$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft File: 727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft (raw, json) Hash identifier: OleUyZan1lZiW0wWY1aRpOV2ydXil348+a8gGxyBpaU= Subject key identifier: A2:58:EC:41:6C:B4:38:EB:81:F4:7D:4A:18:08:17:15:DF:B2:89:F1 Authority key identifier: 72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D Certificate issuer: /CN=727CC49FFE2FAF9584C2E103AC6FD293020DD07D Certificate serial: 5150451B2C6794C668A3884CC4F609C08620BACE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft Manifest number: 0111 Signing time: Tue 20 Oct 2026 23:07:30 +0000 Manifest this update: Tue 20 Oct 2026 23:02:30 +0000 Manifest next update: Sat 24 Oct 2026 03:42:30 +0000 Files and hashes: 1: 3133392e3137362e302e302f31362d3136203d3e2039383033.roa (hash: rprXfo+mQWYwe2oVBzgwFN7TztyCOZlqUd+lE3fdHj0=) 2: 727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl (hash: YmiwpnZ+PapTrcu2gcHar4NyNOHfEYyDtpF3gn6eHNo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 11:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:50:45:1b:2c:67:94:c6:68:a3:88:4c:c4:f6:09:c0:86:20:ba:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727CC49FFE2FAF9584C2E103AC6FD293020DD07D Validity Not Before: Oct 20 23:02:30 2026 GMT Not After : Oct 24 03:42:30 2026 GMT Subject: CN=A258EC416CB438EB81F47D4A18081715DFB289F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9d:37:d8:55:2a:2b:3b:53:ed:6f:3d:64:4b: 3b:b8:f1:c2:3c:82:4b:2e:40:d5:77:8d:7c:e2:60: c2:1d:ea:db:c3:70:2a:5b:fd:bf:63:b1:4d:90:03: 2c:c5:ad:57:71:90:56:d9:77:7d:31:70:71:06:89: d1:ea:7b:77:f1:c1:e4:c2:92:1d:93:f8:36:c5:54: de:12:8b:3a:0d:c3:f0:39:6c:05:fa:46:4a:9d:08: f1:63:67:fc:c3:61:50:e6:38:69:f3:16:55:ac:1e: 09:4a:7b:1f:7d:10:78:ea:8b:d4:32:5f:bc:fe:98: 3a:31:9f:55:db:84:fb:9e:1f:30:23:84:b6:61:74: b8:38:5f:4b:97:f6:61:26:7e:c4:57:ee:04:65:d2: 13:97:a0:82:7d:70:c7:ed:ec:f1:8a:2c:9f:61:95: d9:d3:2c:58:ea:c1:a8:ab:73:df:d8:15:26:fe:a5: 91:f0:a9:c3:9d:94:f7:c5:c1:d0:1f:21:29:08:fb: 55:12:57:6d:8f:ec:5f:1f:b7:c0:45:5e:f0:d2:99: c1:df:90:92:59:30:cd:24:44:b4:f0:cd:80:0e:ae: 29:c8:fc:41:8f:46:ed:76:94:99:30:8d:25:35:48: 03:50:97:0b:32:00:09:90:fd:db:2e:5a:9c:d5:5b: 98:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:58:EC:41:6C:B4:38:EB:81:F4:7D:4A:18:08:17:15:DF:B2:89:F1 X509v3 Authority Key Identifier: keyid:72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:57:4d:d6:08:14:70:4f:2b:40:b4:d2:c4:12:d7:2d:4a:fc: 22:a0:c2:dd:7a:12:17:32:ff:ab:aa:12:46:c0:66:65:a9:0b: b5:52:4e:d6:0a:41:b9:f1:c3:1b:80:3d:b6:86:21:10:bd:e1: b9:98:27:33:b4:7f:3a:8b:9e:86:69:33:ff:d1:90:20:06:0a: fd:f8:f3:63:74:c3:46:7b:e2:a1:c9:21:85:fd:eb:1a:82:7f: a5:26:f1:36:99:31:41:30:84:e9:df:1a:79:23:10:55:d4:bd: 7e:2c:b1:b7:78:58:f9:01:0b:a8:ef:f8:63:62:9f:94:b7:ea: 0d:d3:49:1a:d3:30:c9:ee:42:05:ef:eb:34:4f:a7:96:21:09: 40:c2:49:58:f2:db:e2:05:0b:2f:b9:95:e4:6e:90:95:e0:bc: a7:93:cd:20:e6:40:85:29:67:19:fa:f0:24:be:b8:71:73:d0: 70:9a:dd:78:88:32:3a:f0:6d:5e:45:85:a7:f8:ac:53:27:0f: 4a:9d:73:b1:13:98:be:0e:65:05:70:34:fd:73:d5:94:5d:b4: 63:0c:8e:e6:ec:03:92:c7:ca:cf:32:26:e3:23:86:5a:80:a2: 6b:33:6d:f2:2b:6c:aa:d9:e5:b6:8d:4a:b5:e5:b6:20:fb:81: ad:91:4a:78 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUVBFGyxnlMZoo4hMxPYJwIYgus4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3Q0M0OUZGRTJGQUY5NTg0QzJFMTAzQUM2RkQyOTMw MjBERDA3RDAeFw0yNjEwMjAyMzAyMzBaFw0yNjEwMjQwMzQyMzBaMDMxMTAvBgNV BAMTKEEyNThFQzQxNkNCNDM4RUI4MUY0N0Q0QTE4MDgxNzE1REZCMjg5RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrnTfYVSorO1Ptbz1kSzu48cI8 gksuQNV3jXziYMId6tvDcCpb/b9jsU2QAyzFrVdxkFbZd30xcHEGidHqe3fxweTC kh2T+DbFVN4SizoNw/A5bAX6RkqdCPFjZ/zDYVDmOGnzFlWsHglKex99EHjqi9Qy X7z+mDoxn1XbhPueHzAjhLZhdLg4X0uX9mEmfsRX7gRl0hOXoIJ9cMft7PGKLJ9h ldnTLFjqwairc9/YFSb+pZHwqcOdlPfFwdAfISkI+1USV22P7F8ft8BFXvDSmcHf kJJZMM0kRLTwzYAOrinI/EGPRu12lJkwjSU1SANQlwsyAAmQ/dsuWpzVW5izAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoljsQWy0OOuB9H1KGAgXFd+yifEwHwYDVR0j BBgwFoAUcnzEn/4vr5WEwuEDrG/SkwIN0H0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkyMDAwNjk1NDIyMTU2OS8wLzcyN0NDNDlGRkUyRkFGOTU4NEMyRTEwM0FDNkZE MjkzMDIwREQwN0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNzI3Q0M0OUZGRTJGQUY5NTg0QzJFMTAzQUM2RkQyOTMwMjBERDA3RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5MjAwMDY5NTQyMjE1NjkvMC83MjdDQzQ5RkZFMkZB Rjk1ODRDMkUxMDNBQzZGRDI5MzAyMEREMDdELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIldN1ggUcE8r QLTSxBLXLUr8IqDC3XoSFzL/q6oSRsBmZakLtVJO1gpBufHDG4A9toYhEL3huZgn M7R/Oouehmkz/9GQIAYK/fjzY3TDRnviockhhf3rGoJ/pSbxNpkxQTCE6d8aeSMQ VdS9fiyxt3hY+QELqO/4Y2KflLfqDdNJGtMwye5CBe/rNE+nliEJQMJJWPLb4gUL L7mV5G6QleC8p5PNIOZAhSlnGfrwJL64cXPQcJrdeIgyOvBtXkWFp/isUycPSp1z sROYvg5lBXA0/XPVlF20YwyO5uwDksfKzzIm4yOGWoCiazNt8itsqtnlto1KteW2 IPuBrZFKeA== -----END CERTIFICATE-----Generated at Wed Oct 21 04:38:53 2026 by rpki-client