
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
File: 9B87DFEBDCCDA813116988D4421B088404578168.mft (raw, json)
Hash identifier: KYZ9MqMNHqrq3o1/5fo0740Ivxy/hfsC6tL7+bdOgeY=
Subject key identifier: BC:7B:CC:DC:7F:6B:A1:CD:B5:CF:74:85:FC:89:72:6B:25:17:93:B5
Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68
Certificate issuer: /CN=9B87DFEBDCCDA813116988D4421B088404578168
Certificate serial: 162EC526F58CF6BEAF9E8B6EE054E148F74105A4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
Manifest number: 014A
Signing time: Wed 14 Oct 2026 00:23:21 +0000
Manifest this update: Wed 14 Oct 2026 00:18:21 +0000
Manifest next update: Sat 17 Oct 2026 01:12:21 +0000
Files and hashes: 1: 3130332e35362e3134302e302f32322d3232203d3e20313439363238.roa (hash: kQ4vmHhIhIdM+j0qKtexqNeRC3lB/ivTAG2HWe979bg=)
2: 9B87DFEBDCCDA813116988D4421B088404578168.crl (hash: 9UG14VKD7y2z4tlSVqytcdfmia6Ta1/7TLbioQddbdY=)
3: 3231312e3135342e3134342e302f32302d3230203d3e20313334373734.roa (hash: alpjFmWgEiBbogthwEkCRvKizOOuc9cKPE88pENyGHA=)
4: 34352e3131362e39362e302f32322d3232203d3e20313439363238.roa (hash: aWgeDjinqxghP2O9gm5Jstjm/o8V7VlFXar3hlRu/AE=)
5: 3230332e38362e31362e302f32302d3230203d3e20313334373734.roa (hash: uMLAeYE9Fso11yhVojhjYyJDAb3WPWH1BlJh/X2DOwQ=)
6: 3130332e32332e3136342e302f32322d3232203d3e20313439363238.roa (hash: Q5lN8y2xoBURESf9IcASxDDCPLCsNrEs2HlfjfnnNOU=)
7: 3230332e38362e302e302f32302d3230203d3e20313334373734.roa (hash: TAnrcV/q6VsB8YFBFhEbXjskfcTX0Mha1GN6QBn3c6Q=)
8: 3231312e3135342e3132382e302f32302d3230203d3e20313334373734.roa (hash: 7sBR0PD3eTNaJp5A6+iXnX/3YOszhjTGDbjYWbhqZ2o=)
9: 3232302e3233312e3132382e302f31382d3138203d3e20313334373734.roa (hash: Cph0YLpkDG2fLuVzSekkhP+HJ5DeU37Z2LF9M608YDg=)
10: 3232302e3233312e3139322e302f31382d3138203d3e20313334373734.roa (hash: Ptt4YLVWObBN2EDWF/pPVMNSng6g0RgCtq5fiDa8lWk=)
11: 323430303a643230303a3a2f33322d3332203d3e2030.roa (hash: iNUdmu9Gf0xgCxDEJhv4BLHbiymyu26z4nlJEpV0mo4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 17 Oct 2026 01:12:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:2e:c5:26:f5:8c:f6:be:af:9e:8b:6e:e0:54:e1:48:f7:41:05:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168
Validity
Not Before: Oct 14 00:18:21 2026 GMT
Not After : Oct 17 01:12:21 2026 GMT
Subject: CN=BC7BCCDC7F6BA1CDB5CF7485FC89726B251793B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:19:9d:98:af:53:fc:44:20:c3:dc:a9:28:e4:
03:48:e6:96:f1:2e:ef:71:7b:d5:ab:45:76:02:fc:
d8:89:c8:6a:ff:b0:e1:fe:10:32:25:85:63:15:db:
e7:b5:9d:be:44:1d:39:05:41:c1:c6:1c:34:56:9c:
75:42:3b:13:84:a3:e2:82:8f:e5:6f:99:94:28:ac:
ad:5f:54:37:ea:30:33:02:f6:50:3e:fc:1c:0b:dc:
da:5b:02:8f:d6:25:cb:a2:f5:2d:48:18:dc:da:24:
de:c7:7e:ed:75:10:d4:43:97:b1:5a:ad:42:82:5d:
17:c4:2b:b4:58:84:94:67:9e:16:b8:f3:ab:d2:8a:
ab:47:40:5f:60:e6:88:4b:8a:52:2d:8e:5f:a0:ed:
f1:b0:3e:45:bc:42:31:c9:82:3b:11:e6:50:5b:89:
7c:4c:47:41:1a:fc:c5:96:0d:df:dd:90:db:28:d6:
83:93:35:b7:28:aa:48:78:22:9b:07:80:c1:be:3d:
5d:8a:5e:98:d7:d4:67:fe:f5:b7:a0:86:4d:bf:12:
48:7d:e2:7e:15:87:a4:cd:eb:d1:39:b3:37:06:70:
82:f2:1a:63:49:17:87:b7:f3:48:bb:81:ea:60:9a:
af:58:65:57:c5:6f:8e:68:23:07:2b:3e:fd:e0:0e:
46:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7B:CC:DC:7F:6B:A1:CD:B5:CF:74:85:FC:89:72:6B:25:17:93:B5
X509v3 Authority Key Identifier:
keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:f9:22:85:f7:0c:93:16:4e:9f:f1:33:5e:57:b4:93:9c:ab:
68:b9:cd:34:26:cb:90:ab:8a:8f:7d:9f:dd:eb:fb:3a:3c:8a:
af:4d:d0:b0:8f:bb:f1:55:bb:02:82:33:85:4a:dd:f1:09:c2:
3f:56:b9:04:32:dd:54:60:52:a0:c0:d8:7a:93:36:6b:f7:81:
50:1b:1a:92:dc:f8:ac:9a:f9:89:ec:3a:5f:74:62:43:00:34:
f3:53:86:f0:eb:be:f6:fb:39:33:90:c7:0e:90:36:4e:63:2f:
ce:0f:ec:d6:b4:e7:8f:0c:2a:16:80:82:3a:86:6c:4f:e4:b6:
f5:24:bf:16:47:be:0d:f2:bd:ac:65:b7:c0:71:f5:68:1d:bc:
b2:1b:12:c6:6c:95:8d:f4:83:69:30:f8:8d:41:56:4a:45:3d:
4b:79:c9:32:35:21:bf:f3:01:e0:65:01:12:8f:1a:06:70:f6:
de:b3:f9:4c:f2:0b:85:0f:26:27:7a:28:a3:35:48:46:46:71:
a3:87:fd:79:85:a2:ba:23:79:17:7f:68:96:11:fc:23:e4:d5:
a3:c4:e0:99:c2:3c:95:9b:24:68:2c:bd:38:93:f7:e8:3f:3a:
e9:eb:02:a8:eb:50:3e:14:e7:5d:16:dd:5e:6d:af:9c:a5:d7:
59:03:c8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:01:12 2026 by rpki-client