$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft File: 87B51467549FFC5A022609DBAB961975D1FBA4B3.mft (raw, json) Hash identifier: pHsYIes3natFyOAusEAcsMRi/8IkL3HYqGw9kjr8IVU= Subject key identifier: B7:6C:34:D8:91:CB:DF:32:E5:F6:E9:09:A5:64:94:03:9A:65:C8:35 Authority key identifier: 87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3 Certificate issuer: /CN=A9162E3D0001/serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3 Certificate serial: 2A0C6FB6BC611D30512C333BCDF777032FBAD138 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft Manifest number: 0663 Signing time: Thu 03 Sep 2026 13:43:33 +0000 Manifest this update: Thu 03 Sep 2026 13:38:33 +0000 Manifest next update: Sun 06 Sep 2026 21:29:33 +0000 Files and hashes: 1: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer (hash: gEpZplu3X/zYELqWFf0FQe7+7lFuFNjb53OBqDd8hSU=) 2: 5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer (hash: G6gmGz0JGvm3XGbG9KIc4KxqDJjHz9X9sG7X4BSDSVE=) 3: 87B51467549FFC5A022609DBAB961975D1FBA4B3.crl (hash: AA1XHHMiajbN9kzjm+wATiI0GiKgAZG6z0LLSZW21wQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 21:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0c:6f:b6:bc:61:1d:30:51:2c:33:3b:cd:f7:77:03:2f:ba:d1:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3 Validity Not Before: Sep 3 13:38:33 2026 GMT Not After : Sep 6 21:29:33 2026 GMT Subject: CN=B76C34D891CBDF32E5F6E909A56494039A65C835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:82:39:a0:d2:54:5b:67:0c:93:b9:a4:76:46: 00:19:6b:ff:42:e6:03:ef:b4:99:15:0e:db:7d:e0: 32:b8:42:79:fb:05:3b:a0:37:81:54:97:b9:7a:c6: a8:65:de:8f:84:bc:9b:ef:92:0a:68:27:80:96:6e: 6b:47:5d:7d:91:bf:6d:5c:28:77:ca:5f:14:9a:d6: 2d:00:7f:9c:30:f8:63:9c:30:88:61:3d:bf:c2:44: 1b:33:17:ad:27:d8:60:4d:06:7a:3b:16:98:c5:77: a6:0a:72:f9:f6:dd:13:12:5c:af:9f:32:f1:82:ec: df:5d:de:69:68:81:68:b7:89:00:cd:52:1f:99:65: 36:7f:b6:4e:12:db:b8:f8:25:3b:c5:28:73:3b:f6: 64:70:f5:b0:e5:b7:ae:b8:e2:12:60:53:1f:95:5a: da:d2:53:45:4d:72:5f:3d:a6:c7:bc:b4:3c:c6:4b: 18:04:01:ac:52:72:d0:68:a9:fa:8c:94:84:72:95: 6f:0e:01:46:9c:77:2e:84:bb:1b:12:94:6a:77:4f: 0a:6f:37:cd:97:c6:67:c9:2c:50:59:15:e2:77:79: 8b:ab:dd:e5:d6:56:e3:03:c6:66:94:0b:b9:a6:3d: 8d:51:9b:cf:c1:0b:79:f1:5d:0a:7c:d2:e2:c3:54: 46:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6C:34:D8:91:CB:DF:32:E5:F6:E9:09:A5:64:94:03:9A:65:C8:35 X509v3 Authority Key Identifier: keyid:87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:bd:fe:51:06:fa:78:ab:0b:28:0a:a8:cb:a0:6e:d8:a5:00: e0:fc:b1:96:ca:2b:ff:07:27:f3:09:54:09:90:cb:94:ab:b6: 1f:f1:61:4f:4c:00:4a:51:14:09:91:70:6e:a3:12:09:72:04: 2d:c4:9c:7d:6a:9d:3d:9d:53:93:cf:a1:17:13:4b:fd:a9:01: 34:77:aa:cf:ed:53:c9:6a:f6:fa:55:fe:e8:81:20:48:16:d8: e4:6b:8a:16:a1:53:e3:e4:f7:67:03:84:8c:fe:15:be:07:02: c4:e0:e3:48:63:4b:1c:2b:bc:ec:c6:7f:4d:da:34:24:0c:3c: 47:cf:65:62:33:53:1f:97:2b:58:58:12:95:48:df:08:e2:dd: f3:34:db:e4:4d:68:af:35:43:f3:62:cd:ec:6e:e9:43:13:2a: b2:35:92:b3:60:96:01:6f:1c:a5:7a:6d:d6:85:7b:40:3d:72: 02:3e:c8:50:4b:20:d7:ce:a3:d3:b5:ad:84:71:cc:8a:32:16: c4:b0:5f:95:ca:7d:d6:b4:86:66:cb:27:57:b4:71:f5:53:28: b5:bc:96:8f:56:5f:7d:bb:d3:29:29:0f:7e:c0:a3:b9:cc:bd: 8f:ba:fd:ad:f0:f2:2c:4d:62:e7:86:fe:b7:9f:b7:a2:d2:91: 77:5e:bc:d4 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUKgxvtrxhHTBRLDM7zfd3Ay+60TgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyg4N0I1MTQ2NzU0 OUZGQzVBMDIyNjA5REJBQjk2MTk3NUQxRkJBNEIzMB4XDTI2MDkwMzEzMzgzM1oX DTI2MDkwNjIxMjkzM1owMzExMC8GA1UEAxMoQjc2QzM0RDg5MUNCREYzMkU1RjZF OTA5QTU2NDk0MDM5QTY1QzgzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALGCOaDSVFtnDJO5pHZGABlr/0LmA++0mRUO233gMrhCefsFO6A3gVSXuXrG qGXej4S8m++SCmgngJZua0ddfZG/bVwod8pfFJrWLQB/nDD4Y5wwiGE9v8JEGzMX rSfYYE0GejsWmMV3pgpy+fbdExJcr58y8YLs313eaWiBaLeJAM1SH5llNn+2ThLb uPglO8Uoczv2ZHD1sOW3rrjiEmBTH5Va2tJTRU1yXz2mx7y0PMZLGAQBrFJy0Gip +oyUhHKVbw4BRpx3LoS7GxKUandPCm83zZfGZ8ksUFkV4nd5i6vd5dZW4wPGZpQL uaY9jVGbz8ELefFdCnzS4sNURnUCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBS3bDTY kcvfMuX26QmlZJQDmmXINTAfBgNVHSMEGDAWgBSHtRRnVJ/8WgImCdurlhl10fuk szAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1LzIvODdCNTE0 Njc1NDlGRkM1QTAyMjYwOURCQUI5NjE5NzVEMUZCQTRCMy5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIvaDdVVVoxU2Zf Rm9DSmduYnE1WVpkZEg3cExNLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA1NTM5MDc3NTA5 MDY3NTcxNS8yLzg3QjUxNDY3NTQ5RkZDNUEwMjI2MDlEQkFCOTYxOTc1RDFGQkE0 QjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQBevf5RBvp4qwsoCqjLoG7YpQDg/LGWyiv/ByfzCVQJkMuU q7Yf8WFPTABKURQJkXBuoxIJcgQtxJx9ap09nVOTz6EXE0v9qQE0d6rP7VPJavb6 Vf7ogSBIFtjka4oWoVPj5PdnA4SM/hW+BwLE4ONIY0scK7zsxn9N2jQkDDxHz2Vi M1MflytYWBKVSN8I4t3zNNvkTWivNUPzYs3sbulDEyqyNZKzYJYBbxylem3WhXtA PXICPshQSyDXzqPTta2EccyKMhbEsF+Vyn3WtIZmyydXtHH1Uyi1vJaPVl99u9Mp KQ9+wKO5zL2Puv2t8PIsTWLnhv63n7ei0pF3XrzU -----END CERTIFICATE-----Generated at Sat Sep 5 00:55:50 2026 by rpki-client