$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft File: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft (raw, json) Hash identifier: wN3Mo3oFgKTYASacRa4amkqy1vs14vZ49fcxE3GLf2Q= Subject key identifier: FA:E1:E9:AA:FC:97:A5:11:5E:59:C6:EC:C1:C2:CC:1D:DE:BC:0C:13 Authority key identifier: 68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E Certificate issuer: /CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Certificate serial: 05799904DE96DEC9A4421AFE4B4CD190F6D2CB05 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft Manifest number: BD Signing time: Tue 08 Sep 2026 16:44:31 +0000 Manifest this update: Tue 08 Sep 2026 16:39:31 +0000 Manifest next update: Fri 11 Sep 2026 23:24:31 +0000 Files and hashes: 1: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl (hash: 85inpHfqgW+wzdoF47jh/idcVF4A0VF1LSph/KwnyRc=) 2: 3130332e38312e34382e302f32322d3232203d3e203538353431.roa (hash: q6mKY7KirHLJlmPsW911DHDgFjCE6SLxnzO6Hxi/o5s=) 3: 323430323a313963303a3a2f33322d3332203d3e2030.roa (hash: rSqBjexqKcYyKYw2gWh34opzqrNoLhQFwHdXPpRt88w=) 4: 3130332e38312e34382e302f32342d3234203d3e2034383337.roa (hash: Gbvu7TcIz1LETT526fNYEvxeGhgl0TjPiCPljAumDSM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 23:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:79:99:04:de:96:de:c9:a4:42:1a:fe:4b:4c:d1:90:f6:d2:cb:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Validity Not Before: Sep 8 16:39:31 2026 GMT Not After : Sep 11 23:24:31 2026 GMT Subject: CN=FAE1E9AAFC97A5115E59C6ECC1C2CC1DDEBC0C13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d7:ca:5a:b3:90:3d:a1:19:f5:10:0a:1d:c9: 45:3e:cb:3b:48:0f:e8:68:54:0a:b3:cd:7d:0e:78: 2d:44:90:e9:35:86:c6:6d:61:bc:f4:9c:4c:0a:ed: f5:4c:29:51:45:80:83:5a:7a:1a:f6:23:d6:b3:6f: 01:07:a0:69:b2:c3:c2:9e:26:a9:84:c2:8f:ed:da: 44:1a:71:04:d6:80:2d:47:51:68:0c:0b:73:21:86: 84:0a:2f:61:1e:74:5d:4d:4b:8b:b5:2b:a3:53:d4: 94:fa:24:3d:4a:05:64:84:15:c7:d2:a0:68:19:26: 15:fa:fd:c9:51:b4:b6:f9:32:aa:70:89:62:58:87: 24:21:56:c7:40:f7:81:bf:80:20:7b:3a:5f:56:2d: e4:22:0f:c5:e3:21:ee:bc:fd:ce:cb:61:e1:9e:d3: 66:ee:0a:9b:65:47:51:4c:ef:46:14:96:f8:66:b4: 31:58:ba:f5:72:bb:f5:ed:3c:50:d8:cd:9a:33:86: 89:7c:51:e3:e1:74:b1:43:e0:fc:63:f0:7b:05:aa: fb:15:48:16:3f:d1:88:28:86:12:e5:9f:73:d3:90: f4:bc:c0:10:e8:0f:86:a5:1b:79:21:47:1d:36:a5: 89:28:c6:0f:9b:de:32:f6:81:b4:23:93:a3:c6:72: 96:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E1:E9:AA:FC:97:A5:11:5E:59:C6:EC:C1:C2:CC:1D:DE:BC:0C:13 X509v3 Authority Key Identifier: keyid:68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:98:80:0a:a9:bd:8f:15:8f:c9:4b:de:c4:4c:8a:f6:ae:b8: b9:ad:aa:0e:3b:9e:2a:97:5f:e2:40:d6:c7:a8:ba:8c:56:41: 15:a5:e5:36:60:b0:4c:df:5f:7f:f5:0b:35:ac:84:08:28:17: fe:44:9c:7b:cd:e9:d9:eb:c6:99:c1:c3:37:dc:fe:dc:3e:e3: 3c:bd:cb:ff:08:03:a8:b7:ff:82:0a:fd:49:48:08:7e:b2:9b: bb:d7:bc:66:7b:ad:f1:2a:54:78:43:bd:62:76:07:f1:2e:6c: bd:cf:8e:9f:63:74:4b:15:63:5b:ba:90:50:1a:8a:62:5c:d3: 67:18:9e:e1:e1:16:a5:98:97:89:d2:4e:87:72:d1:09:c1:7a: 00:0f:27:0e:2d:d7:6d:9a:61:69:9a:da:e2:3e:89:83:b5:07: 79:dc:17:60:e9:dc:9e:a4:df:52:a6:da:e3:3c:36:da:e1:d4: eb:11:0d:f8:87:56:2d:7f:50:84:7a:65:80:ef:71:70:e4:f3: 10:24:46:ba:5b:1f:9f:78:c0:e0:d7:74:32:9f:79:ed:eb:f1: 18:07:c9:75:22:5d:fa:25:d2:ac:8e:dc:35:d9:67:10:99:2f: fd:41:10:0d:0f:85:99:b2:c2:f5:60:d4:7a:50:74:8c:22:ca: d1:66:2b:8c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBXmZBN6W3smkQhr+S0zRkPbSywUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJE RjU2NzAwRTAeFw0yNjA5MDgxNjM5MzFaFw0yNjA5MTEyMzI0MzFaMDMxMTAvBgNV BAMTKEZBRTFFOUFBRkM5N0E1MTE1RTU5QzZFQ0MxQzJDQzFEREVCQzBDMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV18pas5A9oRn1EAodyUU+yztI D+hoVAqzzX0OeC1EkOk1hsZtYbz0nEwK7fVMKVFFgINaehr2I9azbwEHoGmyw8Ke JqmEwo/t2kQacQTWgC1HUWgMC3MhhoQKL2EedF1NS4u1K6NT1JT6JD1KBWSEFcfS oGgZJhX6/clRtLb5MqpwiWJYhyQhVsdA94G/gCB7Ol9WLeQiD8XjIe68/c7LYeGe 02buCptlR1FM70YUlvhmtDFYuvVyu/XtPFDYzZozhol8UePhdLFD4Pxj8HsFqvsV SBY/0YgohhLln3PTkPS8wBDoD4alG3khRx02pYkoxg+b3jL2gbQjk6PGcpbdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+uHpqvyXpRFeWcbswcLMHd68DBMwHwYDVR0j BBgwFoAUaMtiGJJr9Oby9rgXwCAO699WcA4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2MjE5MDYyMjk0OTM3Ny8wLzY4Q0I2MjE4OTI2QkY0RTZGMkY2QjgxN0MwMjAw RUVCREY1NjcwMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJERjU2NzAwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNjIxOTA2MjI5NDkzNzcvMC82OENCNjIxODkyNkJG NEU2RjJGNkI4MTdDMDIwMEVFQkRGNTY3MDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJiACqm9jxWP yUvexEyK9q64ua2qDjueKpdf4kDWx6i6jFZBFaXlNmCwTN9ff/ULNayECCgX/kSc e83p2evGmcHDN9z+3D7jPL3L/wgDqLf/ggr9SUgIfrKbu9e8Znut8SpUeEO9YnYH 8S5svc+On2N0SxVjW7qQUBqKYlzTZxie4eEWpZiXidJOh3LRCcF6AA8nDi3XbZph aZra4j6Jg7UHedwXYOncnqTfUqba4zw22uHU6xEN+IdWLX9QhHplgO9xcOTzECRG ulsfn3jA4Nd0Mp957evxGAfJdSJd+iXSrI7cNdlnEJkv/UEQDQ+FmbLC9WDUelB0 jCLK0WYrjA== -----END CERTIFICATE-----Generated at Thu Sep 10 18:41:27 2026 by rpki-client