$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft File: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft (raw, json) Hash identifier: hIrmWZBKzS+nThYDroEDMbIayfZfB/OzeY2HnodoLs4= Subject key identifier: FA:DD:83:22:4A:06:A8:45:09:69:72:1F:EE:D4:AC:38:DF:86:A0:BA Authority key identifier: 68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E Certificate issuer: /CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Certificate serial: 1223D79FE24BF6422E467308D7AC6F2B79FEF4F9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft Manifest number: CA Signing time: Wed 07 Oct 2026 20:26:47 +0000 Manifest this update: Wed 07 Oct 2026 20:21:47 +0000 Manifest next update: Sun 11 Oct 2026 00:08:47 +0000 Files and hashes: 1: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl (hash: XjleXWFqpYXmYTdrnVbwWJkr22JLZvziShJeTqED4fg=) 2: 323430323a313963303a3a2f33322d3332203d3e2030.roa (hash: rSqBjexqKcYyKYw2gWh34opzqrNoLhQFwHdXPpRt88w=) 3: 3130332e38312e34382e302f32342d3234203d3e2034383337.roa (hash: Gbvu7TcIz1LETT526fNYEvxeGhgl0TjPiCPljAumDSM=) 4: 3130332e38312e34382e302f32322d3232203d3e203538353431.roa (hash: q6mKY7KirHLJlmPsW911DHDgFjCE6SLxnzO6Hxi/o5s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 00:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:23:d7:9f:e2:4b:f6:42:2e:46:73:08:d7:ac:6f:2b:79:fe:f4:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Validity Not Before: Oct 7 20:21:47 2026 GMT Not After : Oct 11 00:08:47 2026 GMT Subject: CN=FADD83224A06A8450969721FEED4AC38DF86A0BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ba:18:66:28:57:5a:ee:07:4e:53:c5:1a:77: 2f:cc:19:f6:ce:0a:16:93:50:99:60:10:c9:89:65: 17:7c:62:bf:8c:19:f8:92:d5:c9:8b:e3:b7:75:c1: 7d:a8:13:7d:8f:77:f9:26:c2:22:d2:37:be:70:6f: ac:52:a5:1e:0b:28:cc:f3:3f:73:d2:e3:d1:6c:c3: 97:1e:ed:df:d4:20:08:44:12:82:2b:4b:d3:32:00: 6c:a5:db:9e:0c:f5:46:dd:37:82:a4:1b:aa:28:05: ef:dd:85:a2:b6:fd:48:49:22:51:5e:bd:a3:2b:31: 06:f3:2d:ea:ab:9c:55:fb:15:8b:f6:fb:2a:4a:43: 8f:2f:52:10:55:cc:ac:b6:f6:5c:31:27:65:c5:9f: 91:2a:d2:a4:ee:25:f7:74:79:d8:a5:28:d3:e8:a5: a1:95:83:ea:c5:2c:50:22:16:8a:c4:36:59:13:2d: 35:d1:b9:b2:0d:ab:87:9b:09:7f:0b:68:ec:6a:6e: ff:28:bd:04:b3:52:2e:5f:81:d2:67:9d:83:78:9e: 3f:1e:11:53:55:bd:95:58:b9:a6:88:82:59:da:cb: b8:eb:f0:ba:eb:ce:0b:51:f1:0e:98:c5:55:8b:34: 56:24:af:72:5b:75:23:6f:20:21:ff:85:2c:63:1f: 62:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DD:83:22:4A:06:A8:45:09:69:72:1F:EE:D4:AC:38:DF:86:A0:BA X509v3 Authority Key Identifier: keyid:68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:8f:d9:b2:7e:7b:5c:47:0f:98:a1:00:cf:a6:a0:62:02:bd: 15:c8:ff:4f:5a:fc:c4:a1:fe:d1:80:2f:4e:82:f3:95:c4:1b: 0e:be:c8:30:d3:5c:ef:2d:53:b4:16:30:c9:8d:b0:27:bc:f0: 49:36:c1:24:2f:b5:89:14:aa:9b:2c:78:fd:c9:01:ae:03:90: 6c:29:57:22:56:91:3a:27:ef:69:4d:56:52:32:4d:43:73:d6: c6:2f:2c:30:d0:f1:17:d6:82:1f:e0:84:c4:8b:72:4b:20:ed: 5e:fa:6d:37:d5:1f:b5:8f:3b:09:0a:3e:40:9a:62:20:ce:d1: cb:da:48:76:7b:f3:0c:03:d1:b0:4b:8a:11:1e:3d:43:68:35: 6c:f4:f3:21:f1:b1:17:7f:31:b4:d4:18:04:ba:5c:89:c4:f5: 42:37:b3:91:bb:11:ef:28:4a:d5:40:ce:1a:c3:96:94:d1:37: e6:4b:60:4c:91:a4:85:2b:81:5a:f7:d1:b9:59:7a:41:d6:00: e2:a1:71:c7:7c:88:c0:53:c8:3d:78:9c:f0:fc:32:37:a1:5d: 1c:04:d0:4d:4c:7b:aa:d4:36:00:2b:ed:c4:e0:ee:09:b6:2d: 53:60:34:ca:f4:64:e8:5f:b8:d0:cd:bb:cc:ba:b2:43:ea:84: 55:72:9c:54 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEiPXn+JL9kIuRnMI16xvK3n+9PkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJE RjU2NzAwRTAeFw0yNjEwMDcyMDIxNDdaFw0yNjEwMTEwMDA4NDdaMDMxMTAvBgNV BAMTKEZBREQ4MzIyNEEwNkE4NDUwOTY5NzIxRkVFRDRBQzM4REY4NkEwQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1uhhmKFda7gdOU8Uady/MGfbO ChaTUJlgEMmJZRd8Yr+MGfiS1cmL47d1wX2oE32Pd/kmwiLSN75wb6xSpR4LKMzz P3PS49Fsw5ce7d/UIAhEEoIrS9MyAGyl254M9UbdN4KkG6ooBe/dhaK2/UhJIlFe vaMrMQbzLeqrnFX7FYv2+ypKQ48vUhBVzKy29lwxJ2XFn5Eq0qTuJfd0edilKNPo paGVg+rFLFAiForENlkTLTXRubINq4ebCX8LaOxqbv8ovQSzUi5fgdJnnYN4nj8e EVNVvZVYuaaIglnay7jr8LrrzgtR8Q6YxVWLNFYkr3JbdSNvICH/hSxjH2LbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+t2DIkoGqEUJaXIf7tSsON+GoLowHwYDVR0j BBgwFoAUaMtiGJJr9Oby9rgXwCAO699WcA4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2MjE5MDYyMjk0OTM3Ny8wLzY4Q0I2MjE4OTI2QkY0RTZGMkY2QjgxN0MwMjAw RUVCREY1NjcwMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJERjU2NzAwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNjIxOTA2MjI5NDkzNzcvMC82OENCNjIxODkyNkJG NEU2RjJGNkI4MTdDMDIwMEVFQkRGNTY3MDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASY/Zsn57XEcP mKEAz6agYgK9Fcj/T1r8xKH+0YAvToLzlcQbDr7IMNNc7y1TtBYwyY2wJ7zwSTbB JC+1iRSqmyx4/ckBrgOQbClXIlaROifvaU1WUjJNQ3PWxi8sMNDxF9aCH+CExIty SyDtXvptN9UftY87CQo+QJpiIM7Ry9pIdnvzDAPRsEuKER49Q2g1bPTzIfGxF38x tNQYBLpcicT1QjezkbsR7yhK1UDOGsOWlNE35ktgTJGkhSuBWvfRuVl6QdYA4qFx x3yIwFPIPXic8PwyN6FdHATQTUx7qtQ2ACvtxODuCbYtU2A0yvRk6F+40M27zLqy Q+qEVXKcVA== -----END CERTIFICATE-----Generated at Thu Oct 8 21:00:24 2026 by rpki-client