$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft File: 86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft (raw, json) Hash identifier: JPFzfhcwe/VTSNCK571kmF2mX6Rd0MZtkfhK9d6m2Y0= Subject key identifier: 7F:41:59:91:85:D2:CC:61:07:72:ED:40:DD:59:4B:9D:B8:46:FA:00 Authority key identifier: 86:54:3D:1F:2F:4A:32:A9:76:AD:06:90:E9:A2:3A:A2:D6:21:AC:7D Certificate issuer: /CN=86543D1F2F4A32A976AD0690E9A23AA2D621AC7D Certificate serial: 4F91D3060099F4C76679B357579B3E0C1CAE6425 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft Manifest number: C9 Signing time: Mon 12 Oct 2026 11:26:55 +0000 Manifest this update: Mon 12 Oct 2026 11:21:55 +0000 Manifest next update: Thu 15 Oct 2026 19:54:55 +0000 Files and hashes: 1: 3232332e3235352e3233372e302f32342d3234203d3e203536303030.roa (hash: qUwf0o69H6ppCY6mm1AEhhtTQQ3The81VFkirYuq60I=) 2: 3232332e3235352e3233382e302f32342d3234203d3e203536303030.roa (hash: xubi9W0fDO/ruvLyfjo/nAIpEUwXGp+xWOgUYC+FPJc=) 3: 3232332e3235352e3233392e302f32342d3234203d3e203536303030.roa (hash: hOx7RICfLL6wLfEZuyeFfup3kP4OhsdcyjT0B7ETRfw=) 4: 3232332e3235352e3233362e302f32342d3234203d3e203536303030.roa (hash: 5Z2RS7xTpyntFttcy8ElSigLdmkbVxoyMDpFQuVXz5s=) 5: 86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl (hash: AzcKglJ5AC7/67Ssjc0wK1guMARs90m2YiytemsbFuo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:91:d3:06:00:99:f4:c7:66:79:b3:57:57:9b:3e:0c:1c:ae:64:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86543D1F2F4A32A976AD0690E9A23AA2D621AC7D Validity Not Before: Oct 12 11:21:55 2026 GMT Not After : Oct 15 19:54:55 2026 GMT Subject: CN=7F41599185D2CC610772ED40DD594B9DB846FA00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:33:a0:3b:85:7e:ff:8d:93:a9:36:f3:bd:a7: 17:49:ce:4e:c9:bb:c9:d8:0c:8e:a5:bb:ed:72:92: 4a:52:12:9a:f5:a5:08:32:70:08:61:be:fd:8b:3e: 66:9b:f1:5f:9f:64:43:dd:45:61:82:bc:f9:5a:11: db:0b:a2:fe:4b:01:c0:47:14:93:bb:69:dc:2c:f0: fe:4c:68:95:8d:7d:73:7b:8b:57:8e:be:8a:ee:72: 57:a5:43:56:fe:f2:e5:66:c5:7a:5a:1d:42:2b:cf: 3d:7e:85:93:7d:d1:bf:ac:be:a4:88:8f:81:5d:67: a5:56:98:0d:d5:1e:2d:ea:b9:61:f3:68:8f:a9:75: 7f:3b:34:79:b8:34:aa:df:aa:98:d8:95:16:92:58: 2f:3e:d2:01:e0:f0:0d:5b:6b:3c:b5:ef:03:ac:13: 90:57:13:b6:98:56:92:25:33:78:e6:5c:ea:31:16: df:1d:68:4a:d6:ac:e2:9b:16:78:d4:50:0e:d1:c2: cd:30:0c:fb:e9:82:0a:28:10:af:55:a1:08:ce:f3: 00:1f:46:96:2f:52:58:a3:a8:7d:ac:ca:3d:5d:e4: ad:1a:b9:d3:09:c3:36:6f:94:b5:39:d0:37:86:55: 6c:87:86:5e:1a:17:42:2f:ba:cb:c6:60:84:60:50: 4d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:41:59:91:85:D2:CC:61:07:72:ED:40:DD:59:4B:9D:B8:46:FA:00 X509v3 Authority Key Identifier: keyid:86:54:3D:1F:2F:4A:32:A9:76:AD:06:90:E9:A2:3A:A2:D6:21:AC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:fd:cc:19:70:31:9f:3f:92:1c:81:e8:45:dc:9d:0c:d4:2d: 2a:da:44:df:f4:9f:28:07:bf:4c:df:fc:9b:40:d9:2f:15:67: 87:a1:fa:ce:04:c6:b2:a8:36:43:42:20:1d:b9:f7:e8:17:e1: 7e:82:04:dd:db:70:0c:10:28:fe:3e:34:13:3e:f2:6b:6a:94: 73:ac:f1:65:92:cd:e7:4d:30:77:9c:ca:a5:a6:3b:74:10:d3: a9:ad:15:95:d7:bf:b5:0a:5f:52:14:82:2b:c4:ab:2d:95:ca: 74:34:b3:e8:b6:a9:5f:94:11:05:27:af:ac:7b:b3:cb:c9:e6: e6:ea:8e:18:de:5e:0d:0b:a6:f8:59:71:46:94:2a:79:89:04: c7:35:f0:cb:70:ce:e4:0e:2a:e7:2f:81:90:36:2e:9c:29:19: bc:da:4e:bb:81:40:ce:af:6c:d6:34:a7:e2:16:6e:c5:e2:bd: 5d:45:78:77:16:fe:46:9b:7d:b5:01:42:cf:14:0d:be:a3:53: fa:d4:5b:78:f7:87:4f:c0:89:63:ac:0c:a8:e8:11:00:53:06: 2b:3b:eb:8c:7f:59:21:e4:1f:81:fe:41:98:77:68:c1:55:76: 6f:81:5c:4b:b2:1b:4d:af:0e:3d:56:2c:62:91:5c:61:d1:b7: 27:27:83:bc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUT5HTBgCZ9MdmebNXV5s+DByuZCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1NDNEMUYyRjRBMzJBOTc2QUQwNjkwRTlBMjNBQTJE NjIxQUM3RDAeFw0yNjEwMTIxMTIxNTVaFw0yNjEwMTUxOTU0NTVaMDMxMTAvBgNV BAMTKDdGNDE1OTkxODVEMkNDNjEwNzcyRUQ0MERENTk0QjlEQjg0NkZBMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrM6A7hX7/jZOpNvO9pxdJzk7J u8nYDI6lu+1ykkpSEpr1pQgycAhhvv2LPmab8V+fZEPdRWGCvPlaEdsLov5LAcBH FJO7adws8P5MaJWNfXN7i1eOvoruclelQ1b+8uVmxXpaHUIrzz1+hZN90b+svqSI j4FdZ6VWmA3VHi3quWHzaI+pdX87NHm4NKrfqpjYlRaSWC8+0gHg8A1bazy17wOs E5BXE7aYVpIlM3jmXOoxFt8daErWrOKbFnjUUA7Rws0wDPvpggooEK9VoQjO8wAf RpYvUlijqH2syj1d5K0audMJwzZvlLU50DeGVWyHhl4aF0IvusvGYIRgUE2dAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUf0FZkYXSzGEHcu1A3VlLnbhG+gAwHwYDVR0j BBgwFoAUhlQ9Hy9KMql2rQaQ6aI6otYhrH0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzE2MTQwNTMwMTI2MDI5MC8wLzg2NTQzRDFGMkY0QTMyQTk3NkFEMDY5MEU5QTIz QUEyRDYyMUFDN0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODY1NDNEMUYyRjRBMzJBOTc2QUQwNjkwRTlBMjNBQTJENjIxQUM3RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcxNjE0MDUzMDEyNjAyOTAvMC84NjU0M0QxRjJGNEEz MkE5NzZBRDA2OTBFOUEyM0FBMkQ2MjFBQzdELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWv3MGXAxnz+S HIHoRdydDNQtKtpE3/SfKAe/TN/8m0DZLxVnh6H6zgTGsqg2Q0IgHbn36BfhfoIE 3dtwDBAo/j40Ez7ya2qUc6zxZZLN500wd5zKpaY7dBDTqa0Vlde/tQpfUhSCK8Sr LZXKdDSz6LapX5QRBSevrHuzy8nm5uqOGN5eDQum+FlxRpQqeYkExzXwy3DO5A4q 5y+BkDYunCkZvNpOu4FAzq9s1jSn4hZuxeK9XUV4dxb+Rpt9tQFCzxQNvqNT+tRb ePeHT8CJY6wMqOgRAFMGKzvrjH9ZIeQfgf5BmHdowVV2b4FcS7IbTa8OPVYsYpFc YdG3JyeDvA== -----END CERTIFICATE-----Generated at Tue Oct 13 22:50:13 2026 by rpki-client