$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft File: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft (raw, json) Hash identifier: aL98NRUAzdE9X1IvKn1zzafsBdVO28abGByZbHIO+8Q= Subject key identifier: 6F:C1:E8:35:67:50:43:3A:84:A1:12:D2:1B:9F:86:89:00:77:DF:33 Authority key identifier: 66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A Certificate issuer: /CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Certificate serial: 1982FE4A8DC32CE0CB9E3BC582D5D452E423F6C5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft Manifest number: 2F Signing time: Sun 22 Feb 2026 15:02:30 +0000 Manifest this update: Sun 22 Feb 2026 14:57:30 +0000 Manifest next update: Mon 23 Feb 2026 15:41:30 +0000 Files and hashes: 1: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl (hash: qkJmv8DNqOmQf1j5JTTvFDE5SvehLbxIyuzuCtnltzs=) 2: 3130332e32302e3136302e302f32322d3232203d3e20313334373635.roa (hash: Bj3NdvzxuoljrwIvbWbuXcn7NpJjDq3od3bmKo7Wh/w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:82:fe:4a:8d:c3:2c:e0:cb:9e:3b:c5:82:d5:d4:52:e4:23:f6:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Validity Not Before: Feb 22 14:57:30 2026 GMT Not After : Feb 23 15:41:30 2026 GMT Subject: CN=6FC1E8356750433A84A112D21B9F86890077DF33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f0:02:d4:e7:a9:b4:9a:d3:2c:35:39:db:97: 7e:59:43:d9:89:b2:1c:75:1a:4b:47:4d:14:a8:f5: 30:54:b4:89:60:89:9a:b3:13:c1:2f:bf:26:d3:6a: c9:cd:17:d4:c7:03:46:bb:09:28:31:35:0a:2a:71: 65:35:19:27:e2:69:24:fc:ae:be:43:26:16:a9:bc: e4:91:f2:8a:ce:35:32:be:8d:60:70:5e:45:2a:48: 8e:59:24:0d:79:f1:8f:84:f3:7a:64:78:f8:6f:f9: 9c:e1:c2:cc:08:1d:cb:73:9f:85:d9:97:43:c1:d4: 22:c3:88:05:e7:53:59:9e:ab:20:fe:ce:6e:b5:e7: ad:a5:4f:ba:49:98:50:1a:be:70:77:1a:7c:a0:ad: bf:22:b3:a5:b2:45:9d:9f:e1:6d:96:eb:d4:f5:29: 3f:84:34:f3:31:65:22:6b:f8:09:7d:b7:ea:5b:36: ad:7f:f1:97:61:9e:44:69:45:90:ee:73:d8:e1:9c: 1a:f1:97:b7:b2:a7:eb:2e:0c:f8:92:ff:73:ca:bc: 4b:65:30:53:0d:b4:6f:41:28:d5:32:92:4b:c3:5e: 7f:1b:c0:d0:cb:43:64:b2:9a:38:66:8a:d0:8a:69: 36:26:b3:41:79:55:d5:02:7a:6b:25:23:68:a8:56: d4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C1:E8:35:67:50:43:3A:84:A1:12:D2:1B:9F:86:89:00:77:DF:33 X509v3 Authority Key Identifier: keyid:66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:84:5f:b2:2d:09:07:d3:f1:ac:19:34:b7:b3:a9:6b:63:29: ce:81:40:e4:a0:31:a6:eb:ab:a6:8e:83:77:fd:09:88:4a:45: c2:f9:99:22:e0:1a:e9:6e:40:5f:5e:f3:eb:68:40:3e:ce:66: 5b:0b:1b:5e:40:2e:59:82:9a:c4:0a:d0:c2:1d:c6:2b:6e:0e: 7b:64:05:ed:da:98:89:f2:b5:21:4a:2d:37:9a:e2:ff:86:8c: eb:5e:73:5c:10:d3:26:6f:c6:91:ee:6b:86:cb:34:93:0b:a1: dd:4d:5b:cc:8d:2e:4d:ee:44:6c:a2:6f:5b:2c:29:63:2c:b9: 06:51:1f:d3:45:fc:63:cc:0f:07:2f:41:90:f6:a8:78:ac:ca: 25:a6:4f:4a:c6:69:7b:e4:35:b3:0a:77:e6:e7:eb:9f:a4:07: 25:b0:54:e5:98:e3:a8:e4:1d:35:db:cd:2f:a2:7e:75:7f:89: b3:ff:26:25:dc:eb:e0:c4:24:c4:d7:db:73:6c:be:d8:60:4b: ba:c2:20:e0:93:c0:6d:94:e1:46:26:24:9f:36:7a:30:c4:36: 07:01:27:ff:4f:e1:74:fa:80:c1:a7:9a:4e:d6:c0:49:b0:c5: ae:6e:60:b6:17:b7:8c:4f:18:4e:53:5b:07:50:9d:0a:1d:ab: 06:03:e1:e7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGYL+So3DLODLnjvFgtXUUuQj9sUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4 NEFGQUEyQTAeFw0yNjAyMjIxNDU3MzBaFw0yNjAyMjMxNTQxMzBaMDMxMTAvBgNV BAMTKDZGQzFFODM1Njc1MDQzM0E4NEExMTJEMjFCOUY4Njg5MDA3N0RGMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh8ALU56m0mtMsNTnbl35ZQ9mJ shx1GktHTRSo9TBUtIlgiZqzE8EvvybTasnNF9THA0a7CSgxNQoqcWU1GSfiaST8 rr5DJhapvOSR8orONTK+jWBwXkUqSI5ZJA158Y+E83pkePhv+ZzhwswIHctzn4XZ l0PB1CLDiAXnU1meqyD+zm61562lT7pJmFAavnB3Gnygrb8is6WyRZ2f4W2W69T1 KT+ENPMxZSJr+Al9t+pbNq1/8ZdhnkRpRZDuc9jhnBrxl7eyp+suDPiS/3PKvEtl MFMNtG9BKNUykkvDXn8bwNDLQ2SymjhmitCKaTYms0F5VdUCemslI2ioVtRLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUb8HoNWdQQzqEoRLSG5+GiQB33zMwHwYDVR0j BBgwFoAUZviwXfuKSb2Nr5D88XC+C4SvqiowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8wLzY2RjhCMDVERkI4QTQ5QkQ4REFGOTBGQ0YxNzBC RTBCODRBRkFBMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4NEFGQUEyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMC82NkY4QjA1REZCOEE0 OUJEOERBRjkwRkNGMTcwQkUwQjg0QUZBQTJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYRfsi0JB9Px rBk0t7Opa2MpzoFA5KAxpuurpo6Dd/0JiEpFwvmZIuAa6W5AX17z62hAPs5mWwsb XkAuWYKaxArQwh3GK24Oe2QF7dqYifK1IUotN5ri/4aM615zXBDTJm/Gke5rhss0 kwuh3U1bzI0uTe5EbKJvWywpYyy5BlEf00X8Y8wPBy9BkPaoeKzKJaZPSsZpe+Q1 swp35ufrn6QHJbBU5ZjjqOQdNdvNL6J+dX+Js/8mJdzr4MQkxNfbc2y+2GBLusIg 4JPAbZThRiYknzZ6MMQ2BwEn/0/hdPqAwaeaTtbASbDFrm5gthe3jE8YTlNbB1Cd Ch2rBgPh5w== -----END CERTIFICATE-----Generated at Mon Feb 23 02:06:08 2026 by rpki-client