$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft File: 86525FC830F7BAD1E457545F5ABE0187592FDF35.mft (raw, json) Hash identifier: kB0h+lsfgA5Y3bR8OnTFujLzIFxTa3Pj0Cn9GVi9coQ= Subject key identifier: 40:D4:45:F4:C0:4C:33:9D:BF:1D:EC:1C:25:AE:98:98:E9:20:42:E1 Authority key identifier: 86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 Certificate issuer: /CN=86525FC830F7BAD1E457545F5ABE0187592FDF35 Certificate serial: 28D6A41844981998C25F2E09384D821E10D5E613 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft Manifest number: CC Signing time: Tue 13 Oct 2026 17:38:11 +0000 Manifest this update: Tue 13 Oct 2026 17:33:11 +0000 Manifest next update: Fri 16 Oct 2026 23:15:11 +0000 Files and hashes: 1: 86525FC830F7BAD1E457545F5ABE0187592FDF35.crl (hash: hxEYc2GJVzVejOBuqUczzC6KjyW+IT9txE+tdEamsBA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 23:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d6:a4:18:44:98:19:98:c2:5f:2e:09:38:4d:82:1e:10:d5:e6:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86525FC830F7BAD1E457545F5ABE0187592FDF35 Validity Not Before: Oct 13 17:33:11 2026 GMT Not After : Oct 16 23:15:11 2026 GMT Subject: CN=40D445F4C04C339DBF1DEC1C25AE9898E92042E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b1:cd:63:78:78:5f:e8:2e:c9:94:32:8a:9c: 32:1a:b9:3a:4f:10:a9:c1:b1:0a:8f:d0:95:85:ad: 26:2b:26:42:86:6a:59:93:b0:44:f7:c4:2d:6c:23: 6e:4c:69:56:b0:5e:94:6c:7c:26:1e:3f:0a:1b:cf: 52:12:d6:05:7b:33:18:c7:22:6d:32:2a:28:c1:e4: 3b:25:44:50:81:02:b8:b6:a8:e3:a6:ac:4f:bc:be: 63:30:16:c9:6d:4b:c4:16:4f:20:03:d2:6f:b9:ae: be:b2:d2:de:d1:99:e8:01:1d:70:c8:58:b8:36:6c: 67:38:63:59:fe:02:2b:dd:59:31:8b:0d:84:dd:89: 6c:38:b1:35:69:97:00:0a:20:b0:b9:e8:64:59:42: ea:ed:46:c7:ba:05:6a:c1:11:0f:9c:a4:1d:6b:5c: 8d:74:77:60:0b:9b:f7:37:c7:64:f0:87:cb:5b:d0: 47:40:ff:a2:ab:a7:ed:b5:4c:de:bf:43:9d:41:e7: 2c:1d:1d:81:cf:1d:be:90:57:1d:08:a5:c9:63:a9: 1f:7b:39:fa:1f:28:40:09:5a:b7:86:30:06:4b:c9: e8:9f:38:92:2c:3b:58:b2:de:15:70:39:50:b6:36: 50:2b:82:f1:93:b5:b9:e4:94:cf:d6:60:d1:95:45: df:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D4:45:F4:C0:4C:33:9D:BF:1D:EC:1C:25:AE:98:98:E9:20:42:E1 X509v3 Authority Key Identifier: keyid:86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:41:0b:53:86:76:be:eb:72:86:98:d8:2a:12:86:7c:2f:d4: fa:d5:1e:8f:8c:b3:f3:dd:9f:e6:b4:97:fe:0c:62:50:63:21: 10:7d:56:6f:7b:0d:22:f8:23:f1:9f:1a:da:f3:43:9d:f4:64: fa:c6:f0:3d:27:2e:d8:39:ff:e7:f3:e0:93:45:7a:16:dc:f0: 38:b8:66:7c:80:34:d3:1a:a2:c1:9f:1d:11:c9:6c:f4:ce:6b: 93:f7:32:5e:88:ef:8c:0c:56:33:54:44:6b:51:08:9a:c8:74: fb:97:97:0b:3a:84:a2:1e:2e:ec:f3:69:2a:10:f3:10:41:af: be:5d:e4:84:22:75:97:81:b5:07:54:38:3f:e5:1e:b5:fe:32: c6:07:28:65:16:87:b6:0c:09:a8:2d:ee:ae:2b:59:26:b6:8f: 4b:b0:83:8a:d0:9c:99:16:45:d5:c0:8f:6a:0f:69:be:e9:d3: f6:7e:0f:8d:a7:6c:7b:30:83:5a:69:45:01:6a:32:10:e8:8c: 16:cf:5f:fd:72:87:2a:10:ff:40:f2:62:27:d9:18:c9:6c:a7: 6f:3d:67:4f:82:05:16:d1:58:8a:3f:78:1b:12:c4:a4:1c:68: 72:bd:55:f8:dd:ba:9d:2b:7b:6a:7f:22:af:4b:68:df:3f:85: 12:b4:b7:fe -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKNakGESYGZjCXy4JOE2CHhDV5hMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MjVGQzgzMEY3QkFEMUU0NTc1NDVGNUFCRTAxODc1 OTJGREYzNTAeFw0yNjEwMTMxNzMzMTFaFw0yNjEwMTYyMzE1MTFaMDMxMTAvBgNV BAMTKDQwRDQ0NUY0QzA0QzMzOURCRjFERUMxQzI1QUU5ODk4RTkyMDQyRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCosc1jeHhf6C7JlDKKnDIauTpP EKnBsQqP0JWFrSYrJkKGalmTsET3xC1sI25MaVawXpRsfCYePwobz1IS1gV7MxjH Im0yKijB5DslRFCBAri2qOOmrE+8vmMwFsltS8QWTyAD0m+5rr6y0t7RmegBHXDI WLg2bGc4Y1n+AivdWTGLDYTdiWw4sTVplwAKILC56GRZQurtRse6BWrBEQ+cpB1r XI10d2ALm/c3x2Twh8tb0EdA/6Krp+21TN6/Q51B5ywdHYHPHb6QVx0IpcljqR97 OfofKEAJWreGMAZLyeifOJIsO1iy3hVwOVC2NlArgvGTtbnklM/WYNGVRd+dAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQNRF9MBMM52/HewcJa6YmOkgQuEwHwYDVR0j BBgwFoAUhlJfyDD3utHkV1RfWr4Bh1kv3zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8xLzg2NTI1RkM4MzBGN0JBRDFFNDU3NTQ1RjVBQkUw MTg3NTkyRkRGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODY1MjVGQzgzMEY3QkFEMUU0NTc1NDVGNUFCRTAxODc1OTJGREYzNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMS84NjUyNUZDODMwRjdC QUQxRTQ1NzU0NUY1QUJFMDE4NzU5MkZERjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEELU4Z2vuty hpjYKhKGfC/U+tUej4yz892f5rSX/gxiUGMhEH1Wb3sNIvgj8Z8a2vNDnfRk+sbw PScu2Dn/5/Pgk0V6FtzwOLhmfIA00xqiwZ8dEcls9M5rk/cyXojvjAxWM1REa1EI msh0+5eXCzqEoh4u7PNpKhDzEEGvvl3khCJ1l4G1B1Q4P+Uetf4yxgcoZRaHtgwJ qC3uritZJraPS7CDitCcmRZF1cCPag9pvunT9n4PjadsezCDWmlFAWoyEOiMFs9f /XKHKhD/QPJiJ9kYyWynbz1nT4IFFtFYij94GxLEpBxocr1V+N26nSt7an8ir0to 3z+FErS3/g== -----END CERTIFICATE-----Generated at Wed Oct 14 10:04:43 2026 by rpki-client