
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
File: 9B87DFEBDCCDA813116988D4421B088404578168.mft (raw, json)
Hash identifier: 8N/H8I1KNK+vtdkFT2Tz3QvlNZyX2ykQdW9LQBi45lY=
Subject key identifier: 31:E2:17:B1:19:68:6C:EA:2F:04:89:9E:D1:21:06:33:F1:78:89:FF
Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68
Certificate issuer: /CN=9B87DFEBDCCDA813116988D4421B088404578168
Certificate serial: 03ADCA15627B7BB0EB7D3B59E10C121037A5A56F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
Manifest number: BC
Signing time: Fri 29 May 2026 11:17:48 +0000
Manifest this update: Fri 29 May 2026 11:12:48 +0000
Manifest next update: Sat 30 May 2026 12:50:48 +0000
Files and hashes: 1: 3230332e38362e302e302f32302d3230203d3e20313334373734.roa (hash: TAnrcV/q6VsB8YFBFhEbXjskfcTX0Mha1GN6QBn3c6Q=)
2: 3231312e3135342e3134342e302f32302d3230203d3e20313334373734.roa (hash: alpjFmWgEiBbogthwEkCRvKizOOuc9cKPE88pENyGHA=)
3: 9B87DFEBDCCDA813116988D4421B088404578168.crl (hash: k0guKt3UUjx6oiBPyZx0CUFtv4hXnf4MsGD4qdf5bak=)
4: 3232302e3233312e3139322e302f31382d3138203d3e20313334373734.roa (hash: Ptt4YLVWObBN2EDWF/pPVMNSng6g0RgCtq5fiDa8lWk=)
5: 3130332e35362e3134302e302f32322d3232203d3e20313439363238.roa (hash: kQ4vmHhIhIdM+j0qKtexqNeRC3lB/ivTAG2HWe979bg=)
6: 3230332e38362e31362e302f32302d3230203d3e20313334373734.roa (hash: uMLAeYE9Fso11yhVojhjYyJDAb3WPWH1BlJh/X2DOwQ=)
7: 3130332e32332e3136342e302f32322d3232203d3e20313439363238.roa (hash: Q5lN8y2xoBURESf9IcASxDDCPLCsNrEs2HlfjfnnNOU=)
8: 34352e3131362e39362e302f32322d3232203d3e20313439363238.roa (hash: aWgeDjinqxghP2O9gm5Jstjm/o8V7VlFXar3hlRu/AE=)
9: 323430303a643230303a3a2f33322d3332203d3e2030.roa (hash: iNUdmu9Gf0xgCxDEJhv4BLHbiymyu26z4nlJEpV0mo4=)
10: 3232302e3233312e3132382e302f31382d3138203d3e20313334373734.roa (hash: Cph0YLpkDG2fLuVzSekkhP+HJ5DeU37Z2LF9M608YDg=)
11: 3231312e3135342e3132382e302f32302d3230203d3e20313334373734.roa (hash: 7sBR0PD3eTNaJp5A6+iXnX/3YOszhjTGDbjYWbhqZ2o=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 12:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ad:ca:15:62:7b:7b:b0:eb:7d:3b:59:e1:0c:12:10:37:a5:a5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168
Validity
Not Before: May 29 11:12:48 2026 GMT
Not After : May 30 12:50:48 2026 GMT
Subject: CN=31E217B119686CEA2F04899ED1210633F17889FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:62:48:d3:05:d6:24:5f:f0:d6:dc:a2:8f:
c1:58:51:76:e8:c4:a8:68:fb:c3:c4:fd:48:21:33:
b8:8d:8f:aa:1c:91:a6:9e:86:ba:5f:1c:e5:f2:e3:
14:e0:d0:b6:a4:0b:ea:1a:19:6b:96:dd:20:db:b9:
a7:44:25:54:fa:ea:28:e8:ef:70:51:61:20:33:f9:
3f:31:eb:a3:fe:3f:dd:4d:bc:fb:e4:66:0f:ba:56:
24:fb:f7:37:e1:6d:74:11:fb:e5:12:b8:35:1c:b2:
d3:ac:a2:dd:dd:d8:af:51:23:c8:be:02:c8:88:ef:
a0:9a:16:63:80:8e:9e:d0:3e:65:ad:7b:bf:4f:70:
5d:87:c1:ee:b9:71:42:3d:1d:07:5c:3b:74:c2:ba:
52:34:aa:68:b7:26:8d:6c:91:14:47:12:8d:c5:8d:
ae:46:49:59:4c:4f:42:cc:db:38:f9:85:5d:95:44:
8a:8a:d9:1f:cd:61:37:c1:bf:85:ad:62:6a:41:82:
a8:80:8b:a1:da:c2:3b:6b:59:45:90:5a:36:99:dd:
3f:c7:9b:a9:84:20:02:34:d0:24:13:22:f1:13:4f:
e1:a9:fe:5b:76:e4:2f:4c:8e:a9:ee:a4:ff:1a:66:
bd:1b:52:1b:a3:dd:af:83:2a:9c:db:f9:99:16:bb:
da:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E2:17:B1:19:68:6C:EA:2F:04:89:9E:D1:21:06:33:F1:78:89:FF
X509v3 Authority Key Identifier:
keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:bc:3b:82:74:6b:e8:22:58:1b:a9:e9:7d:63:9f:25:72:50:
3f:fa:e4:02:1c:1a:52:47:67:de:49:8f:27:c1:be:5c:26:31:
ae:ba:d9:ca:ab:42:3a:5f:04:b2:57:fe:f1:f0:99:9a:72:34:
5e:9a:4a:3c:3e:e3:9c:3d:b8:c7:f2:13:bf:ef:45:98:76:51:
f8:ef:bf:52:98:30:80:ea:a5:fe:2f:21:fc:34:a2:2f:2b:f4:
d1:f8:4c:80:52:0f:8f:d8:1e:f4:e1:6d:39:ca:5c:c9:1a:01:
4b:c7:69:47:52:3e:04:c5:7d:b3:84:ca:31:08:20:b3:05:de:
f3:53:c4:0d:44:d2:f5:d4:26:37:3f:c0:18:f0:f9:a1:d8:d2:
35:16:26:9e:df:f2:17:fd:ae:e9:37:27:de:a4:f5:a5:6b:69:
52:66:dc:31:33:60:46:7d:fa:e4:76:d9:9b:95:ed:33:dc:25:
27:f8:2a:87:2a:a6:07:31:fc:c1:24:90:2f:b4:78:f7:0c:2e:
c8:37:41:a2:90:05:08:29:cb:90:41:91:f2:1c:cf:25:ba:90:
f9:2c:93:12:ce:60:b6:7a:19:6a:58:cc:24:9f:61:a0:17:27:
93:51:2d:d6:45:4b:6f:c5:87:c6:15:a0:ef:c1:12:f8:1d:6a:
67:d0:bb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:05:49 2026 by rpki-client