$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft File: 727F645FC8FE158EB2755D7F914A4325882E78A0.mft (raw, json) Hash identifier: REjwmVhV6w/vru/cfC2XSuk2l4VT5rb6BU64hqe4K20= Subject key identifier: 41:70:62:3B:12:05:A8:AB:93:C1:42:81:4E:18:CF:E3:5F:4D:E0:52 Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0 Certificate issuer: /CN=727F645FC8FE158EB2755D7F914A4325882E78A0 Certificate serial: 062058E682779329DBCE4D8974B769512FA255E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft Manifest number: 47 Signing time: Thu 12 Mar 2026 17:53:39 +0000 Manifest this update: Thu 12 Mar 2026 17:48:39 +0000 Manifest next update: Fri 13 Mar 2026 19:29:39 +0000 Files and hashes: 1: 727F645FC8FE158EB2755D7F914A4325882E78A0.crl (hash: g7DYpZSSEF2JBSZ5gM97xofWkYbbib29AoDcb4RLWi8=) 2: 3230332e38332e392e302f32342d3234203d3e20313332383833.roa (hash: dHvh7EAR3ukAg4TNNo+1CAfQbE6hwuaVlWKsy7btzzw=) 3: 3230332e38332e382e302f32342d3234203d3e20313332383833.roa (hash: Gu5ie/X9E55m2Q6WtM52yvPaGRXbzNeYJ68hcvMny0U=) 4: 3230332e38332e31312e302f32342d3234203d3e20313332383833.roa (hash: OyoHEG8o3gNVgxiZc7NpaX+LGXqgquCj5WWVQUqvufA=) 5: 3230332e38332e31302e302f32342d3234203d3e20313332383833.roa (hash: FKZpZHJPFv7MN6aC3zTHDQHiGVZHy4K5UA40BFhhR10=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 19:29:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:20:58:e6:82:77:93:29:db:ce:4d:89:74:b7:69:51:2f:a2:55:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0 Validity Not Before: Mar 12 17:48:39 2026 GMT Not After : Mar 13 19:29:39 2026 GMT Subject: CN=4170623B1205A8AB93C142814E18CFE35F4DE052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:36:84:a5:fa:e7:60:d0:18:15:7e:80:7c:61: e0:94:f9:ce:eb:5a:54:82:ac:a6:ef:0e:9a:7a:f1: 09:42:d3:17:58:4b:08:f2:ec:e5:3f:65:77:76:27: 65:34:b0:13:dc:a6:3c:22:a9:eb:54:07:20:31:6c: 02:a1:1e:32:01:d4:1c:89:24:71:8b:cf:79:9d:53: e9:b9:df:b9:17:92:57:5c:7d:ad:3a:26:1f:0e:b7: 7a:0f:8c:cf:55:fd:08:dc:5f:1b:85:ac:14:0d:50: 75:a7:c9:38:a0:89:35:db:3d:9f:1e:96:96:ff:a2: 29:6d:af:60:28:67:d3:df:4d:4a:23:c6:89:fe:4a: ba:df:8f:2d:6e:05:0f:da:c6:3b:6f:d4:b9:57:d6: cf:a7:35:91:ff:89:93:c7:8f:9a:c9:5d:b7:63:d0: 1d:db:ce:d8:6c:73:ce:a9:b3:77:4b:3b:33:32:ae: 2f:2d:44:58:2a:c1:bf:1e:0f:56:4c:b5:e8:e0:d8: 62:f3:f9:a1:8c:ef:86:e4:5b:13:f1:64:56:3d:74: c1:3a:bd:be:17:e7:51:77:f1:a6:d8:fc:dc:c7:d2: d9:b5:b4:b9:35:5d:db:29:be:dc:77:58:3f:12:54: 97:2f:90:02:76:ef:04:72:73:73:c9:f6:4a:3d:41: 15:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:70:62:3B:12:05:A8:AB:93:C1:42:81:4E:18:CF:E3:5F:4D:E0:52 X509v3 Authority Key Identifier: keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e6:08:79:85:2d:6a:da:c3:2a:54:d4:05:66:cf:51:3b:0e: 4c:d0:d7:3d:c8:80:11:dc:1d:8a:75:98:f2:e9:a6:bc:56:3b: 49:f5:60:29:28:b4:ca:89:49:51:46:58:69:93:27:84:ad:b0: 26:5d:2f:e6:8c:10:39:0b:c3:64:cf:ad:5d:04:36:d1:0c:f8: 43:14:0e:e9:e8:ac:16:5f:3d:a1:a0:95:48:d2:b3:f7:60:6f: 94:ce:5f:58:71:21:91:6e:66:58:66:42:0e:96:3d:cc:51:b8: 39:dc:14:92:2d:d2:e7:07:39:b4:e2:17:24:5b:09:d6:72:c6: f3:1d:a5:b3:e1:25:49:61:35:5a:75:8d:8a:02:d1:ea:3f:27: bd:cc:25:fd:d3:f9:a9:0b:aa:b0:73:29:f6:4d:71:d6:0f:37: f4:a0:2d:b3:71:0b:b8:e7:8b:84:02:f3:0d:ee:82:dd:62:8d: 7a:14:07:a0:ba:ba:6f:e3:87:d1:6d:a9:b5:be:27:bf:3e:2c: 63:18:1e:c0:85:40:65:f4:2d:8b:1d:59:ae:8d:e7:df:b3:cb: e5:b3:d6:00:35:fc:7a:7d:17:20:3a:f8:60:37:76:96:18:12: cb:9b:a8:d2:ea:36:f9:e3:e2:18:ca:87:55:e8:d2:df:03:28: 15:20:ac:f8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBiBY5oJ3kynbzk2JdLdpUS+iVeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3RjY0NUZDOEZFMTU4RUIyNzU1RDdGOTE0QTQzMjU4 ODJFNzhBMDAeFw0yNjAzMTIxNzQ4MzlaFw0yNjAzMTMxOTI5MzlaMDMxMTAvBgNV BAMTKDQxNzA2MjNCMTIwNUE4QUI5M0MxNDI4MTRFMThDRkUzNUY0REUwNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUNoSl+udg0BgVfoB8YeCU+c7r WlSCrKbvDpp68QlC0xdYSwjy7OU/ZXd2J2U0sBPcpjwiqetUByAxbAKhHjIB1ByJ JHGLz3mdU+m537kXkldcfa06Jh8Ot3oPjM9V/QjcXxuFrBQNUHWnyTigiTXbPZ8e lpb/oiltr2AoZ9PfTUojxon+Srrfjy1uBQ/axjtv1LlX1s+nNZH/iZPHj5rJXbdj 0B3bzthsc86ps3dLOzMyri8tRFgqwb8eD1ZMtejg2GLz+aGM74bkWxPxZFY9dME6 vb4X51F38abY/NzH0tm1tLk1Xdspvtx3WD8SVJcvkAJ27wRyc3PJ9ko9QRVrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQXBiOxIFqKuTwUKBThjP419N4FIwHwYDVR0j BBgwFoAUcn9kX8j+FY6ydV1/kUpDJYgueKAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODI4ODAwMi8wLzcyN0Y2NDVGQzhGRTE1OEVCMjc1NUQ3RjkxNEE0 MzI1ODgyRTc4QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzI3RjY0NUZDOEZFMTU4RUIyNzU1RDdGOTE0QTQzMjU4ODJFNzhBMC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgyODgwMDIvMC83MjdGNjQ1RkM4RkUx NThFQjI3NTVEN0Y5MTRBNDMyNTg4MkU3OEEwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuYIeYUtatrD KlTUBWbPUTsOTNDXPciAEdwdinWY8ummvFY7SfVgKSi0yolJUUZYaZMnhK2wJl0v 5owQOQvDZM+tXQQ20Qz4QxQO6eisFl89oaCVSNKz92BvlM5fWHEhkW5mWGZCDpY9 zFG4OdwUki3S5wc5tOIXJFsJ1nLG8x2ls+ElSWE1WnWNigLR6j8nvcwl/dP5qQuq sHMp9k1x1g839KAts3ELuOeLhALzDe6C3WKNehQHoLq6b+OH0W2ptb4nvz4sYxge wIVAZfQtix1Zro3n37PL5bPWADX8en0XIDr4YDd2lhgSy5uo0uo2+ePiGMqHVejS 3wMoFSCs+A== -----END CERTIFICATE-----Generated at Fri Mar 13 09:27:23 2026 by rpki-client