$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft File: AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft (raw, json) Hash identifier: SsROKgE2EN6tYB4S1GK9bhKWfIC5KNhSr5eno+4F5a0= Subject key identifier: 96:3D:85:9B:A9:55:C4:63:6C:69:46:E8:6F:E2:EB:A3:1B:05:ED:17 Authority key identifier: AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 Certificate issuer: /CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Certificate serial: 784F8357F5D86FEB2D1EE66874F090CE44D24E31 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft Manifest number: A0 Signing time: Sat 10 Oct 2026 06:39:24 +0000 Manifest this update: Sat 10 Oct 2026 06:34:24 +0000 Manifest next update: Tue 13 Oct 2026 12:54:24 +0000 Files and hashes: 1: 3132342e3234302e3132382e302f31382d3138203d3e2034383337.roa (hash: m9XQsIz+eXEguT02N3ywaodILFqEFw4B0TvG17l7yqs=) 2: AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl (hash: bdjSSSWo6yx7Hv/pMo9k8SG+BVixH3HiFn/P95m9tck=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:4f:83:57:f5:d8:6f:eb:2d:1e:e6:68:74:f0:90:ce:44:d2:4e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Validity Not Before: Oct 10 06:34:24 2026 GMT Not After : Oct 13 12:54:24 2026 GMT Subject: CN=963D859BA955C4636C6946E86FE2EBA31B05ED17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8a:c3:5a:cf:aa:c0:ac:b1:fa:0d:67:be:44: 53:53:e1:23:e5:b9:1a:1f:a1:c8:62:6e:ef:aa:85: a9:93:9f:78:42:cb:08:af:93:a0:9e:33:83:01:99: 54:a8:a9:5e:7c:57:7d:a0:70:3f:f2:8a:c1:a1:6e: 3a:27:05:53:37:e0:45:ce:34:dc:00:88:82:23:82: e2:1c:0c:25:24:09:69:0e:d5:f8:63:08:6a:9e:4b: 58:5b:1c:75:c8:26:aa:47:2b:50:c0:8b:d3:1c:3a: 20:9c:fd:79:6e:93:82:ae:69:9c:59:4e:0d:a7:b4: 6a:27:2b:4f:11:88:7a:e6:65:d3:19:c8:b6:74:b7: bf:8e:ab:73:72:d9:5f:21:27:64:ad:c6:37:93:73: 2b:ef:4f:d0:47:cf:74:97:0f:f6:2f:0f:e4:5c:ce: b8:09:ab:ad:0e:c9:a7:44:c0:3f:47:23:fd:56:60: 1e:2f:5d:38:aa:43:d5:d6:87:d1:33:58:59:3b:08: a9:63:ef:a3:17:09:6b:bf:94:f3:8f:c1:bb:f7:f5: 6c:12:41:2a:e0:f6:ff:d5:d9:ce:b7:98:36:b7:2e: 80:76:81:f2:e2:46:4e:39:34:68:25:6a:56:30:df: f0:c4:f4:b3:46:f8:db:1b:9f:21:6c:b9:88:e4:db: 31:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3D:85:9B:A9:55:C4:63:6C:69:46:E8:6F:E2:EB:A3:1B:05:ED:17 X509v3 Authority Key Identifier: keyid:AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:4a:13:64:57:48:4b:14:0a:e9:63:49:f9:93:df:4f:71:e0: 67:1f:77:55:4e:be:bc:f0:a0:9b:d5:81:e1:48:5d:74:4a:65: c9:30:ea:19:43:db:eb:72:19:bc:33:f5:d5:29:4e:17:9c:4e: 63:4a:e7:f0:98:09:f4:f9:15:13:9b:b0:42:4d:18:2e:e7:6a: ba:e2:e3:f0:46:9e:b8:0e:01:57:da:02:00:38:d8:8f:f8:40: 6c:d1:b2:b1:df:3f:17:ac:9d:ab:cc:50:dd:fa:59:95:38:f1: 10:9e:81:d0:3f:0f:64:90:0f:53:7e:b3:dc:cb:30:86:39:47: 41:6c:90:0c:cf:19:7c:fa:4f:75:51:1e:c1:e5:4a:23:2c:92: 6d:a0:f8:01:4c:0b:d8:42:4e:2c:d1:e5:f6:02:7f:38:16:64: 08:de:42:2b:f0:c7:7a:cd:02:e4:2b:a4:75:26:ad:71:e1:51: a5:b7:42:80:7d:1d:e2:f1:6b:db:ff:92:3b:dc:0e:3c:10:07: 9f:0b:f2:21:86:e9:e1:78:b2:db:94:cc:d0:32:8f:f5:ea:2b: ab:77:23:54:c3:72:ee:ae:61:2f:ce:d9:10:ea:df:2a:6e:e7: fc:dc:01:55:00:52:11:34:af:25:15:dc:58:e9:1f:95:ee:29: 30:1b:c6:ff -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeE+DV/XYb+stHuZodPCQzkTSTjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNC RTI2MDUzODAeFw0yNjEwMTAwNjM0MjRaFw0yNjEwMTMxMjU0MjRaMDMxMTAvBgNV BAMTKDk2M0Q4NTlCQTk1NUM0NjM2QzY5NDZFODZGRTJFQkEzMUIwNUVEMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyisNaz6rArLH6DWe+RFNT4SPl uRofochibu+qhamTn3hCywivk6CeM4MBmVSoqV58V32gcD/yisGhbjonBVM34EXO NNwAiIIjguIcDCUkCWkO1fhjCGqeS1hbHHXIJqpHK1DAi9McOiCc/Xluk4KuaZxZ Tg2ntGonK08RiHrmZdMZyLZ0t7+Oq3Ny2V8hJ2StxjeTcyvvT9BHz3SXD/YvD+Rc zrgJq60OyadEwD9HI/1WYB4vXTiqQ9XWh9EzWFk7CKlj76MXCWu/lPOPwbv39WwS QSrg9v/V2c63mDa3LoB2gfLiRk45NGglalYw3/DE9LNG+NsbnyFsuYjk2zH1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlj2Fm6lVxGNsaUbob+LroxsF7RcwHwYDVR0j BBgwFoAUrGjDpWwrj7cN7nXV9YSTrL4mBTgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODYwMDg2ODQ5MzU5MDU0Ny8wL0FDNjhDM0E1NkMyQjhGQjcwREVFNzVENUY1ODQ5 M0FDQkUyNjA1MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNCRTI2MDUzOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2MDA4Njg0OTM1OTA1NDcvMC9BQzY4QzNBNTZDMkI4 RkI3MERFRTc1RDVGNTg0OTNBQ0JFMjYwNTM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUoTZFdISxQK 6WNJ+ZPfT3HgZx93VU6+vPCgm9WB4UhddEplyTDqGUPb63IZvDP11SlOF5xOY0rn 8JgJ9PkVE5uwQk0YLudquuLj8EaeuA4BV9oCADjYj/hAbNGysd8/F6ydq8xQ3fpZ lTjxEJ6B0D8PZJAPU36z3MswhjlHQWyQDM8ZfPpPdVEeweVKIyySbaD4AUwL2EJO LNHl9gJ/OBZkCN5CK/DHes0C5CukdSatceFRpbdCgH0d4vFr2/+SO9wOPBAHnwvy IYbp4Xiy25TM0DKP9eorq3cjVMNy7q5hL87ZEOrfKm7n/NwBVQBSETSvJRXcWOkf le4pMBvG/w== -----END CERTIFICATE-----Generated at Sat Oct 10 12:43:22 2026 by rpki-client