$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft File: 86525FC830F7BAD1E457545F5ABE0187592FDF35.mft (raw, json) Hash identifier: VZFerptVKHpcofKMIukLdhzCGlF45CqB44wd6HV1eJI= Subject key identifier: 40:66:82:42:4A:EA:CD:0D:03:41:58:6A:83:E5:6A:11:9C:64:88:D0 Authority key identifier: 86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 Certificate issuer: /CN=86525FC830F7BAD1E457545F5ABE0187592FDF35 Certificate serial: 1F38B6B3EA77C3B03947E26FA40B65411E10AF34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft Manifest number: 40 Signing time: Fri 29 May 2026 19:38:17 +0000 Manifest this update: Fri 29 May 2026 19:33:17 +0000 Manifest next update: Sat 30 May 2026 21:43:17 +0000 Files and hashes: 1: 86525FC830F7BAD1E457545F5ABE0187592FDF35.crl (hash: a8qfuuqKSttfFNiLd03dmnXQ89dPpU0NWIGR6lihYks=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:38:b6:b3:ea:77:c3:b0:39:47:e2:6f:a4:0b:65:41:1e:10:af:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86525FC830F7BAD1E457545F5ABE0187592FDF35 Validity Not Before: May 29 19:33:17 2026 GMT Not After : May 30 21:43:17 2026 GMT Subject: CN=406682424AEACD0D0341586A83E56A119C6488D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0a:49:4c:2d:0b:50:55:1e:5e:72:94:e5:2e: c9:a4:94:6c:8d:8e:af:b3:5c:a8:76:00:1a:dc:27: e6:ea:d8:49:4a:53:29:14:6b:41:5e:b1:d0:2b:4e: 8c:bc:96:6b:e6:1f:61:57:6f:ca:5b:e2:e9:b3:18: 14:2f:57:45:5d:21:8e:94:ff:b1:32:70:ba:01:5a: b2:e1:c8:50:88:c7:e8:6f:4a:2b:a5:3f:fa:8c:b5: b6:8e:6f:af:98:e9:5d:a0:c3:21:94:8b:0e:bb:6c: 20:28:b2:a4:a8:64:72:63:01:c3:08:60:df:c0:47: b8:c6:17:92:ab:1c:69:70:3a:cc:66:74:54:61:51: 7f:42:ca:b9:41:13:11:98:d1:3f:58:7f:48:7e:be: 77:d4:ac:78:a5:43:b1:b3:bc:09:0b:ca:66:95:fa: 74:88:98:ea:06:7f:4d:0f:17:1b:aa:0f:28:f6:b6: 0a:e5:bd:f1:36:ca:3c:a2:0b:ab:9d:fb:44:a3:c0: f6:75:b8:84:53:e8:74:34:da:44:e5:8b:4e:a4:7d: f8:03:3f:cc:64:53:0d:1f:67:75:ff:39:c3:f9:15: 4b:49:61:cf:bd:d8:b4:65:24:3c:d0:f6:21:72:d8: ca:c6:90:b0:16:43:ab:de:a6:6c:a0:2b:c9:f0:9b: 6a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:66:82:42:4A:EA:CD:0D:03:41:58:6A:83:E5:6A:11:9C:64:88:D0 X509v3 Authority Key Identifier: keyid:86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:f9:7c:b7:f0:c3:c5:38:fd:f7:e8:de:a1:5f:e2:18:5e:d7: bc:59:41:54:cf:66:9b:a6:c7:d2:3e:b9:28:07:27:ea:af:0f: a7:5b:cb:2e:9e:eb:5c:4a:c9:8d:fa:90:51:90:f7:1c:f9:a3: bf:f0:d2:a2:53:10:72:8c:44:c1:7e:3c:85:d3:7e:86:97:7a: 95:e2:71:2d:c8:61:c0:62:3d:f8:81:7b:0f:05:3f:b9:01:9d: bc:b5:56:56:1e:65:9d:cf:be:ec:16:f6:c6:be:84:57:da:59: 94:b4:ba:14:e9:73:da:e3:c7:4e:5d:20:24:3a:92:1a:30:56: 60:bb:5d:7a:88:f0:f7:c0:b6:cc:89:ff:a8:53:7c:8b:f4:b2: 1b:bc:73:dd:cf:04:b9:df:04:0a:00:0b:33:9c:23:53:4e:e8: 28:f9:f5:69:c0:7b:82:a0:da:42:02:87:b6:29:eb:b8:a5:ce: 91:59:eb:fb:cf:ef:07:52:b6:5e:ca:ba:49:f5:3f:3e:98:0e: ea:67:07:56:05:0c:92:74:a0:2a:c3:9c:29:9a:c7:48:7f:81: f6:6a:df:77:0a:b9:1a:22:83:a8:00:41:d7:e9:3c:cc:1d:c2: 2f:b3:30:a5:81:2c:ea:74:ea:16:8e:7b:06:b1:49:ff:84:24: 7b:6d:d9:16 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHzi2s+p3w7A5R+JvpAtlQR4QrzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MjVGQzgzMEY3QkFEMUU0NTc1NDVGNUFCRTAxODc1 OTJGREYzNTAeFw0yNjA1MjkxOTMzMTdaFw0yNjA1MzAyMTQzMTdaMDMxMTAvBgNV BAMTKDQwNjY4MjQyNEFFQUNEMEQwMzQxNTg2QTgzRTU2QTExOUM2NDg4RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiCklMLQtQVR5ecpTlLsmklGyN jq+zXKh2ABrcJ+bq2ElKUykUa0FesdArToy8lmvmH2FXb8pb4umzGBQvV0VdIY6U /7EycLoBWrLhyFCIx+hvSiulP/qMtbaOb6+Y6V2gwyGUiw67bCAosqSoZHJjAcMI YN/AR7jGF5KrHGlwOsxmdFRhUX9CyrlBExGY0T9Yf0h+vnfUrHilQ7GzvAkLymaV +nSImOoGf00PFxuqDyj2tgrlvfE2yjyiC6ud+0SjwPZ1uIRT6HQ02kTli06kffgD P8xkUw0fZ3X/OcP5FUtJYc+92LRlJDzQ9iFy2MrGkLAWQ6vepmygK8nwm2r9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQGaCQkrqzQ0DQVhqg+VqEZxkiNAwHwYDVR0j BBgwFoAUhlJfyDD3utHkV1RfWr4Bh1kv3zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8xLzg2NTI1RkM4MzBGN0JBRDFFNDU3NTQ1RjVBQkUw MTg3NTkyRkRGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODY1MjVGQzgzMEY3QkFEMUU0NTc1NDVGNUFCRTAxODc1OTJGREYzNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMS84NjUyNUZDODMwRjdC QUQxRTQ1NzU0NUY1QUJFMDE4NzU5MkZERjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACfl8t/DDxTj9 9+jeoV/iGF7XvFlBVM9mm6bH0j65KAcn6q8Pp1vLLp7rXErJjfqQUZD3HPmjv/DS olMQcoxEwX48hdN+hpd6leJxLchhwGI9+IF7DwU/uQGdvLVWVh5lnc++7Bb2xr6E V9pZlLS6FOlz2uPHTl0gJDqSGjBWYLtdeojw98C2zIn/qFN8i/SyG7xz3c8Eud8E CgALM5wjU07oKPn1acB7gqDaQgKHtinruKXOkVnr+8/vB1K2Xsq6SfU/PpgO6mcH VgUMknSgKsOcKZrHSH+B9mrfdwq5GiKDqABB1+k8zB3CL7MwpYEs6nTqFo57BrFJ /4Qke23ZFg== -----END CERTIFICATE-----Generated at Fri May 29 22:02:46 2026 by rpki-client