$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft File: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft (raw, json) Hash identifier: O4OzM47LSzh30BA7TqE5jPEtDP/y1iOFoK4eXcjGLMk= Subject key identifier: 7F:1C:06:C3:70:31:B4:F6:ED:AD:1C:C9:C9:35:33:09:B2:B3:8B:D0 Authority key identifier: 68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E Certificate issuer: /CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Certificate serial: 220CADCBD7707A885B9471040D1CD9CA2D7A3AF0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft Manifest number: 8F Signing time: Tue 28 Jul 2026 16:17:14 +0000 Manifest this update: Tue 28 Jul 2026 16:12:14 +0000 Manifest next update: Wed 29 Jul 2026 18:49:14 +0000 Files and hashes: 1: 323430323a313963303a3a2f33322d3332203d3e2030.roa (hash: rSqBjexqKcYyKYw2gWh34opzqrNoLhQFwHdXPpRt88w=) 2: 3130332e38312e34382e302f32342d3234203d3e2034383337.roa (hash: Gbvu7TcIz1LETT526fNYEvxeGhgl0TjPiCPljAumDSM=) 3: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl (hash: 2Cgs2KQBlx+28Oc0Y/Ugcg97OaCZ6oFYCCe2YtVEiM0=) 4: 3130332e38312e34382e302f32322d3232203d3e203538353431.roa (hash: q6mKY7KirHLJlmPsW911DHDgFjCE6SLxnzO6Hxi/o5s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 18:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:0c:ad:cb:d7:70:7a:88:5b:94:71:04:0d:1c:d9:ca:2d:7a:3a:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Validity Not Before: Jul 28 16:12:14 2026 GMT Not After : Jul 29 18:49:14 2026 GMT Subject: CN=7F1C06C37031B4F6EDAD1CC9C9353309B2B38BD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c7:bf:b7:55:ce:3a:fb:ab:ec:72:bd:f9:df: c6:27:ce:4b:0b:fe:48:ea:1e:90:ec:91:c5:5f:1c: 71:95:19:ff:37:15:af:4a:8d:31:0d:d6:0a:1c:86: 96:86:26:8e:9a:ae:39:93:3f:30:1c:dd:7f:d7:b2: 51:b2:67:df:81:e7:ae:98:b0:7f:52:55:14:5a:a0: 62:d0:bf:09:56:3a:2a:d6:be:66:27:92:3d:c7:bf: 7d:87:d0:35:ff:6b:73:37:4a:3d:77:a8:c3:a0:ce: 7b:38:62:4e:1b:12:7b:bd:df:ac:14:b6:9a:26:c3: 20:04:72:62:1e:cf:c5:ad:02:7a:ac:35:01:10:01: 48:a6:a4:86:3b:88:1f:1e:53:53:9e:2c:38:ed:10: 7a:67:19:e7:75:35:4c:e5:72:a4:17:b2:45:49:d1: 77:eb:a4:aa:17:f8:08:87:b2:5c:70:3c:08:41:f2: 7f:4e:89:30:6a:cb:02:bf:d0:97:c5:ee:84:00:5f: e8:2a:d5:3e:fd:12:a8:c0:a6:40:76:5e:03:62:83: 5e:74:8c:f4:dd:c6:cb:e2:27:14:d9:ba:a4:34:ca: 81:12:97:15:c6:f7:c2:c0:89:22:0d:51:9e:e0:81: be:1f:1e:68:fc:fa:d2:af:0a:9b:e2:8a:d1:b8:37: 2e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:1C:06:C3:70:31:B4:F6:ED:AD:1C:C9:C9:35:33:09:B2:B3:8B:D0 X509v3 Authority Key Identifier: keyid:68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:2d:77:0a:5b:0c:2d:e5:88:b4:5c:c6:6c:9b:50:7c:3d:ba: 32:49:8a:d3:53:52:c2:69:04:ff:fb:8b:31:eb:bf:d6:66:b6: d6:bc:7e:3b:ab:f1:98:28:47:86:9f:b2:fd:65:7a:f6:90:53: f3:7b:a8:bb:68:7d:4f:97:c7:ce:e2:ab:39:3e:7c:2d:a1:b6: 7f:b6:9e:c4:20:5a:b0:46:83:7a:78:8a:d0:a8:7c:cd:f7:a3: df:8c:2d:aa:9e:d1:bf:6c:e6:4a:74:1a:0d:e9:9a:f6:c3:cd: fe:b8:55:42:e9:27:40:7f:f3:14:6c:ba:7e:ea:7e:2d:48:a6: 91:71:2d:02:20:3f:d9:86:d5:87:9e:19:4f:33:ec:98:93:3b: b7:13:a2:2e:4e:c7:ba:90:24:a4:12:20:10:6f:f2:aa:af:4d: e9:f4:b9:2d:d3:d6:1a:c6:b8:b3:4e:d3:d9:26:db:05:15:02: a8:d5:2a:64:c9:8d:87:4b:ad:1c:8f:ee:fc:0a:c0:09:0a:09: f4:47:84:3a:66:48:55:8d:4d:b9:f2:46:13:ea:33:cd:3d:ba: 80:f7:be:2b:6a:32:8f:65:4f:aa:a4:fd:97:31:a0:2d:5c:eb: d8:4c:61:b1:f7:e4:58:2e:93:e0:87:ba:d7:f0:63:a2:a6:7c: 32:03:d3:e3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIgyty9dweohblHEEDRzZyi16OvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJE RjU2NzAwRTAeFw0yNjA3MjgxNjEyMTRaFw0yNjA3MjkxODQ5MTRaMDMxMTAvBgNV BAMTKDdGMUMwNkMzNzAzMUI0RjZFREFEMUNDOUM5MzUzMzA5QjJCMzhCRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmx7+3Vc46+6vscr3538YnzksL /kjqHpDskcVfHHGVGf83Fa9KjTEN1gochpaGJo6arjmTPzAc3X/XslGyZ9+B566Y sH9SVRRaoGLQvwlWOirWvmYnkj3Hv32H0DX/a3M3Sj13qMOgzns4Yk4bEnu936wU tpomwyAEcmIez8WtAnqsNQEQAUimpIY7iB8eU1OeLDjtEHpnGed1NUzlcqQXskVJ 0XfrpKoX+AiHslxwPAhB8n9OiTBqywK/0JfF7oQAX+gq1T79EqjApkB2XgNig150 jPTdxsviJxTZuqQ0yoESlxXG98LAiSINUZ7ggb4fHmj8+tKvCpviitG4Ny4ZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfxwGw3AxtPbtrRzJyTUzCbKzi9AwHwYDVR0j BBgwFoAUaMtiGJJr9Oby9rgXwCAO699WcA4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2MjE5MDYyMjk0OTM3Ny8wLzY4Q0I2MjE4OTI2QkY0RTZGMkY2QjgxN0MwMjAw RUVCREY1NjcwMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJERjU2NzAwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNjIxOTA2MjI5NDkzNzcvMC82OENCNjIxODkyNkJG NEU2RjJGNkI4MTdDMDIwMEVFQkRGNTY3MDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXi13ClsMLeWI tFzGbJtQfD26MkmK01NSwmkE//uLMeu/1ma21rx+O6vxmChHhp+y/WV69pBT83uo u2h9T5fHzuKrOT58LaG2f7aexCBasEaDeniK0Kh8zfej34wtqp7Rv2zmSnQaDema 9sPN/rhVQuknQH/zFGy6fup+LUimkXEtAiA/2YbVh54ZTzPsmJM7txOiLk7HupAk pBIgEG/yqq9N6fS5LdPWGsa4s07T2SbbBRUCqNUqZMmNh0utHI/u/ArACQoJ9EeE OmZIVY1NufJGE+ozzT26gPe+K2oyj2VPqqT9lzGgLVzr2ExhsffkWC6T4Ie61/Bj oqZ8MgPT4w== -----END CERTIFICATE-----Generated at Wed Jul 29 07:41:11 2026 by rpki-client