$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft File: 86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft (raw, json) Hash identifier: MKTrg5Zg0P2VxlgzwQRNIjFV2A0UUU5DgDO/6B9M8L0= Subject key identifier: D8:5A:48:91:B3:CB:7F:29:9A:BF:5E:75:14:B4:A6:02:7C:88:E2:C2 Authority key identifier: 86:54:3D:1F:2F:4A:32:A9:76:AD:06:90:E9:A2:3A:A2:D6:21:AC:7D Certificate issuer: /CN=86543D1F2F4A32A976AD0690E9A23AA2D621AC7D Certificate serial: 54D5F762510E6AB6822FBEAE5DCBAF43B5086D0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft Manifest number: 03 Signing time: Fri 17 Apr 2026 08:29:42 +0000 Manifest this update: Fri 17 Apr 2026 08:24:42 +0000 Manifest next update: Sat 18 Apr 2026 11:47:42 +0000 Files and hashes: 1: 3232332e3235352e3233372e302f32342d3234203d3e203536303030.roa (hash: qUwf0o69H6ppCY6mm1AEhhtTQQ3The81VFkirYuq60I=) 2: 86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl (hash: Ixgmz3BQmuONEM4Awde9hQwSSguKT04W3spGNpInZn4=) 3: 3232332e3235352e3233392e302f32342d3234203d3e203536303030.roa (hash: hOx7RICfLL6wLfEZuyeFfup3kP4OhsdcyjT0B7ETRfw=) 4: 3232332e3235352e3233382e302f32342d3234203d3e203536303030.roa (hash: xubi9W0fDO/ruvLyfjo/nAIpEUwXGp+xWOgUYC+FPJc=) 5: 3232332e3235352e3233362e302f32342d3234203d3e203536303030.roa (hash: 5Z2RS7xTpyntFttcy8ElSigLdmkbVxoyMDpFQuVXz5s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 11:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d5:f7:62:51:0e:6a:b6:82:2f:be:ae:5d:cb:af:43:b5:08:6d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86543D1F2F4A32A976AD0690E9A23AA2D621AC7D Validity Not Before: Apr 17 08:24:42 2026 GMT Not After : Apr 18 11:47:42 2026 GMT Subject: CN=D85A4891B3CB7F299ABF5E7514B4A6027C88E2C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fa:22:8b:31:b9:de:ce:d9:74:ba:02:e5:93: ae:72:56:38:1d:c3:67:ee:56:30:b5:8a:42:28:1b: 1e:d1:7d:29:c7:10:e7:0a:12:0e:87:a3:53:96:14: 15:03:7e:b1:fe:13:33:52:4c:cd:83:b9:c3:ad:3a: bc:50:ab:a6:3e:8b:67:06:ca:11:b9:0b:1f:1c:f8: 48:70:96:ff:5a:45:ba:67:e6:3c:7a:2e:5a:bd:f4: 7d:73:7b:ba:b6:0b:d1:2c:6b:d7:89:50:b4:80:95: 82:4f:23:11:20:a7:b6:5c:95:90:67:0a:aa:78:32: 5c:68:0d:1a:65:06:e2:d8:13:b3:de:44:76:7f:53: 2f:27:0f:f7:5e:0e:82:90:96:0f:31:7d:a6:37:66: db:c2:43:8e:f2:11:61:c0:72:bd:11:62:9f:ef:cc: 2a:33:a1:3f:b7:fa:d6:cd:3f:65:34:62:0d:e0:d7: bd:32:77:2f:54:ed:cb:3b:9b:5c:bc:58:ea:ac:d1: 7c:e1:17:e7:28:49:70:2d:d6:5c:65:59:6a:9a:f7: ad:cd:c1:1d:66:b0:06:f8:82:78:d7:8d:ec:e2:45: 09:e8:0b:50:21:3b:59:32:b4:c4:a2:37:fc:0e:a0: 5b:07:56:53:78:8d:9b:ae:d1:a4:71:23:1e:74:e2: 87:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5A:48:91:B3:CB:7F:29:9A:BF:5E:75:14:B4:A6:02:7C:88:E2:C2 X509v3 Authority Key Identifier: keyid:86:54:3D:1F:2F:4A:32:A9:76:AD:06:90:E9:A2:3A:A2:D6:21:AC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:5c:d3:81:a7:1f:9f:ee:7b:02:6c:c2:6e:1f:f0:98:03:ff: 9d:81:a8:4b:e7:56:51:87:b4:1b:3b:61:5f:b9:19:50:8e:d6: e8:ac:46:17:0f:ad:e2:1d:10:f9:f8:d7:8f:63:f9:f5:ed:34: 58:9f:a5:eb:de:66:58:fc:98:a6:50:44:1e:66:fe:ca:e6:16: b3:86:4f:64:52:c3:eb:be:f1:52:33:e1:75:cb:eb:b3:e3:dd: 22:75:34:d0:21:ee:3f:d3:3f:7a:15:b6:df:dd:fd:83:ee:57: fb:45:83:11:20:e2:60:8e:0f:59:66:a7:ce:3a:c2:16:f4:46: 59:a8:6c:b3:10:42:9c:5e:65:6f:ca:98:34:69:54:75:62:ce: c2:e3:9b:99:43:4d:b1:0a:88:58:67:7a:59:d6:0a:8a:c0:d7: 48:4d:1f:9a:27:c3:4d:7d:db:bf:ac:c7:e9:de:7e:bf:23:41: 18:7b:19:a0:b9:38:c1:c5:12:37:85:30:a9:26:59:ef:c6:d6: ca:3a:dd:13:e7:85:25:f6:3d:15:8c:e7:d1:8f:8d:32:7c:be: e7:b4:b9:3a:e0:9e:31:f9:67:d6:a0:59:dd:e7:7e:31:dc:4b: 75:40:14:23:fc:02:91:ff:b1:2f:67:57:13:b2:cd:6a:78:3d: 7c:bc:08:5d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVNX3YlEOaraCL76uXcuvQ7UIbQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1NDNEMUYyRjRBMzJBOTc2QUQwNjkwRTlBMjNBQTJE NjIxQUM3RDAeFw0yNjA0MTcwODI0NDJaFw0yNjA0MTgxMTQ3NDJaMDMxMTAvBgNV BAMTKEQ4NUE0ODkxQjNDQjdGMjk5QUJGNUU3NTE0QjRBNjAyN0M4OEUyQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf+iKLMbneztl0ugLlk65yVjgd w2fuVjC1ikIoGx7RfSnHEOcKEg6Ho1OWFBUDfrH+EzNSTM2DucOtOrxQq6Y+i2cG yhG5Cx8c+Ehwlv9aRbpn5jx6Llq99H1ze7q2C9Esa9eJULSAlYJPIxEgp7ZclZBn Cqp4MlxoDRplBuLYE7PeRHZ/Uy8nD/deDoKQlg8xfaY3ZtvCQ47yEWHAcr0RYp/v zCozoT+3+tbNP2U0Yg3g170ydy9U7cs7m1y8WOqs0XzhF+coSXAt1lxlWWqa963N wR1msAb4gnjXjeziRQnoC1AhO1kytMSiN/wOoFsHVlN4jZuu0aRxIx504oeVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2FpIkbPLfymav151FLSmAnyI4sIwHwYDVR0j BBgwFoAUhlQ9Hy9KMql2rQaQ6aI6otYhrH0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzE2MTQwNTMwMTI2MDI5MC8wLzg2NTQzRDFGMkY0QTMyQTk3NkFEMDY5MEU5QTIz QUEyRDYyMUFDN0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODY1NDNEMUYyRjRBMzJBOTc2QUQwNjkwRTlBMjNBQTJENjIxQUM3RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcxNjE0MDUzMDEyNjAyOTAvMC84NjU0M0QxRjJGNEEz MkE5NzZBRDA2OTBFOUEyM0FBMkQ2MjFBQzdELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVzTgacfn+57 AmzCbh/wmAP/nYGoS+dWUYe0GzthX7kZUI7W6KxGFw+t4h0Q+fjXj2P59e00WJ+l 695mWPyYplBEHmb+yuYWs4ZPZFLD677xUjPhdcvrs+PdInU00CHuP9M/ehW23939 g+5X+0WDESDiYI4PWWanzjrCFvRGWahssxBCnF5lb8qYNGlUdWLOwuObmUNNsQqI WGd6WdYKisDXSE0fmifDTX3bv6zH6d5+vyNBGHsZoLk4wcUSN4UwqSZZ78bWyjrd E+eFJfY9FYzn0Y+NMny+57S5OuCeMfln1qBZ3ed+MdxLdUAUI/wCkf+xL2dXE7LN ang9fLwIXQ== -----END CERTIFICATE-----Generated at Fri Apr 17 23:55:06 2026 by rpki-client