$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft File: 86525FC830F7BAD1E457545F5ABE0187592FDF35.mft (raw, json) Hash identifier: Y24Un84lAZsL7c1S27LzPGA7yLz/K3uOOS5cfgc5sG4= Subject key identifier: 21:F5:43:6C:0D:21:3F:7F:7B:95:CB:C4:45:1C:04:EF:BD:64:65:50 Authority key identifier: 86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 Certificate issuer: /CN=86525FC830F7BAD1E457545F5ABE0187592FDF35 Certificate serial: 05304631F23F71BB82D5D929D16AF2B80DB82334 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft Manifest number: 7C Signing time: Tue 14 Jul 2026 17:46:49 +0000 Manifest this update: Tue 14 Jul 2026 17:41:49 +0000 Manifest next update: Wed 15 Jul 2026 18:06:49 +0000 Files and hashes: 1: 86525FC830F7BAD1E457545F5ABE0187592FDF35.crl (hash: afEyKwF6GZ0o/YmwGiA6SFw1Nrr/QrcLoUIT+RZzzkY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 18:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:30:46:31:f2:3f:71:bb:82:d5:d9:29:d1:6a:f2:b8:0d:b8:23:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86525FC830F7BAD1E457545F5ABE0187592FDF35 Validity Not Before: Jul 14 17:41:49 2026 GMT Not After : Jul 15 18:06:49 2026 GMT Subject: CN=21F5436C0D213F7F7B95CBC4451C04EFBD646550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:db:6c:e7:e0:ef:51:78:22:e3:31:6a:e9:94: 14:28:d0:f6:12:df:f8:04:eb:cc:dd:54:2c:9d:e0: 43:45:2c:61:fd:ab:62:6a:f6:ed:37:57:5c:93:8d: d4:d3:a2:35:8e:f8:4b:30:92:81:c3:7d:7f:fc:ec: 11:b4:f1:fa:f7:db:d9:9d:3d:b2:63:dd:42:f6:ef: 00:83:18:ff:90:da:4b:78:42:cf:a3:9b:72:68:70: 5d:0b:23:62:71:14:d3:31:cf:39:7c:70:8b:32:da: 6c:aa:e8:84:a3:64:ba:f8:60:c2:be:80:51:17:ba: 8f:92:80:da:27:ae:bb:13:97:57:4c:69:2a:6a:2c: e9:89:6a:06:2f:86:b3:3a:27:0c:c3:ed:d3:51:4a: 64:5d:7f:b3:12:82:f1:30:8c:2e:33:e7:b8:59:94: ec:bf:14:84:e9:8a:0f:92:e2:59:b7:df:fd:6f:9b: 9a:d5:aa:86:be:3a:d1:31:1a:58:da:ee:c5:c4:c8: 5d:94:97:38:46:b4:14:1b:53:ee:a6:86:07:50:97: db:f6:30:38:22:5a:44:47:43:99:bb:9b:4d:80:48: 59:b9:09:02:06:cb:96:b1:88:3f:af:3c:6f:2c:70: 37:91:da:97:ab:c2:cb:e4:b4:7b:cb:be:d5:3e:16: 64:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F5:43:6C:0D:21:3F:7F:7B:95:CB:C4:45:1C:04:EF:BD:64:65:50 X509v3 Authority Key Identifier: keyid:86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:51:32:0e:91:ab:eb:a7:cd:b1:39:26:77:c8:29:84:f1:5d: 73:c1:fe:45:e0:9f:b5:21:51:0f:da:1a:8b:10:a5:68:9a:80: ed:f9:16:d5:52:81:e5:96:d7:e4:62:d8:76:21:80:54:f9:85: bb:79:9c:60:74:49:ea:53:8c:fd:be:05:c2:58:b8:f6:65:da: 31:d0:9f:bf:09:b0:ab:da:cf:0c:8a:ab:92:98:9b:c5:d3:fd: f3:35:c6:c1:3c:9b:69:e4:41:64:07:59:d9:3e:34:12:bc:3b: e9:5e:01:56:75:fe:ea:af:6a:84:a8:48:8d:66:58:c9:89:f8: 8b:bc:02:9d:d7:cc:19:52:ee:6e:2a:0e:1e:a3:06:03:8f:44: ba:b1:da:ba:20:6d:b4:bc:a3:0e:13:7c:09:2c:96:53:5b:4a: 40:2a:df:7c:db:1a:c8:34:13:b0:5a:3c:18:8c:05:7d:2c:2f: bc:59:79:fd:c6:42:06:4a:d5:f4:26:41:62:e7:ca:55:a0:b6: 86:04:f5:21:88:8f:9b:33:0a:60:b8:62:29:71:d2:5c:dc:87: 4c:2a:f9:8e:46:df:1b:60:fd:67:91:97:e3:fe:89:96:7b:89: 00:93:60:b2:38:b7:d5:1e:51:d9:c5:b2:99:9b:60:1c:28:26: 05:36:d5:c9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBTBGMfI/cbuC1dkp0WryuA24IzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MjVGQzgzMEY3QkFEMUU0NTc1NDVGNUFCRTAxODc1 OTJGREYzNTAeFw0yNjA3MTQxNzQxNDlaFw0yNjA3MTUxODA2NDlaMDMxMTAvBgNV BAMTKDIxRjU0MzZDMEQyMTNGN0Y3Qjk1Q0JDNDQ1MUMwNEVGQkQ2NDY1NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa22zn4O9ReCLjMWrplBQo0PYS 3/gE68zdVCyd4ENFLGH9q2Jq9u03V1yTjdTTojWO+EswkoHDfX/87BG08fr329md PbJj3UL27wCDGP+Q2kt4Qs+jm3JocF0LI2JxFNMxzzl8cIsy2myq6ISjZLr4YMK+ gFEXuo+SgNonrrsTl1dMaSpqLOmJagYvhrM6JwzD7dNRSmRdf7MSgvEwjC4z57hZ lOy/FITpig+S4lm33/1vm5rVqoa+OtExGlja7sXEyF2UlzhGtBQbU+6mhgdQl9v2 MDgiWkRHQ5m7m02ASFm5CQIGy5axiD+vPG8scDeR2perwsvktHvLvtU+FmTzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIfVDbA0hP397lcvERRwE771kZVAwHwYDVR0j BBgwFoAUhlJfyDD3utHkV1RfWr4Bh1kv3zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8xLzg2NTI1RkM4MzBGN0JBRDFFNDU3NTQ1RjVBQkUw MTg3NTkyRkRGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODY1MjVGQzgzMEY3QkFEMUU0NTc1NDVGNUFCRTAxODc1OTJGREYzNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMS84NjUyNUZDODMwRjdC QUQxRTQ1NzU0NUY1QUJFMDE4NzU5MkZERjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFEyDpGr66fN sTkmd8gphPFdc8H+ReCftSFRD9oaixClaJqA7fkW1VKB5ZbX5GLYdiGAVPmFu3mc YHRJ6lOM/b4Fwli49mXaMdCfvwmwq9rPDIqrkpibxdP98zXGwTybaeRBZAdZ2T40 Erw76V4BVnX+6q9qhKhIjWZYyYn4i7wCndfMGVLubioOHqMGA49EurHauiBttLyj DhN8CSyWU1tKQCrffNsayDQTsFo8GIwFfSwvvFl5/cZCBkrV9CZBYufKVaC2hgT1 IYiPmzMKYLhiKXHSXNyHTCr5jkbfG2D9Z5GX4/6JlnuJAJNgsji31R5R2cWymZtg HCgmBTbVyQ== -----END CERTIFICATE-----Generated at Tue Jul 14 19:59:57 2026 by rpki-client