$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft File: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft (raw, json) Hash identifier: ddSHcj3Jo6MK4CXvks244XoPvBl9lX1AG+5S6lZCKMQ= Subject key identifier: B5:C0:50:9C:2B:54:C8:27:7D:B5:D5:5B:82:AD:A7:D4:DA:03:90:7F Authority key identifier: 66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A Certificate issuer: /CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Certificate serial: 66BC95214453ABFDEC5F93966EB6AD0557E9379B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft Manifest number: 70 Signing time: Sun 12 Apr 2026 16:59:16 +0000 Manifest this update: Sun 12 Apr 2026 16:54:16 +0000 Manifest next update: Mon 13 Apr 2026 19:05:16 +0000 Files and hashes: 1: 3130332e32302e3136302e302f32322d3232203d3e20313334373635.roa (hash: Bj3NdvzxuoljrwIvbWbuXcn7NpJjDq3od3bmKo7Wh/w=) 2: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl (hash: 13wqNxGRdmXU9cRhXUZRkPWGVahzjK8eFoLQZLK1HU4=) 3: 3135302e3234322e3234342e302f32322d3232203d3e20313334373635.roa (hash: Z0Og2VRkF9so8DXGO9qx7+fqZAupDQA2fhEa1vdrebg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 19:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:bc:95:21:44:53:ab:fd:ec:5f:93:96:6e:b6:ad:05:57:e9:37:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Validity Not Before: Apr 12 16:54:16 2026 GMT Not After : Apr 13 19:05:16 2026 GMT Subject: CN=B5C0509C2B54C8277DB5D55B82ADA7D4DA03907F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ae:5b:34:8a:67:dd:b3:fa:9f:9f:2f:44:b7: 99:15:9c:5c:31:0d:72:1a:33:51:e6:f4:2e:f8:62: 5c:f1:ee:f3:f4:c0:8d:c1:e3:64:32:b2:32:c3:5c: 3a:00:ce:3a:22:0a:e3:46:6c:c4:58:c6:bd:63:ab: e4:e6:1a:af:83:bd:bb:93:e0:84:c7:e2:af:1e:5e: 46:d5:e4:03:8a:a4:36:0b:37:73:e1:91:53:b2:fe: 6b:d2:e9:29:b9:19:da:b2:0f:39:77:ff:17:d2:9e: fa:de:7a:70:e1:f1:a8:7d:dc:c7:f9:1b:56:f1:99: 10:a2:25:16:23:4b:f6:ce:e1:54:1a:58:d2:9f:d2: 1d:e4:e0:45:9d:e6:5b:2e:6c:39:25:2a:37:e3:76: f3:9d:1f:fd:de:ef:1c:b3:91:88:db:18:d5:b3:8b: 75:c9:83:a0:a0:69:71:ac:6d:8a:99:a8:ab:0e:d9: b7:97:35:6a:1e:94:8d:eb:d1:aa:4b:e2:80:8f:89: fa:1a:f4:52:01:4b:35:9c:37:55:71:a0:38:87:fe: 7c:a1:2a:a4:15:ec:31:18:86:a1:86:fa:ba:5e:bf: f7:ab:4a:71:88:2e:9f:8a:bd:59:de:82:26:f7:15: 05:99:2f:8b:0d:75:06:6d:c3:f8:e9:c2:8f:a0:3e: 33:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C0:50:9C:2B:54:C8:27:7D:B5:D5:5B:82:AD:A7:D4:DA:03:90:7F X509v3 Authority Key Identifier: keyid:66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:3b:39:40:36:53:d8:54:11:5c:59:35:59:2e:74:e5:e5:7d: d3:6f:54:30:f0:07:ff:1f:b6:8b:6a:9b:b9:7d:7c:19:58:0d: 41:b1:28:ae:4b:a9:3c:30:d4:7d:0a:64:58:10:de:2d:5f:04: 13:4e:76:0b:3a:64:2a:d9:3f:1b:8b:db:24:4e:ae:4b:4f:94: d1:fc:8d:8b:c2:88:d2:1f:b5:17:4e:bb:bf:3b:6f:15:ce:ae: 40:83:9d:62:61:66:c1:b8:39:16:45:31:99:13:ed:0f:d7:45: 1a:66:56:b2:2b:18:f6:aa:35:0b:80:3f:58:13:98:f9:bc:9f: cd:7e:20:2f:ce:2d:4b:b9:9e:8c:32:08:d8:16:c3:e1:b9:99: 58:07:ef:e4:48:0e:1b:75:44:5d:10:ce:87:88:dd:76:a7:97: bb:95:ee:4c:bc:7d:0c:c6:99:b0:80:a3:ae:61:e1:b2:8f:5b: c3:33:9a:f4:95:0d:a1:77:83:18:93:21:09:2f:01:eb:f0:a3: 7f:8d:34:97:24:71:68:6e:70:69:48:1e:ad:56:a5:fe:bb:b7: 28:0e:f1:6a:e4:f5:4b:1b:5e:8d:87:f7:ff:b5:ab:5c:bd:b0: c3:52:f1:4a:4b:68:7b:d3:eb:5a:4c:fb:be:2f:d4:8f:b2:58: 60:d2:ac:b3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZryVIURTq/3sX5OWbratBVfpN5swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4 NEFGQUEyQTAeFw0yNjA0MTIxNjU0MTZaFw0yNjA0MTMxOTA1MTZaMDMxMTAvBgNV BAMTKEI1QzA1MDlDMkI1NEM4Mjc3REI1RDU1QjgyQURBN0Q0REEwMzkwN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOrls0imfds/qfny9Et5kVnFwx DXIaM1Hm9C74Ylzx7vP0wI3B42QysjLDXDoAzjoiCuNGbMRYxr1jq+TmGq+DvbuT 4ITH4q8eXkbV5AOKpDYLN3PhkVOy/mvS6Sm5GdqyDzl3/xfSnvreenDh8ah93Mf5 G1bxmRCiJRYjS/bO4VQaWNKf0h3k4EWd5lsubDklKjfjdvOdH/3e7xyzkYjbGNWz i3XJg6CgaXGsbYqZqKsO2beXNWoelI3r0apL4oCPifoa9FIBSzWcN1VxoDiH/nyh KqQV7DEYhqGG+rpev/erSnGILp+KvVnegib3FQWZL4sNdQZtw/jpwo+gPjOjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtcBQnCtUyCd9tdVbgq2n1NoDkH8wHwYDVR0j BBgwFoAUZviwXfuKSb2Nr5D88XC+C4SvqiowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8wLzY2RjhCMDVERkI4QTQ5QkQ4REFGOTBGQ0YxNzBC RTBCODRBRkFBMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4NEFGQUEyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMC82NkY4QjA1REZCOEE0 OUJEOERBRjkwRkNGMTcwQkUwQjg0QUZBQTJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTs5QDZT2FQR XFk1WS505eV9029UMPAH/x+2i2qbuX18GVgNQbEorkupPDDUfQpkWBDeLV8EE052 CzpkKtk/G4vbJE6uS0+U0fyNi8KI0h+1F067vztvFc6uQIOdYmFmwbg5FkUxmRPt D9dFGmZWsisY9qo1C4A/WBOY+byfzX4gL84tS7mejDII2BbD4bmZWAfv5EgOG3VE XRDOh4jddqeXu5XuTLx9DMaZsICjrmHhso9bwzOa9JUNoXeDGJMhCS8B6/Cjf400 lyRxaG5waUgerVal/ru3KA7xauT1SxtejYf3/7WrXL2ww1LxSktoe9PrWkz7vi/U j7JYYNKssw== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:42 2026 by rpki-client