$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft File: AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft (raw, json) Hash identifier: 83KcDxNs/P1ejMDnyTp4TYU+nVO4QuFa3NROwmcZTOk= Subject key identifier: 33:B3:C6:5A:AA:0B:04:AB:17:D3:FF:96:B0:1F:4F:FC:54:AF:0D:F2 Authority key identifier: AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 Certificate issuer: /CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Certificate serial: 6BF82B207568CAACA5A95E8823C1DCC747B3A484 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft Manifest number: A1 Signing time: Mon 12 Oct 2026 12:56:58 +0000 Manifest this update: Mon 12 Oct 2026 12:51:58 +0000 Manifest next update: Thu 15 Oct 2026 14:46:58 +0000 Files and hashes: 1: 3132342e3234302e3132382e302f31382d3138203d3e2034383337.roa (hash: m9XQsIz+eXEguT02N3ywaodILFqEFw4B0TvG17l7yqs=) 2: AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl (hash: pnuOOR9/n7ESBOVWTeLaHAKaFRzOHbTImRU6NRMq+RE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 14:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f8:2b:20:75:68:ca:ac:a5:a9:5e:88:23:c1:dc:c7:47:b3:a4:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Validity Not Before: Oct 12 12:51:58 2026 GMT Not After : Oct 15 14:46:58 2026 GMT Subject: CN=33B3C65AAA0B04AB17D3FF96B01F4FFC54AF0DF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:bd:bf:95:4c:4a:45:38:2d:4b:1a:3f:11: 51:83:c7:2a:4c:aa:7a:1f:bd:d4:a7:a4:ee:80:96: d1:90:63:6d:50:d5:0e:5b:31:e4:0f:90:c5:55:65: 82:b0:87:3c:29:20:7f:d6:76:d6:fa:83:94:1d:b7: fb:2d:0b:b6:00:21:11:b8:ff:13:14:3e:0c:4c:d7: 26:12:f7:b4:59:af:9b:90:9b:ab:f8:e1:b2:de:8e: 61:d5:93:4d:62:a1:b4:bc:84:e9:2d:d2:6d:bc:d9: 66:e0:eb:60:ee:26:ec:b0:84:ed:79:51:a1:0c:a8: ca:93:37:0b:a7:fd:d6:ee:40:9b:cf:42:62:2f:1b: 43:9c:df:f1:2b:eb:a2:4b:d7:0b:84:91:35:88:f7: 0a:d5:d6:29:37:62:34:c5:04:a8:d9:dd:e8:ea:48: e1:85:bf:83:ab:21:1c:e9:e9:ad:4e:63:8c:2d:e9: f2:29:3e:d6:dc:f3:3b:8c:e0:1c:84:c8:f4:87:eb: a2:6d:24:4d:b2:62:09:af:39:68:cf:d8:63:c6:78: f6:92:57:ac:a3:a7:56:7d:62:20:b0:4f:3a:2a:d7: a7:99:d8:c3:59:5f:ea:18:bf:0b:2a:a3:b7:78:ab: 5f:06:d4:4b:38:c8:32:2d:3f:03:5d:1a:36:b0:a2: 8c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B3:C6:5A:AA:0B:04:AB:17:D3:FF:96:B0:1F:4F:FC:54:AF:0D:F2 X509v3 Authority Key Identifier: keyid:AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:2b:44:e1:4c:6b:ce:2e:ff:69:32:bb:c7:e0:ed:10:9e:08: f0:1f:b8:2b:06:ed:f2:92:0d:52:37:68:3e:62:8f:43:a7:16: b4:c4:60:52:d3:1c:ee:df:7a:59:53:ec:7a:94:e5:15:1d:2b: 6c:6b:f6:00:2e:86:62:aa:c7:dd:56:9e:2b:85:da:63:bd:c9: 25:60:71:29:8d:b1:4a:7e:84:f9:29:5b:d1:4f:cf:77:9c:fc: 88:52:d6:0a:e1:28:8f:e1:37:aa:e9:41:39:41:6e:3d:da:b1: 12:96:3d:0a:ee:45:56:92:24:0d:f6:8d:c1:fe:12:96:c1:9e: 24:8b:dd:28:e1:66:2b:35:b0:9e:a5:82:18:c2:02:4c:6a:a8: 05:79:d4:9f:fc:57:17:4f:3c:a8:9b:39:cb:e9:67:18:cd:0a: f1:07:c9:97:10:bb:13:e8:1b:70:52:82:47:e6:33:41:79:7c: 65:2a:79:29:4d:83:88:40:c4:db:ee:33:d0:f5:75:c7:46:b8: d1:18:39:d5:d9:f7:07:1f:91:64:93:a5:74:2e:49:72:43:a0: 47:23:0e:44:29:20:ef:77:3e:5a:1f:7b:52:7e:24:78:e3:3d: c7:f9:a4:0f:8e:37:c2:ef:d4:68:68:68:86:cb:62:73:e4:d1: 3f:1b:e1:41 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUa/grIHVoyqylqV6II8Hcx0ezpIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNC RTI2MDUzODAeFw0yNjEwMTIxMjUxNThaFw0yNjEwMTUxNDQ2NThaMDMxMTAvBgNV BAMTKDMzQjNDNjVBQUEwQjA0QUIxN0QzRkY5NkIwMUY0RkZDNTRBRjBERjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1M72/lUxKRTgtSxo/EVGDxypM qnofvdSnpO6AltGQY21Q1Q5bMeQPkMVVZYKwhzwpIH/Wdtb6g5Qdt/stC7YAIRG4 /xMUPgxM1yYS97RZr5uQm6v44bLejmHVk01iobS8hOkt0m282Wbg62DuJuywhO15 UaEMqMqTNwun/dbuQJvPQmIvG0Oc3/Er66JL1wuEkTWI9wrV1ik3YjTFBKjZ3ejq SOGFv4OrIRzp6a1OY4wt6fIpPtbc8zuM4ByEyPSH66JtJE2yYgmvOWjP2GPGePaS V6yjp1Z9YiCwTzoq16eZ2MNZX+oYvwsqo7d4q18G1Es4yDItPwNdGjawooxnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUM7PGWqoLBKsX0/+WsB9P/FSvDfIwHwYDVR0j BBgwFoAUrGjDpWwrj7cN7nXV9YSTrL4mBTgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODYwMDg2ODQ5MzU5MDU0Ny8wL0FDNjhDM0E1NkMyQjhGQjcwREVFNzVENUY1ODQ5 M0FDQkUyNjA1MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNCRTI2MDUzOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2MDA4Njg0OTM1OTA1NDcvMC9BQzY4QzNBNTZDMkI4 RkI3MERFRTc1RDVGNTg0OTNBQ0JFMjYwNTM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlStE4Uxrzi7/ aTK7x+DtEJ4I8B+4Kwbt8pINUjdoPmKPQ6cWtMRgUtMc7t96WVPsepTlFR0rbGv2 AC6GYqrH3VaeK4XaY73JJWBxKY2xSn6E+Slb0U/Pd5z8iFLWCuEoj+E3qulBOUFu PdqxEpY9Cu5FVpIkDfaNwf4SlsGeJIvdKOFmKzWwnqWCGMICTGqoBXnUn/xXF088 qJs5y+lnGM0K8QfJlxC7E+gbcFKCR+YzQXl8ZSp5KU2DiEDE2+4z0PV1x0a40Rg5 1dn3Bx+RZJOldC5JckOgRyMORCkg73c+Wh97Un4keOM9x/mkD443wu/UaGhohsti c+TRPxvhQQ== -----END CERTIFICATE-----Generated at Wed Oct 14 09:07:38 2026 by rpki-client