$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft File: 86525FC830F7BAD1E457545F5ABE0187592FDF35.mft (raw, json) Hash identifier: SaOqwHpTog8jiveUJDDACKxRnF8yrFEI71Hi7e5gxWc= Subject key identifier: DF:70:2A:23:FB:72:FD:DE:5C:64:AD:D9:9C:F5:7B:41:8E:95:25:28 Authority key identifier: 86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 Certificate issuer: /CN=86525FC830F7BAD1E457545F5ABE0187592FDF35 Certificate serial: 307AD6B51CE311E9EEC394CF5974AF072DAAEAAB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft Manifest number: 8F Signing time: Wed 29 Jul 2026 09:44:01 +0000 Manifest this update: Wed 29 Jul 2026 09:39:01 +0000 Manifest next update: Thu 30 Jul 2026 12:46:01 +0000 Files and hashes: 1: 86525FC830F7BAD1E457545F5ABE0187592FDF35.crl (hash: FIJ9xVVtO6PeH2C/rwTzzPF3UFYXqG10YX76Nfjv9/k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.crl rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 12:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:7a:d6:b5:1c:e3:11:e9:ee:c3:94:cf:59:74:af:07:2d:aa:ea:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86525FC830F7BAD1E457545F5ABE0187592FDF35 Validity Not Before: Jul 29 09:39:01 2026 GMT Not After : Jul 30 12:46:01 2026 GMT Subject: CN=DF702A23FB72FDDE5C64ADD99CF57B418E952528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:9f:86:49:77:f2:46:2f:52:9e:91:dc:81:2a: de:db:d1:13:c1:71:45:61:32:92:43:79:88:1e:97: 19:03:e9:81:4c:68:33:e1:88:97:a3:0d:45:92:3e: fc:85:c5:b7:9b:00:99:f7:5b:78:b6:b7:3c:61:8c: bc:66:6b:52:85:a3:6d:b1:d2:1b:bc:b1:bd:b6:35: 25:a4:b3:09:97:a6:1f:e5:41:b9:52:bb:97:dc:f7: cc:43:99:bc:5f:ef:fd:e8:ca:45:f4:18:e0:e6:64: 47:7b:57:e9:e0:5b:10:04:8b:95:a8:de:f5:e0:65: c1:b2:78:ba:f7:c0:da:ae:72:d7:7e:99:aa:94:fa: 94:a7:14:cf:5c:4f:03:2d:a3:f5:72:46:bc:03:bb: cc:ef:f9:47:de:2a:b9:1b:a1:aa:7c:cf:f7:86:eb: c0:a5:5b:a9:5e:7c:6c:4f:89:3d:ae:1f:6c:cd:01: da:16:12:d3:6b:a9:7b:65:1c:cc:14:f2:b6:43:bf: 6a:38:f6:a0:98:27:4d:ac:6e:8a:d4:04:eb:35:e0: 18:da:33:f5:21:3a:47:6d:09:d8:3b:ee:d1:7e:54: a1:90:17:47:ba:53:99:95:9f:83:4b:f7:5e:f1:01: a4:c1:21:66:9c:9d:00:38:53:79:d0:85:58:8b:57: aa:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:70:2A:23:FB:72:FD:DE:5C:64:AD:D9:9C:F5:7B:41:8E:95:25:28 X509v3 Authority Key Identifier: keyid:86:52:5F:C8:30:F7:BA:D1:E4:57:54:5F:5A:BE:01:87:59:2F:DF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095966185683419139/1/86525FC830F7BAD1E457545F5ABE0187592FDF35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:82:1c:0b:9f:d3:9e:93:b8:81:f6:de:b3:38:b0:f5:eb:dc: 42:f0:65:63:45:38:80:ab:62:1c:9d:20:3f:ac:17:fc:dc:89: 0f:6b:6f:de:aa:38:27:9b:7e:91:b6:d5:62:31:38:46:e5:09: 0c:e1:f8:2b:aa:db:10:65:c0:ab:1d:37:8e:6c:6b:3a:88:91: 5b:bb:f5:b5:db:a2:6a:db:d6:0b:e5:f9:2a:76:ba:49:3c:ed: c9:8d:be:4b:5b:41:61:52:9d:57:c1:7c:ef:31:db:51:7d:f4: 5f:96:9a:16:ba:38:71:b9:dd:28:72:49:78:0b:5a:ca:d3:65: cd:5f:06:c4:81:8e:ac:7e:1a:c3:71:3f:76:1a:29:f5:2b:b6: 4a:82:1d:6f:82:d9:48:98:d0:b4:1d:dd:9d:0a:ba:2f:b7:1b: 90:ac:3d:1d:9d:14:4b:c8:08:a4:6c:25:d9:3a:c1:54:c7:c6: 0a:e5:a1:d1:ee:4f:5e:34:f8:05:62:55:d0:ab:28:c7:d1:96: 16:99:a9:ae:c3:51:5f:f0:9b:1b:2f:dd:8b:c2:e2:b0:69:5c: c6:a2:f8:cf:9d:66:d9:23:aa:6e:ee:21:66:21:e4:22:0c:f2: eb:f4:01:f4:83:16:ae:e5:ca:38:55:a1:e1:33:7f:30:e7:bd: 0a:4a:6b:71 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMHrWtRzjEenuw5TPWXSvBy2q6qswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1MjVGQzgzMEY3QkFEMUU0NTc1NDVGNUFCRTAxODc1 OTJGREYzNTAeFw0yNjA3MjkwOTM5MDFaFw0yNjA3MzAxMjQ2MDFaMDMxMTAvBgNV BAMTKERGNzAyQTIzRkI3MkZEREU1QzY0QUREOTlDRjU3QjQxOEU5NTI1MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcn4ZJd/JGL1KekdyBKt7b0RPB cUVhMpJDeYgelxkD6YFMaDPhiJejDUWSPvyFxbebAJn3W3i2tzxhjLxma1KFo22x 0hu8sb22NSWkswmXph/lQblSu5fc98xDmbxf7/3oykX0GODmZEd7V+ngWxAEi5Wo 3vXgZcGyeLr3wNquctd+maqU+pSnFM9cTwMto/VyRrwDu8zv+UfeKrkboap8z/eG 68ClW6lefGxPiT2uH2zNAdoWEtNrqXtlHMwU8rZDv2o49qCYJ02sborUBOs14Bja M/UhOkdtCdg77tF+VKGQF0e6U5mVn4NL917xAaTBIWacnQA4U3nQhViLV6o1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU33AqI/ty/d5cZK3ZnPV7QY6VJSgwHwYDVR0j BBgwFoAUhlJfyDD3utHkV1RfWr4Bh1kv3zUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2NjE4NTY4MzQxOTEzOS8xLzg2NTI1RkM4MzBGN0JBRDFFNDU3NTQ1RjVBQkUw MTg3NTkyRkRGMzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODY1MjVGQzgzMEY3QkFEMUU0NTc1NDVGNUFCRTAxODc1OTJGREYzNS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU5NjYxODU2ODM0MTkxMzkvMS84NjUyNUZDODMwRjdC QUQxRTQ1NzU0NUY1QUJFMDE4NzU5MkZERjM1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4IcC5/TnpO4 gfbesziw9evcQvBlY0U4gKtiHJ0gP6wX/NyJD2tv3qo4J5t+kbbVYjE4RuUJDOH4 K6rbEGXAqx03jmxrOoiRW7v1tduiatvWC+X5Kna6STztyY2+S1tBYVKdV8F87zHb UX30X5aaFro4cbndKHJJeAtaytNlzV8GxIGOrH4aw3E/dhop9Su2SoIdb4LZSJjQ tB3dnQq6L7cbkKw9HZ0US8gIpGwl2TrBVMfGCuWh0e5PXjT4BWJV0Ksox9GWFpmp rsNRX/CbGy/di8LisGlcxqL4z51m2SOqbu4hZiHkIgzy6/QB9IMWruXKOFWh4TN/ MOe9CkprcQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:01:49 2026 by rpki-client