$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft File: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft (raw, json) Hash identifier: uX45d4PMYYox8pheEsXSD+HzXY3IEIs7sdp43ReAgc0= Subject key identifier: 39:E9:55:35:B4:54:08:CA:9C:75:68:4E:32:9F:CB:25:74:F7:23:00 Authority key identifier: 68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E Certificate issuer: /CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Certificate serial: 4A81887FD8F88A1E901C5E95267B3629311301C1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft Manifest number: C6 Signing time: Tue 29 Sep 2026 05:02:02 +0000 Manifest this update: Tue 29 Sep 2026 04:57:02 +0000 Manifest next update: Fri 02 Oct 2026 09:41:02 +0000 Files and hashes: 1: 3130332e38312e34382e302f32342d3234203d3e2034383337.roa (hash: Gbvu7TcIz1LETT526fNYEvxeGhgl0TjPiCPljAumDSM=) 2: 323430323a313963303a3a2f33322d3332203d3e2030.roa (hash: rSqBjexqKcYyKYw2gWh34opzqrNoLhQFwHdXPpRt88w=) 3: 3130332e38312e34382e302f32322d3232203d3e203538353431.roa (hash: q6mKY7KirHLJlmPsW911DHDgFjCE6SLxnzO6Hxi/o5s=) 4: 68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl (hash: jmsX40+gi2MU46MhqCPytxaXbHnSA0k/enGKdqA4TFU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:81:88:7f:d8:f8:8a:1e:90:1c:5e:95:26:7b:36:29:31:13:01:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Validity Not Before: Sep 29 04:57:02 2026 GMT Not After : Oct 2 09:41:02 2026 GMT Subject: CN=39E95535B45408CA9C75684E329FCB2574F72300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6c:00:02:35:1f:be:3e:32:8a:5d:0e:bd:a0: 7e:b8:5b:f8:19:f4:a7:6d:af:e8:6f:3f:b3:67:9d: 20:66:71:1b:96:e6:b1:a7:6d:9f:7f:ab:8e:31:5e: c2:a9:58:5e:82:2b:a4:64:83:b0:c1:80:9f:a3:6a: 52:c8:1c:a9:d0:19:9c:c0:89:0e:1a:68:7c:98:99: 89:18:35:54:f5:fd:c0:9e:66:fe:32:1a:f4:27:27: 20:8b:ac:46:61:f7:e0:de:87:c4:e0:2f:86:14:2e: 83:aa:e2:f1:49:ce:58:46:6d:67:a0:e0:6e:97:89: 32:f3:d7:59:7c:54:91:42:b5:12:5e:af:27:a2:d7: 17:7d:29:fa:83:e3:17:e1:dd:97:82:f4:20:0e:2b: 2b:dd:d7:60:a0:54:4d:e3:3e:57:0e:01:96:a7:95: d8:79:e3:6d:fc:7e:80:ea:38:ae:48:11:95:ce:8a: 1a:b9:75:07:8c:e6:08:cd:0c:98:dc:2e:a2:13:8f: ab:8b:e0:bb:4f:2c:a7:cf:f4:be:58:a2:ec:bc:b9: 25:cf:68:59:7a:24:85:00:fe:45:7f:62:1c:0e:46: f2:95:28:b8:e1:ba:af:aa:8e:9d:4b:0e:d6:3c:77: bb:a1:2b:2c:19:fb:78:44:8d:43:64:4b:d9:fb:52: fe:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E9:55:35:B4:54:08:CA:9C:75:68:4E:32:9F:CB:25:74:F7:23:00 X509v3 Authority Key Identifier: keyid:68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:68:80:d5:28:55:fb:6d:22:ae:11:88:72:10:26:8c:a5:59: fe:b3:46:b0:0e:fd:b7:ff:f5:f2:42:91:5a:45:93:bc:af:c6: d0:a7:da:57:62:9c:f2:6c:df:c5:d7:2c:7e:7d:39:d3:ef:03: dc:d0:e1:b3:e0:c7:ad:11:8c:be:0a:2a:6b:3a:4f:1d:a6:6a: 62:37:d7:48:36:17:99:d1:65:70:34:b1:f6:6d:1b:ea:56:3b: 09:c4:56:d1:b0:6d:6e:98:65:78:b0:94:91:87:f2:dc:26:da: 7c:c9:ad:5c:3d:9a:7d:e8:1a:aa:23:e1:11:b1:41:28:83:64: b0:de:4c:d5:7b:a0:24:37:b7:9a:fa:b8:03:94:fb:62:81:ce: 73:28:57:46:da:94:d9:28:ff:cd:8f:c4:e3:2b:42:82:59:2b: dc:9e:c4:e7:89:1b:c9:9a:e2:18:0e:34:84:28:5c:3d:b9:e5: 49:b2:10:24:8e:ff:be:d8:37:44:3f:0e:0f:e4:c0:77:f8:9c: 80:ae:6a:94:1a:35:a9:9c:68:fc:b1:ce:63:cc:73:10:5f:39: 2b:f4:5b:55:9b:36:69:f6:5b:94:73:86:13:96:f8:47:2a:f8: 53:9d:8b:f3:f7:f8:cd:76:fd:7c:ed:8e:a6:e3:6e:a3:40:d3: 99:5c:d6:3d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSoGIf9j4ih6QHF6VJns2KTETAcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJE RjU2NzAwRTAeFw0yNjA5MjkwNDU3MDJaFw0yNjEwMDIwOTQxMDJaMDMxMTAvBgNV BAMTKDM5RTk1NTM1QjQ1NDA4Q0E5Qzc1Njg0RTMyOUZDQjI1NzRGNzIzMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfbAACNR++PjKKXQ69oH64W/gZ 9Kdtr+hvP7NnnSBmcRuW5rGnbZ9/q44xXsKpWF6CK6Rkg7DBgJ+jalLIHKnQGZzA iQ4aaHyYmYkYNVT1/cCeZv4yGvQnJyCLrEZh9+Deh8TgL4YULoOq4vFJzlhGbWeg 4G6XiTLz11l8VJFCtRJeryei1xd9KfqD4xfh3ZeC9CAOKyvd12CgVE3jPlcOAZan ldh54238foDqOK5IEZXOihq5dQeM5gjNDJjcLqITj6uL4LtPLKfP9L5Youy8uSXP aFl6JIUA/kV/YhwORvKVKLjhuq+qjp1LDtY8d7uhKywZ+3hEjUNkS9n7Uv6JAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOelVNbRUCMqcdWhOMp/LJXT3IwAwHwYDVR0j BBgwFoAUaMtiGJJr9Oby9rgXwCAO699WcA4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2MjE5MDYyMjk0OTM3Ny8wLzY4Q0I2MjE4OTI2QkY0RTZGMkY2QjgxN0MwMjAw RUVCREY1NjcwMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJERjU2NzAwRS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzNjIxOTA2MjI5NDkzNzcvMC82OENCNjIxODkyNkJG NEU2RjJGNkI4MTdDMDIwMEVFQkRGNTY3MDBFLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2iA1ShV+20i rhGIchAmjKVZ/rNGsA79t//18kKRWkWTvK/G0KfaV2Kc8mzfxdcsfn050+8D3NDh s+DHrRGMvgoqazpPHaZqYjfXSDYXmdFlcDSx9m0b6lY7CcRW0bBtbphleLCUkYfy 3CbafMmtXD2afegaqiPhEbFBKINksN5M1XugJDe3mvq4A5T7YoHOcyhXRtqU2Sj/ zY/E4ytCglkr3J7E54kbyZriGA40hChcPbnlSbIQJI7/vtg3RD8OD+TAd/icgK5q lBo1qZxo/LHOY8xzEF85K/RbVZs2afZblHOGE5b4Ryr4U52L8/f4zXb9fO2OpuNu o0DTmVzWPQ== -----END CERTIFICATE-----Generated at Tue Sep 29 19:23:42 2026 by rpki-client