
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
File: 9B87DFEBDCCDA813116988D4421B088404578168.mft (raw, json)
Hash identifier: 421PFuvFl5I+VRWg215KJLBS6XssOEzMkdPA198ZDD4=
Subject key identifier: 15:CE:C1:30:38:47:B4:7B:F7:49:92:67:B2:7B:7B:8E:55:C2:E1:B3
Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68
Certificate issuer: /CN=9B87DFEBDCCDA813116988D4421B088404578168
Certificate serial: 37AE0AE7AF1816FEDBF5EC643253FC56DC1692F5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
Manifest number: 0107
Signing time: Fri 24 Jul 2026 15:06:31 +0000
Manifest this update: Fri 24 Jul 2026 15:01:31 +0000
Manifest next update: Sat 25 Jul 2026 17:42:31 +0000
Files and hashes: 1: 9B87DFEBDCCDA813116988D4421B088404578168.crl (hash: oHKGL7CIU4jB8F3QrWtfUgePIJGzKkgzsDNTR6o8gFQ=)
2: 3232302e3233312e3139322e302f31382d3138203d3e20313334373734.roa (hash: Ptt4YLVWObBN2EDWF/pPVMNSng6g0RgCtq5fiDa8lWk=)
3: 3230332e38362e302e302f32302d3230203d3e20313334373734.roa (hash: TAnrcV/q6VsB8YFBFhEbXjskfcTX0Mha1GN6QBn3c6Q=)
4: 3232302e3233312e3132382e302f31382d3138203d3e20313334373734.roa (hash: Cph0YLpkDG2fLuVzSekkhP+HJ5DeU37Z2LF9M608YDg=)
5: 3231312e3135342e3132382e302f32302d3230203d3e20313334373734.roa (hash: 7sBR0PD3eTNaJp5A6+iXnX/3YOszhjTGDbjYWbhqZ2o=)
6: 34352e3131362e39362e302f32322d3232203d3e20313439363238.roa (hash: aWgeDjinqxghP2O9gm5Jstjm/o8V7VlFXar3hlRu/AE=)
7: 3130332e32332e3136342e302f32322d3232203d3e20313439363238.roa (hash: Q5lN8y2xoBURESf9IcASxDDCPLCsNrEs2HlfjfnnNOU=)
8: 3230332e38362e31362e302f32302d3230203d3e20313334373734.roa (hash: uMLAeYE9Fso11yhVojhjYyJDAb3WPWH1BlJh/X2DOwQ=)
9: 3231312e3135342e3134342e302f32302d3230203d3e20313334373734.roa (hash: alpjFmWgEiBbogthwEkCRvKizOOuc9cKPE88pENyGHA=)
10: 3130332e35362e3134302e302f32322d3232203d3e20313439363238.roa (hash: kQ4vmHhIhIdM+j0qKtexqNeRC3lB/ivTAG2HWe979bg=)
11: 323430303a643230303a3a2f33322d3332203d3e2030.roa (hash: iNUdmu9Gf0xgCxDEJhv4BLHbiymyu26z4nlJEpV0mo4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:ae:0a:e7:af:18:16:fe:db:f5:ec:64:32:53:fc:56:dc:16:92:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168
Validity
Not Before: Jul 24 15:01:31 2026 GMT
Not After : Jul 25 17:42:31 2026 GMT
Subject: CN=15CEC1303847B47BF7499267B27B7B8E55C2E1B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e5:4b:cc:77:bc:d6:0a:80:58:33:46:ee:b8:
1a:46:ab:04:46:87:b0:58:3a:f3:40:39:ef:aa:4b:
ac:13:d7:8f:ec:7e:34:d8:7c:70:d8:2a:77:f3:70:
09:08:e9:00:e1:10:0a:3d:55:4f:8f:7e:3b:9c:f4:
75:b6:97:a3:d7:25:70:72:72:81:cc:4d:c7:56:71:
5e:07:69:4d:18:49:bd:99:39:b4:ff:5c:a8:c6:60:
7e:12:d7:5b:3e:41:d5:9d:03:65:63:45:40:e2:0e:
05:e7:6c:f3:59:f1:7c:0e:70:8e:cb:97:3e:6c:b2:
f4:07:d1:09:c3:68:13:e8:14:c2:09:cc:6b:bd:f8:
1c:d6:fd:6c:b7:2b:34:f7:86:a5:8e:f6:af:e2:a4:
6c:95:e0:44:79:0a:03:22:1d:87:2b:4f:c1:00:f2:
4b:02:16:0b:fb:f8:86:74:89:4a:23:37:eb:fc:b0:
8e:2d:83:bb:6f:f1:9d:75:d6:29:3a:76:1a:26:91:
27:c7:f7:3b:7a:0d:0d:c3:e7:fc:70:53:3e:60:15:
76:8f:7a:3e:8c:9e:6e:4b:0b:7a:95:df:81:6a:a0:
55:f5:87:4e:c8:7c:d2:3f:b5:bf:d0:c2:5a:9d:dd:
0d:67:31:34:82:06:3f:b1:f8:f0:f4:38:0a:8f:bf:
29:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:CE:C1:30:38:47:B4:7B:F7:49:92:67:B2:7B:7B:8E:55:C2:E1:B3
X509v3 Authority Key Identifier:
keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:03:8f:df:57:59:36:39:e2:40:ec:3a:b4:ed:13:27:bd:b1:
c6:97:bb:75:15:a2:b0:cf:f3:fd:20:7e:f2:d7:4e:a2:12:59:
d9:89:f1:fc:4a:db:03:84:d6:ff:08:2d:93:c8:1a:3a:13:6e:
55:64:1d:54:66:94:7b:e2:c1:c7:46:c2:8a:96:c9:e8:84:f3:
68:f6:97:da:cb:74:d0:d7:68:d0:d5:9e:10:d9:90:a6:f1:43:
aa:c7:be:b1:d7:4f:0b:11:9b:67:b7:88:41:8b:9c:c3:54:3a:
8a:39:44:30:8c:c6:bb:74:b6:43:9b:99:db:6e:50:93:60:e5:
ad:ba:ec:b9:37:4f:9c:c1:bb:30:15:0a:ff:6b:90:a6:3f:12:
ad:6c:b3:41:50:74:31:5f:12:09:33:65:ae:bb:42:a0:60:7f:
a0:3d:8d:37:e7:5e:6c:ff:a4:7e:1f:b0:0a:24:9f:10:fd:cd:
c8:a8:ed:48:bc:0a:2c:1a:38:c4:fe:d4:fc:88:64:37:df:90:
2c:60:bb:28:1a:5d:42:a8:b1:72:ad:cc:12:e2:7a:18:7b:72:
2a:7b:5f:27:da:53:9d:5d:ac:60:7f:31:4f:7d:99:05:8c:a3:
fe:d0:ec:54:c0:54:7a:96:81:15:1c:0b:7a:2b:39:b4:d4:97:
38:b5:64:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:55:51 2026 by rpki-client