$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft File: 027E626491D467F2D967FA80361028FA06A786F4.mft (raw, json) Hash identifier: 6bhyqp5Yt0G7OHowluRYAwDq00HzF+O5unkBj29pXbo= Subject key identifier: 60:66:EA:A4:C1:E5:12:07:4D:87:CD:7C:13:60:DC:7B:BC:48:D6:B1 Authority key identifier: 02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4 Certificate issuer: /CN=027E626491D467F2D967FA80361028FA06A786F4 Certificate serial: 59184D65590EF1B181FF05588BB48F76DDBE5074 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft Manifest number: 0128 Signing time: Fri 28 Aug 2026 06:47:35 +0000 Manifest this update: Fri 28 Aug 2026 06:42:35 +0000 Manifest next update: Mon 31 Aug 2026 13:28:35 +0000 Files and hashes: 1: 3130332e392e3135322e302f32342d3234203d3e203338333434.roa (hash: wdok/70+OGrA3z2KyLH5lq3UCizPf7CJzdwVC8v8n6w=) 2: 027E626491D467F2D967FA80361028FA06A786F4.crl (hash: NvHL2KEUbk52HCX823paTEdFNiZURoiGivJMGc6kwso=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 13:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:18:4d:65:59:0e:f1:b1:81:ff:05:58:8b:b4:8f:76:dd:be:50:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=027E626491D467F2D967FA80361028FA06A786F4 Validity Not Before: Aug 28 06:42:35 2026 GMT Not After : Aug 31 13:28:35 2026 GMT Subject: CN=6066EAA4C1E512074D87CD7C1360DC7BBC48D6B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f1:32:9d:f1:9c:5c:0a:de:3c:f2:7e:18:c9: dd:1e:96:6b:ca:67:8d:5b:c9:31:24:04:d5:66:0d: 71:b6:9e:46:f0:62:19:4a:37:11:dc:19:65:8d:9d: dd:af:5d:a3:da:ee:c7:61:20:0a:fe:18:5c:fa:7d: f8:8e:7f:04:f6:a4:06:27:8f:07:5f:cf:04:4e:34: 1f:0b:42:78:12:ec:62:c3:d4:23:a6:b9:42:ef:ff: 4e:f3:5d:d9:ed:ab:fd:a8:5d:81:00:e1:f2:55:b3: 7e:95:06:c1:91:3a:2d:1a:1d:2c:99:1f:15:29:27: 03:c9:22:7b:bd:b1:d9:dd:c9:c5:96:9f:20:de:47: d7:85:26:2f:e8:c7:f7:02:6c:50:c2:3c:da:27:79: e4:ff:95:35:02:34:7f:8c:2d:58:4a:a5:37:13:68: 2c:0a:68:20:92:2b:81:71:38:4f:24:4c:d4:b2:46: 50:44:e5:d1:9d:70:aa:19:dd:5c:c3:92:0f:42:ed: 4e:23:2d:82:b6:a0:b1:c4:d7:1c:f2:80:eb:55:e2: 51:b3:b9:85:c4:ef:9f:8a:c7:5b:21:58:b6:38:da: a6:d9:d0:b8:14:4e:0e:83:0b:5a:23:f6:da:d3:99: e6:80:b5:98:a9:96:9e:38:7d:31:16:90:22:c1:6c: b3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:66:EA:A4:C1:E5:12:07:4D:87:CD:7C:13:60:DC:7B:BC:48:D6:B1 X509v3 Authority Key Identifier: keyid:02:7E:62:64:91:D4:67:F2:D9:67:FA:80:36:10:28:FA:06:A7:86:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/027E626491D467F2D967FA80361028FA06A786F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721269249/0/027E626491D467F2D967FA80361028FA06A786F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:18:4a:c3:f4:87:ef:64:89:78:6c:aa:3d:a4:7f:47:2e:17: f5:fb:78:eb:80:d6:64:63:4f:ef:ae:2f:4e:26:9b:ba:50:f5: f5:af:50:eb:e3:32:6f:09:8b:0d:c6:d4:46:c0:e5:cc:d0:24: fc:89:4d:6c:3d:89:af:2f:eb:e5:36:f4:13:e5:1c:db:09:6f: 3a:42:96:c9:ff:d6:15:c1:63:1e:93:06:61:bf:de:f5:ed:ff: 86:6c:48:d0:3e:86:96:bf:7c:62:44:ce:fd:86:12:1c:df:af: fd:7d:1f:81:f6:f0:41:68:14:33:03:20:ea:4c:47:6b:4b:4f: 47:06:b7:0c:f1:d0:38:c9:b3:7e:0c:26:60:49:53:60:11:80: b8:2a:70:03:fb:52:51:36:f8:38:21:eb:6e:1b:94:05:c1:22: 00:fb:20:9f:80:55:18:e6:94:fb:e2:ce:20:5b:b7:5d:8c:bb: 08:71:50:3c:96:84:14:e7:4a:b6:e4:fe:07:f2:20:d6:73:6e: ff:31:b3:da:cf:d1:10:ec:65:ae:a0:62:ca:89:c4:d8:e7:09: cc:46:4f:c1:8f:ee:74:4f:99:4e:d4:fa:df:1f:4f:50:8c:9b: 96:d5:51:8e:b7:d3:9c:1d:e5:ee:28:52:89:d7:3c:47:70:e4: 0e:e6:70:32 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWRhNZVkO8bGB/wVYi7SPdt2+UHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI3RTYyNjQ5MUQ0NjdGMkQ5NjdGQTgwMzYxMDI4RkEw NkE3ODZGNDAeFw0yNjA4MjgwNjQyMzVaFw0yNjA4MzExMzI4MzVaMDMxMTAvBgNV BAMTKDYwNjZFQUE0QzFFNTEyMDc0RDg3Q0Q3QzEzNjBEQzdCQkM0OEQ2QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88TKd8ZxcCt488n4Yyd0elmvK Z41byTEkBNVmDXG2nkbwYhlKNxHcGWWNnd2vXaPa7sdhIAr+GFz6ffiOfwT2pAYn jwdfzwRONB8LQngS7GLD1COmuULv/07zXdntq/2oXYEA4fJVs36VBsGROi0aHSyZ HxUpJwPJInu9sdndycWWnyDeR9eFJi/ox/cCbFDCPNoneeT/lTUCNH+MLVhKpTcT aCwKaCCSK4FxOE8kTNSyRlBE5dGdcKoZ3VzDkg9C7U4jLYK2oLHE1xzygOtV4lGz uYXE75+Kx1shWLY42qbZ0LgUTg6DC1oj9trTmeaAtZiplp44fTEWkCLBbLNTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYGbqpMHlEgdNh818E2Dce7xI1rEwHwYDVR0j BBgwFoAUAn5iZJHUZ/LZZ/qANhAo+ganhvQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTI2OTI0OS8wLzAyN0U2MjY0OTFENDY3RjJEOTY3RkE4MDM2MTAy OEZBMDZBNzg2RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDI3RTYyNjQ5MUQ0NjdGMkQ5NjdGQTgwMzYxMDI4RkEwNkE3ODZGNC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjEyNjkyNDkvMC8wMjdFNjI2NDkxRDQ2 N0YyRDk2N0ZBODAzNjEwMjhGQTA2QTc4NkY0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxhKw/SH72SJ eGyqPaR/Ry4X9ft464DWZGNP764vTiabulD19a9Q6+MybwmLDcbURsDlzNAk/IlN bD2Jry/r5Tb0E+Uc2wlvOkKWyf/WFcFjHpMGYb/e9e3/hmxI0D6Glr98YkTO/YYS HN+v/X0fgfbwQWgUMwMg6kxHa0tPRwa3DPHQOMmzfgwmYElTYBGAuCpwA/tSUTb4 OCHrbhuUBcEiAPsgn4BVGOaU++LOIFu3XYy7CHFQPJaEFOdKtuT+B/Ig1nNu/zGz 2s/REOxlrqBiyonE2OcJzEZPwY/udE+ZTtT63x9PUIybltVRjrfTnB3l7ihSidc8 R3DkDuZwMg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:07:30 2026 by rpki-client