$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft File: 9B87DFEBDCCDA813116988D4421B088404578168.mft (raw, json) Hash identifier: tj8SZzi8z/S7q1Q1dcSNJvgAl1gst0RGkvRUN+MXsS0= Subject key identifier: 71:61:B4:62:24:3E:9A:C3:68:3C:F8:B0:49:2B:4D:CC:50:9D:97:0D Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 Certificate issuer: /CN=9B87DFEBDCCDA813116988D4421B088404578168 Certificate serial: 368C5C19DA21E3AA04BF35CA777CF196A727A22D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft Manifest number: A7 Signing time: Wed 13 May 2026 14:21:05 +0000 Manifest this update: Wed 13 May 2026 14:16:05 +0000 Manifest next update: Thu 14 May 2026 16:08:05 +0000 Files and hashes: 1: 9B87DFEBDCCDA813116988D4421B088404578168.crl (hash: 9s72iPQWqHtsoTfhwT8Jr3jIShURhOPmE8f/7d9g0fI=) 2: 3232302e3233312e3132382e302f31382d3138203d3e20313334373734.roa (hash: Cph0YLpkDG2fLuVzSekkhP+HJ5DeU37Z2LF9M608YDg=) 3: 3130332e35362e3134302e302f32322d3232203d3e20313439363238.roa (hash: kQ4vmHhIhIdM+j0qKtexqNeRC3lB/ivTAG2HWe979bg=) 4: 3230332e38362e31362e302f32302d3230203d3e20313334373734.roa (hash: uMLAeYE9Fso11yhVojhjYyJDAb3WPWH1BlJh/X2DOwQ=) 5: 3231312e3135342e3132382e302f32302d3230203d3e20313334373734.roa (hash: 7sBR0PD3eTNaJp5A6+iXnX/3YOszhjTGDbjYWbhqZ2o=) 6: 323430303a643230303a3a2f33322d3332203d3e2030.roa (hash: iNUdmu9Gf0xgCxDEJhv4BLHbiymyu26z4nlJEpV0mo4=) 7: 3231312e3135342e3134342e302f32302d3230203d3e20313334373734.roa (hash: alpjFmWgEiBbogthwEkCRvKizOOuc9cKPE88pENyGHA=) 8: 34352e3131362e39362e302f32322d3232203d3e20313439363238.roa (hash: aWgeDjinqxghP2O9gm5Jstjm/o8V7VlFXar3hlRu/AE=) 9: 3130332e32332e3136342e302f32322d3232203d3e20313439363238.roa (hash: Q5lN8y2xoBURESf9IcASxDDCPLCsNrEs2HlfjfnnNOU=) 10: 3232302e3233312e3139322e302f31382d3138203d3e20313334373734.roa (hash: Ptt4YLVWObBN2EDWF/pPVMNSng6g0RgCtq5fiDa8lWk=) 11: 3230332e38362e302e302f32302d3230203d3e20313334373734.roa (hash: TAnrcV/q6VsB8YFBFhEbXjskfcTX0Mha1GN6QBn3c6Q=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:8c:5c:19:da:21:e3:aa:04:bf:35:ca:77:7c:f1:96:a7:27:a2:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168 Validity Not Before: May 13 14:16:05 2026 GMT Not After : May 14 16:08:05 2026 GMT Subject: CN=7161B462243E9AC3683CF8B0492B4DCC509D970D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cc:22:16:1d:c0:6c:e6:98:68:7c:39:80:ef: 8c:1c:07:23:38:c5:fb:be:1d:3c:c8:51:79:3a:ed: 2a:01:49:51:6e:ea:0a:2f:50:b9:95:5e:52:a4:ba: ba:19:94:8a:88:b6:8c:78:74:01:59:58:16:e4:a9: 6f:ea:b4:15:6e:95:f6:55:71:97:78:b5:ed:a0:10: 55:30:53:17:3b:51:a5:c9:1e:35:03:3d:9f:4f:0a: 6e:38:59:de:5f:52:10:0b:88:77:17:9f:ef:43:8b: 4e:79:e9:a7:52:f0:d1:fc:5c:0b:10:4e:e0:86:d1: 2b:27:a5:ca:ff:6d:34:a5:bb:87:bc:8f:19:20:be: 49:68:94:0a:4e:58:4a:27:32:52:d8:bf:22:2e:5e: f5:17:91:c1:d4:be:8a:6e:1f:d5:77:e9:27:21:be: c8:4b:d1:3e:19:26:00:62:59:4f:19:11:89:1d:dd: 19:d7:f1:b1:c5:08:f9:b6:ac:e9:19:c9:11:9f:dd: f7:98:25:47:52:44:74:5e:21:be:4d:6f:3d:e3:de: 97:ba:44:a8:cc:47:bc:6f:02:b2:cd:a2:87:c9:b6: c6:88:32:3d:be:e7:52:9f:53:f7:84:30:84:8e:ef: a6:bf:64:fe:46:ba:61:e4:49:7f:fb:e9:b6:9a:35: d6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:61:B4:62:24:3E:9A:C3:68:3C:F8:B0:49:2B:4D:CC:50:9D:97:0D X509v3 Authority Key Identifier: keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:bd:50:89:82:41:b5:14:79:be:c5:d4:2f:85:c1:b2:44:07: f9:19:1a:53:a0:f4:14:9e:02:1b:86:c1:2a:7d:cb:18:08:cd: e5:fc:1e:21:93:85:cc:29:b5:15:2e:78:3a:98:27:d3:7b:21: fc:54:5c:6d:01:80:29:36:69:35:5b:75:f0:51:6f:62:17:5d: 1d:c1:aa:a1:91:ee:dc:4f:06:6a:db:17:44:78:94:0c:7e:3c: 71:47:20:f6:3e:ce:a4:bd:06:82:f4:d4:5e:31:50:de:ff:fb: 03:73:6a:4d:ed:82:70:ff:1b:db:7d:98:0d:08:e7:76:04:70: 1d:f5:4f:2d:c4:aa:66:f7:3c:57:50:61:a4:90:6a:cd:cd:3e: 68:f9:64:16:dc:81:73:53:2d:78:6f:09:3f:5e:72:00:45:58: ac:10:2e:80:f2:90:a6:9b:78:d6:0f:c6:00:50:76:17:86:72: 4a:f8:44:a8:88:ec:51:11:8a:78:75:4e:12:eb:8f:54:1a:ff: d4:0b:c2:35:36:ac:8c:a9:7a:a7:9e:f7:e1:60:8b:9e:8d:94: 2d:5c:b3:03:fb:5e:10:29:2e:7a:ae:40:cf:76:e0:b6:6e:54: 43:e7:78:77:1c:16:28:55:ef:d6:00:02:ab:27:ac:3d:07:ae: 7c:54:57:3d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNoxcGdoh46oEvzXKd3zxlqcnoi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQw NDU3ODE2ODAeFw0yNjA1MTMxNDE2MDVaFw0yNjA1MTQxNjA4MDVaMDMxMTAvBgNV BAMTKDcxNjFCNDYyMjQzRTlBQzM2ODNDRjhCMDQ5MkI0RENDNTA5RDk3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPzCIWHcBs5phofDmA74wcByM4 xfu+HTzIUXk67SoBSVFu6govULmVXlKkuroZlIqItox4dAFZWBbkqW/qtBVulfZV cZd4te2gEFUwUxc7UaXJHjUDPZ9PCm44Wd5fUhALiHcXn+9Di0556adS8NH8XAsQ TuCG0Ssnpcr/bTSlu4e8jxkgvklolApOWEonMlLYvyIuXvUXkcHUvopuH9V36Sch vshL0T4ZJgBiWU8ZEYkd3RnX8bHFCPm2rOkZyRGf3feYJUdSRHReIb5Nbz3j3pe6 RKjMR7xvArLNoofJtsaIMj2+51KfU/eEMISO76a/ZP5GumHkSX/76baaNdbBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcWG0YiQ+msNoPPiwSStNzFCdlw0wHwYDVR0j BBgwFoAUm4ff69zNqBMRaYjUQhsIhARXgWgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDc0OTk1My8wLzlCODdERkVCRENDREE4MTMxMTY5ODhENDQyMUIw ODg0MDQ1NzgxNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQwNDU3ODE2OC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ3NDk5NTMvMC85Qjg3REZFQkRDQ0RB ODEzMTE2OTg4RDQ0MjFCMDg4NDA0NTc4MTY4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo71QiYJBtRR5 vsXUL4XBskQH+RkaU6D0FJ4CG4bBKn3LGAjN5fweIZOFzCm1FS54Opgn03sh/FRc bQGAKTZpNVt18FFvYhddHcGqoZHu3E8GatsXRHiUDH48cUcg9j7OpL0GgvTUXjFQ 3v/7A3NqTe2CcP8b232YDQjndgRwHfVPLcSqZvc8V1BhpJBqzc0+aPlkFtyBc1Mt eG8JP15yAEVYrBAugPKQppt41g/GAFB2F4ZySvhEqIjsURGKeHVOEuuPVBr/1AvC NTasjKl6p5734WCLno2ULVyzA/teECkueq5Az3bgtm5UQ+d4dxwWKFXv1gACqyes PQeufFRXPQ== -----END CERTIFICATE-----Generated at Wed May 13 18:02:59 2026 by rpki-client