
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft
File: 727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft (raw, json)
Hash identifier: eTc9XKI9Hjx3fuknDs/96A11yLh+HDYDlNLcaW2qFfU=
Subject key identifier: CC:BF:9E:15:56:18:15:58:9C:64:BF:FC:AF:9E:7D:CB:DF:1C:0F:25
Authority key identifier: 72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D
Certificate issuer: /CN=727CC49FFE2FAF9584C2E103AC6FD293020DD07D
Certificate serial: 10AB52924FC02BEB80BE9E2AC1719E66F9D299DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft
Manifest number: BD
Signing time: Tue 14 Jul 2026 16:16:37 +0000
Manifest this update: Tue 14 Jul 2026 16:11:37 +0000
Manifest next update: Wed 15 Jul 2026 17:02:37 +0000
Files and hashes: 1: 3133392e3137362e302e302f31362d3136203d3e2039383033.roa (hash: rprXfo+mQWYwe2oVBzgwFN7TztyCOZlqUd+lE3fdHj0=)
2: 727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl (hash: 6U2/l0vd7COA+bb7bDa9FC49Qsxl+WBvedy2hHnngsw=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl
rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 14:33:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ab:52:92:4f:c0:2b:eb:80:be:9e:2a:c1:71:9e:66:f9:d2:99:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727CC49FFE2FAF9584C2E103AC6FD293020DD07D
Validity
Not Before: Jul 14 16:11:37 2026 GMT
Not After : Jul 15 17:02:37 2026 GMT
Subject: CN=CCBF9E15561815589C64BFFCAF9E7DCBDF1C0F25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:37:48:f2:db:b7:68:7a:fc:2a:7a:02:be:
93:23:a2:a9:a3:f0:b0:e7:ff:d9:b5:ff:7f:51:c3:
5c:8f:8d:d9:ac:7b:40:a8:77:97:1a:ee:ea:14:12:
17:79:49:df:34:48:d5:45:13:a6:c1:0c:21:a9:71:
0a:1f:f3:b2:0f:5e:3d:63:64:19:43:f4:b0:a8:ed:
1a:61:05:d0:3c:47:7e:37:c3:ac:40:ba:a3:88:ee:
d2:6c:51:7d:e2:30:19:8f:7f:93:d0:27:de:2e:be:
76:b9:ea:b3:cd:69:23:a3:ef:a4:ed:c8:6d:c2:bd:
b7:c6:57:4a:3f:3d:5d:b9:18:57:48:1c:7e:51:a6:
80:37:a3:18:52:57:ea:43:1c:96:7f:ba:41:10:af:
54:b1:ad:75:7b:89:12:84:50:65:19:b1:de:c7:25:
0d:5d:af:f5:2c:f8:59:2b:43:92:07:39:fc:42:36:
ac:97:bd:7d:14:40:fc:6e:55:cc:1d:f8:b2:7e:f9:
4b:92:b5:b0:89:5d:c3:e0:db:43:bb:f4:c6:7c:fe:
99:6b:af:96:9f:d3:0e:e7:9e:4d:62:2d:a6:71:52:
b5:2f:02:92:e7:ff:78:d4:60:5e:13:a7:a7:b5:b0:
7f:c8:62:96:4d:20:32:dc:2f:96:7a:d3:da:9b:a5:
48:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BF:9E:15:56:18:15:58:9C:64:BF:FC:AF:9E:7D:CB:DF:1C:0F:25
X509v3 Authority Key Identifier:
keyid:72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:6e:86:e0:47:1f:2b:71:9b:2b:f8:ef:13:d6:73:c3:66:b3:
33:57:f6:35:6d:8c:44:33:f2:f3:de:ce:2a:7d:b2:73:f0:92:
0e:11:57:37:84:6d:03:f2:84:84:5b:2d:d4:55:82:b3:12:fd:
95:6d:cc:60:19:87:8a:87:72:d0:be:76:fa:f8:47:40:8f:5b:
eb:08:90:27:6a:16:ed:2d:63:a8:60:6c:2c:76:78:15:56:29:
47:71:64:25:ce:8d:98:7c:bd:1a:01:41:42:6c:1d:1f:ca:1e:
38:fb:de:db:7a:a5:c0:0e:80:22:8e:9e:60:e2:df:c7:56:ab:
4b:dd:bf:37:0c:1c:7a:da:62:ab:a9:13:93:71:6e:e1:fc:00:
50:65:6e:8b:11:76:c7:81:03:30:9a:4e:7b:a3:29:a8:73:1c:
40:0d:c2:08:40:9b:0f:ce:cf:23:e1:83:12:cf:55:b1:09:6c:
9b:2f:3a:e6:f3:51:80:ab:48:b7:21:b9:0b:0d:56:53:91:44:
6c:f3:08:45:97:dd:ad:df:0b:7d:34:d4:1f:7b:0b:6a:90:88:
10:9b:21:a5:ed:b3:96:98:9d:42:94:0e:a1:10:ea:ac:9f:b5:
10:57:f2:e4:32:71:84:b8:10:ab:e9:c8:f9:1c:fb:df:11:bb:
1a:7c:8f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 23:53:20 2026 by rpki-client