
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
File: 2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft (raw, json)
Hash identifier: ESidcSphtsPoXjcVtSKZ4ePu+kmvy76QAws8cIXLe3w=
Subject key identifier: 1D:68:56:50:37:1F:B4:1D:64:7D:17:11:B7:1F:20:FF:EB:3C:4C:C9
Authority key identifier: 26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6
Certificate issuer: /CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6
Certificate serial: 7C96EE08F3498DAA667D2A4FCDD1D52AF710ED01
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
Manifest number: 9F
Signing time: Fri 28 Aug 2026 06:47:37 +0000
Manifest this update: Fri 28 Aug 2026 06:42:37 +0000
Manifest next update: Mon 31 Aug 2026 08:39:37 +0000
Files and hashes: 1: 34352e3131392e3131362e302f32322d3232203d3e20313331353635.roa (hash: ErdNqCr6rLUUPtehXJutXA4Dm9q+vnzD7jD/bqmUhp0=)
2: 34352e3131352e3230302e302f32322d3232203d3e20313331353635.roa (hash: rLCj0HBQYOVbcabzmYNkYLw4AhULEsHLtpCZIKNuZW4=)
3: 2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl (hash: UVqMWrqfZMZ59AHgxk0tQRRL2s2oyajrq+GnDOzk+Jw=)
4: 34352e3131362e3135322e302f32322d3232203d3e20313331353635.roa (hash: HOfOfgw/0tw8uL48WO+lG0vSL+fX5+Bi8T2yXk4uMzw=)
5: 3230322e3136342e302e302f32302d3230203d3e20313331353635.roa (hash: vqj7rCCg8K7t73KdbXfT3onF+TOCWcPf4hcIJvcwdsI=)
6: 3130332e3233302e3230302e302f32322d3232203d3e20313331353635.roa (hash: r42RnGBeCl6YkTG2opLn9O58WhJSoIZybnJyVr/dKgQ=)
7: 3130332e35352e3232382e302f32322d3232203d3e20313331353635.roa (hash: 7HRLarWGgnBDjlECd+4RsFmaJ0KCNtnMIG+jEZ4BYb0=)
8: 34332e3235342e3136382e302f32322d3232203d3e20313331353635.roa (hash: MfiLKwC97r6IDlGtJuLI5ZnoR+6BkyMB1qUC1zGkb38=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl
rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 08:39:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:96:ee:08:f3:49:8d:aa:66:7d:2a:4f:cd:d1:d5:2a:f7:10:ed:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6
Validity
Not Before: Aug 28 06:42:37 2026 GMT
Not After : Aug 31 08:39:37 2026 GMT
Subject: CN=1D685650371FB41D647D1711B71F20FFEB3C4CC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:70:de:b5:b2:58:0d:25:67:be:db:9c:f8:
9f:0e:95:f2:9d:76:7e:1e:3c:d5:0d:bb:ba:80:05:
0c:46:17:11:4c:f4:66:0f:b9:ae:ba:17:1d:0e:92:
f9:ed:b6:ca:eb:96:0b:68:5e:f9:87:f7:8b:10:76:
3d:e2:d7:da:69:c0:2f:88:80:cf:a0:d2:00:cf:e3:
4c:07:4b:16:a4:c0:9e:d7:30:72:0c:73:b5:2c:53:
0c:63:28:54:03:c1:a2:0d:0d:d6:a1:66:34:bd:6f:
3e:65:e4:da:ae:87:f8:45:b4:b4:fe:3b:c1:84:97:
3b:c7:46:8d:41:e8:c3:d2:c2:ff:87:ea:eb:e1:84:
32:e8:1c:25:2e:43:28:59:f1:dc:1b:3d:4e:d7:23:
51:24:94:2e:98:5d:27:53:8b:a8:c6:d1:3b:b6:5c:
1f:73:10:f4:78:9a:8d:63:3d:f6:20:7b:9b:a0:34:
1c:45:43:23:3b:36:4d:58:2b:87:c8:f5:97:16:a1:
59:84:3c:17:42:82:52:73:ab:36:31:b6:06:e3:93:
b4:10:b3:25:dd:38:95:84:2f:12:3f:31:79:3d:25:
12:7e:1e:31:cf:45:72:3c:bd:33:de:7f:43:09:d7:
b8:73:48:6f:fc:73:0d:3b:58:7b:a5:4e:b7:f0:15:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:68:56:50:37:1F:B4:1D:64:7D:17:11:B7:1F:20:FF:EB:3C:4C:C9
X509v3 Authority Key Identifier:
keyid:26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f1:b1:4b:97:c7:d7:55:92:66:ec:71:5d:ba:cb:b9:63:42:
61:c0:1e:76:0d:10:46:65:7d:2a:2a:d6:92:c2:65:91:0b:46:
8e:fa:a5:d2:d6:5d:fd:ca:de:ef:e6:9c:ca:28:c1:46:c9:bc:
8c:a5:f3:9c:47:35:3d:46:53:31:95:56:40:c4:0f:39:38:bb:
e9:96:07:0e:2f:21:49:aa:8d:4a:6c:d1:86:d9:b5:24:71:85:
98:da:01:40:e1:58:fb:e6:f7:ca:16:32:63:b9:16:d3:ac:ef:
ef:20:95:01:08:c1:33:b9:92:1d:3f:cf:e4:55:db:d4:c6:9f:
76:09:2c:99:c5:b5:af:e8:ba:9d:72:97:14:12:26:1d:0c:3f:
d0:37:39:f1:58:7a:ba:13:ad:cd:46:ae:87:d1:24:0e:0a:f7:
bd:3c:05:da:d2:0d:e2:cd:46:d9:78:d2:00:19:28:38:0a:76:
f9:c8:6e:b2:6b:8b:1c:d8:22:84:d9:e2:7c:76:06:48:a8:90:
35:a6:f1:02:86:d2:d1:54:88:dc:01:94:01:de:f9:4e:df:a0:
b5:13:8d:c3:54:83:e9:f1:49:fd:ac:82:db:ac:c2:9d:f7:c1:
d4:9f:70:90:a7:8c:a3:76:d0:47:02:31:77:d5:db:51:91:fc:
e8:51:ce:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:19:55 2026 by rpki-client