$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft File: 727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft (raw, json) Hash identifier: vPLBsxEL/nmRgQUy22ZAjPZAsW8GjvxdFa66VPcV+zU= Subject key identifier: D9:4C:3E:A4:D8:C3:37:C2:AB:41:5C:4C:DD:21:37:1A:0F:CC:D2:93 Authority key identifier: 72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D Certificate issuer: /CN=727CC49FFE2FAF9584C2E103AC6FD293020DD07D Certificate serial: 225F4165669CA0664897D8391F4B6951F3A6061A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft Manifest number: CA Signing time: Fri 24 Jul 2026 07:45:38 +0000 Manifest this update: Fri 24 Jul 2026 07:40:38 +0000 Manifest next update: Sat 25 Jul 2026 08:40:38 +0000 Files and hashes: 1: 3133392e3137362e302e302f31362d3136203d3e2039383033.roa (hash: rprXfo+mQWYwe2oVBzgwFN7TztyCOZlqUd+lE3fdHj0=) 2: 727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl (hash: 4Mk6+8nKh+iYi38URsQ04Yr1Fw8X0yeaR6sEz73L4Ak=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 08:40:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:5f:41:65:66:9c:a0:66:48:97:d8:39:1f:4b:69:51:f3:a6:06:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727CC49FFE2FAF9584C2E103AC6FD293020DD07D Validity Not Before: Jul 24 07:40:38 2026 GMT Not After : Jul 25 08:40:38 2026 GMT Subject: CN=D94C3EA4D8C337C2AB415C4CDD21371A0FCCD293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:74:79:14:67:8b:2e:f8:bf:fc:e4:dd:78:0c: a3:1d:6f:d9:dd:85:3c:18:13:12:29:de:cc:8c:b6: 5d:40:d2:c6:3f:70:fc:a2:83:1f:a7:38:e7:72:84: 8b:16:90:d6:67:e7:41:19:ea:80:dc:e0:a4:18:6d: 11:a4:b0:3b:ba:6c:c3:c0:c1:f2:26:8f:74:bb:58: 89:38:97:bc:1a:77:d1:b6:fc:f1:e2:cf:70:cc:51: e7:61:b7:a8:9b:27:e4:cc:05:99:8d:61:e9:b0:de: e2:e7:b7:da:bf:0b:28:00:6f:34:21:37:46:8d:7c: e0:85:8e:d3:23:74:e5:6f:8b:33:1d:e0:6f:b2:7c: 15:84:bc:6d:1a:fe:22:1d:c2:84:06:4a:ec:7b:36: 36:64:ec:af:81:3b:b7:f1:5f:5b:c6:d4:94:a9:c2: 10:dc:3a:d0:f4:5f:e1:ff:48:91:36:44:fd:85:e8: 7a:c6:fc:26:af:31:d2:6e:1b:98:50:ef:d1:c4:09: 4b:f0:5c:01:0f:78:b3:08:b1:fe:bc:5d:9a:00:8b: 3a:8a:8b:92:ee:5d:db:72:25:08:71:bc:e6:1d:ca: 03:47:a0:e1:aa:b9:94:55:cf:d1:d1:15:49:c9:58: 30:44:2a:29:0f:d4:32:ea:03:df:a7:57:47:66:27: dc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4C:3E:A4:D8:C3:37:C2:AB:41:5C:4C:DD:21:37:1A:0F:CC:D2:93 X509v3 Authority Key Identifier: keyid:72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:9b:d1:bf:d8:54:7a:8d:ab:09:60:69:73:bc:67:51:d0:2e: 08:7e:91:20:7a:cd:f3:75:dd:95:d6:52:fe:b5:a5:b4:4b:23: c3:8d:96:4c:03:64:d7:5a:ee:95:42:c1:d4:23:60:c0:58:a1: c9:bf:45:db:f1:68:02:31:87:d0:64:14:9e:2c:a6:4f:1c:15: f1:2d:fe:b5:a3:80:5a:8f:19:f6:d3:0e:a1:ac:a8:16:ce:a3: 79:28:03:73:be:cb:f4:8f:f5:52:81:6b:d3:f0:ad:84:3d:3f: f4:fe:78:1d:68:63:2e:c5:47:fd:1e:54:37:77:7e:84:21:28: 77:53:d5:4d:71:a0:16:8e:84:46:60:bb:a5:74:d7:a9:df:6e: ef:11:18:79:aa:ea:d5:9d:e5:ba:74:be:99:dd:a0:b3:8b:6d: b1:76:b2:fe:fc:63:ec:90:86:05:03:ec:3c:7f:75:bb:89:1a: 5f:c9:cd:2f:60:9c:78:81:75:cc:ec:81:a2:9f:9d:0b:9d:53: 7d:14:af:0a:05:8c:26:ff:76:09:62:5b:eb:22:b8:d1:a5:f6: 55:8a:2a:e0:fc:00:21:60:20:19:82:15:be:f3:97:21:2a:14: 2b:f5:91:19:dc:65:b7:38:bc:cd:eb:d1:c1:99:29:bb:02:86: 1d:51:b9:37 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIl9BZWacoGZIl9g5H0tpUfOmBhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3Q0M0OUZGRTJGQUY5NTg0QzJFMTAzQUM2RkQyOTMw MjBERDA3RDAeFw0yNjA3MjQwNzQwMzhaFw0yNjA3MjUwODQwMzhaMDMxMTAvBgNV BAMTKEQ5NEMzRUE0RDhDMzM3QzJBQjQxNUM0Q0REMjEzNzFBMEZDQ0QyOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbdHkUZ4su+L/85N14DKMdb9nd hTwYExIp3syMtl1A0sY/cPyigx+nOOdyhIsWkNZn50EZ6oDc4KQYbRGksDu6bMPA wfImj3S7WIk4l7wad9G2/PHiz3DMUedht6ibJ+TMBZmNYemw3uLnt9q/CygAbzQh N0aNfOCFjtMjdOVvizMd4G+yfBWEvG0a/iIdwoQGSux7NjZk7K+BO7fxX1vG1JSp whDcOtD0X+H/SJE2RP2F6HrG/CavMdJuG5hQ79HECUvwXAEPeLMIsf68XZoAizqK i5LuXdtyJQhxvOYdygNHoOGquZRVz9HRFUnJWDBEKikP1DLqA9+nV0dmJ9y/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2Uw+pNjDN8KrQVxM3SE3Gg/M0pMwHwYDVR0j BBgwFoAUcnzEn/4vr5WEwuEDrG/SkwIN0H0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkyMDAwNjk1NDIyMTU2OS8wLzcyN0NDNDlGRkUyRkFGOTU4NEMyRTEwM0FDNkZE MjkzMDIwREQwN0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNzI3Q0M0OUZGRTJGQUY5NTg0QzJFMTAzQUM2RkQyOTMwMjBERDA3RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5MjAwMDY5NTQyMjE1NjkvMC83MjdDQzQ5RkZFMkZB Rjk1ODRDMkUxMDNBQzZGRDI5MzAyMEREMDdELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpvRv9hUeo2r CWBpc7xnUdAuCH6RIHrN83XdldZS/rWltEsjw42WTANk11rulULB1CNgwFihyb9F 2/FoAjGH0GQUniymTxwV8S3+taOAWo8Z9tMOoayoFs6jeSgDc77L9I/1UoFr0/Ct hD0/9P54HWhjLsVH/R5UN3d+hCEod1PVTXGgFo6ERmC7pXTXqd9u7xEYearq1Z3l unS+md2gs4ttsXay/vxj7JCGBQPsPH91u4kaX8nNL2CceIF1zOyBop+dC51TfRSv CgWMJv92CWJb6yK40aX2VYoq4PwAIWAgGYIVvvOXISoUK/WRGdxltzi8zevRwZkp uwKGHVG5Nw== -----END CERTIFICATE-----Generated at Fri Jul 24 22:38:57 2026 by rpki-client