
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
File: 4D87AFCA5675517956358C896C21C3E70D906F20.mft (raw, json)
Hash identifier: T/cKRL4/v9nTVSAE26I+1x7BU3O6v6UAb7p/QT+inUA=
Subject key identifier: 90:F8:59:9B:61:29:D8:6B:DD:19:7A:E2:5A:55:E4:C8:55:DD:84:28
Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20
Certificate serial: 4C2DA871708A5622AC8A934CB19F69C505C26FB8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
Manifest number: 05
Signing time: Wed 13 May 2026 10:27:49 +0000
Manifest this update: Wed 13 May 2026 10:22:49 +0000
Manifest next update: Thu 14 May 2026 11:54:49 +0000
Files and hashes: 1: 3130332e3230322e3130382e302f32322d3232203d3e2034383131.roa (hash: 99Ry7HT1QD1ddvmqr/pOVm0YS+Uz5M8rqKjTjCpK16g=)
2: 3130332e3230322e3132302e302f32322d3232203d3e203137363231.roa (hash: /PgaPba1/7Kbi7BZ/3tFqF9WntWkEN70FFd0MzHegfI=)
3: 3130332e3230322e302e302f32322d3232203d3e2034383131.roa (hash: gzGpKkI41HE4+LfhxQ42A3QIORfsdRhP8WQuUpuxEQ0=)
4: 3130332e3230322e3133322e302f32322d3232203d3e2034383131.roa (hash: i2GQTzD/r37Pkjh8eYhP7LZufWS37iUfbhHS5vxj66U=)
5: 3130332e3230302e3134302e302f32322d3232203d3e2034383131.roa (hash: 20g6Nilu8KnX264fqbWIaWkHaVOsxzdJGJhzfhhABrQ=)
6: 3130332e3230322e3132382e302f32322d3232203d3e203137363231.roa (hash: emjzEoltVL2v+HKfgaEjTIlHt237e8iXKn9dvMm5chs=)
7: 3130332e3230322e32342e302f32322d3232203d3e2034383131.roa (hash: DV8srMBKP6UnzTFB2ahepGgcKFGhaovbXff5zj2STPs=)
8: 3130332e3230322e3130302e302f32322d3232203d3e203137363231.roa (hash: rUJc1bp7vXajO3vcGRihzH5bye27cAm4pH6dQ64JXSk=)
9: 3130332e3230322e32382e302f32322d3232203d3e2034383131.roa (hash: +lMSDGDMfRIjBIYPN67K1P4owZcKyLM0emj6giSnMb4=)
10: 3130332e3230322e342e302f32322d3232203d3e2034383131.roa (hash: kdFCVS6BehAtO9+QwAS9iGM9RMenAh658ShM/MLfRFI=)
11: 3130332e3230302e3133362e302f32322d3232203d3e2034383131.roa (hash: 9nf5t96V1FGU8gqJjKRhc0VtbAR198i06rRtj+5dZK4=)
12: 3130332e3230322e3134302e302f32322d3232203d3e2034383131.roa (hash: tm/Tyiew+/GTxJT2ADs0GYkejYwmY5dqhhfo6HFBkGw=)
13: 3130332e3230322e34342e302f32322d3232203d3e2034383131.roa (hash: z5oQ3PBg3PkHUSshTm66AoBX3RwM0K0gbO5xj/D+dNo=)
14: 3130332e3230322e3132342e302f32322d3232203d3e2034383131.roa (hash: Ybi8h9aFyr2B65e3iBWcRUKXoKZrcwly52KFFVwXeH8=)
15: 3130312e35302e31322e302f32322d3232203d3e203234353437.roa (hash: CXps3HnRLUirgIdTYe1EiLvTT7leqdJSwfOqQxuzuOs=)
16: 3130332e3230322e33322e302f32322d3232203d3e2034383131.roa (hash: IulUFjp/z18PIa7fZirUjpITSJke+7fBDITEm4XpcQk=)
17: 3130332e3230322e3131322e302f32322d3232203d3e2034383131.roa (hash: v5tS5JZZ0sAPZxL+D0C1/AP3i6cGuCUnF4s32jXfyg8=)
18: 3130332e3230302e3134342e302f32322d3232203d3e2034383131.roa (hash: 458SRKnCcFqsVHolXv5EsG+PqGHpQf3LKUqZNqLHr9U=)
19: 3130332e3230322e3134342e302f32322d3232203d3e203633363139.roa (hash: jBZgWDfIwJjaZlJv+p/TMqJtLpT/q14lH1GDCCgYs3M=)
20: 3130312e35302e382e302f32322d3232203d3e203234353437.roa (hash: HPw6vDNN2A8sOrnde1vYo2QWS0eKdVKRsCzRnb7VHmM=)
21: 3130332e3230322e3134342e302f32322d3232203d3e203137363231.roa (hash: xQ0ZcOpvNZCwLxa+Y3tYk1KLjpbyNFIC1PH7fl9f3j8=)
22: 3130332e3230322e32302e302f32322d3232203d3e2034383131.roa (hash: vk1+bcLMpCEjWonM2nQR2AoZ8TZ6iehzozqYpKvAmIU=)
23: 3130332e3230322e3134302e302f32322d3232203d3e203137363231.roa (hash: tCBpwQJGrxBvuG7R4XumtibZtqn8X58yZGJxvXWy2Wo=)
24: 3130332e3230322e3130342e302f32322d3232203d3e2034383131.roa (hash: HCkhAB+Xf4if1oKChj28vsDvuAKDesJbyNsQPj+OZRw=)
25: 3130332e3230322e31362e302f32322d3232203d3e2034383131.roa (hash: RXw4AL2czH5XMJNGeTPG7Epky6HLsi8VJs3SrP3UPD4=)
26: 3130332e3230322e3133362e302f32322d3232203d3e203137363231.roa (hash: rxdRNY+tzarLotvVeNqPCD1BB+pbFmhIYZ+EWnJDbz0=)
27: 3130332e3230322e3132302e302f32322d3232203d3e2034383131.roa (hash: t+0kFLiobHUWWliIj8mMCAKjvn9Lu5qg82iGrH3pY98=)
28: 3130332e3230302e3134382e302f32322d3232203d3e2034383131.roa (hash: InTOOdjEW7lOP4AuxhfIYnA8N2CWDLSF5w9U1Qh1sTw=)
29: 3130332e3230322e3132382e302f32322d3232203d3e2034383131.roa (hash: K2AKtBtoucfes95KywE9+NyjFY0nUVin6NWH6AE2xUM=)
30: 3130332e3230322e34302e302f32322d3232203d3e2034383131.roa (hash: rXDVkHiRQSrrP6xmKwudP5YmCdrSfCsD4iUhjRuz/Pk=)
31: 3130332e3230322e3134342e302f32322d3232203d3e2034383131.roa (hash: H0xqUU6Dc6AAakFUhgacPyG26V4rt4RBfiXZXGHcLvE=)
32: 3130332e3230322e36312e302f32342d3234203d3e20313533333933.roa (hash: LTiQbomNmW6b37oCfw3+PJVmc2lEYw3UBItNF+DyFww=)
33: 3130332e3230322e3131322e302f32322d3232203d3e203137363231.roa (hash: tVbWbuEciIcnbDGqvlJ5gHLYPTdd3WLY/9auFPtweJw=)
34: 4D87AFCA5675517956358C896C21C3E70D906F20.crl (hash: OCp/DgfSdNnqSPaMuU4u63Mhm+LXyF/ocbXT3IR1oM4=)
35: 3130332e3230322e3133322e302f32322d3232203d3e203137363231.roa (hash: Aumh8y6o3pI4V0y50hbJeWvUeM3D1va9c/SvCsdC0L8=)
36: 3130332e3230322e3130342e302f32322d3232203d3e203137363231.roa (hash: R+6nV/q63c0bx+Mf28Q3uacYRl9wrZm/e4V4+Hj0hRs=)
37: 3130332e3230322e33362e302f32322d3232203d3e2034383131.roa (hash: DiM3UVAFYgaZi7LnQlxEIor45RXiWNtQdtnQrKHMcNc=)
38: 3130332e3230322e3133362e302f32322d3232203d3e2034383131.roa (hash: xEMBsuJ52e7upntEm8F1LYn4Mr3uWl0B8OZoZEEzmJU=)
39: 3130312e35302e31322e302f32322d3232203d3e20313431373731.roa (hash: 867rAOSf9MH3aTsqN6kvGu2HGBa9hFbzMNFlS13tI1Q=)
40: 3130332e3230322e3130382e302f32322d3232203d3e203137363231.roa (hash: QGcOEyqrBJ3PPCiPQOipz0wt0v1HfOvL8EHHTR6ZiCE=)
41: 3130312e35302e382e302f32322d3232203d3e20313431373731.roa (hash: B3xeUrb/U4ARG1BNm2ciHOyYMekyhxML3SpXsbvjVTc=)
42: 3130332e3230322e3130302e302f32322d3232203d3e2034383131.roa (hash: oAE3UH1BkehOWwH0WdjvNbfshdqsGHvxSkWbT+Qrfvg=)
43: 3130332e3230322e3132342e302f32322d3232203d3e203137363231.roa (hash: tH/PYynHKJaSQf+QX12Lom5FnAU4Sx941ToBzaHKylQ=)
44: 3130332e3230322e31322e302f32322d3232203d3e2034383131.roa (hash: hamL1jk+oPDDBD2/lA0b7Sp5HZ1+c99BKdrG97uBNtg=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:2d:a8:71:70:8a:56:22:ac:8a:93:4c:b1:9f:69:c5:05:c2:6f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20
Validity
Not Before: May 13 10:22:49 2026 GMT
Not After : May 14 11:54:49 2026 GMT
Subject: CN=90F8599B6129D86BDD197AE25A55E4C855DD8428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:64:d7:33:62:1c:70:3a:cc:f7:50:ad:59:50:
76:d2:f8:fe:e9:89:36:b8:5b:d6:0d:ee:d9:40:3a:
d5:1a:ad:a0:4a:1a:6e:93:14:54:d9:8f:a3:0b:75:
62:bc:fa:75:fd:59:4c:f1:7e:6a:64:a9:50:83:23:
1a:ee:ee:11:77:47:73:1f:3e:76:18:ba:06:7f:29:
2f:ba:2e:b8:53:a4:4f:a1:f7:1f:83:03:e6:c9:f8:
32:85:0c:c4:a6:55:7b:5c:fe:d6:43:60:4a:74:da:
7e:93:d3:89:38:73:a2:f3:ae:13:de:40:31:7e:80:
df:ec:26:ae:6c:4d:ca:a9:f7:64:76:6d:8f:03:85:
6e:99:09:fb:5a:28:91:e9:77:b5:7a:b6:bf:df:3e:
a8:7e:a8:ed:08:49:eb:46:9d:96:9d:08:2f:35:59:
19:bb:74:3d:b8:d3:54:c3:b1:a2:06:c7:ee:3f:1c:
de:6f:6a:31:82:64:10:3b:b5:19:0c:61:5b:39:73:
e2:d1:49:f6:c5:fa:b8:08:9e:34:44:1e:3b:6b:84:
d6:4c:e0:56:07:55:a7:9f:66:ff:72:35:ea:ed:6d:
64:a0:90:a6:86:c5:42:71:9a:d6:53:7a:f0:c9:77:
df:0e:36:5d:b7:b9:b7:89:bb:9b:35:20:e1:65:e8:
56:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F8:59:9B:61:29:D8:6B:DD:19:7A:E2:5A:55:E4:C8:55:DD:84:28
X509v3 Authority Key Identifier:
keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:5b:8c:7f:e9:7e:7a:5d:ab:04:e6:a9:8b:2e:82:3a:00:d3:
58:a8:fb:39:3f:fd:a3:5a:48:41:48:43:0d:2c:b3:68:41:fd:
90:8c:91:bd:b7:2a:2d:56:2e:f8:f4:2d:e6:16:17:63:a5:b1:
90:71:a6:2b:c6:04:87:fc:a7:72:fa:65:21:fd:2b:88:fe:a6:
93:89:69:cc:6a:18:3d:26:5e:ae:ab:bb:8f:61:1c:4d:49:79:
78:a3:41:79:7f:32:1c:1d:07:69:b4:f1:b5:43:83:52:cd:d3:
27:2b:a1:f1:4e:ff:3a:83:66:ca:5c:48:58:55:3a:72:24:88:
23:19:d6:7f:16:62:06:a4:3b:94:01:d8:16:cb:83:9b:55:75:
25:a4:c8:eb:ce:db:3e:93:32:84:b6:ab:bf:9b:ce:65:8e:f9:
57:a5:17:db:20:23:12:97:1f:a1:0f:fe:dc:76:ec:21:ef:4c:
a1:dc:9f:93:72:d1:6e:60:d3:57:7b:a3:0c:0b:a4:cc:3e:01:
ed:cf:8f:f2:be:e0:d5:b3:37:a6:f7:2f:77:e3:00:04:c6:3b:
01:74:72:12:dd:86:9d:d8:99:aa:c8:e9:cd:69:f4:49:b8:7c:
93:19:5e:99:d6:23:72:38:84:fa:cf:36:0f:4f:32:df:bd:a2:
ee:e4:80:8a
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUTC2ocXCKViKsipNMsZ9pxQXCb7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw
RDkwNkYyMDAeFw0yNjA1MTMxMDIyNDlaFw0yNjA1MTQxMTU0NDlaMDMxMTAvBgNV
BAMTKDkwRjg1OTlCNjEyOUQ4NkJERDE5N0FFMjVBNTVFNEM4NTVERDg0MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ZNczYhxwOsz3UK1ZUHbS+P7p
iTa4W9YN7tlAOtUaraBKGm6TFFTZj6MLdWK8+nX9WUzxfmpkqVCDIxru7hF3R3Mf
PnYYugZ/KS+6LrhTpE+h9x+DA+bJ+DKFDMSmVXtc/tZDYEp02n6T04k4c6LzrhPe
QDF+gN/sJq5sTcqp92R2bY8DhW6ZCftaKJHpd7V6tr/fPqh+qO0ISetGnZadCC81
WRm7dD2401TDsaIGx+4/HN5vajGCZBA7tRkMYVs5c+LRSfbF+rgInjREHjtrhNZM
4FYHVaefZv9yNertbWSgkKaGxUJxmtZTevDJd98ONl23ubeJu5s1IOFl6FZHAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUkPhZm2Ep2GvdGXriWlXkyFXdhCgwHwYDVR0j
BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD
M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDY4NTE1NDk3MTMyNjg3NTUvMC80RDg3QUZDQTU2NzU1
MTc5NTYzNThDODk2QzIxQzNFNzBEOTA2RjIwLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVuMf+l+el2r
BOapiy6COgDTWKj7OT/9o1pIQUhDDSyzaEH9kIyRvbcqLVYu+PQt5hYXY6WxkHGm
K8YEh/yncvplIf0riP6mk4lpzGoYPSZerqu7j2EcTUl5eKNBeX8yHB0HabTxtUOD
Us3TJyuh8U7/OoNmylxIWFU6ciSIIxnWfxZiBqQ7lAHYFsuDm1V1JaTI687bPpMy
hLarv5vOZY75V6UX2yAjEpcfoQ/+3HbsIe9Modyfk3LRbmDTV3ujDAukzD4B7c+P
8r7g1bM3pvcvd+MABMY7AXRyEt2GndiZqsjpzWn0Sbh8kxlemdYjcjiE+s82D08y
372i7uSAig==
-----END CERTIFICATE-----
Generated at Wed May 13 20:55:30 2026 by rpki-client