$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft File: 86525FC830F7BAD1E457545F5ABE0187592FDF35.mft (raw, json) Hash identifier: aAcms8PiwNwkytm54ysG8UfjclW1v+mMZ7c1xMvihYY= Subject key identifier: 7F:AF:49:0B:12:8C:E2:1A:1A:B8:C8:BF:D1:18:E7:9D:28:24:48:71 Authority key identifier: 86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 Certificate issuer: /CN=86525FC830F7BAD1E457545F5ABE0187592FDF35 Certificate serial: 169CC6A1FF6DBAB7B945D4EB4C1EB64179748349 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft Manifest number: B7 Signing time: Fri 28 Aug 2026 07:38:34 +0000 Manifest this update: Fri 28 Aug 2026 07:33:34 +0000 Manifest next update: Mon 31 Aug 2026 12:31:34 +0000 Files and hashes: 1: 86525FC830F7BAD1E457545F5ABE0187592FDF35.crl (hash: HytcZxl12+VHjMbmGt5jaXO+OfEdF3fMRC0lz9nsZxs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 12:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:9c:c6:a1:ff:6d:ba:b7:b9:45:d4:eb:4c:1e:b6:41:79:74:83:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86525FC830F7BAD1E457545F5ABE0187592FDF35 Validity Not Before: Aug 28 07:33:34 2026 GMT Not After : Aug 31 12:31:34 2026 GMT Subject: CN=7FAF490B128CE21A1AB8C8BFD118E79D28244871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:14:77:21:18:43:60:49:23:e2:06:72:0c:76: 7a:b0:e9:33:50:46:14:07:10:c7:99:0d:5c:76:55: 4f:86:90:13:b8:17:10:6a:58:8a:d9:0e:37:78:c4: d3:48:94:4a:f1:a8:83:35:43:d6:15:84:b8:19:ee: 40:71:f9:00:9f:26:65:3e:7d:f4:1b:80:75:a4:6b: 15:99:dc:5e:86:d6:50:12:d1:3a:27:e8:56:7b:3c: 83:2c:b7:1f:74:4b:7d:25:67:f6:09:da:35:4a:61: fa:fa:d9:2f:8e:d0:e9:59:ab:82:fa:3a:5f:22:66: 60:45:ae:c4:29:6e:29:5c:67:97:62:da:d7:8b:db: 23:56:c4:66:67:e7:fc:02:be:6d:24:45:80:e9:01: 71:ab:bb:44:80:5d:a5:10:3f:90:9f:de:18:95:da: 7a:14:b8:5e:ae:85:89:61:62:f0:76:9a:cf:20:f0: e4:53:8b:26:7b:21:9c:f5:1e:93:d5:87:91:a4:98: 00:d7:3d:f0:1e:64:f6:3c:9d:ea:12:dc:bd:d6:d8: f5:6a:56:f7:38:dd:8b:17:1e:f4:02:b9:49:0e:93: 5c:53:d9:b3:59:cc:24:95:57:da:15:c1:66:fa:76: 50:14:43:82:74:b9:7f:ff:60:27:20:ec:04:13:be: 6b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:AF:49:0B:12:8C:E2:1A:1A:B8:C8:BF:D1:18:E7:9D:28:24:48:71 X509v3 Authority Key Identifier: keyid:86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:de:73:86:e1:1e:91:64:0c:78:c1:82:4c:0f:05:35:c6:a6: e1:10:88:15:84:50:0e:64:72:2e:8e:e8:e2:32:bb:7a:af:65: 26:c4:aa:c1:86:2c:6f:01:8c:8a:1f:3d:66:f7:65:42:97:85: cd:47:1a:3e:52:f9:e4:81:9c:5c:ce:9f:3c:5c:7f:00:07:72: 64:36:f4:df:b8:05:6e:83:e1:8b:e8:1b:fd:f6:72:2c:11:ef: 1d:a6:cf:7b:08:df:b1:39:46:3d:d8:b5:00:68:c5:52:8b:87: bf:73:0f:0f:a1:6f:75:5f:75:6d:a0:93:62:3a:7b:b1:e8:51: f2:5b:39:63:2e:2c:11:60:5f:ae:cb:45:6e:b6:73:8c:2d:5f: c5:c8:4a:d1:27:49:61:7e:ba:66:15:ab:2e:3d:c6:9d:bf:68: 75:38:db:e7:81:31:e5:5c:71:89:0d:49:b0:be:e1:4f:9a:36: a0:8f:26:d0:1c:d3:e5:35:66:6c:70:5a:d4:cf:57:9e:2b:6b: 27:a6:52:e2:de:3b:44:52:93:a9:52:6d:08:b1:29:6e:a3:34: 20:af:52:82:86:30:e5:ba:3e:74:a9:88:f4:d4:33:c2:1c:3b: bc:1c:b9:23:92:fa:8d:a0:ae:dc:51:2f:ea:24:fb:30:89:dd: ab:fc:7f:15 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFpzGof9ture5RdTrTB62QXl0g0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MjVGQzgzMEY3QkFEMUU0NTc1NDVGNUFCRTAxODc1 OTJGREYzNTAeFw0yNjA4MjgwNzMzMzRaFw0yNjA4MzExMjMxMzRaMDMxMTAvBgNV BAMTKDdGQUY0OTBCMTI4Q0UyMUExQUI4QzhCRkQxMThFNzlEMjgyNDQ4NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTFHchGENgSSPiBnIMdnqw6TNQ RhQHEMeZDVx2VU+GkBO4FxBqWIrZDjd4xNNIlErxqIM1Q9YVhLgZ7kBx+QCfJmU+ ffQbgHWkaxWZ3F6G1lAS0Ton6FZ7PIMstx90S30lZ/YJ2jVKYfr62S+O0OlZq4L6 Ol8iZmBFrsQpbilcZ5di2teL2yNWxGZn5/wCvm0kRYDpAXGru0SAXaUQP5Cf3hiV 2noUuF6uhYlhYvB2ms8g8ORTiyZ7IZz1HpPVh5GkmADXPfAeZPY8neoS3L3W2PVq Vvc43YsXHvQCuUkOk1xT2bNZzCSVV9oVwWb6dlAUQ4J0uX//YCcg7AQTvmtdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUf69JCxKM4hoauMi/0RjnnSgkSHEwHwYDVR0j BBgwFoAUhlJfyDD3utHkV1RfWr4Bh1kv3zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8xLzg2NTI1RkM4MzBGN0JBRDFFNDU3NTQ1RjVBQkUw MTg3NTkyRkRGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODY1MjVGQzgzMEY3QkFEMUU0NTc1NDVGNUFCRTAxODc1OTJGREYzNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMS84NjUyNUZDODMwRjdC QUQxRTQ1NzU0NUY1QUJFMDE4NzU5MkZERjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAN5zhuEekWQM eMGCTA8FNcam4RCIFYRQDmRyLo7o4jK7eq9lJsSqwYYsbwGMih89ZvdlQpeFzUca PlL55IGcXM6fPFx/AAdyZDb037gFboPhi+gb/fZyLBHvHabPewjfsTlGPdi1AGjF UouHv3MPD6FvdV91baCTYjp7sehR8ls5Yy4sEWBfrstFbrZzjC1fxchK0SdJYX66 ZhWrLj3Gnb9odTjb54Ex5VxxiQ1JsL7hT5o2oI8m0BzT5TVmbHBa1M9XnitrJ6ZS 4t47RFKTqVJtCLEpbqM0IK9SgoYw5bo+dKmI9NQzwhw7vBy5I5L6jaCu3FEv6iT7 MIndq/x/FQ== -----END CERTIFICATE-----Generated at Sat Aug 29 07:06:07 2026 by rpki-client