$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft File: 727F645FC8FE158EB2755D7F914A4325882E78A0.mft (raw, json) Hash identifier: FpZvQgUjwNHR6WBb0S9HBqWjbxTx5MLFPeJkrN0NVhM= Subject key identifier: 84:50:AF:62:9E:7B:BE:E4:CE:E5:C0:AF:93:AB:74:9C:5E:EB:A6:2A Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0 Certificate issuer: /CN=727F645FC8FE158EB2755D7F914A4325882E78A0 Certificate serial: 2A22279B1F8D781A7817B4CC1540076FC68871C7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft Manifest number: 86 Signing time: Mon 27 Apr 2026 14:28:47 +0000 Manifest this update: Mon 27 Apr 2026 14:23:47 +0000 Manifest next update: Tue 28 Apr 2026 15:02:47 +0000 Files and hashes: 1: 3230332e38332e31312e302f32342d3234203d3e20313332383833.roa (hash: OyoHEG8o3gNVgxiZc7NpaX+LGXqgquCj5WWVQUqvufA=) 2: 3230332e38332e31302e302f32342d3234203d3e20313332383833.roa (hash: FKZpZHJPFv7MN6aC3zTHDQHiGVZHy4K5UA40BFhhR10=) 3: 34332e3235312e3233362e302f32342d3234203d3e20313332383833.roa (hash: mykK8in4gkNBTc8c/xTtkT3MIICTpH8yR5T2MvvUOPo=) 4: 34332e3235312e3233372e302f32342d3234203d3e20313332383833.roa (hash: Sw6wLQbg5UOeroFPC15hffs2jWYywjmXzXsJ3KN/Sxk=) 5: 727F645FC8FE158EB2755D7F914A4325882E78A0.crl (hash: 7SrFDlU7S5mjgTVwDCG03RXY7y24xNyV/CsoivcILrg=) 6: 3130332e34332e31392e302f32342d3234203d3e20313332383833.roa (hash: 8Eq0oLTh31AxDX0nHXIbnNmbdSMznta0FdMSV4iVE/g=) 7: 34352e3131352e3233382e302f32342d3234203d3e20313332383833.roa (hash: HwzMyeQYMuzIuzxpk1Q3jUVoUZQgEPe90jhs2V97W6M=) 8: 3130332e35362e31362e302f32342d3234203d3e20313332383833.roa (hash: VOqIkMc+kKB+0g4MsxguR78fkJ8eSZV8sD7HTViTEJg=) 9: 34352e3131352e3233362e302f32342d3234203d3e20313332383833.roa (hash: jYHqIibRxNto8LGE4Mom2FW7lFyDAAkjiq2bhNO5hG8=) 10: 34332e3235312e3233392e302f32342d3234203d3e20313332383833.roa (hash: fMUQM/+CpcOFdrcqDjYJfrTT7Jhon7Kh0D2jc0fdqRs=) 11: 3130332e35362e31392e302f32342d3234203d3e20313332383833.roa (hash: 1YJQRH0LvPTZzFLUFb+cHm2Zd2QxEA1deAqqleduAqg=) 12: 3230332e38332e392e302f32342d3234203d3e20313332383833.roa (hash: dHvh7EAR3ukAg4TNNo+1CAfQbE6hwuaVlWKsy7btzzw=) 13: 34352e3131352e3233392e302f32342d3234203d3e20313332383833.roa (hash: 4ttlBoSWVe9ZNF/Zp9jHRsWrZKXi+CTyy/+lqvgHOAk=) 14: 34352e3131352e3233372e302f32342d3234203d3e20313332383833.roa (hash: sMkeGT1XRln9oOEfmFJ8Em5N9owCBnlr5+e52vYRV68=) 15: 34332e3235312e3233382e302f32342d3234203d3e20313332383833.roa (hash: /Rx6e3CvoxQocrTNIXHYHjqGpVbwOniUCq31GunObTQ=) 16: 3130332e35362e31372e302f32342d3234203d3e20313332383833.roa (hash: e95du5dQAXHhRcCTJIAb2GAlVK1fBfDxgvojfnogAHM=) 17: 3130332e35362e31382e302f32342d3234203d3e20313332383833.roa (hash: IoAWP1pWwIIOw8P6s089HG6MEfk3dnUjqltYsSmtshM=) 18: 3130332e34332e31362e302f32342d3234203d3e20313332383833.roa (hash: H08bHPcp2tMjVqJhHN2ydkVYNAV8s4aWv5IHR9cqa7I=) 19: 3130332e34332e31372e302f32342d3234203d3e20313332383833.roa (hash: Y4bLyzOvB8vpCyqmm35FxBPPUZj7MRs9fRKs/nZam7U=) 20: 3230332e38332e382e302f32342d3234203d3e20313332383833.roa (hash: Gu5ie/X9E55m2Q6WtM52yvPaGRXbzNeYJ68hcvMny0U=) 21: 3130332e34332e31382e302f32342d3234203d3e20313332383833.roa (hash: 5mwMibMLPPK4nG8lkrPfet4YTWk4RP5rDtRZx3ikwqQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:22:27:9b:1f:8d:78:1a:78:17:b4:cc:15:40:07:6f:c6:88:71:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0 Validity Not Before: Apr 27 14:23:47 2026 GMT Not After : Apr 28 15:02:47 2026 GMT Subject: CN=8450AF629E7BBEE4CEE5C0AF93AB749C5EEBA62A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2c:1d:d7:e6:59:d3:9d:db:68:86:32:de:15: ec:28:6b:e2:c8:fb:58:b3:79:0f:f9:c4:8c:c7:e9: 8b:77:e7:b2:09:2e:91:d3:21:7e:79:06:2f:c2:fc: e9:c0:70:32:cd:16:9c:83:3c:93:ab:aa:09:a1:a7: 29:d6:0c:17:f9:cc:18:ac:36:47:f8:fd:e9:86:69: 76:e0:9b:3d:d6:c7:2a:6d:ff:60:76:33:fc:56:06: 96:40:47:31:c4:b4:d7:ec:6d:02:db:16:d4:7f:9b: f5:89:ac:f6:ff:5d:9f:32:b6:84:4d:c4:74:1d:85: 1a:a2:09:8d:ff:d8:e4:67:d1:76:ec:03:a8:b2:85: db:74:92:3f:da:e7:77:8e:a2:45:36:89:47:68:40: cf:f4:05:82:7e:52:af:fc:26:ee:9e:ee:cc:33:94: 71:bd:5a:1c:f6:39:03:e6:cc:6e:62:a0:40:0b:19: 96:0d:25:82:fe:07:b3:0e:73:a4:02:d6:73:de:57: 4d:6b:46:57:b6:f8:14:df:a5:7f:07:cd:26:28:e3: 1d:69:4b:bd:41:0e:1f:00:6d:40:7c:a2:a5:28:ea: 95:e6:75:b6:4b:3a:a5:ee:00:43:47:5d:48:6e:9f: b2:dc:fd:e4:93:e0:c1:f0:68:d9:59:b0:5b:31:ca: ea:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:50:AF:62:9E:7B:BE:E4:CE:E5:C0:AF:93:AB:74:9C:5E:EB:A6:2A X509v3 Authority Key Identifier: keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:ed:42:8e:d5:bf:48:1f:a4:0f:a3:13:f9:c2:c2:00:6d:3b: 73:18:99:e7:15:7a:9b:2b:0d:7e:ad:57:3c:01:e9:bb:75:7f: 6a:d4:44:cf:5b:b2:82:4d:9b:08:81:52:58:e8:4a:a0:0f:0a: 51:64:c9:ab:6d:e3:6c:90:d0:12:1a:01:fb:72:3f:7a:a3:00: 09:59:97:e3:6c:c4:cd:d3:78:90:58:fd:4c:ba:c4:65:e4:36: af:79:e9:9a:46:67:87:ce:47:c1:7e:41:77:e4:aa:52:eb:74: e3:01:09:de:42:f2:aa:89:36:37:d3:d2:11:4d:c3:42:b4:91: c7:d5:db:48:51:64:68:08:d6:f9:80:32:ef:f9:a2:08:56:0f: d7:e5:8d:07:a3:ad:b7:d3:e5:dc:70:fd:75:a0:45:67:70:de: 77:19:17:3c:68:ca:b8:06:dc:b4:a5:6e:db:09:f2:92:63:c7: 48:19:e4:6f:6a:1f:6b:20:0e:b5:2d:8c:f9:a5:df:ae:87:ac: ba:a8:dc:b2:a4:4b:20:dc:6c:0c:b7:7d:0c:70:90:4a:c4:76: 83:ae:79:c1:d7:a0:df:e5:93:0a:4f:cc:80:28:19:53:52:ab: 6b:b0:3a:43:f7:ed:d0:e0:e9:0a:5f:a2:49:af:99:00:54:7e: 0f:10:cb:0a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKiInmx+NeBp4F7TMFUAHb8aIcccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3RjY0NUZDOEZFMTU4RUIyNzU1RDdGOTE0QTQzMjU4 ODJFNzhBMDAeFw0yNjA0MjcxNDIzNDdaFw0yNjA0MjgxNTAyNDdaMDMxMTAvBgNV BAMTKDg0NTBBRjYyOUU3QkJFRTRDRUU1QzBBRjkzQUI3NDlDNUVFQkE2MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJLB3X5lnTndtohjLeFewoa+LI +1izeQ/5xIzH6Yt357IJLpHTIX55Bi/C/OnAcDLNFpyDPJOrqgmhpynWDBf5zBis Nkf4/emGaXbgmz3Wxypt/2B2M/xWBpZARzHEtNfsbQLbFtR/m/WJrPb/XZ8ytoRN xHQdhRqiCY3/2ORn0XbsA6iyhdt0kj/a53eOokU2iUdoQM/0BYJ+Uq/8Ju6e7swz lHG9Whz2OQPmzG5ioEALGZYNJYL+B7MOc6QC1nPeV01rRle2+BTfpX8HzSYo4x1p S71BDh8AbUB8oqUo6pXmdbZLOqXuAENHXUhun7Lc/eST4MHwaNlZsFsxyuodAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhFCvYp57vuTO5cCvk6t0nF7rpiowHwYDVR0j BBgwFoAUcn9kX8j+FY6ydV1/kUpDJYgueKAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODI4ODAwMi8wLzcyN0Y2NDVGQzhGRTE1OEVCMjc1NUQ3RjkxNEE0 MzI1ODgyRTc4QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzI3RjY0NUZDOEZFMTU4RUIyNzU1RDdGOTE0QTQzMjU4ODJFNzhBMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgyODgwMDIvMC83MjdGNjQ1RkM4RkUx NThFQjI3NTVEN0Y5MTRBNDMyNTg4MkU3OEEwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxe1CjtW/SB+k D6MT+cLCAG07cxiZ5xV6mysNfq1XPAHpu3V/atREz1uygk2bCIFSWOhKoA8KUWTJ q23jbJDQEhoB+3I/eqMACVmX42zEzdN4kFj9TLrEZeQ2r3npmkZnh85HwX5Bd+Sq Uut04wEJ3kLyqok2N9PSEU3DQrSRx9XbSFFkaAjW+YAy7/miCFYP1+WNB6Ott9Pl 3HD9daBFZ3DedxkXPGjKuAbctKVu2wnykmPHSBnkb2ofayAOtS2M+aXfroesuqjc sqRLINxsDLd9DHCQSsR2g655wdeg3+WTCk/MgCgZU1Kra7A6Q/ft0ODpCl+iSa+Z AFR+DxDLCg== -----END CERTIFICATE-----Generated at Mon Apr 27 22:20:45 2026 by rpki-client