$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft File: 86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft (raw, json) Hash identifier: cU0ZEFCssHHuJ9JdCDn3iqWPDl6ZgqXBBPz/G8/2g1g= Subject key identifier: 4F:AF:48:BC:10:20:C5:B7:02:3B:5B:A0:75:57:A9:85:98:83:F6:E2 Authority key identifier: 86:54:3D:1F:2F:4A:32:A9:76:AD:06:90:E9:A2:3A:A2:D6:21:AC:7D Certificate issuer: /CN=86543D1F2F4A32A976AD0690E9A23AA2D621AC7D Certificate serial: 1E22E8F3CCBD52095C84006D49339B8313AA003F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft Manifest number: 79 Signing time: Tue 14 Jul 2026 18:31:52 +0000 Manifest this update: Tue 14 Jul 2026 18:26:52 +0000 Manifest next update: Wed 15 Jul 2026 22:14:52 +0000 Files and hashes: 1: 3232332e3235352e3233382e302f32342d3234203d3e203536303030.roa (hash: xubi9W0fDO/ruvLyfjo/nAIpEUwXGp+xWOgUYC+FPJc=) 2: 3232332e3235352e3233362e302f32342d3234203d3e203536303030.roa (hash: 5Z2RS7xTpyntFttcy8ElSigLdmkbVxoyMDpFQuVXz5s=) 3: 3232332e3235352e3233392e302f32342d3234203d3e203536303030.roa (hash: hOx7RICfLL6wLfEZuyeFfup3kP4OhsdcyjT0B7ETRfw=) 4: 3232332e3235352e3233372e302f32342d3234203d3e203536303030.roa (hash: qUwf0o69H6ppCY6mm1AEhhtTQQ3The81VFkirYuq60I=) 5: 86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl (hash: Unc11/MLNi6K3pq3HFNMIvZqo0f73ZCYDoxQvUCiox4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:22:e8:f3:cc:bd:52:09:5c:84:00:6d:49:33:9b:83:13:aa:00:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86543D1F2F4A32A976AD0690E9A23AA2D621AC7D Validity Not Before: Jul 14 18:26:52 2026 GMT Not After : Jul 15 22:14:52 2026 GMT Subject: CN=4FAF48BC1020C5B7023B5BA07557A9859883F6E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d8:87:8f:56:44:21:b1:52:88:b3:de:44:8f: f5:6e:ec:6a:9e:b3:17:a8:5d:c3:27:36:79:b1:f6: 69:aa:9c:1a:f3:c3:48:26:ac:3e:c3:eb:22:e7:6b: cc:1d:1d:0d:1d:36:c4:73:21:e3:07:b3:af:a4:b6: ae:e7:53:5f:80:64:10:f3:2a:e5:71:a4:f6:06:ef: 74:5d:20:45:cd:8f:6e:cc:15:22:90:35:f1:8b:61: e5:30:f3:fe:b7:e4:8b:5f:cb:5b:ab:c1:ba:79:f4: d6:fa:7d:56:02:b5:14:aa:ce:17:d6:53:d5:89:bf: 4d:bd:95:76:99:f6:5f:2b:0c:96:11:7a:13:af:cf: 74:da:1b:4b:4e:83:e9:03:8c:49:ad:d1:49:8d:83: 58:28:91:03:e1:b6:88:99:79:49:e6:dd:d2:6d:cc: 8d:97:83:6d:24:50:12:50:1c:d9:e9:30:3c:10:cf: ef:21:2c:c8:13:40:5b:cf:e1:88:54:fe:5e:d7:5a: 5f:f9:ed:f3:ef:a1:28:65:67:d3:20:c1:33:2a:12: 6b:48:85:97:c1:d1:bc:b7:e3:78:3a:60:1c:d3:57: 7b:52:a5:e8:71:fb:af:d7:c0:3e:3f:3e:8f:18:8c: cf:e5:7e:d0:ed:c9:d1:a7:4f:8f:ef:09:93:bc:f6: 0d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AF:48:BC:10:20:C5:B7:02:3B:5B:A0:75:57:A9:85:98:83:F6:E2 X509v3 Authority Key Identifier: keyid:86:54:3D:1F:2F:4A:32:A9:76:AD:06:90:E9:A2:3A:A2:D6:21:AC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:7a:d2:99:f3:95:01:de:5b:c3:8b:35:7c:e6:2d:ff:4c:9e: 06:37:de:80:e8:bc:9f:3b:25:5b:96:01:7e:3e:74:13:2a:d7: d3:98:d4:8a:33:d6:c6:ff:67:00:3b:7d:10:f3:60:c9:c6:b3: de:a6:bb:80:44:e6:40:d5:85:62:d2:43:32:77:aa:2a:a8:c8: 5b:19:6c:0e:49:d6:e5:09:3a:bb:75:f1:1c:9d:c0:8f:5e:1d: 48:f8:af:cd:bf:18:ce:45:48:bd:71:e9:e5:34:89:9b:8a:e3: 95:a8:1b:94:7f:a7:1d:95:d7:8b:08:f6:9c:6e:80:55:95:08: b5:3c:bc:9d:3b:90:06:3f:29:bb:70:e8:ad:c8:17:9b:f7:27: 7a:64:48:3a:4f:91:03:20:25:54:4b:74:2e:32:f8:fa:be:5e: 9a:b7:be:c2:d2:eb:2a:08:cd:71:34:69:08:31:52:80:93:17: 64:f0:e7:3e:cf:08:cf:83:5d:b6:b8:61:dd:e1:d9:ee:98:e0: 21:5e:77:ba:7a:0f:ae:49:3d:e0:47:be:1a:90:8d:8e:8c:6b: 38:51:e5:6c:63:16:c6:40:b4:ed:53:eb:b6:df:05:c4:c6:43: 25:e0:c0:9f:af:15:fe:b1:c9:e6:6a:0e:f2:a6:41:9c:ae:0b: b4:9e:5f:50 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHiLo88y9UglchABtSTObgxOqAD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1NDNEMUYyRjRBMzJBOTc2QUQwNjkwRTlBMjNBQTJE NjIxQUM3RDAeFw0yNjA3MTQxODI2NTJaFw0yNjA3MTUyMjE0NTJaMDMxMTAvBgNV BAMTKDRGQUY0OEJDMTAyMEM1QjcwMjNCNUJBMDc1NTdBOTg1OTg4M0Y2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC92IePVkQhsVKIs95Ej/Vu7Gqe sxeoXcMnNnmx9mmqnBrzw0gmrD7D6yLna8wdHQ0dNsRzIeMHs6+ktq7nU1+AZBDz KuVxpPYG73RdIEXNj27MFSKQNfGLYeUw8/635Itfy1urwbp59Nb6fVYCtRSqzhfW U9WJv029lXaZ9l8rDJYRehOvz3TaG0tOg+kDjEmt0UmNg1gokQPhtoiZeUnm3dJt zI2Xg20kUBJQHNnpMDwQz+8hLMgTQFvP4YhU/l7XWl/57fPvoShlZ9MgwTMqEmtI hZfB0by343g6YBzTV3tSpehx+6/XwD4/Po8YjM/lftDtydGnT4/vCZO89g13AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUT69IvBAgxbcCO1ugdVephZiD9uIwHwYDVR0j BBgwFoAUhlQ9Hy9KMql2rQaQ6aI6otYhrH0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzE2MTQwNTMwMTI2MDI5MC8wLzg2NTQzRDFGMkY0QTMyQTk3NkFEMDY5MEU5QTIz QUEyRDYyMUFDN0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODY1NDNEMUYyRjRBMzJBOTc2QUQwNjkwRTlBMjNBQTJENjIxQUM3RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcxNjE0MDUzMDEyNjAyOTAvMC84NjU0M0QxRjJGNEEz MkE5NzZBRDA2OTBFOUEyM0FBMkQ2MjFBQzdELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXrSmfOVAd5b w4s1fOYt/0yeBjfegOi8nzslW5YBfj50EyrX05jUijPWxv9nADt9EPNgycaz3qa7 gETmQNWFYtJDMneqKqjIWxlsDknW5Qk6u3XxHJ3Aj14dSPivzb8YzkVIvXHp5TSJ m4rjlagblH+nHZXXiwj2nG6AVZUItTy8nTuQBj8pu3DorcgXm/cnemRIOk+RAyAl VEt0LjL4+r5emre+wtLrKgjNcTRpCDFSgJMXZPDnPs8Iz4Ndtrhh3eHZ7pjgIV53 unoPrkk94Ee+GpCNjoxrOFHlbGMWxkC07VPrtt8FxMZDJeDAn68V/rHJ5moO8qZB nK4LtJ5fUA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:04:17 2026 by rpki-client