$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft File: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft (raw, json) Hash identifier: ANJfp4MMiyJeZCR/7yX4AfUF8u2vJXE/tS4gV2MDdXw= Subject key identifier: 6F:EF:B3:2E:76:E6:DF:D0:0E:10:41:DC:EF:76:30:98:0F:CA:97:5E Authority key identifier: 68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E Certificate issuer: /CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Certificate serial: 46DD656DD970A5D72E8B2C98C1DFB789C811178F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft Manifest number: 8D Signing time: Mon 27 Jul 2026 04:28:20 +0000 Manifest this update: Mon 27 Jul 2026 04:23:20 +0000 Manifest next update: Tue 28 Jul 2026 07:14:20 +0000 Files and hashes: 1: 3130332e38312e34382e302f32322d3232203d3e203538353431.roa (hash: q6mKY7KirHLJlmPsW911DHDgFjCE6SLxnzO6Hxi/o5s=) 2: 323430323a313963303a3a2f33322d3332203d3e2030.roa (hash: rSqBjexqKcYyKYw2gWh34opzqrNoLhQFwHdXPpRt88w=) 3: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl (hash: N/nLjyrZ+H/KnhffmtQKdjWXkJdfnu2TmA/uDDmQE30=) 4: 3130332e38312e34382e302f32342d3234203d3e2034383337.roa (hash: Gbvu7TcIz1LETT526fNYEvxeGhgl0TjPiCPljAumDSM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 07:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:dd:65:6d:d9:70:a5:d7:2e:8b:2c:98:c1:df:b7:89:c8:11:17:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Validity Not Before: Jul 27 04:23:20 2026 GMT Not After : Jul 28 07:14:20 2026 GMT Subject: CN=6FEFB32E76E6DFD00E1041DCEF7630980FCA975E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c3:b0:4c:1b:77:9f:32:60:ba:e4:2f:de:a1: 75:90:d5:df:36:7f:b6:a2:f7:12:28:dd:63:2a:79: 57:e8:1f:49:72:41:00:b7:22:ce:9b:af:c1:69:99: e8:ed:20:d3:d2:4c:d2:ff:6e:8d:20:2d:d2:e8:0a: 1c:29:ef:cc:eb:65:da:c9:01:eb:8e:f5:ce:51:48: 18:de:66:4e:26:ff:3b:b8:73:d9:f2:e4:17:e2:6f: 7e:fd:59:12:5d:ba:d7:a3:8c:e3:40:67:c0:9e:c8: 8d:43:16:af:11:bc:52:fa:fb:99:fe:38:a9:4c:c7: 53:61:3b:41:94:08:cb:56:8d:2b:e0:44:50:d5:0b: 14:c0:be:d1:d5:71:69:83:08:63:56:39:8e:e2:a7: 84:7b:73:02:18:32:e5:04:2f:8d:42:48:a6:71:39: 74:b3:42:c4:40:1c:13:c4:4e:ab:34:a3:4b:5a:07: 54:62:77:0d:37:74:c8:fa:b0:5f:82:74:ea:5c:93: ba:a7:9f:70:7b:cf:4d:88:56:93:1b:1e:19:77:b2: c2:f7:6f:e0:c2:16:e2:56:da:d0:50:58:2a:e3:3a: ce:8a:90:67:05:9d:87:88:38:35:a4:c8:0e:10:06: 66:0b:51:1f:20:a3:60:ba:6d:74:c6:8a:23:74:95: 77:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EF:B3:2E:76:E6:DF:D0:0E:10:41:DC:EF:76:30:98:0F:CA:97:5E X509v3 Authority Key Identifier: keyid:68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:7e:e9:49:bb:bc:f4:18:c2:3d:8e:e6:88:02:bf:7d:b5:62: a3:1d:ae:c0:ae:77:4d:7a:f4:4f:fc:0e:ae:6d:fa:e2:4a:93: d0:bf:5d:9c:57:9d:c9:ff:e9:a5:80:0d:26:ab:b2:93:33:18: e3:91:c8:d3:20:ee:91:db:cd:a3:07:c0:4d:d2:85:d0:fe:8d: 49:6c:57:7c:47:91:c4:23:cf:c2:95:13:c8:7e:32:25:59:35: dc:92:1b:72:38:64:86:bd:42:33:7a:dc:0c:7f:25:e6:d2:ab: 13:53:b2:20:6b:81:ed:2e:cf:33:21:9a:dc:91:ef:b2:62:83: 11:82:37:e9:41:5d:d4:a9:c2:a1:60:0d:56:3a:15:de:1b:38: cf:52:db:bb:b0:ca:5c:b5:23:7c:6d:49:24:ad:87:d1:f7:d3: 0a:5d:92:e4:38:c3:e1:1d:c2:eb:0f:82:2c:a8:7a:8c:28:6f: 76:92:94:cf:43:f6:f2:74:3b:ea:39:4d:1b:a5:8e:ff:39:b5: c3:fa:b4:74:24:43:2b:3f:e5:af:0c:c9:63:a4:ab:d3:92:d7: 6b:2b:c1:a9:dd:60:b2:48:f5:83:66:6e:3d:15:8f:4d:6e:60: db:d4:9e:a9:9d:6a:21:f0:b4:57:ad:70:d7:c6:7a:14:92:7c: 76:71:44:0d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURt1lbdlwpdcuiyyYwd+3icgRF48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJE RjU2NzAwRTAeFw0yNjA3MjcwNDIzMjBaFw0yNjA3MjgwNzE0MjBaMDMxMTAvBgNV BAMTKDZGRUZCMzJFNzZFNkRGRDAwRTEwNDFEQ0VGNzYzMDk4MEZDQTk3NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdw7BMG3efMmC65C/eoXWQ1d82 f7ai9xIo3WMqeVfoH0lyQQC3Is6br8FpmejtINPSTNL/bo0gLdLoChwp78zrZdrJ AeuO9c5RSBjeZk4m/zu4c9ny5Bfib379WRJdutejjONAZ8CeyI1DFq8RvFL6+5n+ OKlMx1NhO0GUCMtWjSvgRFDVCxTAvtHVcWmDCGNWOY7ip4R7cwIYMuUEL41CSKZx OXSzQsRAHBPETqs0o0taB1Ridw03dMj6sF+CdOpck7qnn3B7z02IVpMbHhl3ssL3 b+DCFuJW2tBQWCrjOs6KkGcFnYeIODWkyA4QBmYLUR8go2C6bXTGiiN0lXfPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUb++zLnbm39AOEEHc73YwmA/Kl14wHwYDVR0j BBgwFoAUaMtiGJJr9Oby9rgXwCAO699WcA4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2MjE5MDYyMjk0OTM3Ny8wLzY4Q0I2MjE4OTI2QkY0RTZGMkY2QjgxN0MwMjAw RUVCREY1NjcwMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJERjU2NzAwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNjIxOTA2MjI5NDkzNzcvMC82OENCNjIxODkyNkJG NEU2RjJGNkI4MTdDMDIwMEVFQkRGNTY3MDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKH7pSbu89BjC PY7miAK/fbViox2uwK53TXr0T/wOrm364kqT0L9dnFedyf/ppYANJquykzMY45HI 0yDukdvNowfATdKF0P6NSWxXfEeRxCPPwpUTyH4yJVk13JIbcjhkhr1CM3rcDH8l 5tKrE1OyIGuB7S7PMyGa3JHvsmKDEYI36UFd1KnCoWANVjoV3hs4z1Lbu7DKXLUj fG1JJK2H0ffTCl2S5DjD4R3C6w+CLKh6jChvdpKUz0P28nQ76jlNG6WO/zm1w/q0 dCRDKz/lrwzJY6Sr05LXayvBqd1gskj1g2ZuPRWPTW5g29SeqZ1qIfC0V61w18Z6 FJJ8dnFEDQ== -----END CERTIFICATE-----Generated at Mon Jul 27 15:48:36 2026 by rpki-client