
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
File: 2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft (raw, json)
Hash identifier: W+3PHlHJGzNnRSrB3xS6sxjRe1voEf1l944yDVBL1ug=
Subject key identifier: 70:D3:2B:62:E2:E9:B3:0B:BA:11:EC:6D:65:17:12:B3:23:26:42:13
Authority key identifier: 26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6
Certificate issuer: /CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6
Certificate serial: 4AE8DD02FE6ECCC6B0C8541065E209A20185AE2A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
Manifest number: B6
Signing time: Sun 18 Oct 2026 16:09:58 +0000
Manifest this update: Sun 18 Oct 2026 16:04:58 +0000
Manifest next update: Thu 22 Oct 2026 02:37:58 +0000
Files and hashes: 1: 34352e3131362e3135322e302f32322d3232203d3e20313331353635.roa (hash: HOfOfgw/0tw8uL48WO+lG0vSL+fX5+Bi8T2yXk4uMzw=)
2: 3230322e3136342e302e302f32302d3230203d3e20313331353635.roa (hash: vqj7rCCg8K7t73KdbXfT3onF+TOCWcPf4hcIJvcwdsI=)
3: 34332e3235342e3136382e302f32322d3232203d3e20313331353635.roa (hash: MfiLKwC97r6IDlGtJuLI5ZnoR+6BkyMB1qUC1zGkb38=)
4: 3130332e3233302e3230302e302f32322d3232203d3e20313331353635.roa (hash: r42RnGBeCl6YkTG2opLn9O58WhJSoIZybnJyVr/dKgQ=)
5: 34352e3131352e3230302e302f32322d3232203d3e20313331353635.roa (hash: rLCj0HBQYOVbcabzmYNkYLw4AhULEsHLtpCZIKNuZW4=)
6: 3130332e35352e3232382e302f32322d3232203d3e20313331353635.roa (hash: 7HRLarWGgnBDjlECd+4RsFmaJ0KCNtnMIG+jEZ4BYb0=)
7: 2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl (hash: q/fPMMDPPp6COMlWv+QEmichsJqV5BHdD9o5Hnt9fnU=)
8: 34352e3131392e3131362e302f32322d3232203d3e20313331353635.roa (hash: ErdNqCr6rLUUPtehXJutXA4Dm9q+vnzD7jD/bqmUhp0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl
rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 22 Oct 2026 02:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:e8:dd:02:fe:6e:cc:c6:b0:c8:54:10:65:e2:09:a2:01:85:ae:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6
Validity
Not Before: Oct 18 16:04:58 2026 GMT
Not After : Oct 22 02:37:58 2026 GMT
Subject: CN=70D32B62E2E9B30BBA11EC6D651712B323264213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e8:62:13:03:e4:af:19:8b:3a:20:cb:0f:a3:
f1:34:ab:17:5b:ee:88:59:87:58:11:89:95:1c:14:
de:aa:62:61:ed:62:99:41:85:38:79:be:64:39:69:
e3:39:f3:33:01:66:ff:f0:35:4a:28:18:79:b7:87:
68:75:88:d6:1c:a8:81:f9:b8:9f:ea:01:78:9a:9e:
d9:03:69:bc:83:69:4f:bf:b0:1e:01:ff:1e:71:e8:
65:5d:90:10:2f:f5:ae:4a:3a:eb:3a:83:a7:28:d2:
63:52:9e:27:dd:ff:45:ee:17:a0:c1:c2:8d:7e:10:
77:3a:3f:69:f3:58:ef:ff:5b:74:f0:c2:f0:d8:bb:
aa:58:d3:65:36:4e:0d:5a:0a:ed:35:70:57:9f:c4:
08:15:a0:b0:f3:e8:67:e7:76:54:0a:5a:c3:09:e8:
3f:41:a6:3b:f8:d3:ce:30:63:33:cb:7e:79:1f:4f:
f9:6a:18:43:60:a9:69:47:01:76:9e:28:ac:37:79:
b0:f7:2d:a0:22:82:b9:1c:06:09:5d:9e:62:6b:5c:
ab:40:bc:21:9c:e6:68:8a:55:8a:b8:99:cb:30:3c:
2b:84:71:96:27:64:a0:fe:ff:b9:1b:0c:41:d4:b5:
92:62:de:17:aa:23:ca:06:c5:68:0e:52:05:8f:8b:
18:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D3:2B:62:E2:E9:B3:0B:BA:11:EC:6D:65:17:12:B3:23:26:42:13
X509v3 Authority Key Identifier:
keyid:26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:2d:b8:bb:90:26:54:85:fb:b6:98:d5:b2:ab:e7:d4:c4:9c:
0f:d5:2a:90:47:b2:95:69:49:46:60:f2:eb:aa:55:69:0a:a8:
6a:10:69:3b:43:c3:e3:a2:6b:f6:9d:72:b7:cd:fb:21:1d:9f:
4e:e4:fe:97:cc:e6:60:54:e3:3f:35:ba:c9:32:51:87:fa:cc:
0a:4e:7e:06:d7:e5:90:71:c8:07:4d:ac:24:a4:55:3c:67:47:
36:aa:b8:a4:4b:e4:43:40:c4:00:21:5e:97:9a:07:6c:ce:0a:
cc:87:aa:21:92:24:09:0e:e1:e1:71:7e:93:e0:4c:df:4a:08:
1f:8b:a7:9f:ed:d6:29:17:a5:38:51:fa:1e:23:23:0f:48:e4:
f7:a0:ab:c3:d7:28:d0:09:78:17:1b:60:d3:3c:6f:e1:08:5f:
30:4b:0b:01:20:5b:b5:f6:60:7a:61:c4:5b:49:58:30:79:28:
28:b5:39:cf:a1:2e:9d:87:ab:84:6a:0d:9d:cb:f8:ad:89:d1:
cb:b1:8c:d5:39:43:cf:f0:6e:79:41:8d:94:50:f8:77:ff:0f:
47:e0:16:5d:b3:e9:9f:d9:27:7f:80:ad:41:0e:06:d6:56:14:
23:a5:e0:46:3f:fa:52:7a:bf:79:e6:58:69:2d:29:02:83:b3:
76:c4:0e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:24:19 2026 by rpki-client