$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft File: 727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft (raw, json) Hash identifier: n8hoQHSkqXl+A7EHeTcaMU1sZLN3+5FzdOkb954hGHA= Subject key identifier: 17:FE:E2:4F:F2:81:D8:9E:BC:70:1B:A6:11:73:00:61:CB:ED:F8:0F Authority key identifier: 72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D Certificate issuer: /CN=727CC49FFE2FAF9584C2E103AC6FD293020DD07D Certificate serial: 4C54E2183D05790FEB813089722253B861DF6A90 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft Manifest number: 3D Signing time: Mon 13 Apr 2026 06:52:19 +0000 Manifest this update: Mon 13 Apr 2026 06:47:19 +0000 Manifest next update: Tue 14 Apr 2026 07:43:19 +0000 Files and hashes: 1: 727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl (hash: 1kydQHUb8Ri+W8CCHRjLfuUi6Y8EiaLo+czA2pKo/AQ=) 2: 3133392e3137362e302e302f31362d3136203d3e2039383033.roa (hash: rprXfo+mQWYwe2oVBzgwFN7TztyCOZlqUd+lE3fdHj0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 07:43:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:54:e2:18:3d:05:79:0f:eb:81:30:89:72:22:53:b8:61:df:6a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=727CC49FFE2FAF9584C2E103AC6FD293020DD07D Validity Not Before: Apr 13 06:47:19 2026 GMT Not After : Apr 14 07:43:19 2026 GMT Subject: CN=17FEE24FF281D89EBC701BA611730061CBEDF80F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6f:fc:75:0c:d2:64:56:3d:a1:a7:aa:73:ff: 9b:34:66:75:f7:a8:02:47:4a:2c:06:fd:53:6f:ff: 7d:64:79:b9:de:d8:9a:58:4b:15:43:fb:45:7c:e3: 70:eb:5b:21:54:a3:7d:8a:96:c8:7e:bd:ad:76:68: e1:7a:2b:1b:0e:88:58:85:7d:0a:0b:ee:fd:7f:28: ee:3f:f5:9a:d2:32:1c:53:f7:34:a4:65:2e:19:d8: c7:5a:01:36:ff:62:1c:f2:dc:bc:6b:b1:fe:13:d0: 43:92:70:2e:c0:d2:33:8b:9d:9e:70:2e:ed:1c:97: b3:da:45:a3:3c:5d:69:d0:3d:3b:aa:3f:bb:ee:d9: 06:b0:2a:ba:b5:3a:d6:75:7c:aa:50:47:82:e9:ca: c8:f1:7a:a7:9c:84:20:b0:c9:f3:53:87:e5:4a:7c: c1:86:fe:72:d8:d2:e2:04:9d:5e:0f:86:80:9a:c5: 44:11:ea:4d:ab:e6:87:70:41:2b:d4:83:73:a0:96: 02:49:9b:5d:43:7b:a5:3a:63:fc:75:39:87:92:ff: 89:ba:f5:36:ea:07:a0:62:f1:ac:d0:b6:5c:e7:62: a3:82:66:46:31:bd:f9:86:7e:54:e3:4c:f0:e1:1c: 32:c1:a6:66:fd:3b:79:fc:e3:87:1e:8d:e0:b9:20: e4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FE:E2:4F:F2:81:D8:9E:BC:70:1B:A6:11:73:00:61:CB:ED:F8:0F X509v3 Authority Key Identifier: keyid:72:7C:C4:9F:FE:2F:AF:95:84:C2:E1:03:AC:6F:D2:93:02:0D:D0:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/0/727CC49FFE2FAF9584C2E103AC6FD293020DD07D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:29:07:51:18:c6:aa:3f:25:ea:89:2c:9b:fe:b1:c9:1e:4c: 3f:52:98:52:b7:9c:c1:36:07:b0:05:fe:80:53:b6:0a:04:eb: c2:f1:d1:c7:ce:23:d4:8f:35:b3:80:f5:ea:9d:51:62:3f:54: c5:52:5d:81:e6:37:37:2d:0c:42:6f:37:2f:63:ef:21:46:f7: dc:70:91:84:63:bd:58:3f:75:68:aa:01:d5:ae:4c:01:c8:25: d2:3b:9a:a7:43:5e:53:9f:08:70:65:af:4c:20:44:a0:f9:61: a8:50:19:1d:25:fc:e8:eb:e1:0a:b8:10:cc:ba:cd:ad:8e:31: 9a:46:67:18:09:29:0d:f5:36:d5:91:7a:db:0b:9a:35:e7:4f: 04:0b:58:b4:b4:61:a7:8e:f9:71:6f:f5:a6:b1:0f:f9:2c:a3: dd:12:e5:38:3e:58:f6:01:01:38:c4:5f:ef:a4:71:21:e1:2b: 96:23:89:e6:d6:ae:3a:99:25:58:87:99:66:cd:05:50:f0:71: d9:df:82:d8:c1:32:7c:4a:9c:a5:8c:bb:f3:85:ae:f5:17:42: f8:ec:0b:ad:63:7f:87:41:ab:21:07:60:87:ba:ef:a1:a8:29: e8:05:af:12:22:8c:47:d7:e2:35:61:f1:35:1e:7b:47:92:86: c1:56:d4:2e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTFTiGD0FeQ/rgTCJciJTuGHfapAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3Q0M0OUZGRTJGQUY5NTg0QzJFMTAzQUM2RkQyOTMw MjBERDA3RDAeFw0yNjA0MTMwNjQ3MTlaFw0yNjA0MTQwNzQzMTlaMDMxMTAvBgNV BAMTKDE3RkVFMjRGRjI4MUQ4OUVCQzcwMUJBNjExNzMwMDYxQ0JFREY4MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIb/x1DNJkVj2hp6pz/5s0ZnX3 qAJHSiwG/VNv/31kebne2JpYSxVD+0V843DrWyFUo32Klsh+va12aOF6KxsOiFiF fQoL7v1/KO4/9ZrSMhxT9zSkZS4Z2MdaATb/Yhzy3Lxrsf4T0EOScC7A0jOLnZ5w Lu0cl7PaRaM8XWnQPTuqP7vu2QawKrq1OtZ1fKpQR4LpysjxeqechCCwyfNTh+VK fMGG/nLY0uIEnV4PhoCaxUQR6k2r5odwQSvUg3OglgJJm11De6U6Y/x1OYeS/4m6 9TbqB6Bi8azQtlznYqOCZkYxvfmGflTjTPDhHDLBpmb9O3n844cejeC5IOTlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUF/7iT/KB2J68cBumEXMAYcvt+A8wHwYDVR0j BBgwFoAUcnzEn/4vr5WEwuEDrG/SkwIN0H0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkyMDAwNjk1NDIyMTU2OS8wLzcyN0NDNDlGRkUyRkFGOTU4NEMyRTEwM0FDNkZE MjkzMDIwREQwN0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNzI3Q0M0OUZGRTJGQUY5NTg0QzJFMTAzQUM2RkQyOTMwMjBERDA3RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5MjAwMDY5NTQyMjE1NjkvMC83MjdDQzQ5RkZFMkZB Rjk1ODRDMkUxMDNBQzZGRDI5MzAyMEREMDdELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXykHURjGqj8l 6oksm/6xyR5MP1KYUrecwTYHsAX+gFO2CgTrwvHRx84j1I81s4D16p1RYj9UxVJd geY3Ny0MQm83L2PvIUb33HCRhGO9WD91aKoB1a5MAcgl0juap0NeU58IcGWvTCBE oPlhqFAZHSX86OvhCrgQzLrNrY4xmkZnGAkpDfU21ZF62wuaNedPBAtYtLRhp475 cW/1prEP+Syj3RLlOD5Y9gEBOMRf76RxIeErliOJ5tauOpklWIeZZs0FUPBx2d+C 2MEyfEqcpYy784Wu9RdC+OwLrWN/h0GrIQdgh7rvoagp6AWvEiKMR9fiNWHxNR57 R5KGwVbULg== -----END CERTIFICATE-----Generated at Mon Apr 13 16:46:16 2026 by rpki-client