$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft File: 2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft (raw, json) Hash identifier: zsmIHIq8tsfdmQ04xc8PfWqWI44OdvU8tSWFHeIiOQQ= Subject key identifier: FD:63:1C:F3:AF:A3:B6:CD:25:C5:F5:78:43:BD:A9:45:81:23:C1:55 Authority key identifier: 26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6 Certificate issuer: /CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6 Certificate serial: 4FC1C4D0F701DBD52AFF438C79E390A852F2F7DA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft Manifest number: 25 Signing time: Fri 29 May 2026 14:22:56 +0000 Manifest this update: Fri 29 May 2026 14:17:56 +0000 Manifest next update: Sat 30 May 2026 17:42:56 +0000 Files and hashes: 1: 3130332e35352e3232382e302f32322d3232203d3e20313331353635.roa (hash: 7HRLarWGgnBDjlECd+4RsFmaJ0KCNtnMIG+jEZ4BYb0=) 2: 34352e3131352e3230302e302f32322d3232203d3e20313331353635.roa (hash: rLCj0HBQYOVbcabzmYNkYLw4AhULEsHLtpCZIKNuZW4=) 3: 2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl (hash: THn+suApYHPs/Yhnbt1Dl8cFpVgyUowGk8Tm/zAn6hQ=) 4: 3230322e3136342e302e302f32302d3230203d3e20313331353635.roa (hash: vqj7rCCg8K7t73KdbXfT3onF+TOCWcPf4hcIJvcwdsI=) 5: 34352e3131362e3135322e302f32322d3232203d3e20313331353635.roa (hash: HOfOfgw/0tw8uL48WO+lG0vSL+fX5+Bi8T2yXk4uMzw=) 6: 34332e3235342e3136382e302f32322d3232203d3e20313331353635.roa (hash: MfiLKwC97r6IDlGtJuLI5ZnoR+6BkyMB1qUC1zGkb38=) 7: 3130332e3233302e3230302e302f32322d3232203d3e20313331353635.roa (hash: r42RnGBeCl6YkTG2opLn9O58WhJSoIZybnJyVr/dKgQ=) 8: 34352e3131392e3131362e302f32322d3232203d3e20313331353635.roa (hash: ErdNqCr6rLUUPtehXJutXA4Dm9q+vnzD7jD/bqmUhp0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c1:c4:d0:f7:01:db:d5:2a:ff:43:8c:79:e3:90:a8:52:f2:f7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6 Validity Not Before: May 29 14:17:56 2026 GMT Not After : May 30 17:42:56 2026 GMT Subject: CN=FD631CF3AFA3B6CD25C5F57843BDA9458123C155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:40:ec:34:13:d3:d4:b7:9e:13:c0:f9:3d:c1: 0b:aa:13:54:69:33:3c:67:f9:70:2a:cc:8f:a2:46: fb:a8:a9:89:42:13:e1:19:ed:5f:75:3e:1f:cb:5a: ef:c0:b1:30:96:84:f8:35:6b:6f:57:f6:06:40:4c: 45:2c:8d:3b:31:5e:ee:be:f7:2b:37:9c:28:5d:72: 6a:96:cd:ba:c3:46:8a:53:31:a5:a4:8d:6f:62:10: 7f:49:67:84:52:dd:76:e7:4f:97:4e:43:e7:7b:98: f4:16:6d:80:54:bc:bf:5f:a0:4f:6d:46:2b:73:13: 9d:37:61:ce:1e:13:c1:24:89:a0:8e:74:29:06:32: c4:f8:ca:65:07:4f:57:3a:25:c9:de:6c:79:4d:db: 39:7c:8d:0c:45:f2:a0:ee:32:17:3d:77:f9:15:e8: 90:c9:d8:67:95:39:1a:5c:25:b2:92:a9:c4:77:1e: 1a:a3:25:12:57:37:e4:17:d0:66:9c:d6:67:e1:39: dc:b2:dd:2c:01:8c:1f:e6:0b:2f:33:d1:b5:51:7c: 31:c4:27:8c:b7:2d:e5:98:6c:8f:fc:15:63:86:6d: 86:70:31:91:89:ae:b8:97:40:fa:85:2a:8e:f1:bc: 2e:d8:81:1e:d4:ef:d1:06:c7:fe:7a:f5:f5:5f:a3: ab:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:63:1C:F3:AF:A3:B6:CD:25:C5:F5:78:43:BD:A9:45:81:23:C1:55 X509v3 Authority Key Identifier: keyid:26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:bd:ed:d7:77:c9:3f:e1:2a:ac:30:b1:e3:71:44:06:c1:42: ed:4d:b1:ea:dc:c2:31:da:19:a0:db:6e:07:16:6d:79:d8:62: b1:58:f6:fd:11:6b:5f:34:11:08:05:f7:81:fc:bb:56:7e:7f: 75:45:21:4a:f6:62:07:14:44:1f:79:c7:86:1a:1f:3e:b8:47: 9e:0e:35:5a:c4:1e:46:56:78:48:fc:43:e4:f9:7c:47:63:93: e7:7b:ff:02:67:80:57:51:ce:f2:3c:2e:db:a1:3c:45:14:47: 44:ff:e2:e0:d1:ad:fe:e1:4d:c3:bc:13:b5:1b:c7:29:75:b6: b8:7a:02:cd:8e:fb:12:8a:d0:c0:0c:33:c1:67:55:77:22:31: 9a:d4:77:3f:6a:c5:0f:47:28:3b:f7:95:a1:4b:a7:c6:69:d7: fd:84:b7:a2:3d:7a:0c:c2:04:15:e8:83:5e:4b:f4:04:ba:d1: 9a:6d:45:a9:58:e0:7b:14:a5:ff:96:28:1f:0e:f3:cd:c8:68: 94:69:0d:92:57:d7:68:29:5f:93:28:cb:cd:53:09:36:b4:23: b8:36:bc:70:a0:81:5a:7c:96:2f:ac:e0:bb:c1:74:11:7d:f7: 9c:6a:3b:e4:a8:24:5b:e2:fc:d3:38:8f:47:60:0c:03:68:29: 1c:39:82:87 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUT8HE0PcB29Uq/0OMeeOQqFLy99owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjYyN0E1NTZEMzdCRjM2OTZFRjVFQTlCMEZGMjhBNjE1 NUVBMEFBNjAeFw0yNjA1MjkxNDE3NTZaFw0yNjA1MzAxNzQyNTZaMDMxMTAvBgNV BAMTKEZENjMxQ0YzQUZBM0I2Q0QyNUM1RjU3ODQzQkRBOTQ1ODEyM0MxNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYQOw0E9PUt54TwPk9wQuqE1Rp Mzxn+XAqzI+iRvuoqYlCE+EZ7V91Ph/LWu/AsTCWhPg1a29X9gZATEUsjTsxXu6+ 9ys3nChdcmqWzbrDRopTMaWkjW9iEH9JZ4RS3XbnT5dOQ+d7mPQWbYBUvL9foE9t RitzE503Yc4eE8EkiaCOdCkGMsT4ymUHT1c6JcnebHlN2zl8jQxF8qDuMhc9d/kV 6JDJ2GeVORpcJbKSqcR3HhqjJRJXN+QX0Gac1mfhOdyy3SwBjB/mCy8z0bVRfDHE J4y3LeWYbI/8FWOGbYZwMZGJrriXQPqFKo7xvC7YgR7U79EGx/569fVfo6slAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/WMc86+jts0lxfV4Q72pRYEjwVUwHwYDVR0j BBgwFoAUJielVtN782lu9eqbD/KKYVXqCqYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDYwODE4ODEyNjE5OTgxNS8wLzI2MjdBNTU2RDM3QkYzNjk2RUY1RUE5QjBGRjI4 QTYxNTVFQTBBQTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjYyN0E1NTZEMzdCRjM2OTZFRjVFQTlCMEZGMjhBNjE1NUVBMEFBNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ2MDgxODgxMjYxOTk4MTUvMC8yNjI3QTU1NkQzN0JG MzY5NkVGNUVBOUIwRkYyOEE2MTU1RUEwQUE2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF73t13fJP+Eq rDCx43FEBsFC7U2x6tzCMdoZoNtuBxZtedhisVj2/RFrXzQRCAX3gfy7Vn5/dUUh SvZiBxREH3nHhhofPrhHng41WsQeRlZ4SPxD5Pl8R2OT53v/AmeAV1HO8jwu26E8 RRRHRP/i4NGt/uFNw7wTtRvHKXW2uHoCzY77EorQwAwzwWdVdyIxmtR3P2rFD0co O/eVoUunxmnX/YS3oj16DMIEFeiDXkv0BLrRmm1FqVjgexSl/5YoHw7zzcholGkN klfXaClfkyjLzVMJNrQjuDa8cKCBWnyWL6zgu8F0EX33nGo75KgkW+L80ziPR2AM A2gpHDmChw== -----END CERTIFICATE-----Generated at Fri May 29 22:03:40 2026 by rpki-client