$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft File: 86525FC830F7BAD1E457545F5ABE0187592FDF35.mft (raw, json) Hash identifier: iwnGQZG1iBmKL1A30Bsr7yK8GsudYNkE2dseE9/bWT0= Subject key identifier: 2C:A9:35:58:A8:BA:F8:77:EC:01:C3:96:9F:C7:9F:2F:23:13:27:24 Authority key identifier: 86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 Certificate issuer: /CN=86525FC830F7BAD1E457545F5ABE0187592FDF35 Certificate serial: 0A9356B7B0BCEF91CFA064744C96D68A93A00752 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft Manifest number: 07 Signing time: Fri 17 Apr 2026 00:39:37 +0000 Manifest this update: Fri 17 Apr 2026 00:34:37 +0000 Manifest next update: Sat 18 Apr 2026 01:57:37 +0000 Files and hashes: 1: 86525FC830F7BAD1E457545F5ABE0187592FDF35.crl (hash: oKuru8Q41t8LYbY9kKJrgBWGv25iHIKw0hN8vv8DVhU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 01:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:93:56:b7:b0:bc:ef:91:cf:a0:64:74:4c:96:d6:8a:93:a0:07:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86525FC830F7BAD1E457545F5ABE0187592FDF35 Validity Not Before: Apr 17 00:34:37 2026 GMT Not After : Apr 18 01:57:37 2026 GMT Subject: CN=2CA93558A8BAF877EC01C3969FC79F2F23132724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a0:ab:59:fb:25:ab:62:aa:1c:1c:d4:5a:23: 17:7d:2e:41:73:4f:7f:f2:83:26:a9:70:29:e7:45: 7f:58:a9:a8:d0:8e:10:f8:ce:b3:a1:2a:60:6e:09: 3f:cd:82:23:37:0e:25:de:50:0a:e3:8a:23:07:a6: 17:0b:2e:3d:1b:3b:92:e9:c8:6c:12:ec:50:29:3e: 44:d2:e8:70:be:85:3d:8d:eb:9f:0d:74:00:85:a5: 8e:db:94:ed:fe:d4:f1:86:42:2d:81:ec:79:05:d7: b4:44:0b:2e:f9:b7:ee:31:c8:d0:f2:3d:a3:6d:90: 6f:cf:fb:fb:34:0b:66:b4:c3:b3:5f:f4:b3:f3:f9: 61:b3:c3:c5:cd:43:e3:59:3c:c9:04:6d:f2:d1:e4: 96:96:c0:95:90:b1:e8:9b:8d:b3:4b:2b:7d:8f:18: 06:f5:99:17:0c:15:9a:0f:51:d8:08:a0:0f:a5:5d: 46:ae:1f:4a:03:3f:cd:04:3f:0d:b7:5a:7f:51:4c: 93:05:b0:b4:c6:6b:cb:db:c9:43:7a:3c:94:59:cc: 42:09:cd:a3:76:d9:0c:d3:c7:2c:dc:b4:a8:8a:78: d9:70:2c:ab:b2:57:c1:59:53:1a:dc:59:d2:b4:66: 85:c8:37:5c:74:ab:75:3d:4b:8a:c7:18:b3:a1:e8: b7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A9:35:58:A8:BA:F8:77:EC:01:C3:96:9F:C7:9F:2F:23:13:27:24 X509v3 Authority Key Identifier: keyid:86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:69:4a:46:a9:d2:c6:2e:82:e9:da:88:7a:6e:04:92:2c:21: 5c:d2:19:36:92:b8:98:2e:44:2d:5a:da:e7:36:34:71:2e:7a: 48:90:c5:08:ec:f8:cc:96:6e:17:e3:3d:3e:10:b8:c2:1a:c2: de:9a:e4:e1:40:89:c8:a1:3d:ff:2a:18:fa:08:4c:01:77:60: d6:c6:94:21:f4:c4:c8:ef:e0:c6:81:ff:94:c1:8c:85:0b:9b: 47:f5:14:af:d3:a3:1a:67:2a:9c:5f:8e:e9:19:5c:fb:8a:78: af:81:cc:a3:62:81:41:a1:8d:36:8d:6b:ce:18:1b:93:e2:af: c7:86:7b:f2:0f:48:7c:45:f8:ad:c6:c2:7f:9a:74:d8:83:b2: 2b:31:92:8b:4e:8e:ae:70:f0:07:f1:2e:ef:9e:6a:0a:12:9d: c9:fc:00:69:24:dc:56:d4:9f:03:6c:4d:dc:b7:e0:ec:fd:ea: 90:86:a5:27:b2:d2:b6:eb:9d:a4:7e:d0:78:f5:45:40:f1:6b: 7e:39:86:6f:b2:de:20:b3:42:81:c5:60:58:c2:89:bb:71:26: 4f:cd:28:ff:9b:1e:8a:e1:79:bc:84:fe:86:0b:e0:1f:13:04: 5c:f9:a9:3e:0e:37:07:bc:54:23:25:b4:f2:86:ab:54:4f:d9: 2b:34:7f:c4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCpNWt7C875HPoGR0TJbWipOgB1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MjVGQzgzMEY3QkFEMUU0NTc1NDVGNUFCRTAxODc1 OTJGREYzNTAeFw0yNjA0MTcwMDM0MzdaFw0yNjA0MTgwMTU3MzdaMDMxMTAvBgNV BAMTKDJDQTkzNTU4QThCQUY4NzdFQzAxQzM5NjlGQzc5RjJGMjMxMzI3MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJoKtZ+yWrYqocHNRaIxd9LkFz T3/ygyapcCnnRX9YqajQjhD4zrOhKmBuCT/NgiM3DiXeUArjiiMHphcLLj0bO5Lp yGwS7FApPkTS6HC+hT2N658NdACFpY7blO3+1PGGQi2B7HkF17RECy75t+4xyNDy PaNtkG/P+/s0C2a0w7Nf9LPz+WGzw8XNQ+NZPMkEbfLR5JaWwJWQseibjbNLK32P GAb1mRcMFZoPUdgIoA+lXUauH0oDP80EPw23Wn9RTJMFsLTGa8vbyUN6PJRZzEIJ zaN22QzTxyzctKiKeNlwLKuyV8FZUxrcWdK0ZoXIN1x0q3U9S4rHGLOh6LejAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULKk1WKi6+HfsAcOWn8efLyMTJyQwHwYDVR0j BBgwFoAUhlJfyDD3utHkV1RfWr4Bh1kv3zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8xLzg2NTI1RkM4MzBGN0JBRDFFNDU3NTQ1RjVBQkUw MTg3NTkyRkRGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODY1MjVGQzgzMEY3QkFEMUU0NTc1NDVGNUFCRTAxODc1OTJGREYzNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMS84NjUyNUZDODMwRjdC QUQxRTQ1NzU0NUY1QUJFMDE4NzU5MkZERjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGlKRqnSxi6C 6dqIem4EkiwhXNIZNpK4mC5ELVra5zY0cS56SJDFCOz4zJZuF+M9PhC4whrC3prk 4UCJyKE9/yoY+ghMAXdg1saUIfTEyO/gxoH/lMGMhQubR/UUr9OjGmcqnF+O6Rlc +4p4r4HMo2KBQaGNNo1rzhgbk+Kvx4Z78g9IfEX4rcbCf5p02IOyKzGSi06OrnDw B/Eu755qChKdyfwAaSTcVtSfA2xN3Lfg7P3qkIalJ7LStuudpH7QePVFQPFrfjmG b7LeILNCgcVgWMKJu3EmT80o/5seiuF5vIT+hgvgHxMEXPmpPg43B7xUIyW08oar VE/ZKzR/xA== -----END CERTIFICATE-----Generated at Fri Apr 17 17:43:05 2026 by rpki-client