$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft File: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft (raw, json) Hash identifier: Vn12YkujrOwOlczIvfbHps3I5PeN7eFsZQZMvROKr2A= Subject key identifier: 5D:A5:C6:A2:1C:CF:13:08:AF:55:D2:3E:F2:34:D6:31:B6:64:90:96 Authority key identifier: 68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E Certificate issuer: /CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Certificate serial: 4F5B9CCD4B045319DAD6913F8E3D29F87EE18074 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft Manifest number: 05 Signing time: Thu 16 Apr 2026 13:34:32 +0000 Manifest this update: Thu 16 Apr 2026 13:29:32 +0000 Manifest next update: Fri 17 Apr 2026 16:32:32 +0000 Files and hashes: 1: 3130332e38312e34382e302f32322d3232203d3e203538353431.roa (hash: q6mKY7KirHLJlmPsW911DHDgFjCE6SLxnzO6Hxi/o5s=) 2: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl (hash: 9FOT+4nIN+uFETXQ+gqqvHjyz0+XCsw2U0DcNZI8YvI=) 3: 323430323a313963303a3a2f33322d3332203d3e2030.roa (hash: rSqBjexqKcYyKYw2gWh34opzqrNoLhQFwHdXPpRt88w=) 4: 3130332e38312e34382e302f32342d3234203d3e2034383337.roa (hash: Gbvu7TcIz1LETT526fNYEvxeGhgl0TjPiCPljAumDSM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 16:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:5b:9c:cd:4b:04:53:19:da:d6:91:3f:8e:3d:29:f8:7e:e1:80:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Validity Not Before: Apr 16 13:29:32 2026 GMT Not After : Apr 17 16:32:32 2026 GMT Subject: CN=5DA5C6A21CCF1308AF55D23EF234D631B6649096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6a:51:62:5f:fc:f2:de:22:bc:e0:d2:c7:3e: 2d:99:85:88:8c:64:49:e1:27:57:ae:f9:38:15:99: 74:69:df:45:a9:25:2a:95:65:a0:85:3b:d9:6b:41: 42:3d:e9:a5:62:d3:35:1c:be:bc:34:bc:00:06:74: 68:cf:d9:99:60:8c:c2:6c:1f:44:67:3d:ad:31:89: 6a:b1:47:26:7f:41:a5:13:c0:94:61:ea:d4:9e:c5: 99:1b:54:d9:8e:62:13:03:d9:36:3c:d9:61:48:28: ca:d4:ba:d4:01:15:9e:c3:7e:ae:53:02:78:b9:a6: 28:6d:e2:41:d2:cc:25:ae:a2:40:65:d4:ae:14:f0: 90:96:a7:38:e3:52:45:d5:63:d5:f9:48:88:f2:d7: f5:07:76:33:38:c7:70:f3:d3:42:0a:e1:24:37:26: 16:9a:ce:07:e0:8b:51:b6:03:1b:3e:d2:90:ee:d3: c0:55:98:11:86:df:77:4f:07:03:83:b5:7a:ce:cd: f6:41:4a:a6:09:64:fc:81:28:97:18:68:0e:4a:75: 90:3f:10:71:66:11:31:54:96:ec:ab:85:2b:51:e4: c8:cf:c5:64:72:2c:01:1d:95:04:b5:bf:90:e1:76: a0:a2:de:f4:ca:7f:99:2e:22:ea:43:a0:1e:b1:dd: 6b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A5:C6:A2:1C:CF:13:08:AF:55:D2:3E:F2:34:D6:31:B6:64:90:96 X509v3 Authority Key Identifier: keyid:68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:09:25:ce:b8:73:f5:b2:b1:14:f9:4e:8e:9b:05:7b:85:2e: dd:ac:a7:fe:01:3d:6d:ee:af:43:d5:dc:f4:f4:ca:2e:e0:0d: 70:cd:c5:a6:7c:e8:49:a9:61:25:d4:24:b2:a1:f1:94:94:d2: 49:01:55:df:db:e9:0f:7e:ca:ba:da:c4:e0:92:fb:06:3a:23: bf:72:75:e4:66:67:29:bd:8e:bb:4a:12:bf:9f:70:9c:eb:0c: 83:0d:a9:a5:45:81:a4:16:22:6c:f3:75:ed:d5:49:20:25:e4: 9b:04:2d:e2:99:59:c5:7d:e2:eb:c8:95:50:b9:1e:3b:cc:24: 97:71:08:57:7b:3a:d0:fa:dd:b7:ad:d5:4a:b0:5e:88:1c:c3: e7:fd:1a:ae:47:4b:52:39:81:ba:c2:ac:b7:98:3b:6d:06:71: fa:23:4e:0b:3b:2b:f5:f7:e4:2a:a1:58:aa:42:a4:40:0f:d9: d4:d0:34:0f:de:53:07:1b:38:79:47:12:1e:48:a7:47:fb:12: b1:51:c9:be:d1:c8:a1:25:c1:22:ba:bf:ea:15:33:c6:4e:92: f7:ae:49:bb:5d:2d:fc:9f:7f:79:0c:8e:26:71:c8:e6:c2:eb: db:71:f5:d1:ca:6a:4b:1c:86:ce:33:6c:3c:b9:cd:e5:33:46: ec:fc:26:7b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUT1uczUsEUxna1pE/jj0p+H7hgHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJE RjU2NzAwRTAeFw0yNjA0MTYxMzI5MzJaFw0yNjA0MTcxNjMyMzJaMDMxMTAvBgNV BAMTKDVEQTVDNkEyMUNDRjEzMDhBRjU1RDIzRUYyMzRENjMxQjY2NDkwOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwalFiX/zy3iK84NLHPi2ZhYiM ZEnhJ1eu+TgVmXRp30WpJSqVZaCFO9lrQUI96aVi0zUcvrw0vAAGdGjP2ZlgjMJs H0RnPa0xiWqxRyZ/QaUTwJRh6tSexZkbVNmOYhMD2TY82WFIKMrUutQBFZ7Dfq5T Ani5piht4kHSzCWuokBl1K4U8JCWpzjjUkXVY9X5SIjy1/UHdjM4x3Dz00IK4SQ3 Jhaazgfgi1G2Axs+0pDu08BVmBGG33dPBwODtXrOzfZBSqYJZPyBKJcYaA5KdZA/ EHFmETFUluyrhStR5MjPxWRyLAEdlQS1v5DhdqCi3vTKf5kuIupDoB6x3WsrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXaXGohzPEwivVdI+8jTWMbZkkJYwHwYDVR0j BBgwFoAUaMtiGJJr9Oby9rgXwCAO699WcA4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2MjE5MDYyMjk0OTM3Ny8wLzY4Q0I2MjE4OTI2QkY0RTZGMkY2QjgxN0MwMjAw RUVCREY1NjcwMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJERjU2NzAwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNjIxOTA2MjI5NDkzNzcvMC82OENCNjIxODkyNkJG NEU2RjJGNkI4MTdDMDIwMEVFQkRGNTY3MDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgklzrhz9bKx FPlOjpsFe4Uu3ayn/gE9be6vQ9Xc9PTKLuANcM3FpnzoSalhJdQksqHxlJTSSQFV 39vpD37KutrE4JL7Bjojv3J15GZnKb2Ou0oSv59wnOsMgw2ppUWBpBYibPN17dVJ ICXkmwQt4plZxX3i68iVULkeO8wkl3EIV3s60Prdt63VSrBeiBzD5/0arkdLUjmB usKst5g7bQZx+iNOCzsr9ffkKqFYqkKkQA/Z1NA0D95TBxs4eUcSHkinR/sSsVHJ vtHIoSXBIrq/6hUzxk6S965Ju10t/J9/eQyOJnHI5sLr23H10cpqSxyGzjNsPLnN 5TNG7Pwmew== -----END CERTIFICATE-----Generated at Thu Apr 16 23:52:30 2026 by rpki-client