$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft File: 87B51467549FFC5A022609DBAB961975D1FBA4B3.mft (raw, json) Hash identifier: urntUCjt9z8gAhaL+0vOGhWhNHBHceQ+5lhd4irmkDI= Subject key identifier: 2B:A7:73:34:6F:D4:28:C6:6A:F0:5C:7D:85:39:0A:F9:55:E6:7B:EA Authority key identifier: 87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3 Certificate issuer: /CN=A9162E3D0001/serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3 Certificate serial: 315FF53B60F4541F89C6A7087024F6052209FC76 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft Manifest number: 0349 Signing time: Tue 12 May 2026 09:40:01 +0000 Manifest this update: Tue 12 May 2026 09:35:01 +0000 Manifest next update: Wed 13 May 2026 12:40:01 +0000 Files and hashes: 1: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer (hash: gEpZplu3X/zYELqWFf0FQe7+7lFuFNjb53OBqDd8hSU=) 2: 87B51467549FFC5A022609DBAB961975D1FBA4B3.crl (hash: PJqFrXaxVmXRRrJZK14f2JU+p1bJufoCmlKPjGC2s54=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 12:40:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:5f:f5:3b:60:f4:54:1f:89:c6:a7:08:70:24:f6:05:22:09:fc:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3 Validity Not Before: May 12 09:35:01 2026 GMT Not After : May 13 12:40:01 2026 GMT Subject: CN=2BA773346FD428C66AF05C7D85390AF955E67BEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:10:1e:85:d3:91:c0:25:04:98:57:f0:ad:47: e3:33:46:3e:90:62:58:dc:4a:8d:fc:96:28:d1:60: c1:67:53:bc:a0:f9:02:ab:fb:39:b4:dc:ee:56:b6: 6c:34:51:b2:40:cf:cc:62:74:12:01:e2:c8:e2:20: 66:19:c6:54:b4:29:06:9f:61:c3:ec:96:34:a7:cb: 53:42:25:ac:e1:db:1f:0a:b6:59:f1:24:30:08:04: da:64:08:46:dd:02:93:27:ee:05:08:4e:50:67:26: ea:2c:68:1b:15:30:c5:58:d3:67:56:02:60:e6:37: 3e:de:52:3e:d3:e1:fb:ca:15:7b:2a:27:b3:22:18: 30:86:2e:a7:87:58:ba:8e:58:cc:d9:6b:4f:33:e9: 37:32:f8:fe:f0:68:f4:31:93:03:ae:09:49:6b:5e: fe:e4:c3:a7:f1:c2:e5:1a:9f:be:45:35:92:d7:d1: 2a:59:b0:76:82:63:21:f0:eb:08:51:db:f9:2d:e5: 2c:61:5b:53:40:58:bc:19:d2:3b:0f:4d:34:ea:b6: 6e:c0:48:79:53:39:6c:e2:5a:99:0e:8a:17:9a:d9: 48:4e:ae:14:cb:6b:35:94:6a:60:b1:dc:af:6d:e4: 9a:50:65:09:a7:38:63:23:dc:b0:5b:8a:14:cd:69: 6b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A7:73:34:6F:D4:28:C6:6A:F0:5C:7D:85:39:0A:F9:55:E6:7B:EA X509v3 Authority Key Identifier: keyid:87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:17:25:9d:52:df:bb:c5:96:1c:15:64:3b:03:d4:29:d6:c2: bf:c0:96:1b:3f:39:17:8b:95:80:ff:cb:29:33:31:40:de:3f: dc:ba:62:3f:a1:a4:54:52:07:6d:58:16:ef:9b:77:de:17:f0: 33:39:83:8c:8a:96:72:e2:c5:23:fe:9b:2a:84:ee:c0:19:f2: ab:7d:8e:b4:9b:a8:16:25:e1:48:ea:c4:e2:7a:3e:48:0a:a8: 2a:d0:94:97:2d:7b:a9:e0:19:89:27:cd:71:37:69:b8:8b:42: 71:c5:9e:c0:e6:cc:5d:55:62:81:fb:a5:94:51:4e:42:1f:64: 9f:bf:be:24:c6:b6:e6:d6:99:80:06:35:5d:94:71:53:7c:b0: 4d:17:70:19:a2:f6:33:31:f0:c5:57:a4:31:b8:da:63:17:f4: 8d:c8:90:d5:21:f8:25:ec:01:e3:6e:65:22:ec:2a:54:d0:d8: 73:20:41:cd:08:91:83:0d:1d:33:42:f2:a6:bc:94:d0:e6:75: 31:43:cd:23:b8:6a:b5:06:d4:12:5f:c2:7b:fe:30:e6:de:24: 07:26:97:c3:ac:6a:61:6a:76:94:ee:aa:e2:84:56:4f:7c:ac: 2d:82:f0:32:54:7f:4e:47:bd:67:1f:16:d5:e5:04:be:30:2e: be:bb:90:11 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUMV/1O2D0VB+JxqcIcCT2BSIJ/HYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyg4N0I1MTQ2NzU0 OUZGQzVBMDIyNjA5REJBQjk2MTk3NUQxRkJBNEIzMB4XDTI2MDUxMjA5MzUwMVoX DTI2MDUxMzEyNDAwMVowMzExMC8GA1UEAxMoMkJBNzczMzQ2RkQ0MjhDNjZBRjA1 QzdEODUzOTBBRjk1NUU2N0JFQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALAQHoXTkcAlBJhX8K1H4zNGPpBiWNxKjfyWKNFgwWdTvKD5Aqv7ObTc7la2 bDRRskDPzGJ0EgHiyOIgZhnGVLQpBp9hw+yWNKfLU0IlrOHbHwq2WfEkMAgE2mQI Rt0CkyfuBQhOUGcm6ixoGxUwxVjTZ1YCYOY3Pt5SPtPh+8oVeyonsyIYMIYup4dY uo5YzNlrTzPpNzL4/vBo9DGTA64JSWte/uTDp/HC5RqfvkU1ktfRKlmwdoJjIfDr CFHb+S3lLGFbU0BYvBnSOw9NNOq2bsBIeVM5bOJamQ6KF5rZSE6uFMtrNZRqYLHc r23kmlBlCac4YyPcsFuKFM1pa7sCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBQrp3M0 b9QoxmrwXH2FOQr5VeZ76jAfBgNVHSMEGDAWgBSHtRRnVJ/8WgImCdurlhl10fuk szAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1LzIvODdCNTE0 Njc1NDlGRkM1QTAyMjYwOURCQUI5NjE5NzVEMUZCQTRCMy5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIvaDdVVVoxU2Zf Rm9DSmduYnE1WVpkZEg3cExNLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA1NTM5MDc3NTA5 MDY3NTcxNS8yLzg3QjUxNDY3NTQ5RkZDNUEwMjI2MDlEQkFCOTYxOTc1RDFGQkE0 QjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQAUFyWdUt+7xZYcFWQ7A9Qp1sK/wJYbPzkXi5WA/8spMzFA 3j/cumI/oaRUUgdtWBbvm3feF/AzOYOMipZy4sUj/psqhO7AGfKrfY60m6gWJeFI 6sTiej5ICqgq0JSXLXup4BmJJ81xN2m4i0JxxZ7A5sxdVWKB+6WUUU5CH2Sfv74k xrbm1pmABjVdlHFTfLBNF3AZovYzMfDFV6QxuNpjF/SNyJDVIfgl7AHjbmUi7CpU 0NhzIEHNCJGDDR0zQvKmvJTQ5nUxQ80juGq1BtQSX8J7/jDm3iQHJpfDrGphanaU 7qrihFZPfKwtgvAyVH9OR71nHxbV5QS+MC6+u5AR -----END CERTIFICATE-----Generated at Wed May 13 05:20:41 2026 by rpki-client