$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft File: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft (raw, json) Hash identifier: 1Vsho5AzGV+7Bu4BVdSdNWkyIuqlHFse11+mEC+q1kA= Subject key identifier: B5:5F:A8:A5:61:53:B7:AB:2D:A6:75:A6:CF:2F:BE:C4:08:27:E8:ED Authority key identifier: 68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E Certificate issuer: /CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Certificate serial: 684214722A307901E6160DC98F4C112856F4BCDA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft Manifest number: 88 Signing time: Thu 23 Jul 2026 10:53:29 +0000 Manifest this update: Thu 23 Jul 2026 10:48:29 +0000 Manifest next update: Fri 24 Jul 2026 13:09:29 +0000 Files and hashes: 1: 3130332e38312e34382e302f32342d3234203d3e2034383337.roa (hash: Gbvu7TcIz1LETT526fNYEvxeGhgl0TjPiCPljAumDSM=) 2: 323430323a313963303a3a2f33322d3332203d3e2030.roa (hash: rSqBjexqKcYyKYw2gWh34opzqrNoLhQFwHdXPpRt88w=) 3: 3130332e38312e34382e302f32322d3232203d3e203538353431.roa (hash: q6mKY7KirHLJlmPsW911DHDgFjCE6SLxnzO6Hxi/o5s=) 4: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl (hash: jjQT3kd8k77Mid1837so7b2XuZJnY0vDYBosLKOFwfQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:42:14:72:2a:30:79:01:e6:16:0d:c9:8f:4c:11:28:56:f4:bc:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Validity Not Before: Jul 23 10:48:29 2026 GMT Not After : Jul 24 13:09:29 2026 GMT Subject: CN=B55FA8A56153B7AB2DA675A6CF2FBEC40827E8ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2f:6f:1f:b2:41:e2:8a:14:66:55:3b:8f:fd: 76:a7:96:ed:43:6d:88:2f:9f:5a:96:f7:a3:7b:64: 23:7f:19:82:b4:d6:d1:ec:b8:55:dd:4c:5a:ba:d1: a1:04:2b:cc:ff:ed:82:20:e6:c8:0d:99:70:ea:e7: a0:d1:d1:a5:cd:86:a6:9f:18:7f:ec:02:8c:f2:1f: f6:a6:af:16:f5:12:b2:f8:06:16:bd:26:c6:c6:af: df:e7:9d:c0:af:06:9f:53:29:8d:ed:98:44:d8:bf: 78:0c:8b:12:c3:c5:3e:c2:e6:4c:90:33:d0:69:5b: cc:fa:78:a0:23:c8:22:fc:69:6b:d4:bb:73:3e:1e: 59:b3:9e:ac:92:f3:d7:f8:86:9a:96:d0:fe:c9:54: 4b:e7:9e:d3:ec:de:ed:6e:14:fd:6f:6e:fa:fd:95: 82:53:38:fb:f8:12:8f:90:f5:a0:82:f9:30:bd:9a: a2:ed:66:69:ba:db:1f:78:59:30:ca:9d:ed:06:7c: 59:d8:b2:40:60:97:2c:0a:90:d2:0d:fc:ad:fa:04: 1e:04:b0:8b:a1:fe:4a:7b:67:80:ab:ea:03:2c:81: 02:9b:1a:f6:21:13:8d:ea:0d:dc:61:78:8d:bd:30: 34:58:77:d6:69:63:28:6a:09:c4:0c:fc:49:be:b8: 20:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:5F:A8:A5:61:53:B7:AB:2D:A6:75:A6:CF:2F:BE:C4:08:27:E8:ED X509v3 Authority Key Identifier: keyid:68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:4e:59:93:45:1f:89:4b:fc:e3:c9:f9:5c:5c:da:7a:12:24: 69:8d:4a:eb:62:54:30:49:5e:bb:d1:30:1a:e9:6b:40:13:e2: 9b:6c:13:5b:db:bf:8a:57:82:00:74:11:4a:f1:8c:a5:04:a7: 4b:0e:a1:39:21:18:c9:0b:02:dc:87:c5:f7:70:1d:47:b8:64: e9:d8:e6:48:d2:67:40:8a:4f:d3:06:59:31:8a:29:c2:68:5e: 3b:86:38:a3:6d:61:52:65:5a:f3:9c:39:aa:0b:ec:7a:49:8a: 58:80:9b:c7:12:30:27:d0:15:c8:87:2b:b8:c3:d3:9f:e1:86: 20:73:bf:4c:e6:66:af:01:31:8c:9b:e1:b1:06:9b:40:9a:6d: a1:ae:f1:14:22:68:27:2d:b0:5c:75:18:0d:51:a3:b8:44:cf: a1:c9:be:90:6c:29:9b:1c:71:78:d3:39:26:b4:dd:43:ef:a5: 04:4a:ba:ee:1b:6a:90:87:72:11:0c:88:1f:80:64:8b:29:dd: 4b:5a:69:57:10:4c:1b:b7:3c:4a:3b:37:ef:d6:a5:e5:80:2e: 95:a4:f7:b6:7b:02:5c:bd:e8:17:f3:3a:5a:29:51:4e:7a:56: f2:ea:25:39:3f:7d:17:96:96:d8:9a:b8:17:80:45:29:36:84: 03:0d:b3:8b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaEIUcioweQHmFg3Jj0wRKFb0vNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJE RjU2NzAwRTAeFw0yNjA3MjMxMDQ4MjlaFw0yNjA3MjQxMzA5MjlaMDMxMTAvBgNV BAMTKEI1NUZBOEE1NjE1M0I3QUIyREE2NzVBNkNGMkZCRUM0MDgyN0U4RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3L28fskHiihRmVTuP/Xanlu1D bYgvn1qW96N7ZCN/GYK01tHsuFXdTFq60aEEK8z/7YIg5sgNmXDq56DR0aXNhqaf GH/sAozyH/amrxb1ErL4Bha9JsbGr9/nncCvBp9TKY3tmETYv3gMixLDxT7C5kyQ M9BpW8z6eKAjyCL8aWvUu3M+HlmznqyS89f4hpqW0P7JVEvnntPs3u1uFP1vbvr9 lYJTOPv4Eo+Q9aCC+TC9mqLtZmm62x94WTDKne0GfFnYskBglywKkNIN/K36BB4E sIuh/kp7Z4Cr6gMsgQKbGvYhE43qDdxheI29MDRYd9ZpYyhqCcQM/Em+uCDBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtV+opWFTt6stpnWmzy++xAgn6O0wHwYDVR0j BBgwFoAUaMtiGJJr9Oby9rgXwCAO699WcA4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2MjE5MDYyMjk0OTM3Ny8wLzY4Q0I2MjE4OTI2QkY0RTZGMkY2QjgxN0MwMjAw RUVCREY1NjcwMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJERjU2NzAwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNjIxOTA2MjI5NDkzNzcvMC82OENCNjIxODkyNkJG NEU2RjJGNkI4MTdDMDIwMEVFQkRGNTY3MDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApk5Zk0UfiUv8 48n5XFzaehIkaY1K62JUMEleu9EwGulrQBPim2wTW9u/ileCAHQRSvGMpQSnSw6h OSEYyQsC3IfF93AdR7hk6djmSNJnQIpP0wZZMYopwmheO4Y4o21hUmVa85w5qgvs ekmKWICbxxIwJ9AVyIcruMPTn+GGIHO/TOZmrwExjJvhsQabQJptoa7xFCJoJy2w XHUYDVGjuETPocm+kGwpmxxxeNM5JrTdQ++lBEq67htqkIdyEQyIH4BkiyndS1pp VxBMG7c8Sjs379al5YAulaT3tnsCXL3oF/M6WilRTnpW8uolOT99F5aW2Jq4F4BF KTaEAw2ziw== -----END CERTIFICATE-----Generated at Fri Jul 24 03:48:33 2026 by rpki-client