$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft File: 86525FC830F7BAD1E457545F5ABE0187592FDF35.mft (raw, json) Hash identifier: UNeFsIQ3SeWGmH+xJXH0GmRUziQGCveCA2V1mOCU0Cc= Subject key identifier: A7:A0:6F:21:13:3D:EA:36:BB:FF:8B:12:F9:11:6E:AF:2B:16:E4:60 Authority key identifier: 86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 Certificate issuer: /CN=86525FC830F7BAD1E457545F5ABE0187592FDF35 Certificate serial: 6D395E1D20740C0397A20417E7B24D621080EC12 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft Manifest number: 2A Signing time: Wed 13 May 2026 06:00:59 +0000 Manifest this update: Wed 13 May 2026 05:55:59 +0000 Manifest next update: Thu 14 May 2026 08:34:59 +0000 Files and hashes: 1: 86525FC830F7BAD1E457545F5ABE0187592FDF35.crl (hash: 24SSyfJdumWwbXBIk8/B6IBjHk6bx/VIN7xXPZ0P+8U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:39:5e:1d:20:74:0c:03:97:a2:04:17:e7:b2:4d:62:10:80:ec:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86525FC830F7BAD1E457545F5ABE0187592FDF35 Validity Not Before: May 13 05:55:59 2026 GMT Not After : May 14 08:34:59 2026 GMT Subject: CN=A7A06F21133DEA36BBFF8B12F9116EAF2B16E460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cd:bd:94:56:fb:48:30:14:45:09:da:79:5b: 09:73:74:e5:77:6e:fb:fa:9f:7a:cb:eb:b5:e4:93: 28:32:7c:71:b7:9d:cc:a7:f4:a4:7f:18:ec:0d:13: b6:fc:f4:e8:88:b1:2a:d1:bf:70:7c:f7:fb:19:a0: ce:fc:e6:10:4f:c5:13:0b:39:01:1f:47:55:e4:9f: 40:06:1b:6b:c9:88:fc:cb:ba:3c:6b:6e:7a:81:e0: e5:df:0f:fe:1b:74:22:a5:43:57:e2:5b:da:c2:fa: 27:bb:70:c6:09:60:97:ab:6e:dc:a4:02:c4:52:30: a3:5c:cb:5b:1a:e7:c9:07:aa:08:72:26:35:10:cf: 7b:74:c7:4c:fe:4d:31:bd:b4:02:33:ab:95:c0:5f: 00:5b:5f:a2:0a:53:3e:2b:95:a6:7e:89:41:cb:16: 6d:8c:60:8f:4c:73:53:0d:9c:c6:8e:67:9e:90:0c: 1b:f8:0c:b3:bc:be:91:70:6b:8b:22:15:0c:b2:c1: ab:10:69:00:f8:a3:62:20:e8:a3:d9:ce:1f:b7:40: 79:de:41:55:49:ef:5b:31:84:54:f5:e3:49:8a:a6: b6:c1:27:56:e9:59:96:93:4c:3a:7d:bf:31:92:7c: 9c:0c:3e:6a:29:c4:49:3c:0e:7c:05:d0:50:36:9b: 77:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A0:6F:21:13:3D:EA:36:BB:FF:8B:12:F9:11:6E:AF:2B:16:E4:60 X509v3 Authority Key Identifier: keyid:86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:87:8a:97:06:8a:97:1a:da:84:9d:ce:33:d7:4d:69:6d:9e: 79:80:a0:44:cf:be:cf:95:1b:0d:bf:d4:42:33:78:8c:13:45: af:08:66:40:87:68:a9:e8:a7:eb:9e:66:b0:00:2d:0d:49:35: dd:44:e2:4c:04:6b:e8:71:a4:c2:14:2b:23:44:6f:10:36:1b: 29:27:97:47:95:db:60:bc:a3:91:a4:e5:ee:5a:e3:5a:8b:42: 9a:8e:f0:7c:a4:17:0a:f3:45:a0:ea:6c:5d:f9:3d:96:e8:4a: ad:3a:e2:5d:25:ce:e2:69:62:97:4c:b0:94:d4:b4:08:4c:6b: 3e:fe:3b:bb:3b:6f:4f:21:8f:25:d3:f9:5e:9e:0c:4b:47:5a: 46:c5:92:c8:30:26:d5:71:dc:f8:51:b9:6b:63:c8:c8:01:2c: a3:8b:5d:b8:bc:5d:37:bd:db:70:03:98:45:ff:17:f2:07:44: 75:de:ce:42:b5:ad:db:d4:44:5a:9e:a7:c8:4f:1f:11:9d:7d: 96:80:36:3d:cf:8c:b2:d2:36:7e:eb:c8:39:38:b1:fb:4f:aa: 4c:74:dc:5b:4b:98:dd:8e:b8:94:e1:c1:57:ca:c7:a8:61:fa: b4:95:9c:5c:b3:63:b9:49:5d:ab:ee:8c:a8:ee:b7:b4:2e:96: d0:5a:da:a7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbTleHSB0DAOXogQX57JNYhCA7BIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MjVGQzgzMEY3QkFEMUU0NTc1NDVGNUFCRTAxODc1 OTJGREYzNTAeFw0yNjA1MTMwNTU1NTlaFw0yNjA1MTQwODM0NTlaMDMxMTAvBgNV BAMTKEE3QTA2RjIxMTMzREVBMzZCQkZGOEIxMkY5MTE2RUFGMkIxNkU0NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzzb2UVvtIMBRFCdp5WwlzdOV3 bvv6n3rL67XkkygyfHG3ncyn9KR/GOwNE7b89OiIsSrRv3B89/sZoM785hBPxRML OQEfR1Xkn0AGG2vJiPzLujxrbnqB4OXfD/4bdCKlQ1fiW9rC+ie7cMYJYJerbtyk AsRSMKNcy1sa58kHqghyJjUQz3t0x0z+TTG9tAIzq5XAXwBbX6IKUz4rlaZ+iUHL Fm2MYI9Mc1MNnMaOZ56QDBv4DLO8vpFwa4siFQyywasQaQD4o2Ig6KPZzh+3QHne QVVJ71sxhFT140mKprbBJ1bpWZaTTDp9vzGSfJwMPmopxEk8DnwF0FA2m3ezAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUp6BvIRM96ja7/4sS+RFurysW5GAwHwYDVR0j BBgwFoAUhlJfyDD3utHkV1RfWr4Bh1kv3zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8xLzg2NTI1RkM4MzBGN0JBRDFFNDU3NTQ1RjVBQkUw MTg3NTkyRkRGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODY1MjVGQzgzMEY3QkFEMUU0NTc1NDVGNUFCRTAxODc1OTJGREYzNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMS84NjUyNUZDODMwRjdC QUQxRTQ1NzU0NUY1QUJFMDE4NzU5MkZERjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4eKlwaKlxra hJ3OM9dNaW2eeYCgRM++z5UbDb/UQjN4jBNFrwhmQIdoqein655msAAtDUk13UTi TARr6HGkwhQrI0RvEDYbKSeXR5XbYLyjkaTl7lrjWotCmo7wfKQXCvNFoOpsXfk9 luhKrTriXSXO4mlil0ywlNS0CExrPv47uztvTyGPJdP5Xp4MS0daRsWSyDAm1XHc +FG5a2PIyAEso4tduLxdN73bcAOYRf8X8gdEdd7OQrWt29REWp6nyE8fEZ19loA2 Pc+MstI2fuvIOTix+0+qTHTcW0uY3Y64lOHBV8rHqGH6tJWcXLNjuUldq+6MqO63 tC6W0Frapw== -----END CERTIFICATE-----Generated at Wed May 13 20:55:07 2026 by rpki-client