$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft File: 2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft (raw, json) Hash identifier: AyBc5AfDSVE68D8IJDtEPvDbkzWoOjgdY0jHlchIK8M= Subject key identifier: A3:99:43:CD:78:42:7C:D6:6A:0A:06:95:DB:CA:EA:03:EE:55:E8:39 Authority key identifier: 26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6 Certificate issuer: /CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6 Certificate serial: 36D915F2D920D223675A145A462A238273ED3710 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft Manifest number: B3 Signing time: Sun 11 Oct 2026 12:10:37 +0000 Manifest this update: Sun 11 Oct 2026 12:05:37 +0000 Manifest next update: Wed 14 Oct 2026 23:46:37 +0000 Files and hashes: 1: 2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl (hash: 2gCzfvh95CVt0p7dg5qHuml4V2JBrj9BsuV+cbJigEQ=) 2: 3130332e35352e3232382e302f32322d3232203d3e20313331353635.roa (hash: 7HRLarWGgnBDjlECd+4RsFmaJ0KCNtnMIG+jEZ4BYb0=) 3: 3130332e3233302e3230302e302f32322d3232203d3e20313331353635.roa (hash: r42RnGBeCl6YkTG2opLn9O58WhJSoIZybnJyVr/dKgQ=) 4: 34352e3131362e3135322e302f32322d3232203d3e20313331353635.roa (hash: HOfOfgw/0tw8uL48WO+lG0vSL+fX5+Bi8T2yXk4uMzw=) 5: 3230322e3136342e302e302f32302d3230203d3e20313331353635.roa (hash: vqj7rCCg8K7t73KdbXfT3onF+TOCWcPf4hcIJvcwdsI=) 6: 34352e3131352e3230302e302f32322d3232203d3e20313331353635.roa (hash: rLCj0HBQYOVbcabzmYNkYLw4AhULEsHLtpCZIKNuZW4=) 7: 34332e3235342e3136382e302f32322d3232203d3e20313331353635.roa (hash: MfiLKwC97r6IDlGtJuLI5ZnoR+6BkyMB1qUC1zGkb38=) 8: 34352e3131392e3131362e302f32322d3232203d3e20313331353635.roa (hash: ErdNqCr6rLUUPtehXJutXA4Dm9q+vnzD7jD/bqmUhp0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 23:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d9:15:f2:d9:20:d2:23:67:5a:14:5a:46:2a:23:82:73:ed:37:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6 Validity Not Before: Oct 11 12:05:37 2026 GMT Not After : Oct 14 23:46:37 2026 GMT Subject: CN=A39943CD78427CD66A0A0695DBCAEA03EE55E839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:44:d8:4b:93:dd:5a:87:b9:31:56:2c:ff:ba: 0a:fa:af:7e:36:65:ab:0c:d0:2b:ac:12:1f:28:4d: 69:d0:4d:d7:28:e7:81:5d:ae:a1:f1:f8:18:51:1f: ee:a9:3e:8a:20:d0:71:a6:c2:37:3e:02:91:b6:0c: 4f:e6:7e:b0:7a:a6:71:f0:83:3f:eb:5b:c9:7e:54: 47:50:b2:0f:ff:15:d7:81:b4:ef:47:20:13:af:cf: 12:0f:c4:99:ad:02:e1:a0:75:ed:92:46:f1:b2:39: e7:db:36:0d:cd:bc:d4:ea:5e:67:80:57:84:f2:03: fa:5a:bd:61:ff:6e:32:2a:f6:ae:c0:92:e5:32:66: 28:da:e7:e6:5d:76:d4:be:5a:64:45:4b:e8:fc:cd: 77:cc:fb:5a:ea:33:e5:da:e2:df:49:1b:99:31:17: 96:78:60:28:b6:bd:db:8c:ca:11:86:c0:dc:a5:21: 60:b3:e0:a9:c1:2d:c4:10:92:d3:08:39:f5:08:36: 86:11:f4:a7:d4:4f:c2:28:8f:fb:cb:38:89:a5:3f: 15:d8:46:6d:f3:23:a8:6b:96:4d:db:a2:81:63:85: 2c:df:4f:4b:12:ad:5a:13:11:88:6a:99:fc:c5:bd: 97:7d:d0:37:5f:98:43:c0:79:c5:00:eb:b2:13:58: c8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:99:43:CD:78:42:7C:D6:6A:0A:06:95:DB:CA:EA:03:EE:55:E8:39 X509v3 Authority Key Identifier: keyid:26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ae:f8:bc:04:0c:e4:0b:18:29:9b:8a:44:2e:99:d2:75:6e: 26:20:bc:60:92:10:17:1a:bd:71:9d:7b:bc:ed:63:1d:c2:91: d3:ce:53:cd:69:af:4e:b8:01:58:f4:2e:30:94:0d:f8:39:86: ba:f3:92:2a:04:29:65:a3:3b:d2:df:a9:05:73:63:27:8f:f2: 79:d1:46:bf:ee:fc:0e:5f:bc:7a:a2:81:56:eb:39:cb:68:f0: 90:3c:18:26:0b:53:ae:71:22:f8:3e:05:6e:13:2d:49:7b:0a: 0d:18:5d:62:2d:5a:ff:f3:85:87:13:53:16:15:85:a8:80:7d: e2:6e:21:3f:b0:05:a8:4c:67:54:61:70:99:22:52:f8:08:2c: 7e:57:42:5b:25:7c:5a:5a:6b:2a:3e:37:38:39:ca:ac:61:1f: 1c:c4:5c:c3:ef:67:04:47:07:d0:7c:f8:5c:ef:dc:a8:49:c5: f4:35:08:fa:90:a3:e7:ba:c2:54:5e:34:47:aa:ac:66:41:08: 35:5f:97:a9:1b:45:fd:44:5e:6d:c1:92:7d:61:6a:23:26:1d: 8d:95:b7:d6:1b:e6:99:72:58:71:77:ad:5c:ff:4f:8e:27:b8: 4c:b3:b0:8b:0c:ba:4e:05:2e:95:31:bb:cc:f0:2f:8b:98:ea: df:7a:63:2f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNtkV8tkg0iNnWhRaRiojgnPtNxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjYyN0E1NTZEMzdCRjM2OTZFRjVFQTlCMEZGMjhBNjE1 NUVBMEFBNjAeFw0yNjEwMTExMjA1MzdaFw0yNjEwMTQyMzQ2MzdaMDMxMTAvBgNV BAMTKEEzOTk0M0NENzg0MjdDRDY2QTBBMDY5NURCQ0FFQTAzRUU1NUU4MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvRNhLk91ah7kxViz/ugr6r342 ZasM0CusEh8oTWnQTdco54FdrqHx+BhRH+6pPoog0HGmwjc+ApG2DE/mfrB6pnHw gz/rW8l+VEdQsg//FdeBtO9HIBOvzxIPxJmtAuGgde2SRvGyOefbNg3NvNTqXmeA V4TyA/pavWH/bjIq9q7AkuUyZija5+ZddtS+WmRFS+j8zXfM+1rqM+Xa4t9JG5kx F5Z4YCi2vduMyhGGwNylIWCz4KnBLcQQktMIOfUINoYR9KfUT8Ioj/vLOImlPxXY Rm3zI6hrlk3booFjhSzfT0sSrVoTEYhqmfzFvZd90DdfmEPAecUA67ITWMj5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUo5lDzXhCfNZqCgaV28rqA+5V6DkwHwYDVR0j BBgwFoAUJielVtN782lu9eqbD/KKYVXqCqYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDYwODE4ODEyNjE5OTgxNS8wLzI2MjdBNTU2RDM3QkYzNjk2RUY1RUE5QjBGRjI4 QTYxNTVFQTBBQTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjYyN0E1NTZEMzdCRjM2OTZFRjVFQTlCMEZGMjhBNjE1NUVBMEFBNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ2MDgxODgxMjYxOTk4MTUvMC8yNjI3QTU1NkQzN0JG MzY5NkVGNUVBOUIwRkYyOEE2MTU1RUEwQUE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOq74vAQM5AsY KZuKRC6Z0nVuJiC8YJIQFxq9cZ17vO1jHcKR085TzWmvTrgBWPQuMJQN+DmGuvOS KgQpZaM70t+pBXNjJ4/yedFGv+78Dl+8eqKBVus5y2jwkDwYJgtTrnEi+D4FbhMt SXsKDRhdYi1a//OFhxNTFhWFqIB94m4hP7AFqExnVGFwmSJS+AgsfldCWyV8Wlpr Kj43ODnKrGEfHMRcw+9nBEcH0Hz4XO/cqEnF9DUI+pCj57rCVF40R6qsZkEINV+X qRtF/URebcGSfWFqIyYdjZW31hvmmXJYcXetXP9Pjie4TLOwiwy6TgUulTG7zPAv i5jq33pjLw== -----END CERTIFICATE-----Generated at Tue Oct 13 19:09:20 2026 by rpki-client