$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft File: 86525FC830F7BAD1E457545F5ABE0187592FDF35.mft (raw, json) Hash identifier: +2WlsBoSx95EkUMCz+YbBHYgePaWmhh5aKDksxGPwNA= Subject key identifier: A2:CA:1B:C7:B0:D2:24:1B:81:82:B4:A9:08:E5:29:B4:A3:4A:90:9C Authority key identifier: 86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 Certificate issuer: /CN=86525FC830F7BAD1E457545F5ABE0187592FDF35 Certificate serial: 0D995DFDE57FF4994811A01FF189EC32BF176393 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft Manifest number: 88 Signing time: Thu 23 Jul 2026 20:39:29 +0000 Manifest this update: Thu 23 Jul 2026 20:34:29 +0000 Manifest next update: Sat 25 Jul 2026 00:31:29 +0000 Files and hashes: 1: 86525FC830F7BAD1E457545F5ABE0187592FDF35.crl (hash: TDpXP0pox0Pl2Qf0Wn8HgC+nric7VVqylxXY2UEjTR4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:31:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:99:5d:fd:e5:7f:f4:99:48:11:a0:1f:f1:89:ec:32:bf:17:63:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86525FC830F7BAD1E457545F5ABE0187592FDF35 Validity Not Before: Jul 23 20:34:29 2026 GMT Not After : Jul 25 00:31:29 2026 GMT Subject: CN=A2CA1BC7B0D2241B8182B4A908E529B4A34A909C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d4:96:09:5b:33:54:b6:8d:20:39:df:f2:02: 36:24:70:e6:1a:f5:87:cf:ac:a0:94:a1:21:f3:ae: 6f:c9:4c:09:8e:4c:c4:d9:5e:c6:dd:1c:46:31:ce: a4:02:b4:2b:68:d9:d9:1c:e2:b8:e4:ed:67:3e:ca: 0d:b8:06:86:25:50:f6:04:26:01:58:65:60:49:1f: 9f:b2:41:0c:6f:60:53:97:15:77:e7:ce:51:4f:1d: 9f:0a:fc:51:97:ec:83:0a:ab:c8:ac:b1:59:cc:f3: b5:8e:69:a3:f5:9e:24:69:d7:a0:f4:f1:04:0f:1d: aa:52:7a:ec:5e:cc:0a:96:83:37:48:3d:3a:2a:09: b1:ad:2f:02:b9:a0:f8:19:e1:46:2c:02:ec:01:a6: 66:64:cc:a8:1b:0d:08:4d:cb:36:1a:44:8f:a7:d8: fe:58:02:08:94:a2:4c:99:65:d6:38:59:37:ab:c0: 43:84:33:9e:ba:ed:64:ac:1b:67:cd:88:17:14:72: ea:82:49:d8:af:28:54:02:5b:84:f5:7b:0f:ed:53: 8d:f3:91:c4:ca:1f:9b:d6:a0:94:c3:45:bc:3f:73: a0:b8:29:85:ec:ce:87:fd:b3:07:fc:bb:c3:9b:28: 99:b0:4a:38:03:89:12:17:5d:85:b7:5b:d3:f8:50: d1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:CA:1B:C7:B0:D2:24:1B:81:82:B4:A9:08:E5:29:B4:A3:4A:90:9C X509v3 Authority Key Identifier: keyid:86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:4d:de:58:ea:52:46:dd:94:41:89:b6:9a:cb:14:f6:46:52: 48:ee:70:29:1a:16:c9:91:af:01:08:8c:b4:f9:b0:19:61:0d: 10:fa:2d:da:c3:58:c6:03:7f:d3:e6:70:3f:29:85:e9:95:e6: 9c:dc:23:df:f9:72:3c:85:5a:a3:26:2c:39:6c:96:1d:ee:4e: 0e:fa:c8:cf:66:9c:dd:7b:82:6d:e8:3c:70:ae:25:59:c3:9d: ea:c3:95:76:21:aa:77:86:c5:f9:d7:b6:c7:1d:ee:99:d4:86: 28:5e:8f:5e:06:30:f4:9a:97:30:ec:95:e4:d7:37:35:fd:86: 39:58:e1:63:fe:d5:32:17:c4:f0:13:96:ac:91:fc:dd:e8:fd: 97:28:cc:2e:70:1d:87:15:7e:38:a1:ad:55:86:09:2c:97:ea: 28:41:a3:5f:3e:14:17:56:f4:4d:1d:ce:2a:14:be:34:66:c8: 49:e6:e9:82:74:45:78:a8:4a:80:5f:f7:dc:c9:84:c4:bc:5f: 7a:df:c5:cb:6f:f7:f3:2d:ab:99:24:87:e8:49:d3:0a:0c:68: 6c:7b:3f:d2:66:74:be:cf:89:76:71:0e:e3:89:e6:e5:13:18: cc:b7:98:3d:94:98:de:29:03:b5:e3:af:ad:2b:8b:00:1b:9d: 88:f1:a7:e1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDZld/eV/9JlIEaAf8YnsMr8XY5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MjVGQzgzMEY3QkFEMUU0NTc1NDVGNUFCRTAxODc1 OTJGREYzNTAeFw0yNjA3MjMyMDM0MjlaFw0yNjA3MjUwMDMxMjlaMDMxMTAvBgNV BAMTKEEyQ0ExQkM3QjBEMjI0MUI4MTgyQjRBOTA4RTUyOUI0QTM0QTkwOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM1JYJWzNUto0gOd/yAjYkcOYa 9YfPrKCUoSHzrm/JTAmOTMTZXsbdHEYxzqQCtCto2dkc4rjk7Wc+yg24BoYlUPYE JgFYZWBJH5+yQQxvYFOXFXfnzlFPHZ8K/FGX7IMKq8issVnM87WOaaP1niRp16D0 8QQPHapSeuxezAqWgzdIPToqCbGtLwK5oPgZ4UYsAuwBpmZkzKgbDQhNyzYaRI+n 2P5YAgiUokyZZdY4WTerwEOEM5667WSsG2fNiBcUcuqCSdivKFQCW4T1ew/tU43z kcTKH5vWoJTDRbw/c6C4KYXszof9swf8u8ObKJmwSjgDiRIXXYW3W9P4UNFTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUosobx7DSJBuBgrSpCOUptKNKkJwwHwYDVR0j BBgwFoAUhlJfyDD3utHkV1RfWr4Bh1kv3zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8xLzg2NTI1RkM4MzBGN0JBRDFFNDU3NTQ1RjVBQkUw MTg3NTkyRkRGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODY1MjVGQzgzMEY3QkFEMUU0NTc1NDVGNUFCRTAxODc1OTJGREYzNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMS84NjUyNUZDODMwRjdC QUQxRTQ1NzU0NUY1QUJFMDE4NzU5MkZERjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ03eWOpSRt2U QYm2mssU9kZSSO5wKRoWyZGvAQiMtPmwGWENEPot2sNYxgN/0+ZwPymF6ZXmnNwj 3/lyPIVaoyYsOWyWHe5ODvrIz2ac3XuCbeg8cK4lWcOd6sOVdiGqd4bF+de2xx3u mdSGKF6PXgYw9JqXMOyV5Nc3Nf2GOVjhY/7VMhfE8BOWrJH83ej9lyjMLnAdhxV+ OKGtVYYJLJfqKEGjXz4UF1b0TR3OKhS+NGbISebpgnRFeKhKgF/33MmExLxfet/F y2/38y2rmSSH6EnTCgxobHs/0mZ0vs+JdnEO44nm5RMYzLeYPZSY3ikDteOvrSuL ABudiPGn4Q== -----END CERTIFICATE-----Generated at Fri Jul 24 07:44:03 2026 by rpki-client