$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.mft File: 1968876B21FE15E288B0923B17E385B487979161.mft (raw, json) Hash identifier: nazGC87oqoNkrVjZ00xwB9EWq+7DXGOQW+dfMvJG474= Subject key identifier: 6C:B5:57:49:4E:1B:AC:BB:11:0E:60:E4:78:63:0D:33:F8:90:BF:34 Authority key identifier: 19:68:87:6B:21:FE:15:E2:88:B0:92:3B:17:E3:85:B4:87:97:91:61 Certificate issuer: /CN=1968876B21FE15E288B0923B17E385B487979161 Certificate serial: 4912E7FB9B18729310C1063F292476C180FF07F4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1968876B21FE15E288B0923B17E385B487979161.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.mft Manifest number: 16 Signing time: Sat 22 Aug 2026 01:46:09 +0000 Manifest this update: Sat 22 Aug 2026 01:41:09 +0000 Manifest next update: Sun 23 Aug 2026 04:51:09 +0000 Files and hashes: 1: 1968876B21FE15E288B0923B17E385B487979161.crl (hash: j7dyLMqbIBGBkwEA5FhGCGJAUiPNVF4YRF3APeBb4YU=) 2: 3232302e3135342e3131342e302f32332d3233203d3e203633383338.roa (hash: ivGXMKZ3j/SM+VplsuPp05w4vpAs8N9xajLe22gGV00=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.crl rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1968876B21FE15E288B0923B17E385B487979161.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Aug 2026 15:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:12:e7:fb:9b:18:72:93:10:c1:06:3f:29:24:76:c1:80:ff:07:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1968876B21FE15E288B0923B17E385B487979161 Validity Not Before: Aug 22 01:41:09 2026 GMT Not After : Aug 23 04:51:09 2026 GMT Subject: CN=6CB557494E1BACBB110E60E478630D33F890BF34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9d:90:49:de:0d:6d:dd:fd:94:1c:3e:73:9f: b7:83:d3:7b:0f:27:2d:3a:8b:06:95:53:bb:6e:cb: ae:d8:d8:96:a0:0e:8c:b1:71:71:ed:f1:5e:c4:f8: e8:b1:b8:64:c7:5c:2e:13:68:91:df:d5:c4:e3:76: 7a:5e:6e:7a:fe:c8:40:3e:3e:e8:e2:54:3b:64:75: f4:dc:a4:b1:55:8f:a9:fe:b7:78:c9:fb:68:fc:06: 6b:9f:07:31:70:96:9a:f2:60:06:99:0c:b8:0a:a4: 7d:5e:5c:7a:90:4a:41:ea:6a:62:8f:a3:c7:a1:a0: 96:64:b4:88:7f:58:d0:9e:50:cc:0b:c8:f9:0b:ae: 82:f6:f0:7d:72:a7:c3:f1:6f:86:af:4f:4f:8b:fe: 7c:97:26:34:b6:2d:11:3c:19:c0:1a:42:5b:11:8d: e7:75:27:65:ee:f3:89:bb:2c:df:24:55:7b:1a:33: 67:0a:17:a8:80:ca:1f:5c:0f:76:b9:37:dd:9c:ae: 3c:e2:39:ea:61:b0:f6:6d:80:d3:e7:e3:5f:5e:49: 26:cb:0b:68:dc:4f:ed:0c:b7:6a:64:4a:08:b9:b5: 71:87:22:41:d8:e3:f1:6f:1c:fa:aa:59:2f:78:a5: 51:95:92:63:c5:5b:97:89:a0:f0:88:0c:2a:3c:dd: f4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B5:57:49:4E:1B:AC:BB:11:0E:60:E4:78:63:0D:33:F8:90:BF:34 X509v3 Authority Key Identifier: keyid:19:68:87:6B:21:FE:15:E2:88:B0:92:3B:17:E3:85:B4:87:97:91:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1968876B21FE15E288B0923B17E385B487979161.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1137957082008387625/0/1968876B21FE15E288B0923B17E385B487979161.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:fc:c9:62:28:cb:98:7d:f3:21:dc:d8:70:a6:33:b8:77:49: bb:a4:21:23:dc:c7:37:e1:21:b0:41:2f:bd:b2:dc:6a:5e:9d: 91:83:7b:16:ec:f1:6d:16:09:f6:38:4d:c4:f8:2d:ad:17:be: 4c:29:1f:9b:9b:5f:bd:ff:7c:b0:8b:0c:bf:fc:d3:5b:e1:d6: 70:de:2a:3e:15:82:27:9c:68:ae:93:91:b4:03:c3:a5:a8:f0: f4:3d:c7:9b:80:7d:35:e0:b7:6f:2e:d1:93:31:8d:43:c0:f2: 5a:9a:24:c3:fa:53:b0:9e:5d:42:23:3d:6b:f6:df:4b:fb:31: a2:89:b2:aa:78:69:82:29:9a:63:85:58:4c:52:10:13:23:cf: 36:67:52:e1:74:0e:3a:cc:f6:95:96:b9:5a:ad:0b:7e:30:f5: 76:13:9f:1c:c8:e8:8b:9b:8d:a0:8e:86:1d:ef:e1:5c:cb:81: 82:af:e8:ab:8e:cd:9e:5e:81:66:4e:2c:1d:5a:92:03:83:f5: e1:9e:8b:99:ac:df:62:db:ba:cd:85:0c:f9:bf:df:b5:a4:5f: 4e:2a:2b:c3:67:57:42:84:fd:07:db:f2:26:fc:2d:32:e7:e9: ea:f4:a9:93:1f:c0:58:bd:1f:57:ba:3e:16:18:58:86:69:df: 36:e3:9c:2a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSRLn+5sYcpMQwQY/KSR2wYD/B/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk2ODg3NkIyMUZFMTVFMjg4QjA5MjNCMTdFMzg1QjQ4 Nzk3OTE2MTAeFw0yNjA4MjIwMTQxMDlaFw0yNjA4MjMwNDUxMDlaMDMxMTAvBgNV BAMTKDZDQjU1NzQ5NEUxQkFDQkIxMTBFNjBFNDc4NjMwRDMzRjg5MEJGMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4nZBJ3g1t3f2UHD5zn7eD03sP Jy06iwaVU7tuy67Y2JagDoyxcXHt8V7E+OixuGTHXC4TaJHf1cTjdnpebnr+yEA+ PujiVDtkdfTcpLFVj6n+t3jJ+2j8BmufBzFwlpryYAaZDLgKpH1eXHqQSkHqamKP o8ehoJZktIh/WNCeUMwLyPkLroL28H1yp8Pxb4avT0+L/nyXJjS2LRE8GcAaQlsR jed1J2Xu84m7LN8kVXsaM2cKF6iAyh9cD3a5N92crjziOephsPZtgNPn419eSSbL C2jcT+0Mt2pkSgi5tXGHIkHY4/FvHPqqWS94pVGVkmPFW5eJoPCIDCo83fTdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbLVXSU4brLsRDmDkeGMNM/iQvzQwHwYDVR0j BBgwFoAUGWiHayH+FeKIsJI7F+OFtIeXkWEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz Nzk1NzA4MjAwODM4NzYyNS8wLzE5Njg4NzZCMjFGRTE1RTI4OEIwOTIzQjE3RTM4 NUI0ODc5NzkxNjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTk2ODg3NkIyMUZFMTVFMjg4QjA5MjNCMTdFMzg1QjQ4Nzk3OTE2MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzc5NTcwODIwMDgzODc2MjUvMC8xOTY4ODc2QjIxRkUx NUUyODhCMDkyM0IxN0UzODVCNDg3OTc5MTYxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfzJYijLmH3z IdzYcKYzuHdJu6QhI9zHN+EhsEEvvbLcal6dkYN7FuzxbRYJ9jhNxPgtrRe+TCkf m5tfvf98sIsMv/zTW+HWcN4qPhWCJ5xorpORtAPDpajw9D3Hm4B9NeC3by7RkzGN Q8DyWpokw/pTsJ5dQiM9a/bfS/sxoomyqnhpgimaY4VYTFIQEyPPNmdS4XQOOsz2 lZa5Wq0LfjD1dhOfHMjoi5uNoI6GHe/hXMuBgq/oq47Nnl6BZk4sHVqSA4P14Z6L mazfYtu6zYUM+b/ftaRfTiorw2dXQoT9B9vyJvwtMufp6vSpkx/AWL0fV7o+FhhY hmnfNuOcKg== -----END CERTIFICATE-----Generated at Sat Aug 22 06:14:41 2026 by rpki-client