
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
File: 9B87DFEBDCCDA813116988D4421B088404578168.mft (raw, json)
Hash identifier: Ivx2qE6fUmPglSzb5ivG4kAoyw2NrKFNHOleV/bw1Yk=
Subject key identifier: 42:D2:C5:49:94:7E:60:CE:ED:A3:DE:18:0C:D9:B0:A2:CE:30:A2:D0
Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68
Certificate issuer: /CN=9B87DFEBDCCDA813116988D4421B088404578168
Certificate serial: 7B8AAD08B349B4E8E1379D4F555BA93BACA0F715
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
Manifest number: D0
Signing time: Sat 13 Jun 2026 10:51:45 +0000
Manifest this update: Sat 13 Jun 2026 10:46:45 +0000
Manifest next update: Sun 14 Jun 2026 11:49:45 +0000
Files and hashes: 1: 34352e3131362e39362e302f32322d3232203d3e20313439363238.roa (hash: aWgeDjinqxghP2O9gm5Jstjm/o8V7VlFXar3hlRu/AE=)
2: 9B87DFEBDCCDA813116988D4421B088404578168.crl (hash: eDubjDTNGulxQTpUKGYVN0Sa6QpWsSJHOmD9JjshNhk=)
3: 3232302e3233312e3139322e302f31382d3138203d3e20313334373734.roa (hash: Ptt4YLVWObBN2EDWF/pPVMNSng6g0RgCtq5fiDa8lWk=)
4: 3231312e3135342e3134342e302f32302d3230203d3e20313334373734.roa (hash: alpjFmWgEiBbogthwEkCRvKizOOuc9cKPE88pENyGHA=)
5: 3130332e35362e3134302e302f32322d3232203d3e20313439363238.roa (hash: kQ4vmHhIhIdM+j0qKtexqNeRC3lB/ivTAG2HWe979bg=)
6: 3130332e32332e3136342e302f32322d3232203d3e20313439363238.roa (hash: Q5lN8y2xoBURESf9IcASxDDCPLCsNrEs2HlfjfnnNOU=)
7: 3231312e3135342e3132382e302f32302d3230203d3e20313334373734.roa (hash: 7sBR0PD3eTNaJp5A6+iXnX/3YOszhjTGDbjYWbhqZ2o=)
8: 3230332e38362e31362e302f32302d3230203d3e20313334373734.roa (hash: uMLAeYE9Fso11yhVojhjYyJDAb3WPWH1BlJh/X2DOwQ=)
9: 3232302e3233312e3132382e302f31382d3138203d3e20313334373734.roa (hash: Cph0YLpkDG2fLuVzSekkhP+HJ5DeU37Z2LF9M608YDg=)
10: 323430303a643230303a3a2f33322d3332203d3e2030.roa (hash: iNUdmu9Gf0xgCxDEJhv4BLHbiymyu26z4nlJEpV0mo4=)
11: 3230332e38362e302e302f32302d3230203d3e20313334373734.roa (hash: TAnrcV/q6VsB8YFBFhEbXjskfcTX0Mha1GN6QBn3c6Q=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:8a:ad:08:b3:49:b4:e8:e1:37:9d:4f:55:5b:a9:3b:ac:a0:f7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168
Validity
Not Before: Jun 13 10:46:45 2026 GMT
Not After : Jun 14 11:49:45 2026 GMT
Subject: CN=42D2C549947E60CEEDA3DE180CD9B0A2CE30A2D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:9d:77:2d:91:3f:a1:85:6c:54:9e:b5:29:
52:a2:cd:8d:af:9c:a3:6e:61:e6:e4:f1:83:46:bb:
b0:3d:22:79:3d:bf:8a:b4:f5:0e:83:e6:67:2b:cb:
a3:6d:74:33:09:35:d7:bf:2f:a0:b4:22:2b:3b:bc:
88:c0:af:b0:c9:7e:3e:0f:57:69:f4:82:58:c1:c7:
a6:07:1f:dd:c8:92:3c:50:ba:77:03:2e:92:7b:95:
c7:0a:84:d1:bc:f4:58:fc:f2:fc:29:0d:19:73:aa:
55:d3:7d:04:dd:db:7a:e6:0e:16:05:db:24:b1:e4:
5a:0a:4b:87:11:7e:35:b6:1b:93:49:5e:33:0d:5a:
52:57:d6:0a:b0:91:41:12:03:a1:5f:4c:42:c0:d6:
e1:1f:0e:ef:69:e6:50:06:93:f4:e3:4f:f9:4d:cb:
bf:8c:2d:f4:19:64:54:d2:35:3d:01:13:d7:85:a4:
81:d5:09:08:41:af:2d:af:b4:30:9d:2d:36:ef:7f:
8c:f7:89:33:12:72:a1:b4:93:91:b5:86:74:d0:af:
ee:90:e7:57:9a:02:c8:ea:1d:07:34:03:43:db:97:
54:f2:ff:26:02:56:8f:89:d1:65:13:2f:4e:8e:f2:
13:a5:74:a4:e2:10:7d:bf:09:64:12:4a:e0:ac:d1:
11:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D2:C5:49:94:7E:60:CE:ED:A3:DE:18:0C:D9:B0:A2:CE:30:A2:D0
X509v3 Authority Key Identifier:
keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f3:5d:56:2d:84:15:b4:7a:94:4b:70:77:47:d2:a7:63:4f:
2e:ae:c1:9f:bb:49:63:f2:5c:86:4d:93:7c:42:66:5c:4f:3f:
c5:b6:88:5d:94:62:e2:db:30:ba:d9:35:48:d7:41:61:ce:6c:
24:7b:5f:1a:ae:ce:c6:ae:20:38:8a:c6:51:c0:73:60:16:b5:
a3:34:a1:3f:38:27:d9:4f:d9:0b:a3:fd:57:55:c1:90:f2:5c:
2f:c2:e7:4c:f1:28:88:bd:06:58:4f:0f:16:13:69:3b:90:70:
90:67:b3:23:f2:92:49:fb:12:9a:19:37:53:c0:24:01:3b:29:
34:d6:f0:5e:45:8f:1a:31:bd:62:9b:08:9e:47:95:97:d3:76:
8e:68:2c:a9:25:b6:8d:2c:10:b9:41:61:e4:fe:b7:84:56:b0:
85:95:ae:6a:18:d9:b9:f0:c6:23:98:24:01:f3:1e:fe:55:2f:
25:2e:7d:5b:8a:67:51:07:c8:b2:80:f9:66:39:b1:9f:ae:18:
53:49:15:4c:65:cf:85:a2:44:eb:42:ec:7a:5c:ef:49:1e:a2:
36:c3:9c:43:ca:a8:1a:61:e8:93:57:21:a3:a2:84:58:55:22:
a7:48:64:d8:ce:cf:ac:83:eb:ab:e2:ee:a4:95:cb:46:fa:10:
cd:e4:b3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:17:11 2026 by rpki-client