
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
File: 87B51467549FFC5A022609DBAB961975D1FBA4B3.mft (raw, json)
Hash identifier: 5U26iUqi3lfHzIbtc9TwQz1JyUQqmomrsifbQPkIpSI=
Subject key identifier: A6:A5:88:EF:28:8A:5F:74:76:A9:03:10:D3:0D:FA:DD:93:56:E0:6B
Authority key identifier: 87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3
Certificate issuer: /CN=A9162E3D0001/serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3
Certificate serial: 1AFFA2F63F5E85AF4BDD0471C0B23004F382C2C1
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
Manifest number: 067D
Signing time: Sun 20 Sep 2026 07:37:09 +0000
Manifest this update: Sun 20 Sep 2026 07:32:09 +0000
Manifest next update: Wed 23 Sep 2026 14:35:09 +0000
Files and hashes: 1: 5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer (hash: G6gmGz0JGvm3XGbG9KIc4KxqDJjHz9X9sG7X4BSDSVE=)
2: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer (hash: gEpZplu3X/zYELqWFf0FQe7+7lFuFNjb53OBqDd8hSU=)
3: 87B51467549FFC5A022609DBAB961975D1FBA4B3.crl (hash: NkeDR+6otwCj1826B3PQinq18LNQGT9ZZf/ARDY0/ow=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 14:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:ff:a2:f6:3f:5e:85:af:4b:dd:04:71:c0:b2:30:04:f3:82:c2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162E3D0001, serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3
Validity
Not Before: Sep 20 07:32:09 2026 GMT
Not After : Sep 23 14:35:09 2026 GMT
Subject: CN=A6A588EF288A5F7476A90310D30DFADD9356E06B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:8a:bd:f7:74:cb:ea:2d:27:8b:bc:38:1b:
8d:e1:cb:aa:c5:20:c8:71:e6:82:12:ea:b8:be:9c:
eb:51:a9:27:32:bd:b0:eb:54:f0:de:1f:ea:87:ed:
fc:3a:ff:35:c6:e4:78:30:13:d4:76:da:44:d8:73:
b3:6e:93:e0:d1:5b:3d:a5:35:e4:9a:b4:0c:be:00:
ee:10:53:30:b7:8d:41:b4:c1:c4:ad:2c:28:9f:c7:
2b:63:54:a4:7d:65:11:71:e7:0a:88:82:9a:41:fd:
ac:ab:3f:c9:5e:e1:8e:f7:53:ba:aa:00:e3:8e:12:
f8:06:1f:9f:84:69:1e:3a:73:9a:da:55:5e:66:17:
00:3e:fe:95:47:e5:41:45:cf:9f:ed:9e:32:41:c3:
ee:81:c0:5d:52:e5:15:e6:d6:a7:73:97:49:d0:65:
fa:4d:b3:21:7c:56:83:30:66:3a:52:a0:17:c5:92:
31:e4:f5:a2:0c:bc:a0:4d:bc:ca:0f:bb:93:6e:f3:
92:09:8f:88:63:14:59:1d:2a:de:43:85:ba:ac:e5:
2a:6b:92:87:a3:54:4d:df:dd:6c:a9:6f:64:7c:aa:
13:6e:b6:80:4e:c9:56:ec:a4:41:29:3a:d2:13:40:
c0:5f:ac:cb:2f:44:27:91:3c:e5:bc:d0:75:62:65:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A5:88:EF:28:8A:5F:74:76:A9:03:10:D3:0D:FA:DD:93:56:E0:6B
X509v3 Authority Key Identifier:
keyid:87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2d:d1:f4:43:19:1d:3b:00:72:d1:f5:50:d5:93:e4:cc:5b:
8c:b0:fe:77:f2:4a:a3:70:3d:08:a4:84:14:70:aa:b3:0d:2a:
d1:1c:dc:ef:3a:ce:f1:ae:cc:e4:e2:90:4f:4f:e9:34:fe:34:
d2:e2:82:07:2d:1a:cf:54:cb:eb:fe:5f:6c:2a:f2:ad:92:22:
e1:c7:0c:70:4a:4d:ca:ed:ea:73:22:36:5d:19:e7:f9:40:23:
44:76:e2:b3:90:e3:90:29:1b:a5:4e:45:4c:6f:55:48:e9:06:
2c:01:ef:11:dc:09:00:09:37:63:a6:66:75:45:54:f5:84:57:
4c:13:26:94:d1:85:6a:8d:e3:73:75:ba:1b:7d:66:3c:ba:6d:
73:70:aa:28:53:1e:86:33:b2:02:83:de:5d:1e:4f:10:4d:fa:
4c:d5:35:3a:3c:0c:e4:c0:ed:a5:79:e4:af:6b:57:b1:6b:e8:
87:0b:e5:5d:51:d1:f8:d6:00:10:a6:d8:e3:78:63:d1:c1:ea:
3e:7f:e6:7c:05:36:5f:90:0f:25:74:e4:b4:05:9f:12:38:8c:
b7:ba:91:cc:74:cb:e9:60:37:94:4d:92:e3:72:f6:55:db:4c:
ee:50:c3:ce:60:8d:2c:8b:d9:12:5d:8b:4f:23:6f:d3:fd:52:
3e:66:95:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:11:48 2026 by rpki-client