$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft File: 727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft (raw, json) Hash identifier: TDW+1mqmL+clcJXunaZouxQTGv/hiYPM3NUKN4MDx1s= Subject key identifier: 27:D2:38:53:05:30:CB:CA:17:32:0B:65:79:BE:E7:17:5F:9B:31:F0 Authority key identifier: 72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D Certificate issuer: /CN=727CC49FFE2FAF9584C2E103AC6FD293020DD07D Certificate serial: 3A0680DF745A864B608E255C2D1C364AA77BECFA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft Manifest number: 0110 Signing time: Sun 18 Oct 2026 21:40:13 +0000 Manifest this update: Sun 18 Oct 2026 21:35:13 +0000 Manifest next update: Wed 21 Oct 2026 23:07:13 +0000 Files and hashes: 1: 727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl (hash: 2805OxY3Vv2haHCqN/vGD+TWDh+/feezTjN9EqG0hf0=) 2: 3133392e3137362e302e302f31362d3136203d3e2039383033.roa (hash: rprXfo+mQWYwe2oVBzgwFN7TztyCOZlqUd+lE3fdHj0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 23:07:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:06:80:df:74:5a:86:4b:60:8e:25:5c:2d:1c:36:4a:a7:7b:ec:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727CC49FFE2FAF9584C2E103AC6FD293020DD07D Validity Not Before: Oct 18 21:35:13 2026 GMT Not After : Oct 21 23:07:13 2026 GMT Subject: CN=27D238530530CBCA17320B6579BEE7175F9B31F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7c:ec:52:84:0e:b3:20:fc:e3:36:7b:39:5d: 3c:8d:66:7d:f9:dd:d9:2f:a0:e8:40:d2:11:f9:91: 88:8a:f5:a1:b9:7f:b5:20:5d:f6:8b:64:3b:fa:dc: eb:a2:35:28:e0:99:68:ea:0f:d7:3a:1e:13:17:88: d7:1a:48:73:39:68:56:e6:eb:66:6e:6b:96:f2:5c: 80:55:08:bf:0b:87:36:04:51:8e:3c:36:0f:eb:af: ab:62:cd:13:72:2e:f7:00:b5:07:b0:eb:57:d6:16: df:f9:04:85:16:97:20:90:f3:33:89:c9:ad:d1:81: e5:42:8b:8f:bb:9a:48:08:3e:05:bb:f9:81:fa:87: 67:dc:d0:ad:8f:06:35:3a:72:90:3f:7b:3c:8a:9e: 9d:7b:8e:38:44:6a:58:9a:21:42:76:b5:40:9a:12: fc:80:6d:b1:18:25:fe:75:0b:3e:79:94:04:2f:e5: 85:6c:b6:6c:29:88:46:90:fa:a5:17:7d:ce:49:18: fe:c0:f9:e9:1d:e8:27:70:08:0b:f7:94:71:b1:58: 12:7f:97:54:66:40:b4:8b:a6:05:51:6e:28:81:03: e8:0b:9e:d2:98:07:98:bc:ae:df:1e:54:9e:0c:79: a4:5d:45:2f:18:8e:45:11:10:28:4f:e1:28:da:78: ac:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D2:38:53:05:30:CB:CA:17:32:0B:65:79:BE:E7:17:5F:9B:31:F0 X509v3 Authority Key Identifier: keyid:72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:f4:40:18:28:ad:fc:1b:1b:16:26:7d:39:17:68:bf:98:26: de:60:3d:85:bb:60:3c:0e:1d:4f:c7:ea:00:9e:5e:54:12:20: 20:38:8e:06:01:e7:23:36:46:62:3d:9e:50:1c:74:dc:37:c0: 7f:90:f2:61:a4:43:b9:68:9d:81:81:9b:dd:fc:cb:e9:2f:63: ca:67:c4:10:3a:01:8e:e4:80:88:91:5e:14:8f:cb:08:d7:ba: 38:ad:6f:11:13:85:10:1d:8d:97:ec:b2:2c:f3:70:8d:44:75: ce:5f:0d:86:14:c4:f2:e1:0f:b8:1b:16:6a:c5:e6:51:a0:21: 23:0c:de:64:49:7c:ff:49:ea:a3:8c:2f:a7:0d:ea:e6:b0:b1: 6e:a2:8f:60:67:a4:82:57:46:7f:b2:e2:d5:e5:36:51:97:d1: 09:e6:06:ab:9e:18:44:e6:25:2f:71:cf:85:1e:df:45:87:97: ed:5c:b8:4b:88:9f:f8:1c:02:56:18:24:8d:1b:e8:9d:c4:06: b9:c2:35:21:65:06:44:bb:3e:5c:02:4d:21:60:6c:36:7e:83: 32:1a:45:52:30:01:95:7d:7e:13:67:41:09:2c:00:26:85:c2: 22:9d:53:5f:0a:41:a9:57:4c:35:96:b0:95:b6:22:58:86:93: 3d:a1:37:c8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOgaA33RahktgjiVcLRw2Sqd77PowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3Q0M0OUZGRTJGQUY5NTg0QzJFMTAzQUM2RkQyOTMw MjBERDA3RDAeFw0yNjEwMTgyMTM1MTNaFw0yNjEwMjEyMzA3MTNaMDMxMTAvBgNV BAMTKDI3RDIzODUzMDUzMENCQ0ExNzMyMEI2NTc5QkVFNzE3NUY5QjMxRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnfOxShA6zIPzjNns5XTyNZn35 3dkvoOhA0hH5kYiK9aG5f7UgXfaLZDv63OuiNSjgmWjqD9c6HhMXiNcaSHM5aFbm 62Zua5byXIBVCL8LhzYEUY48Ng/rr6tizRNyLvcAtQew61fWFt/5BIUWlyCQ8zOJ ya3RgeVCi4+7mkgIPgW7+YH6h2fc0K2PBjU6cpA/ezyKnp17jjhEaliaIUJ2tUCa EvyAbbEYJf51Cz55lAQv5YVstmwpiEaQ+qUXfc5JGP7A+ekd6CdwCAv3lHGxWBJ/ l1RmQLSLpgVRbiiBA+gLntKYB5i8rt8eVJ4MeaRdRS8YjkUREChP4SjaeKwFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJ9I4UwUwy8oXMgtleb7nF1+bMfAwHwYDVR0j BBgwFoAUcnzEn/4vr5WEwuEDrG/SkwIN0H0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkyMDAwNjk1NDIyMTU2OS8wLzcyN0NDNDlGRkUyRkFGOTU4NEMyRTEwM0FDNkZE MjkzMDIwREQwN0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNzI3Q0M0OUZGRTJGQUY5NTg0QzJFMTAzQUM2RkQyOTMwMjBERDA3RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5MjAwMDY5NTQyMjE1NjkvMC83MjdDQzQ5RkZFMkZB Rjk1ODRDMkUxMDNBQzZGRDI5MzAyMEREMDdELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvRAGCit/Bsb FiZ9ORdov5gm3mA9hbtgPA4dT8fqAJ5eVBIgIDiOBgHnIzZGYj2eUBx03DfAf5Dy YaRDuWidgYGb3fzL6S9jymfEEDoBjuSAiJFeFI/LCNe6OK1vEROFEB2Nl+yyLPNw jUR1zl8NhhTE8uEPuBsWasXmUaAhIwzeZEl8/0nqo4wvpw3q5rCxbqKPYGekgldG f7Li1eU2UZfRCeYGq54YROYlL3HPhR7fRYeX7Vy4S4if+BwCVhgkjRvoncQGucI1 IWUGRLs+XAJNIWBsNn6DMhpFUjABlX1+E2dBCSwAJoXCIp1TXwpBqVdMNZawlbYi WIaTPaE3yA== -----END CERTIFICATE-----Generated at Mon Oct 19 22:54:01 2026 by rpki-client