$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft File: 86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft (raw, json) Hash identifier: 7nPWGAoMBuHL+j3Aa2AIexHMXkf+8o7m8zYmhgNKZv8= Subject key identifier: E4:C1:15:B3:41:47:21:F5:5E:4B:56:D1:CA:6A:C4:41:F5:A2:34:0A Authority key identifier: 86:54:3D:1F:2F:4A:32:A9:76:AD:06:90:E9:A2:3A:A2:D6:21:AC:7D Certificate issuer: /CN=86543D1F2F4A32A976AD0690E9A23AA2D621AC7D Certificate serial: 6160BF64E3774AE538646CBF18828DA5C2477ADB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft Manifest number: B5 Signing time: Fri 28 Aug 2026 06:48:13 +0000 Manifest this update: Fri 28 Aug 2026 06:43:13 +0000 Manifest next update: Mon 31 Aug 2026 16:09:13 +0000 Files and hashes: 1: 3232332e3235352e3233392e302f32342d3234203d3e203536303030.roa (hash: hOx7RICfLL6wLfEZuyeFfup3kP4OhsdcyjT0B7ETRfw=) 2: 86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl (hash: +EbwA7elxPl7e7PsDqPKdX5j6CHacMojtLirmnUqbEo=) 3: 3232332e3235352e3233362e302f32342d3234203d3e203536303030.roa (hash: 5Z2RS7xTpyntFttcy8ElSigLdmkbVxoyMDpFQuVXz5s=) 4: 3232332e3235352e3233372e302f32342d3234203d3e203536303030.roa (hash: qUwf0o69H6ppCY6mm1AEhhtTQQ3The81VFkirYuq60I=) 5: 3232332e3235352e3233382e302f32342d3234203d3e203536303030.roa (hash: xubi9W0fDO/ruvLyfjo/nAIpEUwXGp+xWOgUYC+FPJc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:60:bf:64:e3:77:4a:e5:38:64:6c:bf:18:82:8d:a5:c2:47:7a:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86543D1F2F4A32A976AD0690E9A23AA2D621AC7D Validity Not Before: Aug 28 06:43:13 2026 GMT Not After : Aug 31 16:09:13 2026 GMT Subject: CN=E4C115B3414721F55E4B56D1CA6AC441F5A2340A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:39:6e:60:8a:e1:01:5d:49:f1:b3:af:40:a8: b5:60:a6:c7:a8:e0:be:92:70:ce:51:1f:96:54:32: 81:14:d1:f0:d8:73:66:ab:c7:ef:ae:03:07:32:f2: da:54:c7:24:65:0a:24:22:c3:fe:47:d9:43:0b:75: e0:79:b3:fa:ee:80:f3:60:1e:ae:01:fd:32:8d:19: be:60:a5:0c:1c:0e:85:7c:b6:e7:3a:eb:44:63:6e: 49:39:e5:c1:d7:45:8e:89:24:ee:47:ef:47:d8:97: fe:b7:e0:a9:8c:96:7b:ca:4b:55:65:8e:3a:86:88: c9:61:8c:a0:17:a2:82:e5:2f:e3:4a:a1:b7:5c:c6: ed:e0:58:55:29:d8:48:5a:54:a1:ff:16:d7:24:c0: f3:9e:2a:91:40:eb:76:b8:79:c9:79:ce:70:ca:83: bb:7d:2d:16:f3:6c:7c:9f:f4:3e:a0:32:6f:ae:f9: 62:6e:07:90:3a:d9:f4:ef:67:63:4e:92:34:fb:f8: a6:8d:bf:7d:80:5a:bb:39:44:ca:0d:54:c9:51:6a: ab:b5:b0:98:55:fd:83:1a:0b:50:23:73:9a:7d:f8: aa:d6:6f:ba:55:cc:ca:b6:f1:f6:97:92:3a:0c:b1: 76:12:01:ff:64:b5:27:17:0f:28:40:c9:c0:e9:0d: 4a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C1:15:B3:41:47:21:F5:5E:4B:56:D1:CA:6A:C4:41:F5:A2:34:0A X509v3 Authority Key Identifier: keyid:86:54:3D:1F:2F:4A:32:A9:76:AD:06:90:E9:A2:3A:A2:D6:21:AC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:3c:08:3c:f7:12:42:da:75:57:7f:8b:97:00:2e:dd:1f:5c: f5:1b:8e:b3:02:06:b4:ea:c4:d1:61:89:bf:e8:ba:a0:ec:77: c5:e6:69:6a:8c:ba:6b:f3:7c:0a:d7:84:c2:91:2d:cc:ee:eb: 3c:e5:67:10:c7:ee:2b:54:79:c5:74:60:5b:f3:fe:3c:ee:2b: a8:d2:25:1e:6d:7f:a5:26:4f:b1:0a:44:cd:89:e7:b9:5e:9c: 8b:75:a1:0e:26:e1:f7:8c:17:a0:b0:0d:dc:67:e5:dc:36:90: 7e:9a:83:f3:6b:13:44:c1:cd:cd:a0:a7:79:dc:4c:23:bc:8e: 46:3b:20:ce:e6:0d:0d:ab:4b:f6:fc:5f:34:8e:b1:08:1f:31: 0b:5d:4d:e8:63:82:6b:08:78:42:d6:64:e4:6d:78:65:63:76: 1e:b6:ec:9e:97:b5:2a:3a:1a:6a:41:cd:f1:ed:a5:7f:2a:7f: 7d:47:53:ee:90:42:68:fc:4e:6b:ec:3e:34:3d:03:2d:4a:27: 06:9e:6f:74:d4:5b:9e:8d:ea:a5:82:44:7c:ce:04:a4:f8:3d: a3:26:82:31:4d:09:ad:5f:cc:92:70:fd:c8:f1:ee:5f:f8:4d: c7:d1:18:2a:72:ca:79:90:9f:72:ee:08:ce:41:aa:ea:dc:48: ba:5d:16:6e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYWC/ZON3SuU4ZGy/GIKNpcJHetswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1NDNEMUYyRjRBMzJBOTc2QUQwNjkwRTlBMjNBQTJE NjIxQUM3RDAeFw0yNjA4MjgwNjQzMTNaFw0yNjA4MzExNjA5MTNaMDMxMTAvBgNV BAMTKEU0QzExNUIzNDE0NzIxRjU1RTRCNTZEMUNBNkFDNDQxRjVBMjM0MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1OW5giuEBXUnxs69AqLVgpseo 4L6ScM5RH5ZUMoEU0fDYc2arx++uAwcy8tpUxyRlCiQiw/5H2UMLdeB5s/rugPNg Hq4B/TKNGb5gpQwcDoV8tuc660Rjbkk55cHXRY6JJO5H70fYl/634KmMlnvKS1Vl jjqGiMlhjKAXooLlL+NKobdcxu3gWFUp2EhaVKH/FtckwPOeKpFA63a4ecl5znDK g7t9LRbzbHyf9D6gMm+u+WJuB5A62fTvZ2NOkjT7+KaNv32AWrs5RMoNVMlRaqu1 sJhV/YMaC1Ajc5p9+KrWb7pVzMq28faXkjoMsXYSAf9ktScXDyhAycDpDUrFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5MEVs0FHIfVeS1bRymrEQfWiNAowHwYDVR0j BBgwFoAUhlQ9Hy9KMql2rQaQ6aI6otYhrH0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzE2MTQwNTMwMTI2MDI5MC8wLzg2NTQzRDFGMkY0QTMyQTk3NkFEMDY5MEU5QTIz QUEyRDYyMUFDN0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODY1NDNEMUYyRjRBMzJBOTc2QUQwNjkwRTlBMjNBQTJENjIxQUM3RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcxNjE0MDUzMDEyNjAyOTAvMC84NjU0M0QxRjJGNEEz MkE5NzZBRDA2OTBFOUEyM0FBMkQ2MjFBQzdELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzwIPPcSQtp1 V3+LlwAu3R9c9RuOswIGtOrE0WGJv+i6oOx3xeZpaoy6a/N8CteEwpEtzO7rPOVn EMfuK1R5xXRgW/P+PO4rqNIlHm1/pSZPsQpEzYnnuV6ci3WhDibh94wXoLAN3Gfl 3DaQfpqD82sTRMHNzaCnedxMI7yORjsgzuYNDatL9vxfNI6xCB8xC11N6GOCawh4 QtZk5G14ZWN2Hrbsnpe1KjoaakHN8e2lfyp/fUdT7pBCaPxOa+w+ND0DLUonBp5v dNRbno3qpYJEfM4EpPg9oyaCMU0JrV/MknD9yPHuX/hNx9EYKnLKeZCfcu4IzkGq 6txIul0Wbg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:45:24 2026 by rpki-client