$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft File: AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft (raw, json) Hash identifier: qVTgOEV+ahufTFkN/GM1sav9nYVHTMfWwzVtUIPgz4c= Subject key identifier: 73:D5:D2:AC:7F:6C:AD:2D:98:93:2A:E3:D6:0C:7A:88:09:67:70:43 Authority key identifier: AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 Certificate issuer: /CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Certificate serial: 547CD679AABF93F584F95A0EC72F954B0FA37A90 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft Manifest number: 08 Signing time: Fri 22 May 2026 15:02:23 +0000 Manifest this update: Fri 22 May 2026 14:57:23 +0000 Manifest next update: Sat 23 May 2026 17:32:23 +0000 Files and hashes: 1: 3137352e3130362e3132382e302f31372d3137203d3e2030.roa (hash: fD0xUei3xaWM82AvTPTnAOAQbXn529olbNLU1cHevWU=) 2: 3132342e3234302e3132382e302f31382d3138203d3e2034383337.roa (hash: m9XQsIz+eXEguT02N3ywaodILFqEFw4B0TvG17l7yqs=) 3: AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl (hash: bMmldwyPYYl3uMluJjalvxnZMSnhawZtQBDwbvlm2/Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 17:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:7c:d6:79:aa:bf:93:f5:84:f9:5a:0e:c7:2f:95:4b:0f:a3:7a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Validity Not Before: May 22 14:57:23 2026 GMT Not After : May 23 17:32:23 2026 GMT Subject: CN=73D5D2AC7F6CAD2D98932AE3D60C7A8809677043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5b:c4:fb:8f:e9:b4:69:68:c4:c3:5f:3a:3a: a9:3d:50:76:56:c4:a2:3f:67:40:59:27:42:99:58: 09:d3:bd:21:3d:37:2c:27:d9:eb:69:94:90:47:9e: d2:e9:7e:49:c9:8d:cc:93:12:da:7f:f0:74:64:18: d3:00:6c:1e:36:33:c9:81:cb:92:7d:3e:7f:87:78: 2c:d2:c5:f8:21:47:de:2b:f4:6f:5c:25:93:e5:25: 10:db:b0:89:24:6d:6f:0d:11:51:cd:00:ac:66:a8: cb:02:2f:c8:3a:f8:df:73:89:cb:76:93:c4:8e:ea: 6e:66:59:01:d1:ca:8d:48:6c:1f:3a:72:3c:a6:ef: eb:1a:f5:dd:23:de:db:56:0c:e4:a4:26:a2:30:ca: 5a:b7:46:12:5e:f8:4d:de:aa:60:88:9a:8d:47:45: fd:f4:66:61:5d:32:8d:81:b0:d7:ae:81:4b:97:2a: 56:7a:19:9e:e9:ff:51:8e:01:a9:ba:ef:f7:75:1d: 4c:f3:57:99:47:e7:32:1f:49:db:e5:10:21:4c:60: 2d:d7:0f:72:52:06:ae:fa:b6:44:c0:04:b3:4b:47: 58:b9:95:c5:18:c1:40:cc:7c:bf:2f:da:c7:80:9f: a2:b4:6c:75:7c:f8:96:a0:0c:d3:17:c8:45:d9:12: 48:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D5:D2:AC:7F:6C:AD:2D:98:93:2A:E3:D6:0C:7A:88:09:67:70:43 X509v3 Authority Key Identifier: keyid:AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:26:25:48:24:90:9a:13:a3:74:3a:4f:0c:ee:12:60:de:3e: 72:1d:9a:7b:21:20:e6:ca:31:76:fa:3c:9a:dc:46:3f:d4:82: ca:34:56:be:a9:7e:2a:dd:a6:e8:99:fb:15:ea:63:b4:2e:c3: 95:37:66:ed:b9:16:67:eb:87:3d:93:c3:13:87:4d:cd:a4:a4: a5:06:55:c8:7f:9e:17:38:f1:64:b2:c1:72:1a:b4:f9:f5:70: 5a:1c:c4:12:ff:2f:ab:c3:4f:37:51:db:02:a8:52:07:56:85: 25:1f:38:63:7f:cd:5d:d4:a7:03:5e:19:c1:32:8c:6a:22:e0: c0:4f:59:8d:53:a3:f3:ad:88:fe:a8:94:76:35:ae:3e:52:47: 88:bb:bb:83:70:28:0b:09:23:96:64:fa:9e:86:f9:dc:f3:f7: e3:2b:b2:b0:51:c9:1a:1a:7b:a0:ba:06:ea:71:b7:35:63:1a: 55:ef:11:2d:cf:10:fe:f6:ae:65:48:e3:68:7a:ac:9b:db:c6: bb:44:4e:46:cb:48:f0:3e:f3:fa:ec:2b:b5:0e:3f:b6:b7:f8: 14:50:2d:d7:4d:10:03:8b:a5:d1:84:f2:ae:62:54:87:77:a4: c0:fd:cd:eb:3b:3e:d6:87:cf:2a:8e:91:97:cd:a8:77:43:d7: 76:a5:1b:df -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVHzWeaq/k/WE+VoOxy+VSw+jepAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNC RTI2MDUzODAeFw0yNjA1MjIxNDU3MjNaFw0yNjA1MjMxNzMyMjNaMDMxMTAvBgNV BAMTKDczRDVEMkFDN0Y2Q0FEMkQ5ODkzMkFFM0Q2MEM3QTg4MDk2NzcwNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgW8T7j+m0aWjEw186Oqk9UHZW xKI/Z0BZJ0KZWAnTvSE9Nywn2etplJBHntLpfknJjcyTEtp/8HRkGNMAbB42M8mB y5J9Pn+HeCzSxfghR94r9G9cJZPlJRDbsIkkbW8NEVHNAKxmqMsCL8g6+N9zict2 k8SO6m5mWQHRyo1IbB86cjym7+sa9d0j3ttWDOSkJqIwylq3RhJe+E3eqmCImo1H Rf30ZmFdMo2BsNeugUuXKlZ6GZ7p/1GOAam67/d1HUzzV5lH5zIfSdvlECFMYC3X D3JSBq76tkTABLNLR1i5lcUYwUDMfL8v2seAn6K0bHV8+JagDNMXyEXZEkjlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUc9XSrH9srS2Ykyrj1gx6iAlncEMwHwYDVR0j BBgwFoAUrGjDpWwrj7cN7nXV9YSTrL4mBTgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODYwMDg2ODQ5MzU5MDU0Ny8wL0FDNjhDM0E1NkMyQjhGQjcwREVFNzVENUY1ODQ5 M0FDQkUyNjA1MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNCRTI2MDUzOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2MDA4Njg0OTM1OTA1NDcvMC9BQzY4QzNBNTZDMkI4 RkI3MERFRTc1RDVGNTg0OTNBQ0JFMjYwNTM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtSYlSCSQmhOj dDpPDO4SYN4+ch2aeyEg5soxdvo8mtxGP9SCyjRWvql+Kt2m6Jn7FepjtC7DlTdm 7bkWZ+uHPZPDE4dNzaSkpQZVyH+eFzjxZLLBchq0+fVwWhzEEv8vq8NPN1HbAqhS B1aFJR84Y3/NXdSnA14ZwTKMaiLgwE9ZjVOj862I/qiUdjWuPlJHiLu7g3AoCwkj lmT6nob53PP34yuysFHJGhp7oLoG6nG3NWMaVe8RLc8Q/vauZUjjaHqsm9vGu0RO RstI8D7z+uwrtQ4/trf4FFAt100QA4ul0YTyrmJUh3ekwP3N6zs+1ofPKo6Rl82o d0PXdqUb3w== -----END CERTIFICATE-----Generated at Sat May 23 03:44:45 2026 by rpki-client