$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft File: 86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft (raw, json) Hash identifier: rjEk7RBA5ExPxj0sj0LDUgiTpYz0XgOmSMGKRLBCArs= Subject key identifier: 5D:A0:F8:D5:32:40:AA:9B:8D:CF:5A:2C:6E:38:F8:9E:20:5E:AA:69 Authority key identifier: 86:54:3D:1F:2F:4A:32:A9:76:AD:06:90:E9:A2:3A:A2:D6:21:AC:7D Certificate issuer: /CN=86543D1F2F4A32A976AD0690E9A23AA2D621AC7D Certificate serial: 0848785AD5DFB4F0FFD238BE29460C500CD1E502 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft Manifest number: CD Signing time: Wed 21 Oct 2026 04:22:42 +0000 Manifest this update: Wed 21 Oct 2026 04:17:42 +0000 Manifest next update: Sat 24 Oct 2026 09:09:42 +0000 Files and hashes: 1: 3232332e3235352e3233372e302f32342d3234203d3e203536303030.roa (hash: qUwf0o69H6ppCY6mm1AEhhtTQQ3The81VFkirYuq60I=) 2: 3232332e3235352e3233382e302f32342d3234203d3e203536303030.roa (hash: xubi9W0fDO/ruvLyfjo/nAIpEUwXGp+xWOgUYC+FPJc=) 3: 86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl (hash: xHHpSEY2MSamNm26+6j+xTSNJhBnilg8+v7+1FOCuMc=) 4: 3232332e3235352e3233362e302f32342d3234203d3e203536303030.roa (hash: 5Z2RS7xTpyntFttcy8ElSigLdmkbVxoyMDpFQuVXz5s=) 5: 3232332e3235352e3233392e302f32342d3234203d3e203536303030.roa (hash: hOx7RICfLL6wLfEZuyeFfup3kP4OhsdcyjT0B7ETRfw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 09:09:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:48:78:5a:d5:df:b4:f0:ff:d2:38:be:29:46:0c:50:0c:d1:e5:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86543D1F2F4A32A976AD0690E9A23AA2D621AC7D Validity Not Before: Oct 21 04:17:42 2026 GMT Not After : Oct 24 09:09:42 2026 GMT Subject: CN=5DA0F8D53240AA9B8DCF5A2C6E38F89E205EAA69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:14:53:64:11:1d:09:b3:32:0c:5a:d7:80: 6f:9f:cb:f1:7e:1c:2f:36:08:fb:85:c2:4f:a4:74: 48:68:86:41:c1:06:78:89:75:e9:6d:bd:04:12:42: bc:5b:fe:96:2f:38:ed:e8:58:10:8f:90:86:0e:f7: b8:3d:a3:66:5a:17:68:15:7b:c2:73:ca:39:85:f9: 16:90:b4:10:94:65:33:a6:59:ff:44:50:99:e2:63: d6:7f:e4:17:ce:27:5d:28:27:5d:ab:64:91:b9:50: f9:b6:70:77:7f:21:55:a9:76:cf:08:9d:2a:5c:96: 98:68:3d:10:65:69:e0:b4:71:c0:5f:2f:10:e0:ad: 37:7c:5f:08:60:aa:d4:ad:18:a3:c6:f5:d2:52:60: 02:16:8b:c7:d2:dd:95:ff:93:79:4f:b4:38:2b:e8: 82:b9:87:2d:4a:cb:8c:7f:07:04:65:5b:c8:2b:58: 23:a3:57:1a:53:ba:ed:c1:8e:ac:30:f3:a2:f7:20: 39:4b:13:d9:e6:f9:c3:19:01:28:83:87:a8:7c:44: 16:c7:be:e0:8a:dd:fa:d6:98:91:73:d8:17:d7:65: 2c:40:42:0f:9b:03:d7:19:6a:11:df:53:4f:87:f9: b7:5a:94:d4:30:04:12:fa:26:b8:5c:88:6d:c9:01: e8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A0:F8:D5:32:40:AA:9B:8D:CF:5A:2C:6E:38:F8:9E:20:5E:AA:69 X509v3 Authority Key Identifier: keyid:86:54:3D:1F:2F:4A:32:A9:76:AD:06:90:E9:A2:3A:A2:D6:21:AC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:fd:6f:ce:fa:8d:4d:a1:ba:fc:16:75:07:e9:5c:5b:bc:d3: a3:8d:23:e7:2d:67:34:90:3a:22:6d:c1:50:ea:99:0f:e7:70: 26:1c:a3:74:24:8a:10:1c:94:fa:07:03:fd:37:39:b0:1e:8f: f6:25:d9:57:cf:6a:b0:b8:c1:7f:a7:fd:f0:94:46:79:a3:ee: da:07:cf:31:ab:14:96:fa:29:a6:40:3e:dc:8b:8d:82:e5:bc: 73:17:55:bb:a3:74:44:cf:60:1e:ca:37:48:7a:82:17:28:83: ce:77:30:e9:28:1d:d4:6a:e5:9c:cb:d5:91:75:be:7b:38:10: 3d:a0:67:da:52:d3:86:2d:4b:3b:ff:5a:a8:54:8e:b9:99:53: 2e:b6:57:b5:6d:a0:89:95:43:db:6b:f5:a0:e0:52:d1:6c:d9: 86:45:48:7d:9e:bc:45:81:37:55:f5:91:94:3f:79:e9:78:65: 26:d5:d4:c7:10:66:d7:cf:51:84:e3:20:e6:dd:59:ac:0e:f7: dd:c3:71:a9:59:7f:74:07:8b:39:f6:41:5a:03:25:fb:57:70: 99:b6:8e:77:9d:bc:26:5f:52:e5:cd:00:67:37:34:98:51:26: 28:b3:2e:dc:e1:81:85:aa:f2:d5:58:7d:38:98:d3:43:fb:d7: 8f:29:23:57 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCEh4WtXftPD/0ji+KUYMUAzR5QIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1NDNEMUYyRjRBMzJBOTc2QUQwNjkwRTlBMjNBQTJE NjIxQUM3RDAeFw0yNjEwMjEwNDE3NDJaFw0yNjEwMjQwOTA5NDJaMDMxMTAvBgNV BAMTKDVEQTBGOEQ1MzI0MEFBOUI4RENGNUEyQzZFMzhGODlFMjA1RUFBNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ghRTZBEdCbMyDFrXgG+fy/F+ HC82CPuFwk+kdEhohkHBBniJdeltvQQSQrxb/pYvOO3oWBCPkIYO97g9o2ZaF2gV e8JzyjmF+RaQtBCUZTOmWf9EUJniY9Z/5BfOJ10oJ12rZJG5UPm2cHd/IVWpds8I nSpclphoPRBlaeC0ccBfLxDgrTd8XwhgqtStGKPG9dJSYAIWi8fS3ZX/k3lPtDgr 6IK5hy1Ky4x/BwRlW8grWCOjVxpTuu3Bjqww86L3IDlLE9nm+cMZASiDh6h8RBbH vuCK3frWmJFz2BfXZSxAQg+bA9cZahHfU0+H+bdalNQwBBL6JrhciG3JAei/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXaD41TJAqpuNz1osbjj4niBeqmkwHwYDVR0j BBgwFoAUhlQ9Hy9KMql2rQaQ6aI6otYhrH0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzE2MTQwNTMwMTI2MDI5MC8wLzg2NTQzRDFGMkY0QTMyQTk3NkFEMDY5MEU5QTIz QUEyRDYyMUFDN0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODY1NDNEMUYyRjRBMzJBOTc2QUQwNjkwRTlBMjNBQTJENjIxQUM3RC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcxNjE0MDUzMDEyNjAyOTAvMC84NjU0M0QxRjJGNEEz MkE5NzZBRDA2OTBFOUEyM0FBMkQ2MjFBQzdELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJv1vzvqNTaG6 /BZ1B+lcW7zTo40j5y1nNJA6Im3BUOqZD+dwJhyjdCSKEByU+gcD/Tc5sB6P9iXZ V89qsLjBf6f98JRGeaPu2gfPMasUlvoppkA+3IuNguW8cxdVu6N0RM9gHso3SHqC FyiDzncw6Sgd1GrlnMvVkXW+ezgQPaBn2lLThi1LO/9aqFSOuZlTLrZXtW2giZVD 22v1oOBS0WzZhkVIfZ68RYE3VfWRlD956XhlJtXUxxBm189RhOMg5t1ZrA733cNx qVl/dAeLOfZBWgMl+1dwmbaOd528Jl9S5c0AZzc0mFEmKLMu3OGBhary1Vh9OJjT Q/vXjykjVw== -----END CERTIFICATE-----Generated at Thu Oct 22 04:06:26 2026 by rpki-client