$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft File: 4EC27FCC44D433FABCCB17301446A57C3578CD57.mft (raw, json) Hash identifier: qAx9K6PeUWpuPOmo+6Wqj4FMeZzE62f9yw9Zn+dqNls= Subject key identifier: 83:D1:9E:CE:3F:93:DD:2E:9B:38:8E:F3:02:01:23:62:14:54:39:2E Authority key identifier: 4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57 Certificate issuer: /CN=4EC27FCC44D433FABCCB17301446A57C3578CD57 Certificate serial: 241B923704B62A9F8BF9142415A8CAC6A363D721 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft Manifest number: B0 Signing time: Fri 28 Aug 2026 06:48:20 +0000 Manifest this update: Fri 28 Aug 2026 06:43:20 +0000 Manifest next update: Mon 31 Aug 2026 09:49:20 +0000 Files and hashes: 1: 34332e3234372e38342e302f32322d3232203d3e203539303834.roa (hash: UTsMLFBIg5eNtUqx8ENV+v7m0qdLL86FBpiVlkFAHww=) 2: 4EC27FCC44D433FABCCB17301446A57C3578CD57.crl (hash: NdMPHsNIY4M2qNSiyFruQyN0dNzWLsKprbkaPsg+4rk=) 3: 3130332e3232392e3137322e302f32322d3232203d3e203539303834.roa (hash: AUxiN3xrkojOpJEDBqwUUG7fz2qhvusWn+TwwyA5v5Y=) 4: 323430303a653638303a3a2f33322d3332203d3e203539303834.roa (hash: hCjCss8Qrog8PzpIaKD0V1/B/1nEVtaXZSPDBcpebOw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 09:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:1b:92:37:04:b6:2a:9f:8b:f9:14:24:15:a8:ca:c6:a3:63:d7:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EC27FCC44D433FABCCB17301446A57C3578CD57 Validity Not Before: Aug 28 06:43:20 2026 GMT Not After : Aug 31 09:49:20 2026 GMT Subject: CN=83D19ECE3F93DD2E9B388EF3020123621454392E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:65:a9:64:a1:fb:e6:6b:43:d0:ef:0a:03:36: e8:ef:21:85:c6:0e:eb:db:da:97:a7:5c:1f:96:ec: f8:a7:c4:74:e3:09:66:d2:d9:c5:6f:4b:fb:b3:c5: 0f:63:94:a0:20:94:ac:84:c6:0d:0f:57:a8:fc:f6: d2:cd:f2:03:f4:de:db:07:61:81:70:9a:ab:54:f7: ef:54:90:d6:89:a7:5c:a6:59:7f:bd:57:4e:8e:ae: 60:bc:b7:01:eb:29:74:75:3c:6e:ea:37:58:73:5a: 5a:12:61:09:42:9a:e0:a5:4d:c9:1c:19:06:cf:c2: 87:9c:42:c6:a3:2d:de:6b:85:01:41:e6:ae:78:0a: 21:28:33:7b:26:0d:a5:c7:0a:6e:74:a0:aa:74:b9: 2e:5d:0e:9b:2f:df:3c:3a:ec:b8:7e:35:e8:21:d8: cd:9c:d7:be:52:1b:b3:84:85:e8:61:d3:23:9a:b7: 1e:a3:4a:1d:17:4a:dc:c8:cd:83:9e:1e:17:fc:2f: e2:64:c0:b9:a6:28:41:23:0c:2a:75:de:05:02:20: 16:1f:3e:81:54:f8:9e:3d:3c:c8:6d:ed:fc:be:c9: 8b:c0:4d:a5:21:f1:eb:40:42:71:4e:89:db:87:e0: fb:bd:4f:25:86:1b:93:7d:20:a8:2e:f4:b3:f5:89: 81:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D1:9E:CE:3F:93:DD:2E:9B:38:8E:F3:02:01:23:62:14:54:39:2E X509v3 Authority Key Identifier: keyid:4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:63:75:36:34:7a:38:2a:f8:48:1b:b6:34:fa:bb:50:fe:95: f7:19:cf:3f:a5:ba:2e:6e:a0:ea:cf:b6:dc:c2:4c:86:11:bd: f8:c7:a1:5d:81:8f:a5:35:1b:3b:d7:be:63:3a:46:5e:cb:69: d8:59:97:8f:43:40:d8:35:f6:86:1e:df:ea:2b:7f:18:cb:1c: b8:35:37:66:61:d3:4d:8f:53:40:e9:82:22:15:67:cf:99:75: d7:68:31:91:5d:50:72:48:d1:ab:ca:0c:71:d8:dd:7a:ff:dd: c9:36:74:ce:38:da:f7:3d:6e:39:ce:20:90:d6:ee:57:9d:a3: 85:60:a9:b9:bb:99:5b:ec:4c:8c:69:d6:77:4b:67:24:82:03: db:5d:51:97:10:40:c9:12:0a:bf:74:b8:d1:29:f4:b7:5c:f3: 90:64:cd:de:71:df:6f:05:43:3b:4d:89:e8:a2:17:81:95:cb: dc:ce:c6:1f:01:28:df:bc:ba:40:2e:cc:2f:94:bb:cd:b7:12: fb:58:98:b3:69:fc:f6:2c:bf:b6:72:83:bc:3b:d0:e5:21:41: fe:b1:22:eb:bb:53:cb:83:03:37:19:72:d0:7b:de:01:84:2f: 3d:8c:57:97:54:62:fd:c1:52:e1:34:2d:5b:da:1c:20:30:99: 73:f0:41:29 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJBuSNwS2Kp+L+RQkFajKxqNj1yEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVDMjdGQ0M0NEQ0MzNGQUJDQ0IxNzMwMTQ0NkE1N0Mz NTc4Q0Q1NzAeFw0yNjA4MjgwNjQzMjBaFw0yNjA4MzEwOTQ5MjBaMDMxMTAvBgNV BAMTKDgzRDE5RUNFM0Y5M0REMkU5QjM4OEVGMzAyMDEyMzYyMTQ1NDM5MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZalkofvma0PQ7woDNujvIYXG Duvb2penXB+W7PinxHTjCWbS2cVvS/uzxQ9jlKAglKyExg0PV6j89tLN8gP03tsH YYFwmqtU9+9UkNaJp1ymWX+9V06OrmC8twHrKXR1PG7qN1hzWloSYQlCmuClTckc GQbPwoecQsajLd5rhQFB5q54CiEoM3smDaXHCm50oKp0uS5dDpsv3zw67Lh+Negh 2M2c175SG7OEhehh0yOatx6jSh0XStzIzYOeHhf8L+JkwLmmKEEjDCp13gUCIBYf PoFU+J49PMht7fy+yYvATaUh8etAQnFOiduH4Pu9TyWGG5N9IKgu9LP1iYEXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUg9Gezj+T3S6bOI7zAgEjYhRUOS4wHwYDVR0j BBgwFoAUTsJ/zETUM/q8yxcwFEalfDV4zVcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUxNTY4MjE3MTAyNzQ1Ny8wLzRFQzI3RkNDNDRENDMzRkFCQ0NCMTczMDE0NDZB NTdDMzU3OENENTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEVDMjdGQ0M0NEQ0MzNGQUJDQ0IxNzMwMTQ0NkE1N0MzNTc4Q0Q1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg1MTU2ODIxNzEwMjc0NTcvMC80RUMyN0ZDQzQ0RDQz M0ZBQkNDQjE3MzAxNDQ2QTU3QzM1NzhDRDU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmN1NjR6OCr4 SBu2NPq7UP6V9xnPP6W6Lm6g6s+23MJMhhG9+MehXYGPpTUbO9e+YzpGXstp2FmX j0NA2DX2hh7f6it/GMscuDU3ZmHTTY9TQOmCIhVnz5l112gxkV1QckjRq8oMcdjd ev/dyTZ0zjja9z1uOc4gkNbuV52jhWCpubuZW+xMjGnWd0tnJIID211RlxBAyRIK v3S40Sn0t1zzkGTN3nHfbwVDO02J6KIXgZXL3M7GHwEo37y6QC7ML5S7zbcS+1iY s2n89iy/tnKDvDvQ5SFB/rEi67tTy4MDNxly0HveAYQvPYxXl1Ri/cFS4TQtW9oc IDCZc/BBKQ== -----END CERTIFICATE-----Generated at Sat Aug 29 07:02:35 2026 by rpki-client