$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft File: 027E626491D467F2D967FA80361028FA06A786F4.mft (raw, json) Hash identifier: nInUW4d18QnAt4b3Z7qY3uEAxLr4zVRN7NdfXQshVYc= Subject key identifier: F3:D1:26:5E:1A:FD:BD:3A:4C:35:1E:E1:88:2E:ED:18:AA:20:C9:13 Authority key identifier: 02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4 Certificate issuer: /CN=027E626491D467F2D967FA80361028FA06A786F4 Certificate serial: 5B21F43C2834852B529507EDC0EDE143DB9B16D3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft Manifest number: 013C Signing time: Sun 11 Oct 2026 18:40:51 +0000 Manifest this update: Sun 11 Oct 2026 18:35:51 +0000 Manifest next update: Wed 14 Oct 2026 21:31:51 +0000 Files and hashes: 1: 3130332e392e3135322e302f32342d3234203d3e203338333434.roa (hash: wdok/70+OGrA3z2KyLH5lq3UCizPf7CJzdwVC8v8n6w=) 2: 027E626491D467F2D967FA80361028FA06A786F4.crl (hash: 7q23cXzPdDHl8QoZP2JfiSHb8d2BNrEBlVTtqFMngSQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 21:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:21:f4:3c:28:34:85:2b:52:95:07:ed:c0:ed:e1:43:db:9b:16:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=027E626491D467F2D967FA80361028FA06A786F4 Validity Not Before: Oct 11 18:35:51 2026 GMT Not After : Oct 14 21:31:51 2026 GMT Subject: CN=F3D1265E1AFDBD3A4C351EE1882EED18AA20C913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3f:49:9b:23:78:b1:5c:ba:ed:dd:c7:a5:0c: c9:3b:90:b8:ec:81:d8:66:5f:56:f7:58:cc:52:54: 84:3e:08:4e:84:38:78:ac:7e:ef:82:97:59:2a:6b: 57:5b:ef:5e:05:50:66:4c:86:b0:71:6a:82:ad:46: df:7b:a2:2b:73:46:54:cc:9c:f8:ff:39:49:f9:41: e3:2e:c1:ba:b5:c1:3f:61:df:12:20:e7:f6:8a:2b: 60:fd:56:f8:87:a9:fb:c0:25:8e:a5:a1:d3:08:b9: 02:a5:f2:90:19:bb:83:54:f8:bd:fd:f2:5a:0a:4f: bf:8b:6d:9f:3e:94:69:b2:a1:1d:e0:04:2a:98:bd: 4a:a7:d2:8e:c7:64:5f:46:30:2d:b3:23:19:60:1b: 7b:97:66:5b:23:45:7b:8d:29:a2:80:d4:b1:3a:27: 62:c7:35:e8:81:22:75:66:61:4e:27:82:79:68:f5: 73:12:1e:52:00:93:8f:47:ea:7f:cc:18:e6:f7:f0: f0:5a:af:27:de:fa:b4:ff:65:7e:01:84:d1:bf:28: 70:ef:d3:2c:6e:bc:52:e8:32:51:f6:7d:d5:85:12: 40:18:7f:42:9a:28:01:57:86:45:1e:5b:3d:d3:6c: cb:9e:f2:93:41:df:1a:21:32:5a:9d:9c:98:9f:a4: 28:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D1:26:5E:1A:FD:BD:3A:4C:35:1E:E1:88:2E:ED:18:AA:20:C9:13 X509v3 Authority Key Identifier: keyid:02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:2a:7a:94:7b:21:3d:a4:43:40:db:e2:40:d5:5e:5d:a0:3a: 24:5f:84:5b:43:6f:f8:5c:2f:99:87:10:36:02:16:cb:b9:91: 56:ff:bb:8c:c9:f9:c9:67:35:ff:5b:9c:fc:44:2f:aa:d0:a9: 40:1f:08:15:ce:06:d6:df:69:7e:8a:10:0a:39:a1:5c:c4:06: 28:6e:0e:3c:a0:1b:40:3c:54:09:f9:e5:d6:8a:d3:d8:f9:8e: 40:5d:ce:37:b6:e1:29:db:64:02:2e:52:69:96:cd:df:0c:4d: 3b:93:50:2d:6a:66:2a:b0:e0:fc:3d:fe:52:44:2d:e7:80:7f: af:9a:1f:70:4a:c5:57:5b:b9:f2:e3:28:da:e4:35:da:d9:dd: ec:de:7e:2d:9c:c8:4c:dc:aa:31:0e:81:3e:0c:17:64:bb:5e: 2b:a3:8f:6a:25:2a:63:cf:bd:a9:f4:b7:a7:f1:38:e5:21:78: b9:24:7f:05:47:73:7f:83:c8:f2:fb:8d:1e:bc:3c:e0:00:98: a5:3b:99:0b:a4:9a:61:6b:4f:52:23:f6:3b:d0:e6:24:7b:bd: 3e:23:5c:40:ee:c1:90:48:d1:40:10:50:2d:68:09:9d:3f:25: 95:74:73:07:a2:40:73:1a:f3:c7:a6:e1:aa:ff:8a:bf:31:7e: 33:ac:c5:d0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWyH0PCg0hStSlQftwO3hQ9ubFtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI3RTYyNjQ5MUQ0NjdGMkQ5NjdGQTgwMzYxMDI4RkEw NkE3ODZGNDAeFw0yNjEwMTExODM1NTFaFw0yNjEwMTQyMTMxNTFaMDMxMTAvBgNV BAMTKEYzRDEyNjVFMUFGREJEM0E0QzM1MUVFMTg4MkVFRDE4QUEyMEM5MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcP0mbI3ixXLrt3celDMk7kLjs gdhmX1b3WMxSVIQ+CE6EOHisfu+Cl1kqa1db714FUGZMhrBxaoKtRt97oitzRlTM nPj/OUn5QeMuwbq1wT9h3xIg5/aKK2D9VviHqfvAJY6lodMIuQKl8pAZu4NU+L39 8loKT7+LbZ8+lGmyoR3gBCqYvUqn0o7HZF9GMC2zIxlgG3uXZlsjRXuNKaKA1LE6 J2LHNeiBInVmYU4ngnlo9XMSHlIAk49H6n/MGOb38PBaryfe+rT/ZX4BhNG/KHDv 0yxuvFLoMlH2fdWFEkAYf0KaKAFXhkUeWz3TbMue8pNB3xohMlqdnJifpCi1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU89EmXhr9vTpMNR7hiC7tGKogyRMwHwYDVR0j BBgwFoAUAn5iZJHUZ/LZZ/qANhAo+ganhvQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTI2OTI0OS8wLzAyN0U2MjY0OTFENDY3RjJEOTY3RkE4MDM2MTAy OEZBMDZBNzg2RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDI3RTYyNjQ5MUQ0NjdGMkQ5NjdGQTgwMzYxMDI4RkEwNkE3ODZGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjEyNjkyNDkvMC8wMjdFNjI2NDkxRDQ2 N0YyRDk2N0ZBODAzNjEwMjhGQTA2QTc4NkY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcip6lHshPaRD QNviQNVeXaA6JF+EW0Nv+FwvmYcQNgIWy7mRVv+7jMn5yWc1/1uc/EQvqtCpQB8I Fc4G1t9pfooQCjmhXMQGKG4OPKAbQDxUCfnl1orT2PmOQF3ON7bhKdtkAi5SaZbN 3wxNO5NQLWpmKrDg/D3+UkQt54B/r5ofcErFV1u58uMo2uQ12tnd7N5+LZzITNyq MQ6BPgwXZLteK6OPaiUqY8+9qfS3p/E45SF4uSR/BUdzf4PI8vuNHrw84ACYpTuZ C6SaYWtPUiP2O9DmJHu9PiNcQO7BkEjRQBBQLWgJnT8llXRzB6JAcxrzx6bhqv+K vzF+M6zF0A== -----END CERTIFICATE-----Generated at Tue Oct 13 20:57:48 2026 by rpki-client