$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft File: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft (raw, json) Hash identifier: 3Xj1ep7v8eHtlNd/DUxowiUDY3nMuRjbZYCSPDTn2Po= Subject key identifier: FF:85:C9:15:4C:83:50:1F:E4:B6:DB:18:01:07:0F:8B:C8:C5:78:0E Authority key identifier: 68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E Certificate issuer: /CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Certificate serial: 48D2E3B3E4EC34A3A5E04453EF5CF3B8F74C3C00 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft Manifest number: 13 Signing time: Mon 27 Apr 2026 03:23:40 +0000 Manifest this update: Mon 27 Apr 2026 03:18:40 +0000 Manifest next update: Tue 28 Apr 2026 05:49:40 +0000 Files and hashes: 1: 3130332e38312e34382e302f32342d3234203d3e2034383337.roa (hash: Gbvu7TcIz1LETT526fNYEvxeGhgl0TjPiCPljAumDSM=) 2: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl (hash: /dSt8xC6YX9/iFsxqFlsVGUeDxbtTQTuyiht4nwTnN4=) 3: 3130332e38312e34382e302f32322d3232203d3e203538353431.roa (hash: q6mKY7KirHLJlmPsW911DHDgFjCE6SLxnzO6Hxi/o5s=) 4: 323430323a313963303a3a2f33322d3332203d3e2030.roa (hash: rSqBjexqKcYyKYw2gWh34opzqrNoLhQFwHdXPpRt88w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 05:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d2:e3:b3:e4:ec:34:a3:a5:e0:44:53:ef:5c:f3:b8:f7:4c:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Validity Not Before: Apr 27 03:18:40 2026 GMT Not After : Apr 28 05:49:40 2026 GMT Subject: CN=FF85C9154C83501FE4B6DB1801070F8BC8C5780E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:64:1a:ba:1f:0b:a2:83:fe:0e:6e:da:22:ee: b7:70:46:d5:a2:71:50:b4:33:49:f3:a5:0e:f5:88: 0c:a7:d2:dd:ee:e1:ba:df:74:2b:ac:2b:c0:d5:bd: da:f9:4f:92:d7:db:d6:85:39:68:63:c2:34:b7:54: 33:8e:69:2b:91:73:42:eb:cd:3c:39:4b:6a:de:9a: 09:d6:e1:7d:1c:36:89:15:58:ce:0e:81:35:c1:6b: 5d:f3:73:bc:5f:ff:fe:cc:38:95:93:e1:08:20:ef: 70:e2:68:f4:77:60:17:79:c7:db:85:91:4e:9d:2c: a6:2a:03:f3:a4:8c:7a:b5:26:cc:7b:d1:fd:b5:d6: 7d:e4:56:0a:46:4f:7f:fc:17:4e:12:5e:4d:0e:4d: 2b:28:f1:9a:0a:7d:fb:79:46:9d:03:4d:54:f7:46: 97:31:e9:39:00:ca:2a:5f:f0:52:cb:ba:49:0d:23: 95:b9:62:4b:06:21:46:f2:ca:d1:2e:ad:2e:37:bf: 5c:e6:6d:64:16:ff:65:66:56:19:1a:ee:b7:99:dd: 6e:8e:4b:f5:07:c4:24:17:d4:eb:b0:2b:61:6f:20: 93:d1:e2:90:8b:5d:23:fb:7d:8d:26:19:19:0e:5a: c2:3a:7e:03:a0:a4:65:36:62:30:85:70:0a:3d:94: 38:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:85:C9:15:4C:83:50:1F:E4:B6:DB:18:01:07:0F:8B:C8:C5:78:0E X509v3 Authority Key Identifier: keyid:68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:bc:d5:ec:cb:54:10:81:1b:a1:84:da:69:c5:c6:41:b0:dd: af:f9:1c:62:17:99:0c:af:09:37:da:00:52:c7:c6:1d:7f:2b: f4:61:0a:91:27:86:dd:e9:f6:3a:82:94:55:b0:52:f6:18:20: c5:da:23:8e:4e:d4:61:ea:d5:32:e7:21:3e:a6:3b:9f:4a:3c: 2e:02:07:1f:27:3d:d4:c2:b9:7e:29:17:fc:a0:72:2b:15:ce: e7:51:65:45:f3:5e:a9:4e:6f:50:73:cf:17:e4:14:1a:a2:fe: 87:34:49:33:ff:c1:d7:8e:3a:cb:42:e2:91:34:62:5e:b7:7f: 8b:e2:60:1f:91:1f:20:85:65:b7:9c:97:d5:c1:f8:51:2e:c1: 36:81:2f:7f:91:5e:25:62:97:d8:07:38:6b:c8:8b:2e:1d:0e: 32:56:c8:e0:ab:4e:5e:8e:d0:2c:4a:4e:0e:40:c7:cd:55:fe: 27:d1:4c:36:3c:51:06:e2:ef:88:1d:ab:ab:2c:db:62:d8:45: b5:31:42:16:6f:a5:16:48:0c:12:d4:9c:64:40:6c:c6:a2:0f: 94:90:d2:15:91:61:d5:83:a1:4f:63:58:fd:00:f8:8e:6b:7a: fa:14:39:43:5c:e1:06:17:76:46:a7:c4:be:db:1f:e5:16:6c: 86:e1:74:26 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSNLjs+TsNKOl4ERT71zzuPdMPAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJE RjU2NzAwRTAeFw0yNjA0MjcwMzE4NDBaFw0yNjA0MjgwNTQ5NDBaMDMxMTAvBgNV BAMTKEZGODVDOTE1NEM4MzUwMUZFNEI2REIxODAxMDcwRjhCQzhDNTc4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaZBq6Hwuig/4Obtoi7rdwRtWi cVC0M0nzpQ71iAyn0t3u4brfdCusK8DVvdr5T5LX29aFOWhjwjS3VDOOaSuRc0Lr zTw5S2remgnW4X0cNokVWM4OgTXBa13zc7xf//7MOJWT4Qgg73DiaPR3YBd5x9uF kU6dLKYqA/OkjHq1Jsx70f211n3kVgpGT3/8F04SXk0OTSso8ZoKfft5Rp0DTVT3 Rpcx6TkAyipf8FLLukkNI5W5YksGIUbyytEurS43v1zmbWQW/2VmVhka7reZ3W6O S/UHxCQX1OuwK2FvIJPR4pCLXSP7fY0mGRkOWsI6fgOgpGU2YjCFcAo9lDh1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/4XJFUyDUB/kttsYAQcPi8jFeA4wHwYDVR0j BBgwFoAUaMtiGJJr9Oby9rgXwCAO699WcA4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2MjE5MDYyMjk0OTM3Ny8wLzY4Q0I2MjE4OTI2QkY0RTZGMkY2QjgxN0MwMjAw RUVCREY1NjcwMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJERjU2NzAwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNjIxOTA2MjI5NDkzNzcvMC82OENCNjIxODkyNkJG NEU2RjJGNkI4MTdDMDIwMEVFQkRGNTY3MDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7zV7MtUEIEb oYTaacXGQbDdr/kcYheZDK8JN9oAUsfGHX8r9GEKkSeG3en2OoKUVbBS9hggxdoj jk7UYerVMuchPqY7n0o8LgIHHyc91MK5fikX/KByKxXO51FlRfNeqU5vUHPPF+QU GqL+hzRJM//B1446y0LikTRiXrd/i+JgH5EfIIVlt5yX1cH4US7BNoEvf5FeJWKX 2Ac4a8iLLh0OMlbI4KtOXo7QLEpODkDHzVX+J9FMNjxRBuLviB2rqyzbYthFtTFC Fm+lFkgMEtScZEBsxqIPlJDSFZFh1YOhT2NY/QD4jmt6+hQ5Q1zhBhd2RqfEvtsf 5RZshuF0Jg== -----END CERTIFICATE-----Generated at Mon Apr 27 21:50:19 2026 by rpki-client