$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft File: AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft (raw, json) Hash identifier: xdw9+CpY4mBIeqONOwE9DjmcX4tJcXy/48L/NnPLNBw= Subject key identifier: 3D:6A:3D:8D:03:47:81:E1:CA:B2:2C:BD:12:E9:4A:1C:0E:39:1D:50 Authority key identifier: AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 Certificate issuer: /CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Certificate serial: 3996C45755EDDDD96ADA71B5C6DB219ECCC1C0C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft Manifest number: 63 Signing time: Wed 29 Jul 2026 03:08:16 +0000 Manifest this update: Wed 29 Jul 2026 03:03:16 +0000 Manifest next update: Thu 30 Jul 2026 06:01:16 +0000 Files and hashes: 1: AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl (hash: WQLK6gQk7enz72iHasGPJ4EqVUWG+poowiCHJ8PSSIs=) 2: 3137352e3130362e3132382e302f31372d3137203d3e2030.roa (hash: fD0xUei3xaWM82AvTPTnAOAQbXn529olbNLU1cHevWU=) 3: 3132342e3234302e3132382e302f31382d3138203d3e2034383337.roa (hash: m9XQsIz+eXEguT02N3ywaodILFqEFw4B0TvG17l7yqs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 06:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:96:c4:57:55:ed:dd:d9:6a:da:71:b5:c6:db:21:9e:cc:c1:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Validity Not Before: Jul 29 03:03:16 2026 GMT Not After : Jul 30 06:01:16 2026 GMT Subject: CN=3D6A3D8D034781E1CAB22CBD12E94A1C0E391D50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:92:69:ca:e5:11:a8:a8:7d:45:66:35:a1:c1: 42:99:d3:db:d5:e6:9c:03:43:df:ca:9b:93:1f:02: c4:96:19:71:6c:8c:bd:bc:45:f2:e5:1b:bc:c9:5d: e9:90:94:0c:ac:93:29:73:7e:6d:31:00:e1:07:13: 52:b3:78:c3:21:e6:2d:c7:25:19:a1:3a:ef:85:42: 8a:5b:cf:d7:6c:e2:f3:ba:62:cb:14:e7:80:8e:df: 43:0f:12:8d:a0:9a:ba:44:6b:c8:82:e1:d4:26:c9: 87:27:ea:37:14:09:ea:7c:f2:ab:e0:fa:c2:e5:d1: 0f:55:aa:a8:a2:b8:c6:6d:b1:db:c7:18:7f:33:58: 64:b7:49:21:ea:f0:4c:10:90:bb:49:66:1c:40:77: d9:c8:ef:19:4c:3d:6e:24:c7:e3:de:03:5f:c7:75: 04:0b:7e:ee:68:88:e8:b1:89:3b:79:2a:20:63:eb: fe:3a:06:f7:20:fd:ec:0d:b6:23:01:00:18:01:9d: fc:b1:d0:aa:93:c3:e1:e9:0e:6d:a7:58:57:14:86: 6c:20:b9:6e:ab:ba:ba:9d:cf:dc:4c:3c:e0:a0:d3: 6b:e5:fa:1a:a7:f9:a2:4c:1e:c9:b0:24:de:7e:0c: a5:35:21:2b:c3:8e:a4:31:b1:a1:e1:3f:c0:70:c9: 94:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:6A:3D:8D:03:47:81:E1:CA:B2:2C:BD:12:E9:4A:1C:0E:39:1D:50 X509v3 Authority Key Identifier: keyid:AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:bf:5d:06:b5:5b:22:7f:c8:37:70:5e:f8:40:fa:f3:b2:14: 78:7f:bc:1e:1c:7a:06:b2:f4:55:cc:87:c2:39:14:44:10:03: 4f:a8:f5:ae:94:51:ae:3f:5b:11:4a:72:e6:7b:e4:13:04:1c: ba:b1:49:36:7d:9e:54:0d:f9:3b:bf:c0:26:53:ec:c8:5e:5a: 69:b3:9b:ed:58:76:44:84:a4:50:ca:d1:c6:43:38:df:4c:48: ba:81:99:56:27:a8:2f:6a:25:1d:d1:5a:aa:5c:61:0c:ae:f5: 62:99:41:41:76:88:de:86:c5:bd:05:b8:db:0c:7a:a3:1c:76: cb:bb:16:10:35:ac:d8:dd:f4:0b:53:7f:22:3d:97:e9:a3:ee: ff:8f:31:58:92:c7:b0:96:4d:34:20:13:b9:1a:23:29:2f:cf: 5c:03:4a:06:a7:34:dc:ff:26:5f:f4:0c:db:33:fb:82:65:3c: b3:b4:8a:94:9d:f8:aa:8f:e5:c7:c7:a4:aa:a9:4e:a8:d0:56: 9b:8a:38:d3:b0:af:2b:00:8f:a9:52:47:88:a9:ed:9a:ed:74: a4:c7:79:0d:8f:05:23:88:9c:8a:9d:16:31:89:5b:be:53:a7: 44:67:36:d5:d7:4b:c1:bb:eb:2f:26:7a:53:e0:35:77:6f:7c: c9:19:a0:74 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOZbEV1Xt3dlq2nG1xtshnszBwMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNC RTI2MDUzODAeFw0yNjA3MjkwMzAzMTZaFw0yNjA3MzAwNjAxMTZaMDMxMTAvBgNV BAMTKDNENkEzRDhEMDM0NzgxRTFDQUIyMkNCRDEyRTk0QTFDMEUzOTFENTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwkmnK5RGoqH1FZjWhwUKZ09vV 5pwDQ9/Km5MfAsSWGXFsjL28RfLlG7zJXemQlAyskylzfm0xAOEHE1KzeMMh5i3H JRmhOu+FQopbz9ds4vO6YssU54CO30MPEo2gmrpEa8iC4dQmyYcn6jcUCep88qvg +sLl0Q9VqqiiuMZtsdvHGH8zWGS3SSHq8EwQkLtJZhxAd9nI7xlMPW4kx+PeA1/H dQQLfu5oiOixiTt5KiBj6/46Bvcg/ewNtiMBABgBnfyx0KqTw+HpDm2nWFcUhmwg uW6rurqdz9xMPOCg02vl+hqn+aJMHsmwJN5+DKU1ISvDjqQxsaHhP8BwyZRvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPWo9jQNHgeHKsiy9EulKHA45HVAwHwYDVR0j BBgwFoAUrGjDpWwrj7cN7nXV9YSTrL4mBTgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODYwMDg2ODQ5MzU5MDU0Ny8wL0FDNjhDM0E1NkMyQjhGQjcwREVFNzVENUY1ODQ5 M0FDQkUyNjA1MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNCRTI2MDUzOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2MDA4Njg0OTM1OTA1NDcvMC9BQzY4QzNBNTZDMkI4 RkI3MERFRTc1RDVGNTg0OTNBQ0JFMjYwNTM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX79dBrVbIn/I N3Be+ED687IUeH+8Hhx6BrL0VcyHwjkURBADT6j1rpRRrj9bEUpy5nvkEwQcurFJ Nn2eVA35O7/AJlPsyF5aabOb7Vh2RISkUMrRxkM430xIuoGZVieoL2olHdFaqlxh DK71YplBQXaI3obFvQW42wx6oxx2y7sWEDWs2N30C1N/Ij2X6aPu/48xWJLHsJZN NCATuRojKS/PXANKBqc03P8mX/QM2zP7gmU8s7SKlJ34qo/lx8ekqqlOqNBWm4o4 07CvKwCPqVJHiKntmu10pMd5DY8FI4icip0WMYlbvlOnRGc21ddLwbvrLyZ6U+A1 d298yRmgdA== -----END CERTIFICATE-----Generated at Wed Jul 29 23:04:09 2026 by rpki-client