
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
File: 87B51467549FFC5A022609DBAB961975D1FBA4B3.mft (raw, json)
Hash identifier: SBYI9phOMgA6a9P7JT6MGBUgtl9IUg8iNqGlHNlcE3A=
Subject key identifier: EB:C0:06:3D:58:2C:F9:CF:EA:28:28:22:C4:47:E5:F0:BC:0A:51:2A
Authority key identifier: 87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3
Certificate issuer: /CN=A9162E3D0001/serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3
Certificate serial: 4341C4CAB170E3B0B1242CFB26608AA5CB1F3369
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
Manifest number: 06A3
Signing time: Fri 23 Oct 2026 07:32:33 +0000
Manifest this update: Fri 23 Oct 2026 07:27:33 +0000
Manifest next update: Mon 26 Oct 2026 17:52:33 +0000
Files and hashes: 1: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer (hash: gEpZplu3X/zYELqWFf0FQe7+7lFuFNjb53OBqDd8hSU=)
2: 5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer (hash: G6gmGz0JGvm3XGbG9KIc4KxqDJjHz9X9sG7X4BSDSVE=)
3: 87B51467549FFC5A022609DBAB961975D1FBA4B3.crl (hash: vdCejzYUDJk0aBLP5irHj5zVg8mbwdO/tGNsHAQKipA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 17:52:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:41:c4:ca:b1:70:e3:b0:b1:24:2c:fb:26:60:8a:a5:cb:1f:33:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3
Validity
Not Before: Oct 23 07:27:33 2026 GMT
Not After : Oct 26 17:52:33 2026 GMT
Subject: CN=EBC0063D582CF9CFEA282822C447E5F0BC0A512A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:b7:1e:4b:e0:2b:ef:04:06:00:fb:95:fa:
04:1e:84:8b:31:b7:ed:53:27:cf:d2:62:b5:ed:c3:
a2:78:ad:66:0b:f0:92:1a:d3:56:c3:73:50:57:85:
e8:97:70:f0:1a:25:b6:ee:d2:94:69:e9:ad:62:35:
7d:2c:7f:47:5e:c4:93:a5:01:b1:d0:5b:b4:6c:c0:
c9:20:80:32:56:05:95:fc:7c:7a:5a:c6:2f:6a:96:
17:c8:ae:2f:ac:bf:8c:0a:5a:27:b5:e1:6b:ff:7d:
70:1e:35:c4:04:07:20:be:37:d0:d7:68:d3:64:41:
66:90:58:f2:a0:04:8b:ef:9b:a8:8d:7a:15:58:6a:
b5:d3:e4:f1:81:3d:13:a0:1c:a0:0b:04:fe:e1:94:
71:b0:88:72:36:d5:1e:13:c4:c1:c9:81:d6:f5:1f:
4c:61:dc:63:19:94:53:29:44:92:17:88:6f:57:f9:
39:ad:b8:9f:81:7b:5b:51:59:38:b4:c1:20:4b:11:
06:2a:d5:a0:e7:73:7a:3b:a3:ad:79:dc:98:a9:88:
a1:14:bd:8c:ae:d5:6d:95:dd:90:5f:8d:b9:67:bf:
d9:7f:27:58:94:bb:1c:13:91:12:4e:c9:90:b1:99:
5d:2e:9b:c4:65:6d:71:13:fd:a5:13:5e:02:66:8b:
1e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C0:06:3D:58:2C:F9:CF:EA:28:28:22:C4:47:E5:F0:BC:0A:51:2A
X509v3 Authority Key Identifier:
keyid:87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:73:cd:ed:4d:3b:71:10:b5:48:7b:6e:33:a4:b0:dc:1d:83:
2e:3e:df:b3:1e:e3:51:e4:34:cd:a7:cb:7c:38:3a:ec:99:00:
ab:2e:aa:da:1d:70:8f:a8:40:7b:63:02:01:a1:47:22:28:3c:
84:9d:4a:05:74:0d:e5:df:cb:a7:5f:25:14:02:e3:e0:8f:52:
69:a1:7e:e8:67:80:08:0b:b4:6d:8e:a0:9f:39:32:e7:c2:63:
4b:72:d0:0f:e0:05:0e:fe:ad:fd:bc:3d:3d:40:fc:da:ff:23:
af:21:76:0d:d9:94:f9:45:ae:bd:b0:47:ac:6f:1e:d9:49:cd:
55:66:57:66:24:97:77:22:29:3c:ec:67:59:32:cd:36:bd:08:
41:59:bf:6f:f3:fa:28:09:6a:34:20:40:8c:ed:83:c7:26:fc:
03:9b:36:be:54:f6:98:2a:61:0a:e1:7b:d7:9d:85:86:f7:61:
9f:dd:9b:7e:a1:b8:4e:ae:86:1d:82:ad:cc:95:b1:94:32:65:
d1:bd:fc:c8:41:8f:fd:b1:25:47:30:48:9a:c8:db:8c:43:f1:
ba:79:4e:e2:7a:58:ff:ab:0e:b3:ca:ca:2e:c4:3b:3e:bf:c4:
e1:08:9f:5f:68:a6:f8:b2:92:b9:90:a0:ed:6e:a8:01:ae:f5:
9e:e1:92:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:46:51 2026 by rpki-client