$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft File: 86525FC830F7BAD1E457545F5ABE0187592FDF35.mft (raw, json) Hash identifier: 1CN6dc2aZhyAtr8yVRDhUdC5fXmIrKSOjAo/5/Zlrqw= Subject key identifier: AE:6F:D3:B8:90:F3:1B:66:10:D9:17:E0:07:21:64:9F:70:BE:AD:7A Authority key identifier: 86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 Certificate issuer: /CN=86525FC830F7BAD1E457545F5ABE0187592FDF35 Certificate serial: 5885B1BD5D487AB61189D1CAC66273538F99D131 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft Manifest number: 54 Signing time: Sat 13 Jun 2026 21:17:14 +0000 Manifest this update: Sat 13 Jun 2026 21:12:14 +0000 Manifest next update: Mon 15 Jun 2026 00:03:14 +0000 Files and hashes: 1: 86525FC830F7BAD1E457545F5ABE0187592FDF35.crl (hash: VcZW1lROjn9z0IqiHzw91CuA2guD6zXyaq0MDpntypQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:85:b1:bd:5d:48:7a:b6:11:89:d1:ca:c6:62:73:53:8f:99:d1:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86525FC830F7BAD1E457545F5ABE0187592FDF35 Validity Not Before: Jun 13 21:12:14 2026 GMT Not After : Jun 15 00:03:14 2026 GMT Subject: CN=AE6FD3B890F31B6610D917E00721649F70BEAD7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d5:86:80:ec:fa:00:47:fb:13:e7:87:7a:1b: 0c:73:f7:bf:7c:1f:37:11:e8:41:d7:ee:dd:68:24: 84:54:32:d7:7a:9d:d0:c3:1d:f0:3a:6d:9d:43:79: e2:61:17:78:3a:84:e6:42:26:81:2b:23:32:db:a8: d4:50:3f:21:0b:9d:6a:34:69:09:4c:ce:fa:da:3e: fb:6f:8c:54:f4:45:df:39:5c:62:54:39:3e:2d:e0: af:d5:19:48:17:c4:23:c5:92:81:29:5e:f1:7d:8a: 59:85:bf:1d:75:0c:3a:d2:7d:a1:e1:64:b7:b5:57: 34:9d:e3:86:94:1d:76:e0:81:94:7b:e7:20:e9:63: d7:71:58:31:71:a3:24:80:c7:b1:a7:2a:e7:4f:d2: 1a:57:e4:af:85:f0:f3:c0:6f:64:70:f5:c4:f0:ee: e8:fc:23:b1:21:08:1a:27:75:89:0f:55:c5:36:0e: 9c:1f:c4:c0:7e:82:b2:ee:28:cd:c4:a1:4b:1c:1d: 7b:bf:f0:77:da:29:84:86:98:2e:80:67:f4:34:8a: f6:32:bc:f6:5b:39:1e:11:66:ae:65:de:fe:0a:16: 42:17:6c:84:08:1f:75:b4:26:96:9a:a9:4a:5b:b7: fa:e0:f9:43:a3:9e:f1:58:09:fe:19:06:0d:f3:aa: cf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6F:D3:B8:90:F3:1B:66:10:D9:17:E0:07:21:64:9F:70:BE:AD:7A X509v3 Authority Key Identifier: keyid:86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c3:97:dd:5b:97:de:7f:40:46:a8:03:32:35:f6:fa:09:2d: 6b:af:43:bf:3b:88:bc:f9:94:a7:ef:89:d8:7f:ab:ba:1d:b9: e8:d0:c3:e5:6c:7d:01:78:d9:b9:ff:cb:ad:e5:df:4c:16:71: cf:92:66:a4:08:f1:5b:9d:64:a2:fc:2d:9b:71:52:3e:8a:10: aa:37:29:bf:7f:53:97:78:fd:7a:3d:33:39:c9:83:69:93:66: 30:71:11:1e:4f:15:b4:a1:d9:c2:8f:21:df:36:ec:4d:e9:a4: 1a:67:f2:05:7c:96:6c:18:9b:9a:d7:da:3f:b0:5d:f4:04:24: 42:09:22:1c:c1:8a:bb:43:e9:05:31:e8:ef:10:df:f4:75:d8: c1:a6:25:a1:84:40:16:7a:59:59:36:8e:3f:ce:72:44:3e:bc: eb:5f:22:fa:03:f7:c4:f9:db:80:f0:73:9e:6b:6f:df:7d:f2: 37:68:69:33:42:f1:90:05:5e:a5:f8:4a:96:2e:97:42:cd:16: 93:9d:23:5e:40:17:e9:13:b4:6c:bf:c3:cc:a0:c7:7b:1c:49: 7b:4a:01:6f:94:c4:ae:9a:b0:96:25:be:5b:31:e6:29:1e:7f: f4:b0:55:89:78:ad:5a:31:f8:e0:eb:b4:fe:cd:df:ad:1f:21: 56:0c:05:42 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWIWxvV1IerYRidHKxmJzU4+Z0TEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MjVGQzgzMEY3QkFEMUU0NTc1NDVGNUFCRTAxODc1 OTJGREYzNTAeFw0yNjA2MTMyMTEyMTRaFw0yNjA2MTUwMDAzMTRaMDMxMTAvBgNV BAMTKEFFNkZEM0I4OTBGMzFCNjYxMEQ5MTdFMDA3MjE2NDlGNzBCRUFEN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX1YaA7PoAR/sT54d6Gwxz9798 HzcR6EHX7t1oJIRUMtd6ndDDHfA6bZ1DeeJhF3g6hOZCJoErIzLbqNRQPyELnWo0 aQlMzvraPvtvjFT0Rd85XGJUOT4t4K/VGUgXxCPFkoEpXvF9ilmFvx11DDrSfaHh ZLe1VzSd44aUHXbggZR75yDpY9dxWDFxoySAx7GnKudP0hpX5K+F8PPAb2Rw9cTw 7uj8I7EhCBondYkPVcU2DpwfxMB+grLuKM3EoUscHXu/8HfaKYSGmC6AZ/Q0ivYy vPZbOR4RZq5l3v4KFkIXbIQIH3W0JpaaqUpbt/rg+UOjnvFYCf4ZBg3zqs8XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrm/TuJDzG2YQ2RfgByFkn3C+rXowHwYDVR0j BBgwFoAUhlJfyDD3utHkV1RfWr4Bh1kv3zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8xLzg2NTI1RkM4MzBGN0JBRDFFNDU3NTQ1RjVBQkUw MTg3NTkyRkRGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODY1MjVGQzgzMEY3QkFEMUU0NTc1NDVGNUFCRTAxODc1OTJGREYzNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMS84NjUyNUZDODMwRjdC QUQxRTQ1NzU0NUY1QUJFMDE4NzU5MkZERjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsOX3VuX3n9A RqgDMjX2+gkta69DvzuIvPmUp++J2H+ruh256NDD5Wx9AXjZuf/LreXfTBZxz5Jm pAjxW51kovwtm3FSPooQqjcpv39Tl3j9ej0zOcmDaZNmMHERHk8VtKHZwo8h3zbs TemkGmfyBXyWbBibmtfaP7Bd9AQkQgkiHMGKu0PpBTHo7xDf9HXYwaYloYRAFnpZ WTaOP85yRD68618i+gP3xPnbgPBznmtv333yN2hpM0LxkAVepfhKli6XQs0Wk50j XkAX6RO0bL/DzKDHexxJe0oBb5TErpqwliW+WzHmKR5/9LBViXitWjH44Ou0/s3f rR8hVgwFQg== -----END CERTIFICATE-----Generated at Sun Jun 14 07:09:30 2026 by rpki-client