$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft File: AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft (raw, json) Hash identifier: ZqaclQl4trbL3Fh9qhyDMRXLdI1R6h4riXCA37OmAlw= Subject key identifier: 99:D6:17:D2:1E:A2:F7:68:4C:83:14:0B:C9:42:C6:44:F3:20:88:77 Authority key identifier: AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 Certificate issuer: /CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Certificate serial: 56712633E2074F1AE84F45ECB3F0306117927BF3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft Manifest number: 9B Signing time: Tue 29 Sep 2026 02:36:57 +0000 Manifest this update: Tue 29 Sep 2026 02:31:57 +0000 Manifest next update: Fri 02 Oct 2026 04:05:57 +0000 Files and hashes: 1: AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl (hash: Kdjkip/ayXrEzaQ+2PPqat0dNauDRz5ADdDdKaJlINY=) 2: 3132342e3234302e3132382e302f31382d3138203d3e2034383337.roa (hash: m9XQsIz+eXEguT02N3ywaodILFqEFw4B0TvG17l7yqs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:71:26:33:e2:07:4f:1a:e8:4f:45:ec:b3:f0:30:61:17:92:7b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Validity Not Before: Sep 29 02:31:57 2026 GMT Not After : Oct 2 04:05:57 2026 GMT Subject: CN=99D617D21EA2F7684C83140BC942C644F3208877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:27:a9:93:0e:d2:b7:75:2e:ef:11:6d:e3: 3d:6d:06:a5:b3:f6:2b:8b:ab:b3:10:2e:0f:6b:3b: d9:b5:90:a8:ef:f9:5b:c0:35:6f:ef:ee:93:e0:f3: 3c:50:00:4e:be:eb:ca:a0:5e:13:63:85:f5:af:a6: 61:c4:00:6e:ae:92:1b:3a:2e:96:65:c6:f2:39:34: 16:aa:66:c4:e3:c8:34:b4:59:09:c8:05:4f:86:d2: 52:ed:11:c4:28:0e:b9:b3:5d:c3:3e:cc:38:29:82: 28:7e:ee:b7:58:48:ec:68:48:ed:b0:8c:9f:02:fc: c9:ce:57:f2:30:3c:10:46:e4:07:27:38:9b:54:fe: 40:0c:31:4e:7d:bf:1b:29:99:67:6e:dc:50:4b:b7: 5f:64:eb:e8:ee:27:53:7e:b5:63:b8:7d:12:9d:3f: ad:e1:03:89:20:ad:8f:35:67:8a:3f:90:14:f1:38: fe:94:88:65:a6:0f:42:50:57:96:a6:b2:83:e4:65: 6c:18:0c:d4:4a:b1:aa:25:c6:28:4c:61:29:4a:9d: 23:e4:28:51:4b:bf:4f:9f:e8:93:19:6f:93:1c:d5: e9:6c:68:8c:39:12:ea:d6:37:8e:a6:55:49:4f:7d: 2c:95:ed:ce:a7:c3:58:c4:d9:e0:a7:1d:a5:ee:07: 58:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:D6:17:D2:1E:A2:F7:68:4C:83:14:0B:C9:42:C6:44:F3:20:88:77 X509v3 Authority Key Identifier: keyid:AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:66:dd:7b:a6:bf:f9:f6:89:e3:4e:f3:39:e4:61:6b:a8:de: c8:19:49:b0:b2:50:ff:14:aa:f2:c1:89:93:25:b5:1b:77:fc: 45:c3:5c:9f:8b:ef:8f:39:7c:6f:9c:43:f8:ff:98:a7:50:73: b3:32:de:a0:09:23:6b:2d:e3:2b:aa:52:4d:6d:cf:f4:7a:13: 2d:e7:53:1e:cc:93:b1:fa:98:19:12:87:b5:ca:76:85:d9:a4: 57:7d:8a:25:9f:e8:5f:4d:ef:71:80:d9:21:77:01:31:b5:3e: 45:ae:b6:d9:a3:9b:0b:fb:bc:01:77:e3:c1:2a:38:de:78:42: 76:8e:29:48:ac:fe:4e:ba:ac:94:4d:50:51:71:66:44:90:8a: 7e:39:46:ab:5f:84:0d:c1:42:da:39:2c:01:d7:53:55:a4:59: 16:5d:9c:15:ed:d9:47:16:4a:87:b6:de:fa:51:49:b9:41:55: 68:93:ac:37:4b:44:16:f4:12:c5:b6:5d:30:fa:87:e5:c7:e8: f4:3a:69:28:42:63:e4:73:62:6e:ff:d3:a2:97:59:77:25:d7: a2:67:57:6b:5d:2d:6b:bd:05:4e:8b:29:60:11:3d:17:38:a2: cb:8d:19:a1:3a:6c:e9:dd:63:f7:9f:45:db:42:8f:ae:54:c2: 1a:04:44:26 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVnEmM+IHTxroT0Xss/AwYReSe/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNC RTI2MDUzODAeFw0yNjA5MjkwMjMxNTdaFw0yNjEwMDIwNDA1NTdaMDMxMTAvBgNV BAMTKDk5RDYxN0QyMUVBMkY3Njg0QzgzMTQwQkM5NDJDNjQ0RjMyMDg4NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Hyepkw7St3Uu7xFt4z1tBqWz 9iuLq7MQLg9rO9m1kKjv+VvANW/v7pPg8zxQAE6+68qgXhNjhfWvpmHEAG6ukhs6 LpZlxvI5NBaqZsTjyDS0WQnIBU+G0lLtEcQoDrmzXcM+zDgpgih+7rdYSOxoSO2w jJ8C/MnOV/IwPBBG5AcnOJtU/kAMMU59vxspmWdu3FBLt19k6+juJ1N+tWO4fRKd P63hA4kgrY81Z4o/kBTxOP6UiGWmD0JQV5amsoPkZWwYDNRKsaolxihMYSlKnSPk KFFLv0+f6JMZb5Mc1elsaIw5EurWN46mVUlPfSyV7c6nw1jE2eCnHaXuB1irAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmdYX0h6i92hMgxQLyULGRPMgiHcwHwYDVR0j BBgwFoAUrGjDpWwrj7cN7nXV9YSTrL4mBTgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODYwMDg2ODQ5MzU5MDU0Ny8wL0FDNjhDM0E1NkMyQjhGQjcwREVFNzVENUY1ODQ5 M0FDQkUyNjA1MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNCRTI2MDUzOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDg2MDA4Njg0OTM1OTA1NDcvMC9BQzY4QzNBNTZDMkI4 RkI3MERFRTc1RDVGNTg0OTNBQ0JFMjYwNTM4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2bde6a/+faJ 407zOeRha6jeyBlJsLJQ/xSq8sGJkyW1G3f8RcNcn4vvjzl8b5xD+P+Yp1BzszLe oAkjay3jK6pSTW3P9HoTLedTHsyTsfqYGRKHtcp2hdmkV32KJZ/oX03vcYDZIXcB MbU+Ra622aObC/u8AXfjwSo43nhCdo4pSKz+TrqslE1QUXFmRJCKfjlGq1+EDcFC 2jksAddTVaRZFl2cFe3ZRxZKh7be+lFJuUFVaJOsN0tEFvQSxbZdMPqH5cfo9Dpp KEJj5HNibv/TopdZdyXXomdXa10ta70FTospYBE9Fziiy40ZoTps6d1j959F20KP rlTCGgREJg== -----END CERTIFICATE-----Generated at Tue Sep 29 17:57:58 2026 by rpki-client