$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft File: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft (raw, json) Hash identifier: kuxEiFaDQxjQ08NClOxxmUSNWAi7e9lT69Rz4Q5hYBA= Subject key identifier: 09:0B:12:61:6D:3B:9D:C3:9A:8A:95:47:EC:6F:64:AB:38:80:94:B2 Authority key identifier: 68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E Certificate issuer: /CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Certificate serial: 491FE5F3787BD65FD379D2190BE0BEE64AE7ABC8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft Manifest number: D3 Signing time: Wed 28 Oct 2026 04:25:38 +0000 Manifest this update: Wed 28 Oct 2026 04:20:38 +0000 Manifest next update: Sat 31 Oct 2026 08:05:38 +0000 Files and hashes: 1: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl (hash: LSCcFhU0N0U0vKykC0txvIDo+a3ebFEIWJugZetwod4=) 2: 3130332e38312e34382e302f32342d3234203d3e2034383337.roa (hash: Gbvu7TcIz1LETT526fNYEvxeGhgl0TjPiCPljAumDSM=) 3: 3130332e38312e34382e302f32322d3232203d3e203538353431.roa (hash: q6mKY7KirHLJlmPsW911DHDgFjCE6SLxnzO6Hxi/o5s=) 4: 323430323a313963303a3a2f33322d3332203d3e2030.roa (hash: rSqBjexqKcYyKYw2gWh34opzqrNoLhQFwHdXPpRt88w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 08:05:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:1f:e5:f3:78:7b:d6:5f:d3:79:d2:19:0b:e0:be:e6:4a:e7:ab:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Validity Not Before: Oct 28 04:20:38 2026 GMT Not After : Oct 31 08:05:38 2026 GMT Subject: CN=090B12616D3B9DC39A8A9547EC6F64AB388094B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1b:a2:1d:b7:fa:05:27:99:24:fc:10:6b:d3: 96:62:cf:d5:60:43:28:da:f8:33:c7:c2:eb:1d:ef: b5:b9:49:ea:24:fd:e4:ef:b8:68:34:72:c3:0b:19: 73:01:b2:c4:b7:1e:56:28:39:5b:3d:19:9c:18:4a: 51:08:e0:af:98:ab:ce:11:b7:58:2c:29:cb:c1:ef: 23:4c:65:2a:28:70:1b:ce:9a:22:9b:55:a3:39:e2: 96:66:10:c4:ec:dd:64:3c:c5:07:79:99:e4:3e:90: 8b:ce:90:93:6a:be:e0:16:ca:1b:d6:dc:5e:ba:7f: e9:82:5d:ab:77:2f:44:da:5f:97:f6:5e:b9:a6:a8: 51:4f:6a:dd:1a:72:a7:50:b8:03:83:ef:a1:2a:ed: c0:d0:19:9b:0a:91:0d:76:78:da:af:49:a7:61:a2: 65:bd:da:d6:14:9c:2f:81:c5:ef:80:f7:4b:82:89: f2:ff:b6:60:d6:da:5c:81:43:40:8c:e6:06:4b:b1: fc:81:a9:00:03:8f:24:99:07:dd:ce:24:85:cf:06: 9d:f6:32:eb:1c:66:32:ac:09:6d:d3:3a:87:3d:7f: e8:97:35:4f:84:a2:3a:1a:08:05:fc:96:96:c4:6f: 17:0f:a3:78:49:d9:76:36:d6:10:b4:fb:71:d8:7e: 55:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0B:12:61:6D:3B:9D:C3:9A:8A:95:47:EC:6F:64:AB:38:80:94:B2 X509v3 Authority Key Identifier: keyid:68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:e3:c7:59:bb:65:0d:4b:0a:88:2a:c0:ba:8a:50:08:6c:5e: 40:f0:94:8b:70:08:49:c2:b1:5e:12:e7:0b:f8:03:75:65:de: 27:db:67:bc:cd:62:ed:ea:26:f9:50:cf:16:51:84:93:73:e6: 1d:5d:0e:32:5b:e7:55:9e:62:b8:f2:98:56:b8:6b:08:39:08: 2e:db:63:b3:c8:f9:fc:1c:ef:e1:ac:3c:df:0d:27:f5:32:85: 48:7c:38:5e:5c:9a:79:7e:6d:05:3b:4a:1b:d9:e6:7a:dd:ad: f6:20:e0:33:a8:7b:dc:98:2e:f7:cd:3e:eb:f2:89:b2:d8:6a: f9:43:9d:cb:c0:72:f8:2b:2e:2f:d3:f0:67:fe:b6:64:07:21: 6e:19:8a:3d:36:9c:6f:df:d9:77:c8:4c:28:b5:60:83:ff:3f: 6a:67:65:1f:dc:fc:62:d5:c7:1b:48:d9:c7:ff:3e:4e:fc:68: c8:94:b2:02:fc:e4:c9:90:3c:d8:c5:33:5a:83:98:37:be:5e: e0:72:17:14:47:91:2d:79:9d:f5:c8:59:55:00:5d:70:82:bf: 56:a6:20:b0:d5:bc:13:8c:ac:4b:b7:8f:77:8e:2e:32:b4:aa: bf:15:6d:5d:ca:3b:ef:f2:fa:0a:75:0e:c6:4b:79:f1:21:ec: d3:f2:2c:c5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSR/l83h71l/TedIZC+C+5krnq8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJE RjU2NzAwRTAeFw0yNjEwMjgwNDIwMzhaFw0yNjEwMzEwODA1MzhaMDMxMTAvBgNV BAMTKDA5MEIxMjYxNkQzQjlEQzM5QThBOTU0N0VDNkY2NEFCMzg4MDk0QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvG6Idt/oFJ5kk/BBr05Ziz9Vg Qyja+DPHwusd77W5Seok/eTvuGg0csMLGXMBssS3HlYoOVs9GZwYSlEI4K+Yq84R t1gsKcvB7yNMZSoocBvOmiKbVaM54pZmEMTs3WQ8xQd5meQ+kIvOkJNqvuAWyhvW 3F66f+mCXat3L0TaX5f2XrmmqFFPat0acqdQuAOD76Eq7cDQGZsKkQ12eNqvSadh omW92tYUnC+Bxe+A90uCifL/tmDW2lyBQ0CM5gZLsfyBqQADjySZB93OJIXPBp32 MuscZjKsCW3TOoc9f+iXNU+EojoaCAX8lpbEbxcPo3hJ2XY21hC0+3HYflUHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCQsSYW07ncOaipVH7G9kqziAlLIwHwYDVR0j BBgwFoAUaMtiGJJr9Oby9rgXwCAO699WcA4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2MjE5MDYyMjk0OTM3Ny8wLzY4Q0I2MjE4OTI2QkY0RTZGMkY2QjgxN0MwMjAw RUVCREY1NjcwMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJERjU2NzAwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNjIxOTA2MjI5NDkzNzcvMC82OENCNjIxODkyNkJG NEU2RjJGNkI4MTdDMDIwMEVFQkRGNTY3MDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuPHWbtlDUsK iCrAuopQCGxeQPCUi3AIScKxXhLnC/gDdWXeJ9tnvM1i7eom+VDPFlGEk3PmHV0O MlvnVZ5iuPKYVrhrCDkILttjs8j5/Bzv4aw83w0n9TKFSHw4XlyaeX5tBTtKG9nm et2t9iDgM6h73Jgu980+6/KJsthq+UOdy8By+CsuL9PwZ/62ZAchbhmKPTacb9/Z d8hMKLVgg/8/amdlH9z8YtXHG0jZx/8+TvxoyJSyAvzkyZA82MUzWoOYN75e4HIX FEeRLXmd9chZVQBdcIK/VqYgsNW8E4ysS7ePd44uMrSqvxVtXco77/L6CnUOxkt5 8SHs0/IsxQ== -----END CERTIFICATE-----Generated at Thu Oct 29 17:09:32 2026 by rpki-client