
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft
File: 027E626491D467F2D967FA80361028FA06A786F4.mft (raw, json)
Hash identifier: NnEyjh2K/rBtsw2T04OvOWN/j+Wf1PKJTiDHkf80Jog=
Subject key identifier: B0:B2:26:A6:22:75:3C:07:BF:E2:34:01:93:81:0A:BD:35:32:72:BD
Authority key identifier: 02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4
Certificate issuer: /CN=027E626491D467F2D967FA80361028FA06A786F4
Certificate serial: 7AA9CCC59615A5D221F3F8FCEBB7D8B396105288
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft
Manifest number: AD
Signing time: Fri 29 May 2026 05:32:40 +0000
Manifest this update: Fri 29 May 2026 05:27:40 +0000
Manifest next update: Sat 30 May 2026 08:50:40 +0000
Files and hashes: 1: 027E626491D467F2D967FA80361028FA06A786F4.crl (hash: n8s9YOF4SUkxTSQaLM+lLuAPcWQlvXIvSH0XTtTNOSM=)
2: 3130332e392e3135322e302f32342d3234203d3e203338333434.roa (hash: wdok/70+OGrA3z2KyLH5lq3UCizPf7CJzdwVC8v8n6w=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl
rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 08:50:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:a9:cc:c5:96:15:a5:d2:21:f3:f8:fc:eb:b7:d8:b3:96:10:52:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027E626491D467F2D967FA80361028FA06A786F4
Validity
Not Before: May 29 05:27:40 2026 GMT
Not After : May 30 08:50:40 2026 GMT
Subject: CN=B0B226A622753C07BFE2340193810ABD353272BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:de:8a:5a:69:5a:36:0d:a0:d6:eb:84:62:
14:4c:f4:6e:13:c8:35:5f:6d:7b:75:7c:7c:e4:8c:
b4:27:d5:90:a0:3f:be:20:5f:7b:b5:6e:0c:7a:e7:
db:04:9e:9b:11:ce:1f:41:eb:4a:bb:d9:a0:7c:2a:
3c:1a:13:e1:4b:17:57:f6:51:48:75:f0:4b:8f:82:
ee:ce:12:35:3a:7b:f8:74:bc:fb:5b:d3:2d:6d:13:
9f:dc:82:9f:34:9e:d8:e8:20:ad:8a:be:31:f0:52:
53:04:a3:f9:ab:39:aa:dd:5b:11:b8:57:6f:11:74:
18:d1:95:cd:10:e2:a1:ca:a7:00:3d:99:2a:10:92:
66:7b:8a:5f:ab:ea:e1:ce:3a:77:21:e6:d1:59:ec:
28:4b:20:31:4a:98:c5:4f:8f:08:fa:c5:66:aa:80:
74:48:94:e9:67:b3:f0:9d:11:b9:82:2b:c9:63:8f:
63:09:94:74:0d:54:28:1c:43:1c:69:0e:4c:bd:1f:
ba:c2:27:45:be:c8:4a:66:ce:f8:94:8e:fe:9e:93:
bd:33:da:0e:fe:4b:d2:84:32:97:9e:0b:96:5d:19:
b9:9b:29:80:3e:06:d8:45:3e:cd:5e:c0:d8:1f:6e:
b6:2b:02:da:cd:ac:ff:bf:4e:d9:33:e6:e7:b9:04:
32:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B2:26:A6:22:75:3C:07:BF:E2:34:01:93:81:0A:BD:35:32:72:BD
X509v3 Authority Key Identifier:
keyid:02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:53:e6:72:66:cf:23:a2:ce:dd:20:87:a0:9e:96:5e:bb:c2:
19:b4:3c:43:fb:a9:db:89:6e:e6:87:44:1d:6d:d6:af:36:30:
f1:24:55:f2:5f:ab:12:b2:7d:d3:95:8d:21:0b:07:a9:0a:2e:
07:1d:08:06:12:cd:58:56:a9:87:6b:ae:62:69:de:a3:08:53:
1c:8f:8f:82:57:9e:e5:6b:34:d9:1b:71:e8:57:56:94:7c:27:
06:3e:a0:d4:b2:94:26:4d:41:2e:ca:6d:3a:f8:99:7f:5a:46:
7e:90:b7:9d:75:aa:97:c6:e3:e2:ff:6c:22:93:b7:11:e8:b9:
f9:e6:fd:ef:7e:df:6b:00:24:a8:91:9e:8e:24:4e:e6:d6:ed:
5b:68:cb:3d:eb:52:d0:31:9b:18:ed:83:08:b9:bd:71:9b:0c:
d4:14:e7:83:6a:f7:dc:e5:1e:16:e8:8d:98:f7:b5:ae:a8:a6:
d5:fd:ff:ec:69:c3:8b:00:9b:3e:50:69:44:77:61:5a:a9:2e:
96:2e:90:56:bb:bc:0c:f0:10:ec:39:6a:4c:8f:87:a7:dd:5d:
83:d7:9a:b2:f6:3a:3a:ce:dd:5c:d5:ea:5c:c5:68:9d:9e:db:
ae:bf:cc:81:60:14:17:64:70:66:f4:71:e5:1e:29:06:bb:ea:
a7:40:61:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:28 2026 by rpki-client