$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft File: 86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft (raw, json) Hash identifier: +9Cz79G9LzJrlMUN3rSzfCem/9Q7nqK5mZd2hQtOCY4= Subject key identifier: C4:38:B9:AF:12:6F:55:5A:7C:A6:D7:8B:27:D0:37:BD:61:79:0C:0C Authority key identifier: 86:54:3D:1F:2F:4A:32:A9:76:AD:06:90:E9:A2:3A:A2:D6:21:AC:7D Certificate issuer: /CN=86543D1F2F4A32A976AD0690E9A23AA2D621AC7D Certificate serial: 6098BAD4DF95FEE70B748D4A99B8060032AD28D9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft Manifest number: 26 Signing time: Wed 13 May 2026 09:46:03 +0000 Manifest this update: Wed 13 May 2026 09:41:03 +0000 Manifest next update: Thu 14 May 2026 11:32:03 +0000 Files and hashes: 1: 3232332e3235352e3233382e302f32342d3234203d3e203536303030.roa (hash: xubi9W0fDO/ruvLyfjo/nAIpEUwXGp+xWOgUYC+FPJc=) 2: 3232332e3235352e3233392e302f32342d3234203d3e203536303030.roa (hash: hOx7RICfLL6wLfEZuyeFfup3kP4OhsdcyjT0B7ETRfw=) 3: 3232332e3235352e3233372e302f32342d3234203d3e203536303030.roa (hash: qUwf0o69H6ppCY6mm1AEhhtTQQ3The81VFkirYuq60I=) 4: 3232332e3235352e3233362e302f32342d3234203d3e203536303030.roa (hash: 5Z2RS7xTpyntFttcy8ElSigLdmkbVxoyMDpFQuVXz5s=) 5: 86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl (hash: 2WcN7ly2GtmZ2i9QG5IOqr55eLh+QAcL9MmKdXTwy1U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:32:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:98:ba:d4:df:95:fe:e7:0b:74:8d:4a:99:b8:06:00:32:ad:28:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86543D1F2F4A32A976AD0690E9A23AA2D621AC7D Validity Not Before: May 13 09:41:03 2026 GMT Not After : May 14 11:32:03 2026 GMT Subject: CN=C438B9AF126F555A7CA6D78B27D037BD61790C0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:df:c8:c6:00:c6:f6:bf:f1:13:51:3e:5a:e7: 8e:38:0e:a5:81:1a:11:55:b5:15:10:25:22:0e:cb: 20:aa:3d:96:0b:06:39:5c:44:6f:a2:13:07:dd:bc: b0:be:45:0a:70:8e:ec:9e:31:3d:2d:4b:fb:cd:e6: e9:32:78:e3:6e:a1:af:1a:c5:b8:a7:59:b0:af:d1: 62:f2:a8:93:20:69:2e:b5:58:e1:6b:16:21:b2:cd: 90:ff:e2:e8:91:36:42:32:98:08:f0:96:64:90:3c: 66:79:02:b0:12:1d:63:a0:59:0f:b0:d7:a3:32:df: eb:f7:af:25:6a:97:dd:04:dc:1c:13:11:fc:1a:b1: 50:13:57:5e:9c:3a:e9:51:30:38:b4:4d:29:65:97: ad:7c:03:00:36:d1:6a:f4:cf:f8:1d:e8:a5:fc:51: 82:f7:75:7f:dd:da:b7:d3:72:35:4c:6a:17:5d:31: ae:5a:85:9d:88:06:c2:ea:da:58:71:01:97:74:cc: bd:a0:13:0e:46:70:c4:2c:df:2b:ab:b6:d3:02:c5: 94:59:0d:76:fd:1b:c3:86:1f:4c:04:60:4f:8c:ba: cf:54:86:1d:6c:d3:24:43:e3:08:13:8f:e9:e4:45: e1:fa:29:24:4e:75:6c:be:6b:bd:e0:99:ed:b2:d1: 8d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:38:B9:AF:12:6F:55:5A:7C:A6:D7:8B:27:D0:37:BD:61:79:0C:0C X509v3 Authority Key Identifier: keyid:86:54:3D:1F:2F:4A:32:A9:76:AD:06:90:E9:A2:3A:A2:D6:21:AC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ca:0a:66:7f:b2:f7:bd:86:1c:ce:57:78:e2:34:d7:25:9c: 05:36:e5:df:79:b7:3f:d4:89:7c:e5:85:46:e4:32:89:4d:e7: eb:02:99:9f:eb:de:ea:d2:ba:82:1f:00:20:27:eb:dd:bd:eb: 48:4c:67:f0:0e:db:df:2e:66:3e:ed:70:c7:55:6a:a5:fa:e4: 10:85:ca:88:8f:8d:b1:11:aa:56:f3:cb:5b:5a:7e:73:d4:31: 71:09:a6:f2:b5:96:21:43:4e:66:0a:f2:0a:3d:c1:15:d1:2a: 80:b6:e6:66:ab:a3:9b:54:f9:e6:fc:1c:b3:bd:ec:f4:70:38: e4:68:a8:ea:48:51:6a:cb:50:d3:16:fa:ac:5b:ca:23:4b:b1: 2b:3c:26:fb:d6:4d:70:62:a0:dd:14:7b:e9:0a:44:46:61:05: 7f:a1:ac:0e:a3:c3:df:19:f4:06:2b:a5:46:73:eb:e7:af:88: 70:1a:e4:31:19:a0:11:db:ef:a2:c0:3f:f7:b1:72:51:84:04: f0:c0:50:a0:74:89:c7:54:18:33:4f:b0:a8:3d:27:17:86:fd: 02:24:84:c5:1a:41:b2:61:4a:20:37:5b:d9:59:86:48:80:1d: 11:97:f1:79:a9:ff:25:01:43:4a:4b:0e:fb:81:9f:f9:3c:bc: f4:d3:74:fd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYJi61N+V/ucLdI1KmbgGADKtKNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1NDNEMUYyRjRBMzJBOTc2QUQwNjkwRTlBMjNBQTJE NjIxQUM3RDAeFw0yNjA1MTMwOTQxMDNaFw0yNjA1MTQxMTMyMDNaMDMxMTAvBgNV BAMTKEM0MzhCOUFGMTI2RjU1NUE3Q0E2RDc4QjI3RDAzN0JENjE3OTBDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS38jGAMb2v/ETUT5a5444DqWB GhFVtRUQJSIOyyCqPZYLBjlcRG+iEwfdvLC+RQpwjuyeMT0tS/vN5ukyeONuoa8a xbinWbCv0WLyqJMgaS61WOFrFiGyzZD/4uiRNkIymAjwlmSQPGZ5ArASHWOgWQ+w 16My3+v3ryVql90E3BwTEfwasVATV16cOulRMDi0TSlll618AwA20Wr0z/gd6KX8 UYL3dX/d2rfTcjVMahddMa5ahZ2IBsLq2lhxAZd0zL2gEw5GcMQs3yurttMCxZRZ DXb9G8OGH0wEYE+Mus9Uhh1s0yRD4wgTj+nkReH6KSROdWy+a73gme2y0Y3FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxDi5rxJvVVp8pteLJ9A3vWF5DAwwHwYDVR0j BBgwFoAUhlQ9Hy9KMql2rQaQ6aI6otYhrH0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzE2MTQwNTMwMTI2MDI5MC8wLzg2NTQzRDFGMkY0QTMyQTk3NkFEMDY5MEU5QTIz QUEyRDYyMUFDN0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODY1NDNEMUYyRjRBMzJBOTc2QUQwNjkwRTlBMjNBQTJENjIxQUM3RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcxNjE0MDUzMDEyNjAyOTAvMC84NjU0M0QxRjJGNEEz MkE5NzZBRDA2OTBFOUEyM0FBMkQ2MjFBQzdELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADsoKZn+y972G HM5XeOI01yWcBTbl33m3P9SJfOWFRuQyiU3n6wKZn+ve6tK6gh8AICfr3b3rSExn 8A7b3y5mPu1wx1VqpfrkEIXKiI+NsRGqVvPLW1p+c9QxcQmm8rWWIUNOZgryCj3B FdEqgLbmZqujm1T55vwcs73s9HA45Gio6khRastQ0xb6rFvKI0uxKzwm+9ZNcGKg 3RR76QpERmEFf6GsDqPD3xn0BiulRnPr56+IcBrkMRmgEdvvosA/97FyUYQE8MBQ oHSJx1QYM0+wqD0nF4b9AiSExRpBsmFKIDdb2VmGSIAdEZfxean/JQFDSksO+4Gf +Ty89NN0/Q== -----END CERTIFICATE-----Generated at Wed May 13 20:55:04 2026 by rpki-client