$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft File: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft (raw, json) Hash identifier: Z/dimi4+iJUkA11KDmKyPsMwCa9rLJxg+VIRJ+3aXt0= Subject key identifier: C9:D0:04:AA:C0:66:2D:14:EA:97:C5:60:C0:62:2E:3E:D1:9F:47:B0 Authority key identifier: 66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A Certificate issuer: /CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Certificate serial: 71CFB9E5ED83F92BFEA8CDC1A1331E164745403A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft Manifest number: EE Signing time: Tue 14 Jul 2026 06:10:35 +0000 Manifest this update: Tue 14 Jul 2026 06:05:35 +0000 Manifest next update: Wed 15 Jul 2026 07:45:35 +0000 Files and hashes: 1: 3135302e3234322e3234342e302f32322d3232203d3e20313334373635.roa (hash: Z0Og2VRkF9so8DXGO9qx7+fqZAupDQA2fhEa1vdrebg=) 2: 3230332e38312e31362e302f32302d3230203d3e20313334373635.roa (hash: 5MWmFfMa0D6WNDGkRqnlKQV80cTKOloRp4FR2LPMSGw=) 3: 3130332e32302e3136302e302f32322d3232203d3e20313334373635.roa (hash: Bj3NdvzxuoljrwIvbWbuXcn7NpJjDq3od3bmKo7Wh/w=) 4: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl (hash: 6WoKN6GUZMCCCMftfNjYnow6XXv8I3OBIFe+DT3yYWQ=) 5: 3131362e35382e3230382e302f32302d3230203d3e20313334373635.roa (hash: VwIiHJbm3cBD8lhL8wmRmh0pfQiLWDNx7qvhjrjHDtM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 07:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:cf:b9:e5:ed:83:f9:2b:fe:a8:cd:c1:a1:33:1e:16:47:45:40:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Validity Not Before: Jul 14 06:05:35 2026 GMT Not After : Jul 15 07:45:35 2026 GMT Subject: CN=C9D004AAC0662D14EA97C560C0622E3ED19F47B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7b:e0:1d:0f:a9:7b:6d:b7:f5:7b:ea:e8:f8: d3:cf:5b:d7:2e:b7:00:c2:14:e5:7b:7c:6e:ee:b2: 99:5c:ca:ed:f2:69:f2:9c:98:d2:ad:ea:0a:8f:33: 74:4b:56:d9:cd:17:c8:f6:97:f4:c1:84:f8:b0:be: ce:89:9a:fa:63:2f:da:7c:6d:70:d1:5e:80:4e:5a: 38:47:83:a9:9d:fb:4c:67:dc:e7:70:c4:56:0f:c5: bd:b1:e7:d2:48:06:2b:bf:eb:78:e9:d6:ab:8b:90: 4b:7e:a0:07:9d:ac:86:f2:d2:8f:03:98:b1:8d:b3: 81:f5:59:70:e6:1e:1b:ae:91:f7:ee:7f:2c:15:21: 48:2c:49:bf:d4:fc:74:76:68:9e:9c:45:dd:5a:0c: b1:28:be:56:75:e5:92:a4:a8:40:30:b6:eb:e0:d7: c5:f8:7d:78:23:58:94:31:df:81:3d:3a:23:3f:0f: 88:33:ff:3a:58:56:17:bc:8b:14:a6:e4:47:cf:37: 45:6f:01:83:e7:54:ae:62:31:ae:6f:2d:fe:34:6f: 61:a2:18:c9:cc:48:f9:c5:e5:39:31:8c:af:f4:a7: f9:3f:63:f9:32:d8:04:1e:e1:94:be:36:98:5a:94: 85:e1:50:53:1d:24:b2:8c:f7:3b:57:8f:a3:08:0d: e5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D0:04:AA:C0:66:2D:14:EA:97:C5:60:C0:62:2E:3E:D1:9F:47:B0 X509v3 Authority Key Identifier: keyid:66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d0:e1:84:5c:90:42:e1:da:a3:e9:87:b6:14:9e:55:dd:63: fc:f9:12:f5:a1:a2:bf:35:4d:ca:f9:8d:17:2c:bf:b6:55:8d: ab:95:a5:e4:f2:0b:e4:a4:30:56:9f:a9:99:9f:80:bb:a0:3d: 1c:83:ea:c7:9b:4b:a2:a5:2a:bb:ad:f6:38:b8:1a:5e:8e:40: 8d:0f:4d:5e:d5:0d:45:e8:86:6b:d1:a8:39:a2:1d:e4:61:18: a9:14:99:ec:3d:37:3e:9a:a1:a6:b6:4b:b9:c0:a7:d5:ab:65: e8:c8:c8:dc:2d:f3:b5:60:8e:87:ef:33:4c:83:da:79:fb:50: 50:74:db:2f:9a:71:c3:79:ea:4b:5f:65:4e:5f:c9:20:2a:e0: 71:c0:21:da:32:6f:a9:0d:77:cb:7a:9c:b1:ae:65:30:ab:18: e8:f5:29:38:e3:2d:03:19:31:b1:dc:e3:03:8a:9c:3f:3e:ec: cf:a5:95:a9:9a:cd:15:9f:5c:36:3f:18:51:7b:f0:db:60:70: 65:f7:23:f7:e6:1a:74:38:97:ce:56:52:77:14:16:b6:b7:fa: cc:ea:2b:e0:a6:7b:52:27:a3:6c:dc:21:96:14:90:86:9b:fc: c1:49:0d:e7:fb:56:61:4c:d3:09:d7:e0:bd:d5:7e:24:fb:f3: 8f:f2:7a:3e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcc+55e2D+Sv+qM3BoTMeFkdFQDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4 NEFGQUEyQTAeFw0yNjA3MTQwNjA1MzVaFw0yNjA3MTUwNzQ1MzVaMDMxMTAvBgNV BAMTKEM5RDAwNEFBQzA2NjJEMTRFQTk3QzU2MEMwNjIyRTNFRDE5RjQ3QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCAe+AdD6l7bbf1e+ro+NPPW9cu twDCFOV7fG7usplcyu3yafKcmNKt6gqPM3RLVtnNF8j2l/TBhPiwvs6JmvpjL9p8 bXDRXoBOWjhHg6md+0xn3OdwxFYPxb2x59JIBiu/63jp1quLkEt+oAedrIby0o8D mLGNs4H1WXDmHhuukffufywVIUgsSb/U/HR2aJ6cRd1aDLEovlZ15ZKkqEAwtuvg 18X4fXgjWJQx34E9OiM/D4gz/zpYVhe8ixSm5EfPN0VvAYPnVK5iMa5vLf40b2Gi GMnMSPnF5TkxjK/0p/k/Y/ky2AQe4ZS+NphalIXhUFMdJLKM9ztXj6MIDeUJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUydAEqsBmLRTql8VgwGIuPtGfR7AwHwYDVR0j BBgwFoAUZviwXfuKSb2Nr5D88XC+C4SvqiowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8wLzY2RjhCMDVERkI4QTQ5QkQ4REFGOTBGQ0YxNzBC RTBCODRBRkFBMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4NEFGQUEyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMC82NkY4QjA1REZCOEE0 OUJEOERBRjkwRkNGMTcwQkUwQjg0QUZBQTJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetDhhFyQQuHa o+mHthSeVd1j/PkS9aGivzVNyvmNFyy/tlWNq5Wl5PIL5KQwVp+pmZ+Au6A9HIPq x5tLoqUqu632OLgaXo5AjQ9NXtUNReiGa9GoOaId5GEYqRSZ7D03PpqhprZLucCn 1atl6MjI3C3ztWCOh+8zTIPaeftQUHTbL5pxw3nqS19lTl/JICrgccAh2jJvqQ13 y3qcsa5lMKsY6PUpOOMtAxkxsdzjA4qcPz7sz6WVqZrNFZ9cNj8YUXvw22BwZfcj 9+YadDiXzlZSdxQWtrf6zOor4KZ7UiejbNwhlhSQhpv8wUkN5/tWYUzTCdfgvdV+ JPvzj/J6Pg== -----END CERTIFICATE-----Generated at Tue Jul 14 19:58:26 2026 by rpki-client