$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft File: 86525FC830F7BAD1E457545F5ABE0187592FDF35.mft (raw, json) Hash identifier: b3LTbBPh0+lJ8b+hDequwkRnHplk7mj9mmQy1zR8OGs= Subject key identifier: 97:10:76:9D:0D:2E:4B:BF:11:26:5D:B3:97:1B:A3:3A:90:C1:75:9C Authority key identifier: 86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 Certificate issuer: /CN=86525FC830F7BAD1E457545F5ABE0187592FDF35 Certificate serial: 371C1232C2360A8531D9341D896397FC8CB6C362 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft Manifest number: CB Signing time: Sun 11 Oct 2026 08:20:26 +0000 Manifest this update: Sun 11 Oct 2026 08:15:26 +0000 Manifest next update: Wed 14 Oct 2026 17:37:26 +0000 Files and hashes: 1: 86525FC830F7BAD1E457545F5ABE0187592FDF35.crl (hash: OpeDA5GM6sTNMI42+15LfOpm5i4jMZaVCIhvF3y4ch8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 17:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:1c:12:32:c2:36:0a:85:31:d9:34:1d:89:63:97:fc:8c:b6:c3:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86525FC830F7BAD1E457545F5ABE0187592FDF35 Validity Not Before: Oct 11 08:15:26 2026 GMT Not After : Oct 14 17:37:26 2026 GMT Subject: CN=9710769D0D2E4BBF11265DB3971BA33A90C1759C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1c:92:81:1c:f2:7b:f8:9b:16:9e:fc:da:ca: b9:37:ca:c5:b4:9f:6c:17:4b:72:f4:4b:fe:5e:8c: 2f:27:4c:21:94:20:12:7a:a0:8f:69:ad:25:a1:37: dd:17:38:52:ae:60:98:2e:14:dc:e9:56:34:55:d9: 5b:10:53:22:10:4c:d7:ed:8f:d8:8a:83:2d:e8:c2: 87:dc:68:61:b8:5c:d8:3a:6d:d2:8d:a1:b8:ad:0c: 0d:33:45:c9:2e:3f:0a:f5:a5:14:c7:ec:c8:cf:ec: ac:d9:ed:b2:b9:7e:06:11:1c:f6:10:8f:de:32:59: 0b:aa:a5:9c:e6:fc:20:a9:be:68:70:56:39:0e:9f: 07:e5:f8:fb:0b:f6:10:d3:20:53:8c:af:e2:f3:53: 27:48:f4:a7:0b:d2:1e:d2:62:4d:0d:c0:c6:4d:ba: dc:25:04:29:0b:54:ef:04:3d:89:ad:94:66:4e:3d: f7:91:7e:f2:01:cc:8a:db:7d:de:34:c6:1a:28:c2: c3:25:7a:f6:ed:e1:03:c4:06:be:b2:bb:e4:d1:69: 44:5e:1f:e3:d2:c4:69:53:db:ef:f0:b1:fc:1f:52: 60:b8:fc:3f:cb:10:0a:44:76:87:9e:fd:fc:d9:d7: e7:86:de:7d:10:7c:93:3a:6a:1c:66:b1:1b:81:92: 95:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:10:76:9D:0D:2E:4B:BF:11:26:5D:B3:97:1B:A3:3A:90:C1:75:9C X509v3 Authority Key Identifier: keyid:86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:49:65:31:8d:cc:fc:33:aa:f3:00:79:80:fe:38:28:ba:0d: 16:66:32:27:de:e6:04:5c:6d:0e:cf:19:b0:f9:3c:d6:07:b6: ca:91:29:f4:1d:70:33:c4:d7:f6:b1:1f:f3:59:ad:7a:5d:2a: 5c:a6:e4:3e:42:3e:30:04:04:c6:1f:ae:db:be:cf:a5:46:72: cf:74:69:c0:f0:8a:42:72:e7:e9:c9:94:51:0a:85:33:cb:94: e1:04:62:ff:5c:b3:b5:cf:3e:04:9a:bd:f9:15:5c:d6:2e:93: 05:13:4a:00:1b:2c:a0:ae:f9:d1:ea:1c:42:a7:46:e9:03:28: 6b:87:ca:3d:35:44:43:c4:4e:86:4f:f8:f2:81:f4:59:da:56: b9:96:16:78:37:b8:c4:92:39:2a:95:2f:09:4f:a7:51:66:04: 44:c4:63:88:fa:d1:3a:1f:0d:e2:f2:39:ce:1e:c2:83:30:fa: 8d:32:24:dc:2c:34:00:38:c4:66:10:48:f6:9e:4e:c8:c2:b2: 93:4a:68:63:1d:c6:30:6f:c6:53:7a:2b:b9:a8:e0:d9:9a:a0: bb:c2:88:3f:f7:a7:2d:a8:78:1c:8d:31:85:d9:b6:89:73:52: ab:5a:0b:6b:9c:78:34:52:9e:d5:99:72:4f:26:06:3b:b2:06: 46:24:11:69 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNxwSMsI2CoUx2TQdiWOX/Iy2w2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MjVGQzgzMEY3QkFEMUU0NTc1NDVGNUFCRTAxODc1 OTJGREYzNTAeFw0yNjEwMTEwODE1MjZaFw0yNjEwMTQxNzM3MjZaMDMxMTAvBgNV BAMTKDk3MTA3NjlEMEQyRTRCQkYxMTI2NURCMzk3MUJBMzNBOTBDMTc1OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiHJKBHPJ7+JsWnvzayrk3ysW0 n2wXS3L0S/5ejC8nTCGUIBJ6oI9prSWhN90XOFKuYJguFNzpVjRV2VsQUyIQTNft j9iKgy3owofcaGG4XNg6bdKNobitDA0zRckuPwr1pRTH7MjP7KzZ7bK5fgYRHPYQ j94yWQuqpZzm/CCpvmhwVjkOnwfl+PsL9hDTIFOMr+LzUydI9KcL0h7SYk0NwMZN utwlBCkLVO8EPYmtlGZOPfeRfvIBzIrbfd40xhoowsMlevbt4QPEBr6yu+TRaURe H+PSxGlT2+/wsfwfUmC4/D/LEApEdoee/fzZ1+eG3n0QfJM6ahxmsRuBkpUPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlxB2nQ0uS78RJl2zlxujOpDBdZwwHwYDVR0j BBgwFoAUhlJfyDD3utHkV1RfWr4Bh1kv3zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8xLzg2NTI1RkM4MzBGN0JBRDFFNDU3NTQ1RjVBQkUw MTg3NTkyRkRGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODY1MjVGQzgzMEY3QkFEMUU0NTc1NDVGNUFCRTAxODc1OTJGREYzNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMS84NjUyNUZDODMwRjdC QUQxRTQ1NzU0NUY1QUJFMDE4NzU5MkZERjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUllMY3M/DOq 8wB5gP44KLoNFmYyJ97mBFxtDs8ZsPk81ge2ypEp9B1wM8TX9rEf81mtel0qXKbk PkI+MAQExh+u277PpUZyz3RpwPCKQnLn6cmUUQqFM8uU4QRi/1yztc8+BJq9+RVc 1i6TBRNKABssoK750eocQqdG6QMoa4fKPTVEQ8ROhk/48oH0WdpWuZYWeDe4xJI5 KpUvCU+nUWYERMRjiPrROh8N4vI5zh7CgzD6jTIk3Cw0ADjEZhBI9p5OyMKyk0po Yx3GMG/GU3oruajg2Zqgu8KIP/enLah4HI0xhdm2iXNSq1oLa5x4NFKe1ZlyTyYG O7IGRiQRaQ== -----END CERTIFICATE-----Generated at Mon Oct 12 09:57:04 2026 by rpki-client