$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft File: 86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft (raw, json) Hash identifier: m6JYLRcJpPx4F+Fnvm4TSs7RF2bh1EtCLdWvOX9Of40= Subject key identifier: A8:1B:86:4E:27:47:A8:9A:F4:60:8C:60:C6:57:F4:A8:2D:29:71:04 Authority key identifier: 86:54:3D:1F:2F:4A:32:A9:76:AD:06:90:E9:A2:3A:A2:D6:21:AC:7D Certificate issuer: /CN=86543D1F2F4A32A976AD0690E9A23AA2D621AC7D Certificate serial: 26D2B108B290A603E61F7BF2701A3E5941656E69 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft Manifest number: 3C Signing time: Fri 29 May 2026 19:28:16 +0000 Manifest this update: Fri 29 May 2026 19:23:16 +0000 Manifest next update: Sat 30 May 2026 21:03:16 +0000 Files and hashes: 1: 3232332e3235352e3233372e302f32342d3234203d3e203536303030.roa (hash: qUwf0o69H6ppCY6mm1AEhhtTQQ3The81VFkirYuq60I=) 2: 86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl (hash: vdS/X5y3eNoyTZrJYIrxQNRoQmWm13FNda88icAqeeo=) 3: 3232332e3235352e3233392e302f32342d3234203d3e203536303030.roa (hash: hOx7RICfLL6wLfEZuyeFfup3kP4OhsdcyjT0B7ETRfw=) 4: 3232332e3235352e3233382e302f32342d3234203d3e203536303030.roa (hash: xubi9W0fDO/ruvLyfjo/nAIpEUwXGp+xWOgUYC+FPJc=) 5: 3232332e3235352e3233362e302f32342d3234203d3e203536303030.roa (hash: 5Z2RS7xTpyntFttcy8ElSigLdmkbVxoyMDpFQuVXz5s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:d2:b1:08:b2:90:a6:03:e6:1f:7b:f2:70:1a:3e:59:41:65:6e:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86543D1F2F4A32A976AD0690E9A23AA2D621AC7D Validity Not Before: May 29 19:23:16 2026 GMT Not After : May 30 21:03:16 2026 GMT Subject: CN=A81B864E2747A89AF4608C60C657F4A82D297104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a0:9d:a3:0e:c2:5a:22:b1:20:29:3a:04:89: 27:83:e5:d0:f7:b1:e8:b3:66:f4:2e:01:57:37:bf: 5a:c6:00:91:b2:42:f7:12:da:12:a2:27:3f:3e:33: f3:64:73:58:c5:22:3b:82:69:5c:e3:f9:c4:13:3f: 1a:e8:c9:9e:f9:60:0b:75:c0:43:08:f4:40:2b:b5: 9e:e2:92:4f:33:4d:77:e6:d8:3f:6a:ee:03:87:2b: bb:ab:a8:89:6b:96:f7:ea:c6:29:ca:11:09:5b:ea: 78:5a:22:6e:67:f8:97:4d:68:1e:a8:0b:34:47:b0: c9:c4:7f:1d:bb:1f:99:f3:ba:e4:c5:59:a8:86:bd: 21:a6:5d:56:4c:15:ec:10:92:46:f1:1b:b0:18:25: f8:92:2b:f6:e5:1a:9c:13:34:69:89:86:dd:6e:c0: d4:31:26:05:7a:33:58:82:41:83:3d:43:b7:80:79: 83:e5:bd:69:1d:61:c8:d8:02:52:2f:d0:1a:3f:8e: 16:fc:13:b6:d2:ec:ac:5e:de:88:0b:b8:d1:a7:ed: 93:7e:d4:b7:20:ab:26:ff:42:0e:c4:c4:06:20:c4: fd:45:9d:b3:07:6c:33:a0:98:aa:38:db:22:7d:0a: f2:da:8e:29:3c:07:02:12:c8:77:b9:4e:cc:52:e5: 57:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:1B:86:4E:27:47:A8:9A:F4:60:8C:60:C6:57:F4:A8:2D:29:71:04 X509v3 Authority Key Identifier: keyid:86:54:3D:1F:2F:4A:32:A9:76:AD:06:90:E9:A2:3A:A2:D6:21:AC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:48:97:0e:00:4b:1f:7b:0d:91:14:6c:89:fe:64:bf:8c:65: 97:e5:7c:15:b1:c7:49:6f:36:7f:6c:c4:23:7e:5c:8f:b6:51: 15:c0:ed:f7:de:5a:50:ca:c7:d3:ec:ef:21:6d:51:16:67:2e: 9f:97:c8:24:b7:7b:2b:eb:60:f4:c5:05:8b:be:15:86:9e:44: 31:5c:7f:7c:3e:a5:b1:c4:b7:52:54:91:7c:a4:f8:c8:05:22: 25:8b:a9:66:bc:47:cd:80:50:00:d6:c3:f1:14:34:8a:72:96: 8b:2f:b2:5f:0d:66:f3:d6:d6:fc:40:8a:8f:66:d7:9d:7b:04: 13:f2:85:d7:4d:90:ec:a1:21:de:54:ac:fc:83:41:a0:41:3c: ce:26:24:de:3c:c0:42:3a:28:d1:5f:4c:b1:20:8e:e6:80:22: de:f0:30:8e:55:2b:da:46:e7:d5:78:95:91:93:12:f6:b8:63: 6a:53:73:05:cd:5a:1a:1a:0e:57:43:ad:13:3f:47:53:2a:d8: 07:91:56:b2:55:b1:47:b6:c8:d9:e3:c4:2c:ea:35:ac:3e:f4: 4d:d0:0b:50:94:aa:65:75:b8:36:fb:1a:99:cc:0b:b5:f9:3b: 9e:b4:23:ab:23:1e:06:81:0d:ec:17:ff:e2:a2:0f:c6:1b:f4: 7f:98:01:37 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJtKxCLKQpgPmH3vycBo+WUFlbmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1NDNEMUYyRjRBMzJBOTc2QUQwNjkwRTlBMjNBQTJE NjIxQUM3RDAeFw0yNjA1MjkxOTIzMTZaFw0yNjA1MzAyMTAzMTZaMDMxMTAvBgNV BAMTKEE4MUI4NjRFMjc0N0E4OUFGNDYwOEM2MEM2NTdGNEE4MkQyOTcxMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCoJ2jDsJaIrEgKToEiSeD5dD3 seizZvQuAVc3v1rGAJGyQvcS2hKiJz8+M/Nkc1jFIjuCaVzj+cQTPxroyZ75YAt1 wEMI9EArtZ7ikk8zTXfm2D9q7gOHK7urqIlrlvfqxinKEQlb6nhaIm5n+JdNaB6o CzRHsMnEfx27H5nzuuTFWaiGvSGmXVZMFewQkkbxG7AYJfiSK/blGpwTNGmJht1u wNQxJgV6M1iCQYM9Q7eAeYPlvWkdYcjYAlIv0Bo/jhb8E7bS7Kxe3ogLuNGn7ZN+ 1Lcgqyb/Qg7ExAYgxP1FnbMHbDOgmKo42yJ9CvLajik8BwISyHe5TsxS5VcpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqBuGTidHqJr0YIxgxlf0qC0pcQQwHwYDVR0j BBgwFoAUhlQ9Hy9KMql2rQaQ6aI6otYhrH0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzE2MTQwNTMwMTI2MDI5MC8wLzg2NTQzRDFGMkY0QTMyQTk3NkFEMDY5MEU5QTIz QUEyRDYyMUFDN0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODY1NDNEMUYyRjRBMzJBOTc2QUQwNjkwRTlBMjNBQTJENjIxQUM3RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcxNjE0MDUzMDEyNjAyOTAvMC84NjU0M0QxRjJGNEEz MkE5NzZBRDA2OTBFOUEyM0FBMkQ2MjFBQzdELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUiXDgBLH3sN kRRsif5kv4xll+V8FbHHSW82f2zEI35cj7ZRFcDt995aUMrH0+zvIW1RFmcun5fI JLd7K+tg9MUFi74Vhp5EMVx/fD6lscS3UlSRfKT4yAUiJYupZrxHzYBQANbD8RQ0 inKWiy+yXw1m89bW/ECKj2bXnXsEE/KF102Q7KEh3lSs/INBoEE8ziYk3jzAQjoo 0V9MsSCO5oAi3vAwjlUr2kbn1XiVkZMS9rhjalNzBc1aGhoOV0OtEz9HUyrYB5FW slWxR7bI2ePELOo1rD70TdALUJSqZXW4NvsamcwLtfk7nrQjqyMeBoEN7Bf/4qIP xhv0f5gBNw== -----END CERTIFICATE-----Generated at Fri May 29 22:02:59 2026 by rpki-client