:3f:d8:df:13:da:93:f6:ce:23:5d:de:
24:83:26:8d:65:2b:2f:09:47:e9:83:65:57:3a:1a:
81:a2:96:5b:65:af:be:aa:b7:e5:7f:3d:1b:6c:0e:
0b:51:16:20:1c:81:b2:0c:40:10:5c:1f:78:52:b8:
0e:f6:7e:6d:e3:54:bc:b1:f0:13:d2:24:66:2f:9c:
c5:c9:23:fb:39:9a:3d:c4:00:21:64:eb:47:78:dd:
33:e6:1a:27:2a:33:4b:9b:b6:42:19:f9:71:f4:40:
c8:5a:ac:c4:31:63:e1:ff:dd:56:02:83:75:dd:e9:
7e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DD:81:B1:DB:2D:04:0D:E2:8B:D8:21:21:5A:57:01:E2:4A:10:48
X509v3 Authority Key Identifier:
keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:da:51:8c:6b:12:d5:df:73:87:0a:51:73:19:5f:0c:95:96:
5a:93:ef:91:4c:5a:7c:fb:14:86:74:a4:98:f8:f8:e9:3f:4a:
77:46:4b:78:e3:72:8c:30:5a:c6:16:24:1c:bd:98:47:79:7f:
e4:46:36:4e:d3:bd:cb:b4:10:b9:74:97:be:0e:f8:56:90:cc:
7f:e8:99:21:ae:93:f5:e8:b4:fe:f5:e6:bc:f3:94:b6:4f:6d:
91:29:90:f3:8d:5a:be:5f:2e:70:fd:43:fb:bc:41:a6:8a:fb:
d8:76:59:98:f6:98:99:f3:b8:5a:47:52:d6:ca:f1:61:bd:a9:
45:73:18:8d:3e:61:12:1b:db:bd:21:00:bc:cc:47:38:33:22:
ad:f9:b1:25:91:cd:de:f1:fa:97:e2:5b:30:1e:ce:5b:ee:b3:
3f:30:bd:de:75:b6:78:c4:1c:be:58:a4:bb:93:1b:ec:ac:96:
bc:15:c8:24:9a:43:cf:5a:76:48:61:f2:36:5e:f7:4a:07:53:
9c:db:48:9a:d9:e1:d6:7f:f0:1d:07:58:96:b9:8d:97:e3:5e:
47:e7:43:94:45:36:3d:11:be:27:ed:8d:e9:01:78:27:d7:48:
3d:43:b1:d7:e0:d5:06:57:33:97:01:3f:f7:f4:08:63:9c:f5:
7a:68:d9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:11:22 2026 by rpki-client