$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft File: AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft (raw, json) Hash identifier: Wosz7tnXT13sUdcbVSvYgAIJ/KDX51uwJGxvYvXzA/M= Subject key identifier: 8E:1C:6B:68:E2:D1:29:BE:90:D3:CF:DB:40:5B:B6:F1:A4:2B:1B:8E Authority key identifier: AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 Certificate issuer: /CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Certificate serial: 58A178E5ED88E32348136F3845C57C46EF15F205 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft Manifest number: 26 Signing time: Sat 13 Jun 2026 16:56:57 +0000 Manifest this update: Sat 13 Jun 2026 16:51:57 +0000 Manifest next update: Sun 14 Jun 2026 17:27:57 +0000 Files and hashes: 1: 3137352e3130362e3132382e302f31372d3137203d3e2030.roa (hash: fD0xUei3xaWM82AvTPTnAOAQbXn529olbNLU1cHevWU=) 2: 3132342e3234302e3132382e302f31382d3138203d3e2034383337.roa (hash: m9XQsIz+eXEguT02N3ywaodILFqEFw4B0TvG17l7yqs=) 3: AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl (hash: A3YTtubIBp2hihoycpEGRJLH9ul7sYDhKRmnBaGLTb4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:a1:78:e5:ed:88:e3:23:48:13:6f:38:45:c5:7c:46:ef:15:f2:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Validity Not Before: Jun 13 16:51:57 2026 GMT Not After : Jun 14 17:27:57 2026 GMT Subject: CN=8E1C6B68E2D129BE90D3CFDB405BB6F1A42B1B8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:45:8f:da:06:d4:0a:1d:87:f0:cc:0c:04: 34:3c:c7:9a:7b:dd:81:1e:7d:d3:52:b6:cf:51:a6: 79:48:db:3c:63:cd:d8:12:26:9f:cf:35:78:45:65: 1a:68:3b:81:83:78:32:e6:8a:46:42:43:a8:22:67: 59:48:fa:09:17:8a:85:83:68:d6:4e:51:3a:d4:1c: 92:c7:4c:b3:39:e4:a3:d0:d5:fb:5e:e9:50:d0:e0: 2f:1c:33:fe:d0:32:4b:5c:42:b9:4c:38:48:9d:04: 7c:48:e2:23:3c:10:12:72:ee:a9:c8:75:fc:ac:95: d8:60:a1:b6:2d:d9:b5:46:ba:a4:9e:88:00:a8:c5: 98:34:66:6f:a1:d3:1a:b6:58:16:bc:16:b3:bf:f0: b7:77:9c:18:75:f9:c0:45:fd:80:36:b9:4b:4a:dc: a3:c8:07:d2:37:50:04:e8:fd:a4:11:f1:ea:c5:d1: 07:40:96:24:80:54:f0:81:f7:68:2c:f5:4c:5e:54: 68:1f:db:e5:4c:e3:f9:c2:93:e6:b5:91:8d:be:6a: d0:44:47:3f:dd:2c:6e:a7:e7:b6:d7:f4:20:2c:30: 23:68:2b:0d:89:46:42:90:25:ff:09:ec:16:ed:90: 3a:42:34:53:e1:d1:bf:a1:7d:f8:a9:92:25:6a:a3: 7a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1C:6B:68:E2:D1:29:BE:90:D3:CF:DB:40:5B:B6:F1:A4:2B:1B:8E X509v3 Authority Key Identifier: keyid:AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a5:ef:f2:4b:0c:aa:f1:bb:1a:ff:6b:c8:43:44:d3:92:f9: 6c:78:40:7f:f6:34:35:c0:4c:ef:f5:6e:bf:1d:78:ba:ce:72: b7:37:69:ba:9a:4e:08:23:94:00:f2:a7:44:69:8f:86:de:81: 7f:67:5c:00:31:a2:e2:fe:5d:e0:0b:4c:a1:b6:7f:24:0c:9c: 53:e3:f8:e3:59:f9:2b:41:fc:f9:81:40:ea:48:06:23:c6:5a: 38:09:43:eb:98:fa:91:f2:4b:a3:42:52:83:3a:7d:ab:43:54: 2e:58:99:b9:96:07:5f:35:66:5a:8b:86:b3:b6:1d:8c:2a:c4: 54:b5:c6:8e:cc:3e:e4:9d:25:e8:43:60:2a:14:48:46:eb:5c: 33:44:e6:6b:c2:49:a9:66:aa:25:0a:c0:c7:1f:b1:55:5a:f3: 33:df:56:03:a7:83:4b:c5:32:07:37:06:60:ee:22:a1:9f:ee: 94:21:2e:49:55:38:81:e7:96:07:4a:45:0d:06:ae:fc:3b:fe: 9a:ec:66:04:37:cf:58:27:8c:3c:a3:8f:47:de:5d:05:a6:16: 8f:72:72:de:e6:df:62:52:86:a7:00:50:d5:29:97:35:ed:ca: 94:ef:70:f2:71:11:dd:50:ee:62:c2:a5:cd:24:89:e5:67:ac: 8a:07:00:2b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWKF45e2I4yNIE284RcV8Ru8V8gUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNC RTI2MDUzODAeFw0yNjA2MTMxNjUxNTdaFw0yNjA2MTQxNzI3NTdaMDMxMTAvBgNV BAMTKDhFMUM2QjY4RTJEMTI5QkU5MEQzQ0ZEQjQwNUJCNkYxQTQyQjFCOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5O0WP2gbUCh2H8MwMBDQ8x5p7 3YEefdNSts9RpnlI2zxjzdgSJp/PNXhFZRpoO4GDeDLmikZCQ6giZ1lI+gkXioWD aNZOUTrUHJLHTLM55KPQ1fte6VDQ4C8cM/7QMktcQrlMOEidBHxI4iM8EBJy7qnI dfysldhgobYt2bVGuqSeiACoxZg0Zm+h0xq2WBa8FrO/8Ld3nBh1+cBF/YA2uUtK 3KPIB9I3UATo/aQR8erF0QdAliSAVPCB92gs9UxeVGgf2+VM4/nCk+a1kY2+atBE Rz/dLG6n57bX9CAsMCNoKw2JRkKQJf8J7BbtkDpCNFPh0b+hffipkiVqo3qvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjhxraOLRKb6Q08/bQFu28aQrG44wHwYDVR0j BBgwFoAUrGjDpWwrj7cN7nXV9YSTrL4mBTgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODYwMDg2ODQ5MzU5MDU0Ny8wL0FDNjhDM0E1NkMyQjhGQjcwREVFNzVENUY1ODQ5 M0FDQkUyNjA1MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNCRTI2MDUzOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2MDA4Njg0OTM1OTA1NDcvMC9BQzY4QzNBNTZDMkI4 RkI3MERFRTc1RDVGNTg0OTNBQ0JFMjYwNTM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6Xv8ksMqvG7 Gv9ryENE05L5bHhAf/Y0NcBM7/Vuvx14us5ytzdpuppOCCOUAPKnRGmPht6Bf2dc ADGi4v5d4AtMobZ/JAycU+P441n5K0H8+YFA6kgGI8ZaOAlD65j6kfJLo0JSgzp9 q0NULliZuZYHXzVmWouGs7YdjCrEVLXGjsw+5J0l6ENgKhRIRutcM0Tma8JJqWaq JQrAxx+xVVrzM99WA6eDS8UyBzcGYO4ioZ/ulCEuSVU4geeWB0pFDQau/Dv+muxm BDfPWCeMPKOPR95dBaYWj3Jy3ubfYlKGpwBQ1SmXNe3KlO9w8nER3VDuYsKlzSSJ 5WesigcAKw== -----END CERTIFICATE-----Generated at Sun Jun 14 04:11:25 2026 by rpki-client