
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
File: 2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft (raw, json)
Hash identifier: PjnWPkdc1R0RaHPcVOKAAERAQ/vyReTEhEXZt1fW/+I=
Subject key identifier: 40:99:FF:E7:34:7E:44:F4:B4:80:A9:A7:E9:F8:0E:64:2C:1A:A7:DD
Authority key identifier: 26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6
Certificate issuer: /CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6
Certificate serial: 33C105F9B72673780E41C823C0647949468C85CD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
Manifest number: 62
Signing time: Tue 14 Jul 2026 03:40:20 +0000
Manifest this update: Tue 14 Jul 2026 03:35:20 +0000
Manifest next update: Wed 15 Jul 2026 04:48:20 +0000
Files and hashes: 1: 34352e3131362e3135322e302f32322d3232203d3e20313331353635.roa (hash: HOfOfgw/0tw8uL48WO+lG0vSL+fX5+Bi8T2yXk4uMzw=)
2: 34352e3131352e3230302e302f32322d3232203d3e20313331353635.roa (hash: rLCj0HBQYOVbcabzmYNkYLw4AhULEsHLtpCZIKNuZW4=)
3: 3230322e3136342e302e302f32302d3230203d3e20313331353635.roa (hash: vqj7rCCg8K7t73KdbXfT3onF+TOCWcPf4hcIJvcwdsI=)
4: 3130332e3233302e3230302e302f32322d3232203d3e20313331353635.roa (hash: r42RnGBeCl6YkTG2opLn9O58WhJSoIZybnJyVr/dKgQ=)
5: 34332e3235342e3136382e302f32322d3232203d3e20313331353635.roa (hash: MfiLKwC97r6IDlGtJuLI5ZnoR+6BkyMB1qUC1zGkb38=)
6: 3130332e35352e3232382e302f32322d3232203d3e20313331353635.roa (hash: 7HRLarWGgnBDjlECd+4RsFmaJ0KCNtnMIG+jEZ4BYb0=)
7: 2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl (hash: IgHIzEmOUtUSrezyw47I5Lzhf3++4M2NTErYFft499k=)
8: 34352e3131392e3131362e302f32322d3232203d3e20313331353635.roa (hash: ErdNqCr6rLUUPtehXJutXA4Dm9q+vnzD7jD/bqmUhp0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl
rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 04:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:c1:05:f9:b7:26:73:78:0e:41:c8:23:c0:64:79:49:46:8c:85:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6
Validity
Not Before: Jul 14 03:35:20 2026 GMT
Not After : Jul 15 04:48:20 2026 GMT
Subject: CN=4099FFE7347E44F4B480A9A7E9F80E642C1AA7DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:d6:0c:ca:cc:ef:e1:f8:53:62:7a:2f:29:
af:7f:c5:e3:8e:c1:8e:9a:c2:c8:cb:68:49:df:ed:
6e:3a:e7:78:9d:8e:81:b6:1a:a1:85:56:18:fe:42:
ca:e6:16:13:7f:b5:e7:37:04:5f:27:12:a6:e6:bf:
cf:ab:6e:14:5d:0a:56:74:1f:98:01:19:eb:bf:da:
8a:22:7e:1b:f8:d7:17:d4:d1:5e:88:13:65:d8:83:
e5:b5:34:1c:c3:d3:2a:c5:06:9d:51:ee:44:28:e6:
e1:0a:1c:3c:6b:1a:b8:ec:46:33:58:8f:58:5a:33:
a4:1c:98:37:85:ee:ff:b4:5d:5a:41:d6:3c:29:1e:
25:e3:b5:07:eb:82:c1:b5:2c:4f:54:35:dd:30:c8:
5f:77:60:dc:0a:2f:14:a3:06:fc:4a:d5:70:d4:1d:
5a:6a:ce:33:e8:f8:b2:53:24:86:40:6b:80:88:7a:
36:2f:f7:9f:28:0d:cd:c9:b8:f0:ce:91:20:97:aa:
25:eb:92:74:dd:90:c6:17:67:88:93:f2:13:29:43:
2b:8c:89:4c:a5:7f:0e:9f:32:42:f7:63:c4:b8:6e:
10:e0:43:a9:20:3b:4a:46:63:eb:ae:80:66:02:d2:
0d:ba:87:32:6f:eb:11:9b:d6:84:f1:bb:94:35:b5:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:99:FF:E7:34:7E:44:F4:B4:80:A9:A7:E9:F8:0E:64:2C:1A:A7:DD
X509v3 Authority Key Identifier:
keyid:26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d5:4f:72:6f:9e:0b:04:5a:77:92:3c:b4:05:5d:58:06:54:
b6:02:72:0b:2e:f2:9f:cb:d2:00:a1:86:54:47:ff:bf:dc:12:
93:fd:4c:8f:65:47:38:04:f0:00:8d:3a:b1:aa:a6:e6:fd:2d:
e3:51:da:e4:5f:c9:5c:66:89:d7:4a:be:41:0e:ea:1e:93:ce:
11:30:58:70:43:d2:0c:e4:fb:51:1b:0e:45:45:49:03:c6:f6:
6a:5e:ce:5e:b1:ce:35:bd:e7:5c:3f:ee:ca:3d:e6:00:08:3a:
c9:ff:fc:f1:04:cc:87:04:3e:60:53:62:48:06:bc:ce:d7:ca:
48:24:c2:82:f3:e3:7e:1e:d6:6b:f1:a4:11:3d:42:21:1d:71:
91:f7:31:12:0b:e4:89:60:c7:ce:34:38:e2:67:90:1e:f7:a6:
97:ed:71:c6:da:f4:bf:3b:8c:b7:28:00:5d:aa:ea:cb:e6:1a:
64:20:fb:a8:bf:a6:9f:36:5f:b8:c4:a4:09:69:f2:92:da:1a:
1d:28:74:da:b9:13:65:15:2c:c0:0a:a6:53:3d:af:ac:ba:d3:
f4:0e:b1:f0:2b:8b:6a:d5:7c:6f:8e:1e:78:69:2b:31:08:1d:
77:26:68:ea:f0:bb:2a:22:23:4b:d6:51:90:73:a7:f2:e3:76:
cb:83:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:19:04 2026 by rpki-client