$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft File: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft (raw, json) Hash identifier: awTm9oLv59O9RICAObah0j0xqzeYxkoawNd79fne4+s= Subject key identifier: 48:DA:F3:B1:CD:71:3C:4E:A3:DC:56:62:A4:35:36:9F:E0:B9:2F:C0 Authority key identifier: 68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E Certificate issuer: /CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Certificate serial: 220C8D418D7F055287BDA3B39AC68B50D0B16C8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft Manifest number: 28 Signing time: Tue 12 May 2026 22:15:48 +0000 Manifest this update: Tue 12 May 2026 22:10:48 +0000 Manifest next update: Thu 14 May 2026 01:04:48 +0000 Files and hashes: 1: 3130332e38312e34382e302f32342d3234203d3e2034383337.roa (hash: Gbvu7TcIz1LETT526fNYEvxeGhgl0TjPiCPljAumDSM=) 2: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl (hash: BrKdI0erRnhtIns9vpkPtAN3u0zDDhsJou2zTYeLUyQ=) 3: 323430323a313963303a3a2f33322d3332203d3e2030.roa (hash: rSqBjexqKcYyKYw2gWh34opzqrNoLhQFwHdXPpRt88w=) 4: 3130332e38312e34382e302f32322d3232203d3e203538353431.roa (hash: q6mKY7KirHLJlmPsW911DHDgFjCE6SLxnzO6Hxi/o5s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:0c:8d:41:8d:7f:05:52:87:bd:a3:b3:9a:c6:8b:50:d0:b1:6c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Validity Not Before: May 12 22:10:48 2026 GMT Not After : May 14 01:04:48 2026 GMT Subject: CN=48DAF3B1CD713C4EA3DC5662A435369FE0B92FC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:21:84:c3:83:87:ae:98:be:1b:23:39:48:e4: a6:bc:76:7f:ad:99:06:00:ab:ef:12:84:20:1d:b5: 5f:9c:51:8f:b1:0d:91:73:0f:02:89:2e:1a:72:5d: a3:08:ec:ca:72:61:1b:00:cf:7e:02:d4:66:6a:01: 3b:d6:d9:4a:09:cf:fb:66:b4:de:18:99:73:0b:62: 50:ad:c1:91:31:ee:39:50:42:36:2e:b0:3a:6d:2a: 96:3e:95:e3:d4:21:a3:8c:9b:bc:c1:68:f2:b1:ac: d1:d9:ca:09:88:e8:ed:37:84:d8:75:d2:d0:7b:b3: ea:a3:ca:c5:8e:ca:78:7f:83:16:44:35:45:94:48: 00:ce:94:fc:0a:ba:88:5b:4f:2f:ee:58:0d:76:f9: 1a:8d:92:60:9d:da:e4:8c:c5:73:61:00:82:27:8d: 47:6b:4a:93:d1:76:c3:95:a3:9d:d0:76:67:bc:41: ca:b1:c8:af:8f:52:13:60:f7:d5:41:2b:29:72:11: 9a:fc:88:bd:59:7f:54:8a:e4:bc:7b:bc:4b:b5:85: 55:ea:23:fe:04:92:93:32:03:4d:78:f1:1a:08:4f: 0b:f9:ea:2b:5e:ad:1d:35:f8:10:34:bf:65:5f:ab: 6c:57:5a:36:e8:f2:c5:de:90:3a:73:35:c5:f6:fe: 37:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:DA:F3:B1:CD:71:3C:4E:A3:DC:56:62:A4:35:36:9F:E0:B9:2F:C0 X509v3 Authority Key Identifier: keyid:68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d4:74:ad:27:06:12:7a:57:4f:7a:8c:03:04:31:5f:1d:75: b5:4a:eb:9b:ce:cb:01:44:42:e5:9b:4a:dd:c4:92:84:28:ba: dc:65:c4:f6:a1:69:bd:85:e5:32:db:08:b9:55:ec:f0:68:44: 56:94:9d:23:0b:db:69:55:4f:1f:ac:4f:89:39:63:da:22:a5: b5:33:fe:10:3a:10:31:13:c3:f6:b3:f6:4c:38:09:df:df:73: 8c:4c:85:76:60:ab:39:19:28:69:49:41:b9:90:58:5e:53:3f: a7:c6:b2:91:9d:50:61:3b:4e:10:61:9d:29:4e:9b:a3:06:a8: b4:59:d4:de:ff:f8:36:db:33:b8:5b:7a:43:fe:84:2a:83:af: d5:f8:c9:e5:92:bf:8f:4e:3b:bd:72:57:fc:86:14:4c:f2:2d: a0:36:87:80:75:e7:16:45:ff:58:03:6b:b0:d2:b3:88:63:61: 65:c2:ce:d0:90:1e:74:cf:03:49:4b:d4:95:db:7d:4c:e3:4c: bb:47:36:75:a7:43:5c:6a:fb:e8:a8:74:21:be:18:28:5a:89: 73:0f:cc:4f:85:4d:1f:6a:87:a2:88:5e:5a:73:d1:17:3a:c3: db:24:96:35:02:f8:0d:b3:82:86:78:ce:bb:60:b8:c4:98:e4: 2a:77:96:4f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIgyNQY1/BVKHvaOzmsaLUNCxbI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJE RjU2NzAwRTAeFw0yNjA1MTIyMjEwNDhaFw0yNjA1MTQwMTA0NDhaMDMxMTAvBgNV BAMTKDQ4REFGM0IxQ0Q3MTNDNEVBM0RDNTY2MkE0MzUzNjlGRTBCOTJGQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6IYTDg4eumL4bIzlI5Ka8dn+t mQYAq+8ShCAdtV+cUY+xDZFzDwKJLhpyXaMI7MpyYRsAz34C1GZqATvW2UoJz/tm tN4YmXMLYlCtwZEx7jlQQjYusDptKpY+lePUIaOMm7zBaPKxrNHZygmI6O03hNh1 0tB7s+qjysWOynh/gxZENUWUSADOlPwKuohbTy/uWA12+RqNkmCd2uSMxXNhAIIn jUdrSpPRdsOVo53Qdme8QcqxyK+PUhNg99VBKylyEZr8iL1Zf1SK5Lx7vEu1hVXq I/4EkpMyA0148RoITwv56iterR01+BA0v2Vfq2xXWjbo8sXekDpzNcX2/jdFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSNrzsc1xPE6j3FZipDU2n+C5L8AwHwYDVR0j BBgwFoAUaMtiGJJr9Oby9rgXwCAO699WcA4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2MjE5MDYyMjk0OTM3Ny8wLzY4Q0I2MjE4OTI2QkY0RTZGMkY2QjgxN0MwMjAw RUVCREY1NjcwMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJERjU2NzAwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNjIxOTA2MjI5NDkzNzcvMC82OENCNjIxODkyNkJG NEU2RjJGNkI4MTdDMDIwMEVFQkRGNTY3MDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktR0rScGEnpX T3qMAwQxXx11tUrrm87LAURC5ZtK3cSShCi63GXE9qFpvYXlMtsIuVXs8GhEVpSd IwvbaVVPH6xPiTlj2iKltTP+EDoQMRPD9rP2TDgJ399zjEyFdmCrORkoaUlBuZBY XlM/p8aykZ1QYTtOEGGdKU6bowaotFnU3v/4NtszuFt6Q/6EKoOv1fjJ5ZK/j047 vXJX/IYUTPItoDaHgHXnFkX/WANrsNKziGNhZcLO0JAedM8DSUvUldt9TONMu0c2 dadDXGr76Kh0Ib4YKFqJcw/MT4VNH2qHooheWnPRFzrD2ySWNQL4DbOChnjOu2C4 xJjkKneWTw== -----END CERTIFICATE-----Generated at Wed May 13 12:25:37 2026 by rpki-client