$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft File: AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft (raw, json) Hash identifier: +sohdNPLIEWjW8UwKxNlPK1GQQyLq5qResURGE0dq/E= Subject key identifier: 9B:92:92:70:53:2C:11:B2:DC:0E:17:4B:B9:D1:E3:2D:D2:E3:43:F0 Authority key identifier: AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 Certificate issuer: /CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Certificate serial: 0310DC51424852DF5B511DB4B2E6AA0B6879FE52 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft Manifest number: 45 Signing time: Mon 06 Jul 2026 19:02:35 +0000 Manifest this update: Mon 06 Jul 2026 18:57:35 +0000 Manifest next update: Tue 07 Jul 2026 22:20:35 +0000 Files and hashes: 1: 3137352e3130362e3132382e302f31372d3137203d3e2030.roa (hash: fD0xUei3xaWM82AvTPTnAOAQbXn529olbNLU1cHevWU=) 2: AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl (hash: Oq5HLdK4ZM7gA3IO3jsfsQc+ArMn/TjtxwZsehOO46Q=) 3: 3132342e3234302e3132382e302f31382d3138203d3e2034383337.roa (hash: m9XQsIz+eXEguT02N3ywaodILFqEFw4B0TvG17l7yqs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Jul 2026 22:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:10:dc:51:42:48:52:df:5b:51:1d:b4:b2:e6:aa:0b:68:79:fe:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Validity Not Before: Jul 6 18:57:35 2026 GMT Not After : Jul 7 22:20:35 2026 GMT Subject: CN=9B929270532C11B2DC0E174BB9D1E32DD2E343F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6d:73:23:bf:d6:32:b8:e3:3a:82:5f:6e:9c: 4b:e3:f8:c3:7f:3a:23:39:d6:55:fe:cf:9c:54:ec: d5:e6:a0:44:a2:e0:1a:d3:73:34:6b:21:66:80:48: c0:d8:4b:d7:c3:2e:e0:19:26:2b:fb:5b:31:bb:22: f6:cc:ea:bc:73:62:19:2d:99:73:79:72:20:2c:d8: 85:13:0d:38:ec:3f:b6:cf:be:1d:75:f1:4c:96:4f: e3:38:61:d4:d4:44:60:dd:cd:f7:5a:6c:f3:ee:c1: 57:dc:a4:4a:3f:b7:4a:f1:37:cb:8a:23:66:97:a3: 7f:84:a3:cc:96:63:a2:8d:bb:a2:b8:8a:20:ba:ae: 21:a6:f0:1e:c2:4c:8d:c6:9a:8c:6d:70:16:08:4e: f2:57:1f:f0:66:d7:4b:92:25:02:e6:b1:cc:2e:0b: 84:43:64:81:da:1b:d6:50:ab:f4:ad:8e:c4:ee:2c: 2e:2a:7c:4b:a0:51:ea:4f:14:49:86:79:8e:71:51: 8a:5e:49:6f:90:e3:7b:94:d3:92:91:a8:3d:89:7c: 35:50:26:d9:12:95:9c:4a:b3:c1:ee:a8:78:a0:97: 8d:db:66:c8:73:41:0b:83:ff:f5:5f:76:4a:18:03: 35:57:0b:b6:e2:a6:43:51:aa:14:84:4e:31:86:4b: 7b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:92:92:70:53:2C:11:B2:DC:0E:17:4B:B9:D1:E3:2D:D2:E3:43:F0 X509v3 Authority Key Identifier: keyid:AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:20:3d:d5:b4:ee:cf:e8:e6:9b:08:24:1c:29:2a:71:5d:c4: f6:50:22:29:64:7b:8a:b9:f9:82:fa:00:87:7c:50:b0:a7:88: 61:a4:97:8f:29:23:c4:e4:e4:cc:1c:21:93:48:bd:cf:c9:5c: bd:51:56:c5:41:c8:ac:38:28:2e:86:14:cf:c2:2b:83:cd:8c: e1:9f:c3:35:83:6c:bb:07:ab:88:47:0d:a8:3d:d8:6d:dd:95: 10:c9:ee:9d:96:b5:36:01:f0:83:ef:10:89:e7:ec:e0:6d:96: 05:6b:73:91:52:44:6d:76:e0:eb:42:e3:f7:c5:f6:c6:de:b6: 9e:41:40:fc:54:d6:35:55:24:cb:6c:9d:52:03:82:94:38:76: 7d:51:70:6a:d0:88:33:ad:b4:ed:5f:fc:ed:6e:b9:06:ec:3e: 38:26:ad:02:d3:b4:a4:08:36:71:f8:2d:bd:a6:36:ed:dc:f5: dc:c7:7c:6c:8d:4c:5c:a2:af:0d:82:48:a1:09:bd:12:d4:b4: 54:90:a2:b1:d8:43:41:d7:02:30:66:60:eb:59:cf:18:f1:89: 9d:ad:4f:3b:4c:8c:ff:fa:25:24:74:7f:c7:3f:d0:f8:8f:2d: 33:b3:67:6d:55:4d:54:ca:7a:eb:1a:7b:39:4e:25:ab:19:d0: 6c:be:9a:7e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAxDcUUJIUt9bUR20suaqC2h5/lIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNC RTI2MDUzODAeFw0yNjA3MDYxODU3MzVaFw0yNjA3MDcyMjIwMzVaMDMxMTAvBgNV BAMTKDlCOTI5MjcwNTMyQzExQjJEQzBFMTc0QkI5RDFFMzJERDJFMzQzRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCabXMjv9YyuOM6gl9unEvj+MN/ OiM51lX+z5xU7NXmoESi4BrTczRrIWaASMDYS9fDLuAZJiv7WzG7IvbM6rxzYhkt mXN5ciAs2IUTDTjsP7bPvh118UyWT+M4YdTURGDdzfdabPPuwVfcpEo/t0rxN8uK I2aXo3+Eo8yWY6KNu6K4iiC6riGm8B7CTI3GmoxtcBYITvJXH/Bm10uSJQLmscwu C4RDZIHaG9ZQq/StjsTuLC4qfEugUepPFEmGeY5xUYpeSW+Q43uU05KRqD2JfDVQ JtkSlZxKs8HuqHigl43bZshzQQuD//VfdkoYAzVXC7bipkNRqhSETjGGS3v7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUm5KScFMsEbLcDhdLudHjLdLjQ/AwHwYDVR0j BBgwFoAUrGjDpWwrj7cN7nXV9YSTrL4mBTgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODYwMDg2ODQ5MzU5MDU0Ny8wL0FDNjhDM0E1NkMyQjhGQjcwREVFNzVENUY1ODQ5 M0FDQkUyNjA1MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNCRTI2MDUzOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2MDA4Njg0OTM1OTA1NDcvMC9BQzY4QzNBNTZDMkI4 RkI3MERFRTc1RDVGNTg0OTNBQ0JFMjYwNTM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSA91bTuz+jm mwgkHCkqcV3E9lAiKWR7irn5gvoAh3xQsKeIYaSXjykjxOTkzBwhk0i9z8lcvVFW xUHIrDgoLoYUz8Irg82M4Z/DNYNsuweriEcNqD3Ybd2VEMnunZa1NgHwg+8Qiefs 4G2WBWtzkVJEbXbg60Lj98X2xt62nkFA/FTWNVUky2ydUgOClDh2fVFwatCIM620 7V/87W65Buw+OCatAtO0pAg2cfgtvaY27dz13Md8bI1MXKKvDYJIoQm9EtS0VJCi sdhDQdcCMGZg61nPGPGJna1PO0yM//olJHR/xz/Q+I8tM7NnbVVNVMp66xp7OU4l qxnQbL6afg== -----END CERTIFICATE-----Generated at Tue Jul 7 10:46:56 2026 by rpki-client