$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft File: 86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft (raw, json) Hash identifier: u862VTJiGLN3slPz+t7EF9qKGKokJJ+Kwq7uIJ1wz9I= Subject key identifier: 56:85:50:AC:BB:CB:5B:B5:96:5A:8D:07:49:AE:FB:C5:A4:5E:A4:FE Authority key identifier: 86:54:3D:1F:2F:4A:32:A9:76:AD:06:90:E9:A2:3A:A2:D6:21:AC:7D Certificate issuer: /CN=86543D1F2F4A32A976AD0690E9A23AA2D621AC7D Certificate serial: 038E54EA73369BFCDC51F8180A35D2F2EF55675F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft Manifest number: 85 Signing time: Thu 23 Jul 2026 16:44:08 +0000 Manifest this update: Thu 23 Jul 2026 16:39:08 +0000 Manifest next update: Fri 24 Jul 2026 20:09:08 +0000 Files and hashes: 1: 3232332e3235352e3233392e302f32342d3234203d3e203536303030.roa (hash: hOx7RICfLL6wLfEZuyeFfup3kP4OhsdcyjT0B7ETRfw=) 2: 3232332e3235352e3233382e302f32342d3234203d3e203536303030.roa (hash: xubi9W0fDO/ruvLyfjo/nAIpEUwXGp+xWOgUYC+FPJc=) 3: 86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl (hash: VifA5V3xfe4yOkdCtFYQksOQ1ZqjxnO9cqfU2XlBFvA=) 4: 3232332e3235352e3233362e302f32342d3234203d3e203536303030.roa (hash: 5Z2RS7xTpyntFttcy8ElSigLdmkbVxoyMDpFQuVXz5s=) 5: 3232332e3235352e3233372e302f32342d3234203d3e203536303030.roa (hash: qUwf0o69H6ppCY6mm1AEhhtTQQ3The81VFkirYuq60I=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:8e:54:ea:73:36:9b:fc:dc:51:f8:18:0a:35:d2:f2:ef:55:67:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86543D1F2F4A32A976AD0690E9A23AA2D621AC7D Validity Not Before: Jul 23 16:39:08 2026 GMT Not After : Jul 24 20:09:08 2026 GMT Subject: CN=568550ACBBCB5BB5965A8D0749AEFBC5A45EA4FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a0:b1:66:d5:85:a2:fd:f7:e6:3c:41:92:c6: 79:28:8a:35:15:0b:16:51:08:de:b9:85:a5:76:c3: 1b:03:9b:4b:fb:4b:97:d8:66:86:a9:03:c5:86:f9: 1b:e6:83:35:51:31:43:f8:ba:da:02:d5:87:f9:41: 74:48:db:1e:3e:26:40:1a:e8:a1:2b:61:03:2c:1d: 16:42:20:d9:01:68:d1:9d:8d:f8:01:25:0f:38:d7: 97:df:28:8a:a2:64:ed:08:ef:48:a5:64:a6:19:56: fc:64:93:18:2f:66:a6:f4:18:be:d5:fe:4a:2f:54: 62:e7:e8:18:3f:3a:a8:a7:db:ad:47:3f:68:90:61: b1:4b:cd:cd:d0:6b:41:ba:dc:6e:0c:a3:76:8b:9c: 64:10:47:e7:1f:1d:49:8d:b3:02:8b:d3:31:91:12: 7e:cb:91:81:26:ed:1f:9b:63:a1:d9:ae:de:80:4a: 4c:60:58:3a:c8:04:b5:f4:8c:57:59:41:23:4d:12: bf:4e:51:80:c3:e5:75:bc:91:b6:7b:ef:db:0b:e3: 17:fa:38:26:f1:ce:e4:c6:e5:1a:01:c7:44:fa:7f: 0d:39:db:f9:81:0b:1f:59:c3:73:1a:1c:44:e7:1c: b5:49:e4:da:31:44:37:08:e2:53:e1:c8:b9:59:77: 31:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:85:50:AC:BB:CB:5B:B5:96:5A:8D:07:49:AE:FB:C5:A4:5E:A4:FE X509v3 Authority Key Identifier: keyid:86:54:3D:1F:2F:4A:32:A9:76:AD:06:90:E9:A2:3A:A2:D6:21:AC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:86:fb:35:c0:5c:2b:b7:b5:f1:81:57:c4:9f:28:14:b3:8b: 53:82:34:8f:9f:39:b5:27:76:55:cb:cc:ba:b1:a7:45:5b:db: 72:83:d2:c1:d7:2b:9a:f4:b2:f1:ae:fb:ff:73:2e:37:40:d2: 6e:2d:23:c6:e5:4a:26:39:3d:a9:80:33:f3:29:97:d6:06:4d: af:d6:5f:6e:51:ce:cf:34:48:f5:72:4c:a1:96:0d:f0:ba:3b: ee:00:aa:12:85:2b:62:d2:72:87:c6:39:1f:51:88:9a:71:bd: 8a:18:4d:e3:25:7d:87:25:40:03:c1:0a:68:19:88:f3:64:f2: f6:9d:04:62:6e:c5:70:84:3f:f4:45:aa:64:bd:9c:0a:af:71: 71:12:ca:e6:89:ef:b0:67:ed:38:bb:15:04:c0:66:70:f8:1e: 20:c3:37:5a:95:85:44:5c:5e:06:c2:d3:a1:a0:1f:5c:b1:f3: 76:d4:b7:a7:84:03:7b:f1:cb:16:10:0c:ab:0d:3d:04:01:c4: f8:0d:9a:c3:e3:e6:7f:37:89:a7:88:77:16:74:2a:cc:8b:6e: 03:d5:e2:26:b9:f9:df:81:65:93:ec:c8:9f:cf:95:56:18:a0: 0f:4e:11:2b:d0:bd:a3:c2:67:1d:b8:19:3c:cd:af:90:75:69: d7:38:21:48 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUA45U6nM2m/zcUfgYCjXS8u9VZ18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1NDNEMUYyRjRBMzJBOTc2QUQwNjkwRTlBMjNBQTJE NjIxQUM3RDAeFw0yNjA3MjMxNjM5MDhaFw0yNjA3MjQyMDA5MDhaMDMxMTAvBgNV BAMTKDU2ODU1MEFDQkJDQjVCQjU5NjVBOEQwNzQ5QUVGQkM1QTQ1RUE0RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdoLFm1YWi/ffmPEGSxnkoijUV CxZRCN65haV2wxsDm0v7S5fYZoapA8WG+RvmgzVRMUP4utoC1Yf5QXRI2x4+JkAa 6KErYQMsHRZCINkBaNGdjfgBJQ8415ffKIqiZO0I70ilZKYZVvxkkxgvZqb0GL7V /kovVGLn6Bg/Oqin261HP2iQYbFLzc3Qa0G63G4Mo3aLnGQQR+cfHUmNswKL0zGR En7LkYEm7R+bY6HZrt6ASkxgWDrIBLX0jFdZQSNNEr9OUYDD5XW8kbZ779sL4xf6 OCbxzuTG5RoBx0T6fw052/mBCx9Zw3MaHETnHLVJ5NoxRDcI4lPhyLlZdzH7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVoVQrLvLW7WWWo0HSa77xaRepP4wHwYDVR0j BBgwFoAUhlQ9Hy9KMql2rQaQ6aI6otYhrH0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzE2MTQwNTMwMTI2MDI5MC8wLzg2NTQzRDFGMkY0QTMyQTk3NkFEMDY5MEU5QTIz QUEyRDYyMUFDN0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODY1NDNEMUYyRjRBMzJBOTc2QUQwNjkwRTlBMjNBQTJENjIxQUM3RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcxNjE0MDUzMDEyNjAyOTAvMC84NjU0M0QxRjJGNEEz MkE5NzZBRDA2OTBFOUEyM0FBMkQ2MjFBQzdELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4b7NcBcK7e1 8YFXxJ8oFLOLU4I0j585tSd2VcvMurGnRVvbcoPSwdcrmvSy8a77/3MuN0DSbi0j xuVKJjk9qYAz8ymX1gZNr9ZfblHOzzRI9XJMoZYN8Lo77gCqEoUrYtJyh8Y5H1GI mnG9ihhN4yV9hyVAA8EKaBmI82Ty9p0EYm7FcIQ/9EWqZL2cCq9xcRLK5onvsGft OLsVBMBmcPgeIMM3WpWFRFxeBsLToaAfXLHzdtS3p4QDe/HLFhAMqw09BAHE+A2a w+PmfzeJp4h3FnQqzItuA9XiJrn534Flk+zIn8+VVhigD04RK9C9o8JnHbgZPM2v kHVp1zghSA== -----END CERTIFICATE-----Generated at Fri Jul 24 09:03:31 2026 by rpki-client