$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft File: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft (raw, json) Hash identifier: xxuiOIDiputoB8H2SRT13fboKxpQlMzdE37RXpflFbQ= Subject key identifier: CE:FE:09:B7:CC:AB:26:4A:C1:2F:87:FB:62:B0:61:B0:48:0A:86:FF Authority key identifier: 68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E Certificate issuer: /CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Certificate serial: 41BDE24799A76688E51008E7CF800DD7685F7C8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft Manifest number: D2 Signing time: Mon 26 Oct 2026 03:38:23 +0000 Manifest this update: Mon 26 Oct 2026 03:33:23 +0000 Manifest next update: Thu 29 Oct 2026 04:23:23 +0000 Files and hashes: 1: 323430323a313963303a3a2f33322d3332203d3e2030.roa (hash: rSqBjexqKcYyKYw2gWh34opzqrNoLhQFwHdXPpRt88w=) 2: 3130332e38312e34382e302f32342d3234203d3e2034383337.roa (hash: Gbvu7TcIz1LETT526fNYEvxeGhgl0TjPiCPljAumDSM=) 3: 3130332e38312e34382e302f32322d3232203d3e203538353431.roa (hash: q6mKY7KirHLJlmPsW911DHDgFjCE6SLxnzO6Hxi/o5s=) 4: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl (hash: YkCgzQhSZew0xBdAc3LmgOxodJAj1OF6bvHotop5wBk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 04:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:bd:e2:47:99:a7:66:88:e5:10:08:e7:cf:80:0d:d7:68:5f:7c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Validity Not Before: Oct 26 03:33:23 2026 GMT Not After : Oct 29 04:23:23 2026 GMT Subject: CN=CEFE09B7CCAB264AC12F87FB62B061B0480A86FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:da:68:d9:b4:d6:e7:74:34:c4:53:f8:aa:31: a8:a1:8b:b7:e6:b9:55:30:4e:06:23:13:b7:d3:33: 16:63:63:10:11:e2:4c:01:91:d0:04:1e:68:b4:85: 74:ae:7d:14:56:60:12:78:b8:84:0b:6c:60:1e:48: 45:99:e0:65:c5:b9:31:66:f4:2a:33:60:b9:6c:a3: 0f:aa:dc:10:a3:36:db:7c:68:ae:2e:cf:d0:dd:75: cf:b9:71:da:c6:0b:13:46:e6:f4:0a:eb:f1:37:29: a6:dd:f6:93:c2:03:1d:27:6f:93:d6:e7:39:94:83: 97:81:28:ed:6e:fb:6e:29:be:d0:c3:04:bc:37:cb: c7:14:d8:bf:ae:78:cb:94:05:4e:30:75:d2:56:08: 6b:79:08:05:0d:ac:5a:5b:36:0d:0a:af:1a:a8:34: ac:29:c6:af:b8:a0:40:ff:f5:39:f7:d3:2a:04:43: 63:f1:32:17:aa:ce:bb:39:57:49:89:14:5a:cc:4d: de:e8:9a:86:b3:bc:ec:34:d2:98:ff:7b:cb:a3:89: e2:de:d6:ce:56:b3:3f:fb:1f:76:96:85:a9:b4:0a: d5:ae:ce:3e:b6:71:dc:8a:ff:27:59:39:f7:ad:aa: f8:c5:c4:7b:bb:0b:39:90:1b:a2:d7:6b:8e:b3:d1: 77:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FE:09:B7:CC:AB:26:4A:C1:2F:87:FB:62:B0:61:B0:48:0A:86:FF X509v3 Authority Key Identifier: keyid:68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d2:35:2e:59:3b:4c:27:39:6e:f9:8b:3f:0d:08:d8:de:89: 84:27:3a:42:0d:3a:48:7e:e3:72:30:c4:a4:ff:8c:40:78:2e: 2e:c5:9e:14:0d:dd:a3:3a:2b:93:bc:69:b4:dd:61:1f:b9:c8: 08:91:30:b1:1d:14:16:24:cf:f2:82:76:dd:b3:34:ea:86:6b: c7:10:b9:fe:ec:3b:44:30:16:d1:66:93:df:b5:3f:e3:d2:b9: a8:e2:28:a2:fa:17:af:3a:6e:2a:11:51:ac:19:27:f6:53:fb: ff:e2:45:92:c9:29:e4:41:d0:35:36:44:2d:9d:38:c4:bd:19: 00:5c:50:96:8c:47:97:99:5a:36:9c:1f:95:b0:1a:88:2f:bb: 06:76:af:ba:4e:9c:6e:fd:ab:b4:a6:b5:8a:5f:6c:6a:d4:47: 24:c9:b3:8e:46:dc:5f:6d:2f:13:2a:30:3d:87:47:78:18:c4: 1b:bf:74:1c:87:8a:c1:c8:7c:ec:7a:e0:81:99:25:bc:4c:31: 10:7a:cc:74:de:e8:ba:67:c5:5a:75:6d:b4:95:dd:23:14:8c: 02:f7:94:b1:ca:67:1b:93:96:ac:63:54:5a:a3:c4:b4:a0:1d: 3b:d4:a3:c0:59:c6:ed:0c:18:e2:bd:fd:7b:2c:fb:49:0b:03: 5d:af:a6:99 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQb3iR5mnZojlEAjnz4AN12hffI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJE RjU2NzAwRTAeFw0yNjEwMjYwMzMzMjNaFw0yNjEwMjkwNDIzMjNaMDMxMTAvBgNV BAMTKENFRkUwOUI3Q0NBQjI2NEFDMTJGODdGQjYyQjA2MUIwNDgwQTg2RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB2mjZtNbndDTEU/iqMaihi7fm uVUwTgYjE7fTMxZjYxAR4kwBkdAEHmi0hXSufRRWYBJ4uIQLbGAeSEWZ4GXFuTFm 9CozYLlsow+q3BCjNtt8aK4uz9Dddc+5cdrGCxNG5vQK6/E3Kabd9pPCAx0nb5PW 5zmUg5eBKO1u+24pvtDDBLw3y8cU2L+ueMuUBU4wddJWCGt5CAUNrFpbNg0Krxqo NKwpxq+4oED/9Tn30yoEQ2PxMheqzrs5V0mJFFrMTd7omoazvOw00pj/e8ujieLe 1s5Wsz/7H3aWham0CtWuzj62cdyK/ydZOfetqvjFxHu7CzmQG6LXa46z0XenAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzv4Jt8yrJkrBL4f7YrBhsEgKhv8wHwYDVR0j BBgwFoAUaMtiGJJr9Oby9rgXwCAO699WcA4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2MjE5MDYyMjk0OTM3Ny8wLzY4Q0I2MjE4OTI2QkY0RTZGMkY2QjgxN0MwMjAw RUVCREY1NjcwMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJERjU2NzAwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNjIxOTA2MjI5NDkzNzcvMC82OENCNjIxODkyNkJG NEU2RjJGNkI4MTdDMDIwMEVFQkRGNTY3MDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9I1Llk7TCc5 bvmLPw0I2N6JhCc6Qg06SH7jcjDEpP+MQHguLsWeFA3dozork7xptN1hH7nICJEw sR0UFiTP8oJ23bM06oZrxxC5/uw7RDAW0WaT37U/49K5qOIoovoXrzpuKhFRrBkn 9lP7/+JFkskp5EHQNTZELZ04xL0ZAFxQloxHl5laNpwflbAaiC+7Bnavuk6cbv2r tKa1il9satRHJMmzjkbcX20vEyowPYdHeBjEG790HIeKwch87HrggZklvEwxEHrM dN7oumfFWnVttJXdIxSMAveUscpnG5OWrGNUWqPEtKAdO9SjwFnG7QwY4r39eyz7 SQsDXa+mmQ== -----END CERTIFICATE-----Generated at Tue Oct 27 15:51:09 2026 by rpki-client