
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft
File: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft (raw, json)
Hash identifier: 0SyGnRAUssLY6nDTYZorDXBKsgqKjYQ6QZ8wYk5jBxE=
Subject key identifier: F9:CE:90:DB:AB:DC:02:9F:11:7F:C3:60:05:52:B7:66:93:A3:EC:CE
Authority key identifier: 68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E
Certificate issuer: /CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E
Certificate serial: 5BA3842980ADF3F0B11E2F6ABA0AA379E8F16E6F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft
Manifest number: 50
Signing time: Fri 12 Jun 2026 00:09:35 +0000
Manifest this update: Fri 12 Jun 2026 00:04:35 +0000
Manifest next update: Sat 13 Jun 2026 03:13:35 +0000
Files and hashes: 1: 3130332e38312e34382e302f32342d3234203d3e2034383337.roa (hash: Gbvu7TcIz1LETT526fNYEvxeGhgl0TjPiCPljAumDSM=)
2: 3130332e38312e34382e302f32322d3232203d3e203538353431.roa (hash: q6mKY7KirHLJlmPsW911DHDgFjCE6SLxnzO6Hxi/o5s=)
3: 323430323a313963303a3a2f33322d3332203d3e2030.roa (hash: rSqBjexqKcYyKYw2gWh34opzqrNoLhQFwHdXPpRt88w=)
4: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl (hash: WDUn+Iizl0BN22PaW8ig+THP5R1qiJkunmJJ7Q8YN/o=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl
rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:13:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:a3:84:29:80:ad:f3:f0:b1:1e:2f:6a:ba:0a:a3:79:e8:f1:6e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E
Validity
Not Before: Jun 12 00:04:35 2026 GMT
Not After : Jun 13 03:13:35 2026 GMT
Subject: CN=F9CE90DBABDC029F117FC3600552B76693A3ECCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:36:da:fb:69:fd:fa:32:3f:08:33:51:fd:
17:b4:58:1c:4c:28:e9:97:59:7a:6b:20:48:98:95:
08:28:73:0c:32:3d:f8:c2:f9:1c:8a:30:24:6c:ee:
51:9f:49:0d:18:d9:6b:4d:8f:a4:a7:f6:c9:15:fb:
5a:76:f8:61:e6:80:16:bb:d3:b5:65:ae:e8:26:e6:
98:c9:6e:ca:42:e7:76:c6:ab:3b:e6:d2:8b:ac:f2:
81:22:fc:43:12:c7:e6:69:a1:f3:f7:eb:49:43:2c:
02:b4:50:2f:8e:13:a7:a6:65:83:54:8c:35:39:4e:
4b:24:c0:b7:65:fc:95:92:b7:9d:18:89:7b:f0:e7:
3f:30:46:82:96:99:65:43:3f:0b:2c:ac:68:ed:78:
f9:79:7d:94:70:83:9e:d6:ba:4b:94:42:1d:e2:10:
9a:a6:60:a4:81:f8:9b:8b:5f:6a:b6:c9:7e:74:28:
f3:b1:cc:77:c6:79:37:59:8b:2d:11:2d:61:91:ff:
47:26:74:17:0c:91:06:b6:95:6d:26:70:58:9c:91:
77:fd:d5:f3:92:ef:89:e6:b3:41:65:71:7d:8f:1b:
0d:69:6e:e5:a9:ca:f2:e0:b7:f7:76:88:99:f5:78:
d9:d3:78:61:98:80:7b:0e:6d:6a:b6:2b:b5:3c:18:
93:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CE:90:DB:AB:DC:02:9F:11:7F:C3:60:05:52:B7:66:93:A3:EC:CE
X509v3 Authority Key Identifier:
keyid:68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:00:2c:9b:88:02:04:49:58:70:8c:e2:1d:fe:a4:66:00:22:
67:55:58:0e:eb:b9:58:16:76:19:fb:a6:2f:03:52:ce:fd:f4:
2c:f7:1f:df:71:19:2e:47:29:13:88:86:97:b7:05:41:d5:69:
ee:7d:84:02:27:de:d5:82:83:cf:b5:59:fd:73:25:ce:68:22:
65:f3:1b:7e:fc:6e:99:14:73:b1:bb:06:44:bf:d7:7a:ab:80:
17:23:15:af:69:ec:6d:6c:5e:43:3f:4a:b5:9c:55:80:43:ec:
c8:18:db:0e:a2:fc:e1:49:e3:fd:05:fe:af:72:78:d6:a4:1d:
7b:dc:e1:15:3e:c0:55:ea:ff:c5:ed:29:94:10:0d:11:3e:e3:
f6:e8:59:21:74:8a:61:34:20:6e:5a:52:6f:fb:e3:d2:49:eb:
cf:ea:5c:38:0b:10:bb:b5:31:6a:f4:26:b3:c8:e0:03:bd:53:
ce:56:b8:8b:38:e2:29:4b:36:b0:d6:7a:0c:91:69:04:cd:52:
a1:a9:3c:fb:4c:c7:e9:a4:8d:e4:6d:0f:3b:55:37:8e:fa:cc:
e8:1a:67:64:12:ab:f7:01:ed:b1:a4:1a:de:97:5b:9f:e4:57:
b3:1d:4a:e8:89:6a:1f:a2:5b:28:1f:da:9d:41:32:fb:ca:47:
cf:51:68:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:53:39 2026 by rpki-client