$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft File: 027E626491D467F2D967FA80361028FA06A786F4.mft (raw, json) Hash identifier: WjBUSdSV7rUJu/M29pgxuIdEobVeczZfpbme1zYm3qU= Subject key identifier: A2:20:4B:22:11:23:98:89:06:33:2C:7C:86:69:BE:EE:07:6A:44:62 Authority key identifier: 02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4 Certificate issuer: /CN=027E626491D467F2D967FA80361028FA06A786F4 Certificate serial: 29D144D998F1FBB55683C5C38BD941A92FC956F7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft Manifest number: 70 Signing time: Mon 13 Apr 2026 06:34:17 +0000 Manifest this update: Mon 13 Apr 2026 06:29:17 +0000 Manifest next update: Tue 14 Apr 2026 08:30:17 +0000 Files and hashes: 1: 3130332e392e3135322e302f32342d3234203d3e203338333434.roa (hash: wdok/70+OGrA3z2KyLH5lq3UCizPf7CJzdwVC8v8n6w=) 2: 027E626491D467F2D967FA80361028FA06A786F4.crl (hash: vIB2VRbp7w90IPb8AiTHyAhSMWdYpf8P4Py/+Lo7qcY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:d1:44:d9:98:f1:fb:b5:56:83:c5:c3:8b:d9:41:a9:2f:c9:56:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=027E626491D467F2D967FA80361028FA06A786F4 Validity Not Before: Apr 13 06:29:17 2026 GMT Not After : Apr 14 08:30:17 2026 GMT Subject: CN=A2204B221123988906332C7C8669BEEE076A4462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:99:3e:18:ba:14:85:cd:c0:dc:d1:53:94:96: e3:20:20:b6:43:d9:0f:95:e5:82:2f:eb:28:14:65: d1:97:95:10:8f:f6:88:45:98:e7:12:fa:a1:bf:18: f0:a0:7f:38:c7:89:7e:14:3d:c8:bf:7a:64:83:80: 9d:18:52:d9:69:7e:c1:eb:d0:c0:c1:c6:38:8b:06: 2e:3d:d1:12:0c:69:0b:61:4f:f6:c3:60:e0:ae:fe: 90:ac:6a:de:ff:41:b5:7b:1f:06:1f:fe:67:12:88: 69:c8:d9:a5:32:84:9e:81:04:f4:ca:12:2e:c4:50: 2f:b8:77:da:7f:0e:16:9c:15:2c:44:f7:8a:56:d0: f3:9a:54:20:dc:20:e0:07:db:d6:7c:1e:93:05:3e: 59:32:97:fc:a4:e7:e8:4b:0e:2a:2d:90:91:3f:42: bc:11:d8:ba:ea:10:8d:12:44:98:37:88:75:da:55: 6a:1a:2f:09:c8:dd:4c:4f:3f:92:1a:d7:c3:89:c1: 8c:b4:3a:2a:24:e4:f3:03:96:53:4e:21:b8:c0:76: ee:d0:a4:41:6c:53:ab:95:38:42:07:48:f9:ed:de: 2e:da:28:a8:9d:91:24:f0:cc:41:ab:c1:5e:bf:3e: 8a:2b:80:3d:28:74:aa:dc:66:ed:00:de:dd:23:1f: 43:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:20:4B:22:11:23:98:89:06:33:2C:7C:86:69:BE:EE:07:6A:44:62 X509v3 Authority Key Identifier: keyid:02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:69:c3:e2:bd:fa:81:b1:c5:e8:03:b7:7e:7b:24:86:a5:49: 39:43:c5:0c:ce:b7:23:85:2c:67:3b:ac:18:af:8f:eb:90:90: 65:58:2f:73:ec:2a:46:f7:b3:c3:ef:bf:09:95:97:88:04:67: 59:0a:06:72:81:c0:06:53:ab:48:3d:d0:a6:e4:1d:77:5b:61: 4c:40:10:5e:d8:11:fb:d2:31:53:91:a4:54:08:54:4d:be:f0: a6:56:3d:92:0e:e4:cb:17:66:fd:9b:09:22:1f:e5:cb:84:32: db:6e:9c:9c:32:b2:a6:10:7a:ee:90:2e:49:10:7c:d0:3d:df: f1:50:66:f3:a0:80:12:2f:4a:2a:54:e7:9c:8b:2f:5a:b3:13: 29:00:c5:bf:81:d8:5f:e6:ff:c3:7b:1c:09:8f:f4:03:44:b7: 69:20:1e:4d:fb:fd:d1:8f:24:45:4d:41:65:c6:a6:16:0d:b2: 53:8b:d7:57:d5:fb:fc:d0:c5:45:e1:3f:f4:3a:26:a4:86:63: 2b:bc:7c:fc:cb:1e:19:88:0b:1f:a1:85:4c:d7:ae:42:ec:02: 24:c6:d1:fc:73:97:bc:ae:a7:84:74:8e:3b:01:f7:58:f6:76: f0:ec:5d:83:d2:4e:15:b3:1d:0f:8f:ae:80:a5:86:a5:94:85: 2f:0c:16:8d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKdFE2Zjx+7VWg8XDi9lBqS/JVvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI3RTYyNjQ5MUQ0NjdGMkQ5NjdGQTgwMzYxMDI4RkEw NkE3ODZGNDAeFw0yNjA0MTMwNjI5MTdaFw0yNjA0MTQwODMwMTdaMDMxMTAvBgNV BAMTKEEyMjA0QjIyMTEyMzk4ODkwNjMzMkM3Qzg2NjlCRUVFMDc2QTQ0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbmT4YuhSFzcDc0VOUluMgILZD 2Q+V5YIv6ygUZdGXlRCP9ohFmOcS+qG/GPCgfzjHiX4UPci/emSDgJ0YUtlpfsHr 0MDBxjiLBi490RIMaQthT/bDYOCu/pCsat7/QbV7HwYf/mcSiGnI2aUyhJ6BBPTK Ei7EUC+4d9p/DhacFSxE94pW0POaVCDcIOAH29Z8HpMFPlkyl/yk5+hLDiotkJE/ QrwR2LrqEI0SRJg3iHXaVWoaLwnI3UxPP5Ia18OJwYy0Oiok5PMDllNOIbjAdu7Q pEFsU6uVOEIHSPnt3i7aKKidkSTwzEGrwV6/PoorgD0odKrcZu0A3t0jH0OdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoiBLIhEjmIkGMyx8hmm+7gdqRGIwHwYDVR0j BBgwFoAUAn5iZJHUZ/LZZ/qANhAo+ganhvQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTI2OTI0OS8wLzAyN0U2MjY0OTFENDY3RjJEOTY3RkE4MDM2MTAy OEZBMDZBNzg2RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDI3RTYyNjQ5MUQ0NjdGMkQ5NjdGQTgwMzYxMDI4RkEwNkE3ODZGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjEyNjkyNDkvMC8wMjdFNjI2NDkxRDQ2 N0YyRDk2N0ZBODAzNjEwMjhGQTA2QTc4NkY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWnD4r36gbHF 6AO3fnskhqVJOUPFDM63I4UsZzusGK+P65CQZVgvc+wqRvezw++/CZWXiARnWQoG coHABlOrSD3QpuQdd1thTEAQXtgR+9IxU5GkVAhUTb7wplY9kg7kyxdm/ZsJIh/l y4Qy226cnDKyphB67pAuSRB80D3f8VBm86CAEi9KKlTnnIsvWrMTKQDFv4HYX+b/ w3scCY/0A0S3aSAeTfv90Y8kRU1BZcamFg2yU4vXV9X7/NDFReE/9DompIZjK7x8 /MseGYgLH6GFTNeuQuwCJMbR/HOXvK6nhHSOOwH3WPZ28Oxdg9JOFbMdD4+ugKWG pZSFLwwWjQ== -----END CERTIFICATE-----Generated at Mon Apr 13 12:30:17 2026 by rpki-client