$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft File: AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft (raw, json) Hash identifier: Hw7uGY3qjB53pxZZ70UKE/WeQ7txbVyUQxPrC2Q9qCQ= Subject key identifier: 0C:11:FC:22:B1:58:CE:54:54:73:B8:FE:C0:32:76:3A:8F:F0:1C:5C Authority key identifier: AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 Certificate issuer: /CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Certificate serial: 6F50DA9F8593C25F95D94D66C69F7AE0FA4430CB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft Manifest number: 8D Signing time: Fri 28 Aug 2026 06:47:56 +0000 Manifest this update: Fri 28 Aug 2026 06:42:56 +0000 Manifest next update: Mon 31 Aug 2026 07:56:56 +0000 Files and hashes: 1: 3132342e3234302e3132382e302f31382d3138203d3e2034383337.roa (hash: m9XQsIz+eXEguT02N3ywaodILFqEFw4B0TvG17l7yqs=) 2: AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl (hash: mHh4PhoJIiksWpEWYNIqh+OI/YYIbkB++QnD2nhHnZA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 07:56:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:50:da:9f:85:93:c2:5f:95:d9:4d:66:c6:9f:7a:e0:fa:44:30:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Validity Not Before: Aug 28 06:42:56 2026 GMT Not After : Aug 31 07:56:56 2026 GMT Subject: CN=0C11FC22B158CE545473B8FEC032763A8FF01C5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:95:df:77:49:63:09:d8:6a:9f:d0:19:a8:11: d8:ec:15:dd:a7:cb:bd:75:49:5d:ba:ba:06:df:5b: 91:a6:38:46:38:09:04:59:e3:5d:54:74:ac:da:b1: 64:9a:e6:3e:55:d7:08:e9:a5:d1:be:e0:30:07:85: 94:6a:e2:2a:b9:4d:4d:2f:65:87:c9:78:72:b8:0c: 82:42:ed:e8:03:f5:e3:3f:24:a4:89:05:dd:c8:89: d1:9e:74:da:20:bb:ab:a4:b7:1f:54:ec:bb:c7:05: 2c:a1:02:62:42:77:db:06:1e:43:ea:2c:91:04:5c: 0d:8d:52:86:64:0e:6e:8b:aa:15:67:d6:5d:ab:21: b9:3c:bc:c6:88:49:79:b9:7c:6d:78:81:22:56:32: cb:f9:c1:c3:de:a6:8c:d3:eb:95:86:e0:5b:6e:bb: 1f:17:36:77:ab:7c:cc:d4:4a:da:f8:37:50:42:47: 87:52:9b:8e:6a:1a:3e:77:b3:3e:4b:ce:8f:32:c1: 58:a0:3d:a8:d0:06:4d:91:7d:35:f0:d7:8b:0b:f2: 6a:ab:39:1d:89:f7:f1:b6:c1:f8:d6:08:a4:fe:61: 58:b3:4e:66:33:c4:42:4d:1b:3a:a3:87:2b:d4:ba: 8c:40:7c:56:8c:09:de:7b:df:50:9e:18:d8:e7:4b: 24:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:11:FC:22:B1:58:CE:54:54:73:B8:FE:C0:32:76:3A:8F:F0:1C:5C X509v3 Authority Key Identifier: keyid:AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:13:99:a0:88:d5:6d:ec:c9:88:e4:e9:98:60:ea:e7:3d:12: 7b:50:c7:fa:0e:ee:6a:86:fb:d7:8b:c1:3a:ff:fc:9a:4a:fb: 78:7d:50:13:f6:ba:c9:38:53:5b:ea:2f:5b:71:35:21:cd:b0: 6a:72:5a:77:94:b0:c0:ea:b0:61:e5:6a:19:5d:4c:9f:35:e5: 1d:3c:2e:61:19:d6:ee:91:31:81:fc:e3:94:8f:a4:d8:03:c0: f9:05:78:19:2d:1e:b2:db:c1:bd:ee:a1:cf:12:33:23:7a:52: ca:b9:37:f2:42:d9:5f:bd:17:35:50:eb:91:e6:47:38:53:ab: 30:ba:32:8e:b9:8e:22:99:5d:a9:2f:61:38:26:e2:15:97:d7: dd:7d:20:5e:84:59:ac:be:88:98:18:ea:4e:9e:37:b6:e7:38: 2a:89:22:6d:34:25:29:31:e5:29:38:ce:74:36:7f:16:ea:d2: aa:d0:c6:20:19:53:d3:df:cd:60:d1:d2:f8:0a:75:60:e7:6b: 39:df:c7:25:de:c8:be:01:0c:d6:2d:cb:a6:6d:8c:2e:e6:e7: fc:60:08:1b:5a:d9:8c:52:1b:58:be:66:7c:a3:51:c8:d0:5d: 0b:a7:c9:c6:ac:04:0b:90:a3:d5:34:6c:27:f2:34:dc:9b:ab: 6b:fe:11:6f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUb1Dan4WTwl+V2U1mxp964PpEMMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNC RTI2MDUzODAeFw0yNjA4MjgwNjQyNTZaFw0yNjA4MzEwNzU2NTZaMDMxMTAvBgNV BAMTKDBDMTFGQzIyQjE1OENFNTQ1NDczQjhGRUMwMzI3NjNBOEZGMDFDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfld93SWMJ2Gqf0BmoEdjsFd2n y711SV26ugbfW5GmOEY4CQRZ411UdKzasWSa5j5V1wjppdG+4DAHhZRq4iq5TU0v ZYfJeHK4DIJC7egD9eM/JKSJBd3IidGedNogu6uktx9U7LvHBSyhAmJCd9sGHkPq LJEEXA2NUoZkDm6LqhVn1l2rIbk8vMaISXm5fG14gSJWMsv5wcPepozT65WG4Ftu ux8XNnerfMzUStr4N1BCR4dSm45qGj53sz5Lzo8ywVigPajQBk2RfTXw14sL8mqr OR2J9/G2wfjWCKT+YVizTmYzxEJNGzqjhyvUuoxAfFaMCd5731CeGNjnSyQNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUDBH8IrFYzlRUc7j+wDJ2Oo/wHFwwHwYDVR0j BBgwFoAUrGjDpWwrj7cN7nXV9YSTrL4mBTgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODYwMDg2ODQ5MzU5MDU0Ny8wL0FDNjhDM0E1NkMyQjhGQjcwREVFNzVENUY1ODQ5 M0FDQkUyNjA1MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNCRTI2MDUzOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2MDA4Njg0OTM1OTA1NDcvMC9BQzY4QzNBNTZDMkI4 RkI3MERFRTc1RDVGNTg0OTNBQ0JFMjYwNTM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxOZoIjVbezJ iOTpmGDq5z0Se1DH+g7uaob714vBOv/8mkr7eH1QE/a6yThTW+ovW3E1Ic2wanJa d5SwwOqwYeVqGV1MnzXlHTwuYRnW7pExgfzjlI+k2APA+QV4GS0estvBve6hzxIz I3pSyrk38kLZX70XNVDrkeZHOFOrMLoyjrmOIpldqS9hOCbiFZfX3X0gXoRZrL6I mBjqTp43tuc4KokibTQlKTHlKTjOdDZ/FurSqtDGIBlT09/NYNHS+Ap1YOdrOd/H Jd7IvgEM1i3Lpm2MLubn/GAIG1rZjFIbWL5mfKNRyNBdC6fJxqwEC5Cj1TRsJ/I0 3Jura/4Rbw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:54:51 2026 by rpki-client