
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
File: 9B87DFEBDCCDA813116988D4421B088404578168.mft (raw, json)
Hash identifier: ent6SxXxKruIOEWthA4F5xh8GVal1SLaqzg4VJ/yj9s=
Subject key identifier: 05:7D:7C:BE:8D:26:9C:73:7B:36:19:A2:E2:F5:27:BF:BB:2A:99:66
Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68
Certificate issuer: /CN=9B87DFEBDCCDA813116988D4421B088404578168
Certificate serial: 40E335B0C3D3FF18857430F9C61AB3ED98A272F2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
Manifest number: 76
Signing time: Thu 16 Apr 2026 15:39:32 +0000
Manifest this update: Thu 16 Apr 2026 15:34:32 +0000
Manifest next update: Fri 17 Apr 2026 17:23:32 +0000
Files and hashes: 1: 3231312e3135342e3132382e302f32312d3231203d3e20313334373734.roa (hash: LtEKhx6SrMTuU+BHgQuF5pgXy7i9/kGQm1n3exdPLbc=)
2: 3232302e3233312e3132382e302f31392d3139203d3e20313334373734.roa (hash: KB4kEp+hbkXe+MaaY+P4anNDYi18HHg4smAZf4IaeH8=)
3: 34352e3131362e39362e302f32322d3232203d3e20313439363238.roa (hash: aWgeDjinqxghP2O9gm5Jstjm/o8V7VlFXar3hlRu/AE=)
4: 9B87DFEBDCCDA813116988D4421B088404578168.crl (hash: jteXotn60RpmiAFm7/ujOzJDjuXfklUAt4ZZ0KHB0TE=)
5: 3230332e38362e32342e302f32312d3231203d3e20313334373734.roa (hash: Gx0RF4MR/MTf1oA626SK7F8XMwdk+bgKPzRfU9BS5w0=)
6: 3232302e3233312e3136302e302f31392d3139203d3e20313334373734.roa (hash: F0++/gnpODO93cYKFA0Ho+k/V2Io+T3tARmtdXeIkp4=)
7: 3130332e32332e3136342e302f32322d3232203d3e20313439363238.roa (hash: Q5lN8y2xoBURESf9IcASxDDCPLCsNrEs2HlfjfnnNOU=)
8: 3231312e3135342e3134342e302f32312d3231203d3e20313334373734.roa (hash: b00SGrqNCrSgOMSqMzZMU24OV2/fsLAHoVpDiQIJ4No=)
9: 3130332e35362e3134302e302f32322d3232203d3e20313439363238.roa (hash: kQ4vmHhIhIdM+j0qKtexqNeRC3lB/ivTAG2HWe979bg=)
10: 3232302e3233312e3139322e302f31392d3139203d3e20313334373734.roa (hash: l8wLZP9XNh0NTjXqX+FDVXEdmYTncKNZvcGwf4xorA8=)
11: 3230332e38362e31362e302f32312d3231203d3e20313334373734.roa (hash: hBn9HwND7ivXhR1g5I22n8zaouOC7UhUVQgsZUZehuc=)
12: 3231312e3135342e3135322e302f32312d3231203d3e20313334373734.roa (hash: byAn39COUxaC7Cs5bPgXOGF7jH2c/8jROlnudnhtFIE=)
13: 3231312e3135342e3133362e302f32312d3231203d3e20313334373734.roa (hash: OgdyQ/JS8xXM/RF+AvHWqKuVyR9gZ3jtQSciVUtvCjU=)
14: 3232302e3233312e3232342e302f31392d3139203d3e20313334373734.roa (hash: v8/BtEjw5U99UDjVrIZbkxjssWK2itEHBVjELvk8Z6Y=)
15: 3230332e38362e302e302f32312d3231203d3e20313334373734.roa (hash: 17szcJSTyT4O6wcgo8uI2gBQb3vjkv4WVEluy+xPuUc=)
16: 3230332e38362e382e302f32312d3231203d3e20313334373734.roa (hash: A144V149IKn6Qi4/x1M+8pUQxQS7O0ZGJx1jG+EHdHk=)
17: 323430303a643230303a3a2f33322d3332203d3e2030.roa (hash: iNUdmu9Gf0xgCxDEJhv4BLHbiymyu26z4nlJEpV0mo4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 17:23:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:e3:35:b0:c3:d3:ff:18:85:74:30:f9:c6:1a:b3:ed:98:a2:72:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168
Validity
Not Before: Apr 16 15:34:32 2026 GMT
Not After : Apr 17 17:23:32 2026 GMT
Subject: CN=057D7CBE8D269C737B3619A2E2F527BFBB2A9966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e0:ca:11:96:f4:fe:04:ca:f5:54:ec:9a:60:
46:2c:3f:95:c7:a1:86:f8:56:f0:f7:7a:2c:45:0f:
35:64:13:18:00:69:fb:64:a8:94:b1:2a:84:77:b1:
19:4c:eb:d7:c1:83:0c:58:bf:40:e3:a5:2c:c9:13:
9d:89:50:3b:c5:5d:3c:f9:e1:16:75:c1:54:b9:4f:
3f:dd:fa:94:2a:e7:c3:f2:5e:95:35:88:dd:2b:99:
49:bf:22:65:a6:f6:26:2b:de:73:c5:e9:56:17:d9:
d9:24:58:dc:18:64:41:7c:8d:1a:03:f8:ab:fb:c7:
21:2b:f7:72:5d:b8:67:75:7f:58:81:9d:c3:fe:fc:
7d:8b:01:5d:7c:23:2c:7d:f4:6e:b3:f0:be:74:43:
40:73:ac:0b:39:7d:98:dd:d6:44:e7:02:2c:8c:16:
dc:c8:fe:5d:8a:07:56:60:0a:23:be:0d:5c:a6:75:
02:c5:c8:89:53:2b:d8:d0:5b:52:1f:5f:bc:31:51:
02:88:37:b4:1c:35:19:bc:25:47:72:c1:2f:a6:8e:
0f:cc:0f:89:13:d4:1b:b1:b5:bb:5f:4d:00:68:ab:
37:73:53:b5:df:a7:48:63:5d:7e:41:67:11:c9:40:
b9:6b:31:fd:08:59:45:fd:08:5d:bc:c7:37:78:96:
4a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7D:7C:BE:8D:26:9C:73:7B:36:19:A2:E2:F5:27:BF:BB:2A:99:66
X509v3 Authority Key Identifier:
keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:60:8d:64:a9:f3:af:ab:6d:44:bd:fe:3b:2e:c6:44:cc:f7:
5c:d6:eb:5c:a0:9c:d6:1b:a8:a8:03:e2:c8:d3:8f:0e:47:a9:
67:e5:93:cd:94:4a:f4:4a:a3:ee:4b:01:c9:84:e7:4d:ad:3e:
99:62:ff:c4:26:78:97:a5:33:cc:0b:1d:a6:98:86:04:b3:30:
5e:51:01:55:07:d4:64:ef:2f:77:89:c1:67:39:99:a8:35:28:
91:76:e6:7e:68:ec:e9:f9:3d:93:02:83:06:c4:1a:9f:9d:1a:
b0:8e:40:cf:b1:e6:12:ab:9d:57:c8:3b:d2:bc:c1:48:83:08:
4b:d1:e0:02:c3:81:4b:34:cf:69:bb:9b:f4:e3:20:f0:a7:34:
60:26:d9:32:c4:31:2e:66:30:eb:14:25:d9:f1:36:4d:31:2b:
1d:0c:23:99:50:ab:c9:04:bf:0e:22:68:2a:b1:b4:88:29:45:
1b:8d:b9:ed:ee:82:7e:78:dc:4a:d8:36:c6:1a:83:ae:23:8f:
fe:b6:c9:ed:22:c0:2b:da:45:fd:3f:43:08:02:c9:2f:c4:8e:
ff:06:b4:0a:9f:cc:d7:ad:49:f0:6c:f0:dd:d8:62:89:af:33:
c5:e0:4e:a5:bc:91:c8:a2:3f:c3:15:60:cf:b0:06:b9:c3:56:
0d:a9:8b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:56:34 2026 by rpki-client