
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
File: 727633DA248F6AC4626E0DF9B33145B74FD58F03.mft (raw, json)
Hash identifier: k3S3UvqhENno2u7fY+5aCybPeJV0fNE+wV8jcI7VQ2Y=
Subject key identifier: B8:66:54:36:89:16:E7:D5:48:62:DE:7F:28:C0:22:36:96:E3:C1:9E
Authority key identifier: 72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
Certificate issuer: /CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Certificate serial: 66457FDF67DB53D61BBE55EF34F9C4826C34CD82
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
Manifest number: D3
Signing time: Tue 13 Oct 2026 05:17:45 +0000
Manifest this update: Tue 13 Oct 2026 05:12:45 +0000
Manifest next update: Fri 16 Oct 2026 13:07:45 +0000
Files and hashes: 1: 3231382e39382e3137382e302f32342d3234203d3e20313436383431.roa (hash: h+7NMVJMGskysHGTL7ek7cRzWtLu2iBmcr8RhLJIuRo=)
2: 3231382e39382e3138332e302f32342d3234203d3e20313436383431.roa (hash: BWgtN9ZlNkUkI1/9ORhwYHGUf2fn6nY77N3GU7vIwKg=)
3: 3231382e39382e3231322e302f32342d3234203d3e20313436383431.roa (hash: mh4howHx2myQ3DM1H8Q4i0fqcnXhCL5MgENCUx3z93s=)
4: 3231382e39382e3231352e302f32342d3234203d3e20313436383431.roa (hash: aywp0tqCBgRXzid69Cf+hmOo2wFnk5gKkSw0y125MMI=)
5: 3231382e39382e3231302e302f32342d3234203d3e20313436383431.roa (hash: yyPoXI8TawnrApBjndo7j1KSbBtPvYmc36UAqXtEA8U=)
6: 3231382e39382e3230382e302f32342d3234203d3e20313436383431.roa (hash: V5WFXW8smGcHXMjpvp9LaOkbL4/Ei94lNvyV8nVmaL0=)
7: 3231382e39382e3138322e302f32342d3234203d3e20313436383431.roa (hash: 6znvLKLvv9KQQlxGvtEJcXW6b4MyVSay/jA4EVDpYhc=)
8: 3231382e39382e3136302e302f32342d3234203d3e2034383337.roa (hash: 28ClLRNHc1ca5OaJY9IvDzg6NXbTQfy3ShDofWhJRXo=)
9: 3231382e39382e3231332e302f32342d3234203d3e20313436383431.roa (hash: BQ36hCBywhGt28SwU89T+JTovsJVAPR6cNm45te4lfA=)
10: 3231382e39382e3139322e302f32342d3234203d3e203538353432.roa (hash: ZXHCilq7M6t5w4oLyy7/q0uzHX7ckcRbYUXkDNUYUO0=)
11: 3231382e39382e3137372e302f32342d3234203d3e20313436383431.roa (hash: HCyPGKwa4eeE5ZjLHnpqql9PGySx5osAgA1FMWrBU+0=)
12: 3231382e39382e3137372e302f32342d3234203d3e203538353432.roa (hash: BxSgCE5UaiCEinToAh7HtaYOYFUIIUe9Fj7YHmDaEeY=)
13: 727633DA248F6AC4626E0DF9B33145B74FD58F03.crl (hash: 8rSuWE9HsFYc4qgYaQFnl1YrIrNswk2cex/BQk/HXu0=)
14: 3231382e39382e3231342e302f32342d3234203d3e20313436383431.roa (hash: INioRRkxf3xa+grpqxBw9dO54uDwmH9qAz6YD6mDzno=)
15: 3231382e39382e3137392e302f32342d3234203d3e20313436383431.roa (hash: ARWBa9IdK08EGnOSuh23uDfuB0JMI9PCXpZKCN/m7l4=)
16: 3231382e39382e3139332e302f32342d3234203d3e203538353432.roa (hash: qt4/6TOa7o32+dkGdPJJfaVcIo3Vl62WqM/O9RzlxHI=)
17: 3231382e39382e3138302e302f32342d3234203d3e20313436383431.roa (hash: 8vnvx69UZI9UjNoNLKJj/mjRHvJ90Etw1BCB1sZRg4Y=)
18: 3231382e39382e3138312e302f32342d3234203d3e20313436383431.roa (hash: vLrt3AJ67GN9KG7EzWnUz0wi/QliKTTJODDo8xicHfo=)
19: 3231382e39382e3231312e302f32342d3234203d3e20313436383431.roa (hash: DKgvwB10v2KlhQb9PUhUx7Cu1QGaNp7YFa9x57886nA=)
20: 3231382e39382e3137362e302f32342d3234203d3e2034383337.roa (hash: 6fIbINtNcGKIPP4RrSqGB51a1pyintd2JTCE/IScmZA=)
21: 3231382e39382e3230392e302f32342d3234203d3e20313436383431.roa (hash: R2FUehBztHdIvg3EWxnn9vSmNq2pxzwjM3Saq/Q0+P4=)
22: 3231382e39382e3137362e302f32342d3234203d3e20313436383431.roa (hash: W9YQVXCZAs9kS2UDOyKiYaw3OS4DRjkHfthCx48ARa8=)
23: 3231382e39382e3137362e302f32342d3234203d3e203538353432.roa (hash: XFdMvu8G/zSKT5wrWBdxWp+W6TQONNq83QdMat+lt2k=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 13:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:45:7f:df:67:db:53:d6:1b:be:55:ef:34:f9:c4:82:6c:34:cd:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727633DA248F6AC4626E0DF9B33145B74FD58F03
Validity
Not Before: Oct 13 05:12:45 2026 GMT
Not After : Oct 16 13:07:45 2026 GMT
Subject: CN=B86654368916E7D54862DE7F28C0223696E3C19E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:28:b1:fc:da:ca:bd:ce:de:ab:6b:77:81:
de:a0:ee:3b:dd:15:92:00:db:ea:7b:4d:3f:cd:52:
ea:3d:fb:15:5a:84:59:57:21:a2:be:0a:44:96:4a:
ac:04:7a:7e:04:2c:69:99:7a:c5:33:7c:b0:3d:f2:
ee:9a:ec:c7:75:f6:98:72:8d:ed:38:38:c5:2b:b5:
ea:db:17:86:63:a8:cf:85:c2:d6:8d:9b:30:09:1d:
89:4c:7e:ba:fd:95:d4:86:52:3a:d4:90:0a:cb:ce:
86:db:c7:6a:e6:c9:9b:42:b7:da:1b:87:43:c2:bc:
9a:e6:5c:3f:73:25:0c:8d:0c:0f:12:5f:cf:a7:cc:
ae:9c:a9:42:86:e3:4b:c9:b6:12:70:f1:d6:bb:09:
78:45:08:8e:37:8b:aa:4e:46:f1:9f:df:2c:81:88:
8f:d9:8d:3c:f4:fa:36:1c:75:ea:e7:f4:2f:ba:5e:
c4:ab:80:e7:4f:31:aa:17:aa:74:7d:fb:c9:ee:23:
80:83:72:e4:6f:aa:67:1a:06:f7:d3:07:8e:35:9e:
f9:60:7c:b2:03:40:bd:b6:84:bc:ef:ed:dc:ca:0f:
a3:cc:aa:04:2e:71:f9:2b:c3:0e:df:23:cb:9c:fd:
a6:64:5e:f1:df:00:86:22:45:15:b3:7e:01:c9:67:
47:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:66:54:36:89:16:E7:D5:48:62:DE:7F:28:C0:22:36:96:E3:C1:9E
X509v3 Authority Key Identifier:
keyid:72:76:33:DA:24:8F:6A:C4:62:6E:0D:F9:B3:31:45:B7:4F:D5:8F:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727633DA248F6AC4626E0DF9B33145B74FD58F03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094543787532746755/0/727633DA248F6AC4626E0DF9B33145B74FD58F03.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ee:f5:39:dd:d6:6b:e4:f2:6c:5c:1b:e0:61:63:1d:49:b4:
ff:ae:7a:b3:d0:22:93:27:a0:d3:bb:0f:7f:cc:97:42:62:cf:
1c:1e:8a:41:b2:5f:c4:2e:2d:cf:35:3f:35:97:2e:e6:64:9b:
51:bd:2a:c9:f7:3c:87:ff:06:79:7a:69:33:18:7d:26:a9:7b:
c2:2f:60:e5:50:7b:aa:7f:e9:bf:38:3f:c7:97:80:92:08:ef:
42:00:d5:47:a2:5b:79:08:ae:a7:0c:8e:5f:7f:bc:50:fd:75:
9b:21:c9:c9:00:e7:ef:e9:ae:fd:00:73:19:13:61:12:96:bf:
77:92:dc:76:94:a4:2d:9a:c4:d5:84:c2:08:aa:54:32:ab:cc:
3d:5c:c5:dd:f0:11:69:1d:e6:67:08:56:b5:10:4f:da:51:72:
f9:29:53:a8:fe:ed:af:78:32:37:6c:af:44:e3:c0:c3:a5:5e:
44:d0:93:91:b0:e7:37:fb:da:4f:42:d2:21:f9:b0:6a:8c:0d:
9e:02:23:4c:04:52:e1:3e:d2:d8:73:46:39:ee:ea:1f:df:02:
8a:2b:33:a4:6a:db:10:85:69:13:d6:c5:2c:44:c9:18:e8:0a:
09:e9:f5:b8:13:94:bf:ac:33:8a:3f:a4:0e:76:3b:54:ed:4a:
0c:43:20:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 07:52:55 2026 by rpki-client