$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft File: AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft (raw, json) Hash identifier: bLogY69QtRZvGP6IxV8RmnHAeNMiYOmpnq4hr+EQvQo= Subject key identifier: 3C:D5:54:D5:01:5E:79:19:30:28:FA:13:91:FD:D7:4E:3C:C1:FF:FF Authority key identifier: AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 Certificate issuer: /CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Certificate serial: 269BC8DF80E63C38406A89FF5DEBD1B5C490B3D6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft Manifest number: 5C Signing time: Thu 23 Jul 2026 22:49:45 +0000 Manifest this update: Thu 23 Jul 2026 22:44:45 +0000 Manifest next update: Sat 25 Jul 2026 00:34:45 +0000 Files and hashes: 1: 3132342e3234302e3132382e302f31382d3138203d3e2034383337.roa (hash: m9XQsIz+eXEguT02N3ywaodILFqEFw4B0TvG17l7yqs=) 2: AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl (hash: MIDqBNeI3uCFU5GznRE8jso7eHkf75FuezJ8MguYGVs=) 3: 3137352e3130362e3132382e302f31372d3137203d3e2030.roa (hash: fD0xUei3xaWM82AvTPTnAOAQbXn529olbNLU1cHevWU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:34:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:9b:c8:df:80:e6:3c:38:40:6a:89:ff:5d:eb:d1:b5:c4:90:b3:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Validity Not Before: Jul 23 22:44:45 2026 GMT Not After : Jul 25 00:34:45 2026 GMT Subject: CN=3CD554D5015E79193028FA1391FDD74E3CC1FFFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:36:f9:67:4c:73:7e:89:e6:70:35:a9:8b: 9e:bb:c3:d6:9a:f0:92:1c:cd:64:e1:6b:43:99:f6: e4:88:07:6f:ec:16:d4:ad:ad:53:f2:cb:aa:99:b0: d0:bb:2b:03:fc:9f:7b:de:20:06:c4:04:d3:a4:13: f5:e7:bb:bf:e0:76:e8:72:36:04:45:6c:06:fe:f5: 27:19:a2:7c:c5:14:43:4c:e8:a6:7b:1e:c5:64:6d: 7c:1e:fd:6a:b8:25:03:d4:d6:a1:97:23:5d:2f:c2: 62:91:41:9b:05:a7:28:60:1c:90:75:91:8c:46:cd: 27:18:df:c9:cd:0c:e9:75:8b:17:b7:68:f5:d2:aa: 65:85:60:2a:98:3b:64:32:3f:2d:52:ca:f1:c2:96: 2b:9b:a4:aa:b7:0a:3e:cb:4b:68:55:2d:89:c3:5e: a6:29:b1:23:6c:32:39:8f:33:58:56:d0:f7:8c:5c: fd:25:36:15:10:f8:87:c0:7b:75:ef:da:14:04:72: 5a:e8:a7:97:66:41:27:2f:17:f7:74:b2:b7:1b:40: 3e:9f:2e:b5:ea:b9:8b:e4:83:48:dc:35:6d:6f:36: 0f:26:d4:a4:95:2e:02:4a:02:9d:4f:1a:39:57:0b: 18:b4:c9:6e:4c:b7:4d:2a:bd:3d:15:99:85:0f:4b: 3e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D5:54:D5:01:5E:79:19:30:28:FA:13:91:FD:D7:4E:3C:C1:FF:FF X509v3 Authority Key Identifier: keyid:AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:87:9e:59:3f:96:04:16:7f:01:5b:33:fe:7f:d5:f5:d1:a5: 1b:71:6b:b9:9e:39:58:e7:79:30:26:62:a6:2d:d4:df:ad:97: 36:c7:9a:14:d4:a1:bc:53:43:c3:99:35:42:61:92:4b:39:39: 90:7e:89:80:30:05:c4:19:f8:05:63:ca:32:94:fa:25:10:74: c5:c0:f0:cd:80:72:ea:c7:b4:cc:ef:b2:c4:3e:a8:1c:20:f6: f5:04:cd:9a:34:da:a6:ee:8b:fd:fc:c9:1c:cd:6b:15:d0:46: 2b:e8:00:d2:ac:55:c5:bf:f7:01:d4:5c:43:22:b5:8a:4a:ac: d1:2c:88:d2:6a:dc:d6:16:8a:9d:95:55:cc:e2:f5:93:c4:86: 3c:9c:83:1f:fc:7f:d8:21:8b:78:3b:9a:77:81:de:ec:f4:df: 2b:e2:cc:f6:44:1b:30:62:90:62:70:e5:fc:ec:bd:b1:d0:38: 53:fb:51:45:92:b2:0a:a7:6b:83:bd:c7:5c:ca:5f:bc:d3:65: d7:b1:a9:42:5b:a2:7f:33:97:5e:82:b2:fe:e7:b1:94:e5:e1: 31:6a:00:30:96:3e:11:b4:cb:3e:e9:a5:10:e5:27:74:52:8f: 6b:8f:79:96:3f:76:28:74:62:aa:85:85:32:0a:43:25:23:b5: 75:fa:e8:94 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJpvI34DmPDhAaon/XevRtcSQs9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNC RTI2MDUzODAeFw0yNjA3MjMyMjQ0NDVaFw0yNjA3MjUwMDM0NDVaMDMxMTAvBgNV BAMTKDNDRDU1NEQ1MDE1RTc5MTkzMDI4RkExMzkxRkRENzRFM0NDMUZGRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vDb5Z0xzfonmcDWpi567w9aa 8JIczWTha0OZ9uSIB2/sFtStrVPyy6qZsNC7KwP8n3veIAbEBNOkE/Xnu7/gduhy NgRFbAb+9ScZonzFFENM6KZ7HsVkbXwe/Wq4JQPU1qGXI10vwmKRQZsFpyhgHJB1 kYxGzScY38nNDOl1ixe3aPXSqmWFYCqYO2QyPy1SyvHCliubpKq3Cj7LS2hVLYnD XqYpsSNsMjmPM1hW0PeMXP0lNhUQ+IfAe3Xv2hQEclrop5dmQScvF/d0srcbQD6f LrXquYvkg0jcNW1vNg8m1KSVLgJKAp1PGjlXCxi0yW5Mt00qvT0VmYUPSz7rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPNVU1QFeeRkwKPoTkf3XTjzB//8wHwYDVR0j BBgwFoAUrGjDpWwrj7cN7nXV9YSTrL4mBTgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODYwMDg2ODQ5MzU5MDU0Ny8wL0FDNjhDM0E1NkMyQjhGQjcwREVFNzVENUY1ODQ5 M0FDQkUyNjA1MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNCRTI2MDUzOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2MDA4Njg0OTM1OTA1NDcvMC9BQzY4QzNBNTZDMkI4 RkI3MERFRTc1RDVGNTg0OTNBQ0JFMjYwNTM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoeeWT+WBBZ/ AVsz/n/V9dGlG3FruZ45WOd5MCZipi3U362XNseaFNShvFNDw5k1QmGSSzk5kH6J gDAFxBn4BWPKMpT6JRB0xcDwzYBy6se0zO+yxD6oHCD29QTNmjTapu6L/fzJHM1r FdBGK+gA0qxVxb/3AdRcQyK1ikqs0SyI0mrc1haKnZVVzOL1k8SGPJyDH/x/2CGL eDuad4He7PTfK+LM9kQbMGKQYnDl/Oy9sdA4U/tRRZKyCqdrg73HXMpfvNNl17Gp QluifzOXXoKy/uexlOXhMWoAMJY+EbTLPumlEOUndFKPa495lj92KHRiqoWFMgpD JSO1dfrolA== -----END CERTIFICATE-----Generated at Fri Jul 24 04:23:24 2026 by rpki-client