$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft File: 2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft (raw, json) Hash identifier: Bvhty9PCFHF4Ol67RqE1/WSA781FAWEB2c7qtnF2K54= Subject key identifier: A2:AA:E3:4D:0B:47:9C:43:EB:95:48:9D:2F:2F:5D:DC:C6:32:14:5C Authority key identifier: 26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6 Certificate issuer: /CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6 Certificate serial: 2E34D76B0685EE3F096DD589502371044C90524F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 17:01:41 +0000 Manifest this update: Fri 24 Jul 2026 16:56:41 +0000 Manifest next update: Sat 25 Jul 2026 19:27:41 +0000 Files and hashes: 1: 34332e3235342e3136382e302f32322d3232203d3e20313331353635.roa (hash: MfiLKwC97r6IDlGtJuLI5ZnoR+6BkyMB1qUC1zGkb38=) 2: 34352e3131352e3230302e302f32322d3232203d3e20313331353635.roa (hash: rLCj0HBQYOVbcabzmYNkYLw4AhULEsHLtpCZIKNuZW4=) 3: 3230322e3136342e302e302f32302d3230203d3e20313331353635.roa (hash: vqj7rCCg8K7t73KdbXfT3onF+TOCWcPf4hcIJvcwdsI=) 4: 34352e3131362e3135322e302f32322d3232203d3e20313331353635.roa (hash: HOfOfgw/0tw8uL48WO+lG0vSL+fX5+Bi8T2yXk4uMzw=) 5: 3130332e35352e3232382e302f32322d3232203d3e20313331353635.roa (hash: 7HRLarWGgnBDjlECd+4RsFmaJ0KCNtnMIG+jEZ4BYb0=) 6: 3130332e3233302e3230302e302f32322d3232203d3e20313331353635.roa (hash: r42RnGBeCl6YkTG2opLn9O58WhJSoIZybnJyVr/dKgQ=) 7: 2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl (hash: j7fAm4usaDWFAEJ5IuDxsQoFYsaKXjwCval+u5Aencg=) 8: 34352e3131392e3131362e302f32322d3232203d3e20313331353635.roa (hash: ErdNqCr6rLUUPtehXJutXA4Dm9q+vnzD7jD/bqmUhp0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 19:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:34:d7:6b:06:85:ee:3f:09:6d:d5:89:50:23:71:04:4c:90:52:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6 Validity Not Before: Jul 24 16:56:41 2026 GMT Not After : Jul 25 19:27:41 2026 GMT Subject: CN=A2AAE34D0B479C43EB95489D2F2F5DDCC632145C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:13:41:f4:bc:b8:a2:8f:ff:a4:11:9f:cd:04: 56:90:f7:4d:2c:98:9e:12:0e:f4:12:62:94:d7:8c: 81:49:5d:83:fe:93:3c:42:5e:f2:62:f3:e6:1e:da: bc:8c:dd:b2:eb:15:ef:2c:e8:e6:6e:49:91:dc:4d: ff:de:d7:b6:ce:d2:7d:8d:83:d2:c1:76:29:62:1b: ee:d0:0b:b6:b6:6e:ed:05:ee:8e:51:37:3c:2a:ed: 86:1a:ea:14:ab:0d:f1:3a:85:50:21:dd:32:d3:94: fd:f3:ad:eb:f0:2c:18:f1:27:71:4c:d4:e4:e2:45: 9a:67:6e:a0:95:c6:56:33:62:99:77:e0:69:2a:56: 1b:15:c8:b7:d3:2f:5c:e9:0d:7e:15:19:a5:ee:83: 0c:84:fc:eb:5d:aa:39:85:5e:f0:0d:e4:21:5f:f1: fc:e5:f3:ec:fb:4d:6d:ec:4e:d7:60:1f:fb:fa:39: 80:44:16:85:89:12:4a:bf:58:3d:cb:5e:93:a7:a4: a1:3d:1c:a4:64:89:ed:01:be:14:42:c7:a0:f9:4d: ba:32:91:95:c3:a3:95:19:2f:3d:25:60:c1:02:0a: 21:13:c1:83:4f:f6:09:8c:d4:dd:a3:0a:af:59:1e: 31:1c:27:20:24:4f:8b:fc:52:00:e9:bd:f1:b2:ba: d8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AA:E3:4D:0B:47:9C:43:EB:95:48:9D:2F:2F:5D:DC:C6:32:14:5C X509v3 Authority Key Identifier: keyid:26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:ec:f2:12:57:29:c3:81:c3:bc:66:00:a7:45:aa:7f:df:fc: a1:7e:76:87:50:b9:80:5d:28:95:75:3f:1f:19:94:9b:b3:d6: 66:c6:24:11:28:9e:bc:05:5c:55:b7:32:9d:00:ec:53:49:ea: 04:b3:94:ea:ef:b1:55:3c:c3:2f:df:63:77:89:63:cd:f0:7d: 0d:e1:72:00:11:f8:ed:6e:14:3c:ba:39:dd:9e:bc:55:06:54: 26:f6:c2:cc:82:88:fd:0e:c8:fe:bc:a1:96:4e:1c:55:55:96: 2a:02:22:c8:2a:db:e7:63:96:f8:04:26:5a:0a:62:95:45:dd: 04:99:36:9a:8f:14:9e:58:17:16:70:b9:c5:bb:18:bb:da:95: 04:d5:28:03:2c:ad:e4:61:77:a0:72:b0:f1:5a:42:b2:13:a0: 3b:21:fe:a4:55:c0:cb:ef:c6:fa:34:3c:79:7d:a1:61:35:77: cf:d7:7f:77:50:fe:8c:37:16:c1:26:57:30:db:74:5b:b1:82: 03:99:1c:92:f1:d5:56:7a:ef:94:3e:66:e2:7b:cf:15:af:62: c1:da:fe:c8:1d:2b:5b:17:fc:3b:cc:4b:95:1d:d6:bf:ad:c6: 6e:65:a9:df:db:da:91:61:a9:b7:05:21:49:2f:9d:ec:9b:ea: 0b:e8:49:6d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULjTXawaF7j8JbdWJUCNxBEyQUk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjYyN0E1NTZEMzdCRjM2OTZFRjVFQTlCMEZGMjhBNjE1 NUVBMEFBNjAeFw0yNjA3MjQxNjU2NDFaFw0yNjA3MjUxOTI3NDFaMDMxMTAvBgNV BAMTKEEyQUFFMzREMEI0NzlDNDNFQjk1NDg5RDJGMkY1RERDQzYzMjE0NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNE0H0vLiij/+kEZ/NBFaQ900s mJ4SDvQSYpTXjIFJXYP+kzxCXvJi8+Ye2ryM3bLrFe8s6OZuSZHcTf/e17bO0n2N g9LBdiliG+7QC7a2bu0F7o5RNzwq7YYa6hSrDfE6hVAh3TLTlP3zrevwLBjxJ3FM 1OTiRZpnbqCVxlYzYpl34GkqVhsVyLfTL1zpDX4VGaXugwyE/OtdqjmFXvAN5CFf 8fzl8+z7TW3sTtdgH/v6OYBEFoWJEkq/WD3LXpOnpKE9HKRkie0BvhRCx6D5Tboy kZXDo5UZLz0lYMECCiETwYNP9gmM1N2jCq9ZHjEcJyAkT4v8UgDpvfGyutgVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoqrjTQtHnEPrlUidLy9d3MYyFFwwHwYDVR0j BBgwFoAUJielVtN782lu9eqbD/KKYVXqCqYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDYwODE4ODEyNjE5OTgxNS8wLzI2MjdBNTU2RDM3QkYzNjk2RUY1RUE5QjBGRjI4 QTYxNTVFQTBBQTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjYyN0E1NTZEMzdCRjM2OTZFRjVFQTlCMEZGMjhBNjE1NUVBMEFBNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ2MDgxODgxMjYxOTk4MTUvMC8yNjI3QTU1NkQzN0JG MzY5NkVGNUVBOUIwRkYyOEE2MTU1RUEwQUE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+zyElcpw4HD vGYAp0Wqf9/8oX52h1C5gF0olXU/HxmUm7PWZsYkESievAVcVbcynQDsU0nqBLOU 6u+xVTzDL99jd4ljzfB9DeFyABH47W4UPLo53Z68VQZUJvbCzIKI/Q7I/ryhlk4c VVWWKgIiyCrb52OW+AQmWgpilUXdBJk2mo8UnlgXFnC5xbsYu9qVBNUoAyyt5GF3 oHKw8VpCshOgOyH+pFXAy+/G+jQ8eX2hYTV3z9d/d1D+jDcWwSZXMNt0W7GCA5kc kvHVVnrvlD5m4nvPFa9iwdr+yB0rWxf8O8xLlR3Wv63GbmWp39vakWGptwUhSS+d 7JvqC+hJbQ== -----END CERTIFICATE-----Generated at Sat Jul 25 01:04:42 2026 by rpki-client