$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft File: 87B51467549FFC5A022609DBAB961975D1FBA4B3.mft (raw, json) Hash identifier: pWQG5EPRfgDC/ievZN98Vm2bMph5aElr3coaJ9ajyaA= Subject key identifier: 33:3E:3A:D7:29:1E:81:D2:94:6D:D6:FC:48:B3:95:D5:C0:4F:7E:83 Authority key identifier: 87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3 Certificate issuer: /CN=A9162E3D0001/serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3 Certificate serial: 459DBFBE395623A71C54C8C4C38B3C740DB34CF3 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft Manifest number: 0688 Signing time: Thu 24 Sep 2026 07:50:05 +0000 Manifest this update: Thu 24 Sep 2026 07:45:05 +0000 Manifest next update: Sun 27 Sep 2026 17:43:05 +0000 Files and hashes: 1: 5F03D029EEFFBD03C33647A75C2C54E9A81DD38C.cer (hash: G6gmGz0JGvm3XGbG9KIc4KxqDJjHz9X9sG7X4BSDSVE=) 2: 87B51467549FFC5A022609DBAB961975D1FBA4B3.crl (hash: 06K0rWZJLGGPX1cGZt/Oyaw10Zo+QzoSQQKa6UxIO9s=) 3: 8BBDAF863FBD0953D9A56BC29707DEEFD460943A.cer (hash: gEpZplu3X/zYELqWFf0FQe7+7lFuFNjb53OBqDd8hSU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 17:43:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:9d:bf:be:39:56:23:a7:1c:54:c8:c4:c3:8b:3c:74:0d:b3:4c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162E3D0001, serialNumber=87B51467549FFC5A022609DBAB961975D1FBA4B3 Validity Not Before: Sep 24 07:45:05 2026 GMT Not After : Sep 27 17:43:05 2026 GMT Subject: CN=333E3AD7291E81D2946DD6FC48B395D5C04F7E83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:72:01:39:00:80:2c:a6:a6:a5:ee:68:05:4e: 93:ac:fa:de:5a:16:f8:06:2c:1e:51:9b:25:1c:93: c6:00:90:bd:b1:7f:27:bf:c1:23:f8:a9:3d:8e:b9: 67:05:05:48:6c:1f:97:d2:3f:a0:48:94:95:84:ba: 3f:04:48:8e:a7:63:a7:e6:98:f0:dc:6a:73:49:7d: d7:09:5c:08:93:3b:7d:e5:40:ca:66:67:e8:51:68: 23:4e:79:f3:5f:c5:a6:b5:14:72:32:58:5c:ec:27: e3:ef:2f:fc:59:b5:f4:d4:dc:0d:00:33:62:52:00: dd:fd:2f:22:3c:10:c3:14:1f:16:12:bd:5a:49:f4: 0a:f1:43:91:26:d2:58:06:f3:d3:0d:a7:e1:c8:da: 9e:10:90:cf:aa:6e:ad:da:c0:cc:5d:bb:2d:19:0e: c6:3d:5a:33:66:af:cd:ee:da:94:53:62:38:ac:6f: 8f:d7:13:bc:4b:a0:64:81:75:5b:e2:58:06:f6:52: 51:8d:b7:cd:03:b6:d0:cc:dc:90:0c:00:de:96:9c: 92:89:c5:39:d4:14:67:5b:4a:ea:d8:cd:1f:89:de: f7:78:65:43:90:73:cd:cd:24:cb:47:fd:d0:c6:88: 23:46:b6:2e:70:e3:3a:5a:bc:c3:2b:51:0c:70:e4: 0b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3E:3A:D7:29:1E:81:D2:94:6D:D6:FC:48:B3:95:D5:C0:4F:7E:83 X509v3 Authority Key Identifier: keyid:87:B5:14:67:54:9F:FC:5A:02:26:09:DB:AB:96:19:75:D1:FB:A4:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/h7UUZ1Sf_FoCJgnbq5YZddH7pLM.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/2/87B51467549FFC5A022609DBAB961975D1FBA4B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f6:c9:0e:50:c2:b8:01:00:d2:2d:c7:2e:f4:8a:a4:14:e3: d8:18:88:4b:0e:04:e4:95:b6:97:05:7a:a3:bf:f3:e7:61:ae: d0:65:ac:de:70:58:06:9c:e2:1a:da:98:2e:0b:aa:01:2c:09: 1e:08:7c:1f:f3:00:68:d5:b6:65:aa:4b:84:48:91:49:62:f7: fd:ad:f9:cd:f2:0e:09:e6:bb:cf:67:73:55:84:12:18:91:38: 98:58:d3:3a:35:5d:58:3b:4a:e6:96:a0:7d:ff:8f:88:1a:b6: db:e5:0a:5c:97:58:dc:0e:01:b5:07:60:8e:e9:32:0d:62:ba: 35:47:af:4f:2c:0c:a2:a0:63:28:c4:0d:04:2c:69:55:c2:28: 8e:18:0a:73:db:91:aa:06:d4:21:21:fc:b1:28:b2:5b:8e:e6: 67:d2:56:fa:d4:52:ad:ae:ed:91:fb:eb:f2:8f:64:1a:70:82: 6c:92:56:aa:29:45:d1:04:d3:c0:71:47:6e:0c:43:b4:0f:e5: 1c:4a:ed:e9:ad:3d:54:80:97:28:a7:8e:13:b0:a0:ee:cc:8b: 8e:7d:b1:1b:97:f3:ee:b1:f0:28:25:7b:71:f8:ae:77:fa:1f: d9:61:a7:d1:dc:4f:8f:b1:12:68:eb:a2:70:0b:46:7b:17:fb: 00:28:77:c9 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIURZ2/vjlWI6ccVMjEw4s8dA2zTPMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNjJFM0QwMDAxMTEwLwYDVQQFEyg4N0I1MTQ2NzU0 OUZGQzVBMDIyNjA5REJBQjk2MTk3NUQxRkJBNEIzMB4XDTI2MDkyNDA3NDUwNVoX DTI2MDkyNzE3NDMwNVowMzExMC8GA1UEAxMoMzMzRTNBRDcyOTFFODFEMjk0NkRE NkZDNDhCMzk1RDVDMDRGN0U4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMtyATkAgCympqXuaAVOk6z63loW+AYsHlGbJRyTxgCQvbF/J7/BI/ipPY65 ZwUFSGwfl9I/oEiUlYS6PwRIjqdjp+aY8Nxqc0l91wlcCJM7feVAymZn6FFoI055 81/FprUUcjJYXOwn4+8v/Fm19NTcDQAzYlIA3f0vIjwQwxQfFhK9Wkn0CvFDkSbS WAbz0w2n4cjanhCQz6purdrAzF27LRkOxj1aM2avze7alFNiOKxvj9cTvEugZIF1 W+JYBvZSUY23zQO20MzckAwA3packonFOdQUZ1tK6tjNH4ne93hlQ5Bzzc0ky0f9 0MaII0a2LnDjOlq8wytRDHDkC+UCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBQzPjrX KR6B0pRt1vxIs5XVwE9+gzAfBgNVHSMEGDAWgBSHtRRnVJ/8WgImCdurlhl10fuk szAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1LzIvODdCNTE0 Njc1NDlGRkM1QTAyMjYwOURCQUI5NjE5NzVEMUZCQTRCMy5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJGRDFGRjIvaDdVVVoxU2Zf Rm9DSmduYnE1WVpkZEg3cExNLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA1NTM5MDc3NTA5 MDY3NTcxNS8yLzg3QjUxNDY3NTQ5RkZDNUEwMjI2MDlEQkFCOTYxOTc1RDFGQkE0 QjMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQBC9skOUMK4AQDSLccu9IqkFOPYGIhLDgTklbaXBXqjv/Pn Ya7QZazecFgGnOIa2pguC6oBLAkeCHwf8wBo1bZlqkuESJFJYvf9rfnN8g4J5rvP Z3NVhBIYkTiYWNM6NV1YO0rmlqB9/4+IGrbb5Qpcl1jcDgG1B2CO6TINYro1R69P LAyioGMoxA0ELGlVwiiOGApz25GqBtQhIfyxKLJbjuZn0lb61FKtru2R++vyj2Qa cIJsklaqKUXRBNPAcUduDEO0D+UcSu3prT1UgJcop44TsKDuzIuOfbEbl/PusfAo JXtx+K53+h/ZYafR3E+PsRJo66JwC0Z7F/sAKHfJ -----END CERTIFICATE-----Generated at Sat Sep 26 03:58:53 2026 by rpki-client