$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft File: 86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft (raw, json) Hash identifier: h1embp8K8YKY3ImJR6UXwf/zGXskCPgXsAsESoGOaV4= Subject key identifier: 0D:34:F7:3F:49:FD:B2:AE:D5:F6:CD:2F:23:41:51:A1:5F:DA:A7:DF Authority key identifier: 86:54:3D:1F:2F:4A:32:A9:76:AD:06:90:E9:A2:3A:A2:D6:21:AC:7D Certificate issuer: /CN=86543D1F2F4A32A976AD0690E9A23AA2D621AC7D Certificate serial: 21606B7CAB4B4EB26F862C90DD09A9F8FADC557A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft Manifest number: 8D Signing time: Wed 29 Jul 2026 16:14:45 +0000 Manifest this update: Wed 29 Jul 2026 16:09:45 +0000 Manifest next update: Thu 30 Jul 2026 16:36:45 +0000 Files and hashes: 1: 3232332e3235352e3233372e302f32342d3234203d3e203536303030.roa (hash: qUwf0o69H6ppCY6mm1AEhhtTQQ3The81VFkirYuq60I=) 2: 3232332e3235352e3233392e302f32342d3234203d3e203536303030.roa (hash: hOx7RICfLL6wLfEZuyeFfup3kP4OhsdcyjT0B7ETRfw=) 3: 86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl (hash: YulnGqHbgMKsojcqPj6BKgwOZV2ebWGPVjPHnEircoA=) 4: 3232332e3235352e3233362e302f32342d3234203d3e203536303030.roa (hash: 5Z2RS7xTpyntFttcy8ElSigLdmkbVxoyMDpFQuVXz5s=) 5: 3232332e3235352e3233382e302f32342d3234203d3e203536303030.roa (hash: xubi9W0fDO/ruvLyfjo/nAIpEUwXGp+xWOgUYC+FPJc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 16:36:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:60:6b:7c:ab:4b:4e:b2:6f:86:2c:90:dd:09:a9:f8:fa:dc:55:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86543D1F2F4A32A976AD0690E9A23AA2D621AC7D Validity Not Before: Jul 29 16:09:45 2026 GMT Not After : Jul 30 16:36:45 2026 GMT Subject: CN=0D34F73F49FDB2AED5F6CD2F234151A15FDAA7DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:84:db:26:2f:c9:13:5c:67:3b:b1:0f:8b:c4: 6b:14:e2:7e:8b:27:55:66:4f:7f:27:3c:95:22:89: 7f:01:4a:6e:58:46:da:2a:a0:b0:ad:ae:24:95:55: 41:8c:27:4a:82:b9:de:33:17:37:a8:ee:0f:05:e5: 28:89:17:ab:ed:60:73:1f:82:6b:2a:b5:2e:be:2b: a8:6d:00:61:bb:59:1e:cd:1c:89:34:7c:f2:9e:0f: 65:48:d2:88:d2:dd:90:e3:1a:e9:a9:9a:64:3f:03: 57:ff:c7:fe:16:47:6f:e2:ab:ba:f5:21:38:8e:a5: 24:78:f8:7e:80:ee:3a:14:d5:bb:df:dd:86:d2:8d: a3:a2:34:5d:80:a5:78:52:8a:99:d1:d3:04:15:84: 52:e2:d2:d3:1b:de:6d:51:81:66:ca:a9:92:1d:b1: 79:22:35:be:c2:ec:2a:ad:33:89:f6:db:a0:c4:94: 36:77:cd:6f:e8:f9:21:0b:c7:db:c0:51:e2:42:78: e1:db:60:ca:2b:99:d9:e9:5c:bb:81:a7:08:4c:4d: 67:f8:f4:d0:a2:66:80:10:68:19:c7:ed:eb:3c:ac: e5:48:fb:85:66:30:70:c9:37:33:7f:e4:04:90:c5: b0:1d:f4:73:a8:4f:04:65:e4:6c:f0:cc:93:61:7b: b9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:34:F7:3F:49:FD:B2:AE:D5:F6:CD:2F:23:41:51:A1:5F:DA:A7:DF X509v3 Authority Key Identifier: keyid:86:54:3D:1F:2F:4A:32:A9:76:AD:06:90:E9:A2:3A:A2:D6:21:AC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b5:e0:c8:fe:4a:f1:5d:88:35:69:55:c1:85:47:11:20:77: ea:1d:92:a9:91:c4:76:2e:27:37:c9:dc:8b:da:c7:23:2f:02: 55:93:df:61:b4:57:e2:a7:e9:97:91:aa:d0:81:28:f7:41:25: 33:ed:d2:b2:2c:68:b0:e5:fd:29:3b:66:0c:57:4d:3c:39:6c: f2:c4:c8:4c:4d:34:0f:d8:e8:6a:32:22:d2:a1:8a:46:5c:a9: c3:e3:a4:e1:cc:23:ad:ad:be:2e:19:1f:5d:b4:12:27:7e:c8: 93:03:60:5f:87:5d:32:b7:96:44:40:fb:61:ba:76:0f:22:d4: 14:5c:84:38:9a:f7:89:2d:3b:68:16:47:a2:12:66:fc:ae:ab: ba:cc:32:d9:8d:23:fb:89:24:14:bf:cb:bb:0b:68:0b:6e:e5: a5:59:19:56:8d:c7:1a:10:86:4b:a1:2a:5b:32:18:4d:a7:cd: 8f:8c:4a:a2:ca:7e:39:f0:a0:be:58:c3:29:6b:72:57:3c:73: 32:da:2f:2b:66:bf:5c:7e:0a:36:4a:f5:11:04:d7:5c:b1:ae: db:c8:59:90:ff:4e:a3:2f:2d:0b:7d:10:8a:3a:e7:7e:d7:55: 26:79:3c:51:4e:a0:65:f7:ab:60:51:ac:2d:09:8d:cb:56:82: 66:4a:83:19 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIWBrfKtLTrJvhiyQ3Qmp+PrcVXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1NDNEMUYyRjRBMzJBOTc2QUQwNjkwRTlBMjNBQTJE NjIxQUM3RDAeFw0yNjA3MjkxNjA5NDVaFw0yNjA3MzAxNjM2NDVaMDMxMTAvBgNV BAMTKDBEMzRGNzNGNDlGREIyQUVENUY2Q0QyRjIzNDE1MUExNUZEQUE3REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCihNsmL8kTXGc7sQ+LxGsU4n6L J1VmT38nPJUiiX8BSm5YRtoqoLCtriSVVUGMJ0qCud4zFzeo7g8F5SiJF6vtYHMf gmsqtS6+K6htAGG7WR7NHIk0fPKeD2VI0ojS3ZDjGumpmmQ/A1f/x/4WR2/iq7r1 ITiOpSR4+H6A7joU1bvf3YbSjaOiNF2ApXhSipnR0wQVhFLi0tMb3m1RgWbKqZId sXkiNb7C7CqtM4n226DElDZ3zW/o+SELx9vAUeJCeOHbYMormdnpXLuBpwhMTWf4 9NCiZoAQaBnH7es8rOVI+4VmMHDJNzN/5ASQxbAd9HOoTwRl5GzwzJNhe7mrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDTT3P0n9sq7V9s0vI0FRoV/ap98wHwYDVR0j BBgwFoAUhlQ9Hy9KMql2rQaQ6aI6otYhrH0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzE2MTQwNTMwMTI2MDI5MC8wLzg2NTQzRDFGMkY0QTMyQTk3NkFEMDY5MEU5QTIz QUEyRDYyMUFDN0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODY1NDNEMUYyRjRBMzJBOTc2QUQwNjkwRTlBMjNBQTJENjIxQUM3RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcxNjE0MDUzMDEyNjAyOTAvMC84NjU0M0QxRjJGNEEz MkE5NzZBRDA2OTBFOUEyM0FBMkQ2MjFBQzdELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLXgyP5K8V2I NWlVwYVHESB36h2SqZHEdi4nN8nci9rHIy8CVZPfYbRX4qfpl5Gq0IEo90ElM+3S sixosOX9KTtmDFdNPDls8sTITE00D9joajIi0qGKRlypw+Ok4cwjra2+LhkfXbQS J37IkwNgX4ddMreWRED7Ybp2DyLUFFyEOJr3iS07aBZHohJm/K6ruswy2Y0j+4kk FL/LuwtoC27lpVkZVo3HGhCGS6EqWzIYTafNj4xKosp+OfCgvljDKWtyVzxzMtov K2a/XH4KNkr1EQTXXLGu28hZkP9Ooy8tC30QijrnftdVJnk8UU6gZferYFGsLQmN y1aCZkqDGQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:02:41 2026 by rpki-client