$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft File: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft (raw, json) Hash identifier: 8zviGvja82IAOSFteINN38vVzw+kfNEhDOTJCeM6cuM= Subject key identifier: 22:B0:30:45:B1:20:84:F0:9B:74:56:2B:F7:4C:24:E1:9E:83:92:F2 Authority key identifier: 66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A Certificate issuer: /CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Certificate serial: 3FAC6A207ED89AC155135928A95FBB9DB7E588F1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft Manifest number: 013E Signing time: Mon 12 Oct 2026 02:46:20 +0000 Manifest this update: Mon 12 Oct 2026 02:41:20 +0000 Manifest next update: Thu 15 Oct 2026 12:48:20 +0000 Files and hashes: 1: 3130332e32302e3136302e302f32322d3232203d3e20313334373635.roa (hash: Bj3NdvzxuoljrwIvbWbuXcn7NpJjDq3od3bmKo7Wh/w=) 2: 3230332e38312e31362e302f32302d3230203d3e20313334373635.roa (hash: 5MWmFfMa0D6WNDGkRqnlKQV80cTKOloRp4FR2LPMSGw=) 3: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl (hash: GYgoHhr0a746Y6GzaliRbArNFBERvuo/M4cx/xkD5iY=) 4: 3131362e35382e3230382e302f32302d3230203d3e20313334373635.roa (hash: VwIiHJbm3cBD8lhL8wmRmh0pfQiLWDNx7qvhjrjHDtM=) 5: 3135302e3234322e3234342e302f32322d3232203d3e20313334373635.roa (hash: Z0Og2VRkF9so8DXGO9qx7+fqZAupDQA2fhEa1vdrebg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 12:48:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ac:6a:20:7e:d8:9a:c1:55:13:59:28:a9:5f:bb:9d:b7:e5:88:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Validity Not Before: Oct 12 02:41:20 2026 GMT Not After : Oct 15 12:48:20 2026 GMT Subject: CN=22B03045B12084F09B74562BF74C24E19E8392F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:b6:22:09:a2:7b:6b:11:97:85:00:77:e7:23: c0:96:54:cd:ef:c9:85:c7:f0:1e:c8:12:5b:f5:1a: 54:9d:62:d8:0c:c2:e6:0d:6d:46:cd:11:9e:69:15: 3c:61:8d:1e:e1:ae:72:39:ab:6d:1f:51:01:ac:75: 60:47:8d:3d:67:64:80:28:a3:eb:3a:e6:c3:d1:ad: 9f:73:30:37:6f:04:e5:3b:e5:97:83:f4:7e:53:1f: 67:24:8c:e1:6f:c1:a8:1e:22:c5:cc:90:e4:b9:89: 3d:4d:ad:c1:b2:57:27:4d:ff:08:34:05:13:9d:18: 75:ec:a7:4f:ed:a4:73:49:93:b0:64:63:c4:5a:11: 04:a3:da:78:84:b9:b3:70:01:ca:9c:95:2a:ca:62: 86:e2:bd:b5:a5:da:c8:61:6a:ea:41:dd:b0:73:c1: c6:e5:5e:2b:82:82:29:18:9f:80:21:6c:f7:34:64: 37:8d:35:91:c8:14:99:01:62:27:5b:95:c3:de:4c: 75:a2:80:9a:4d:11:80:d0:99:30:7d:ad:0b:c7:a0: 5c:24:f9:b5:45:99:35:23:21:34:fc:bc:2a:92:f3: e1:4b:6c:f1:d1:57:2d:07:c8:34:4d:c5:77:bb:3d: 9e:a6:04:ea:86:ce:3d:a3:17:8c:1a:6c:03:d4:19: b1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B0:30:45:B1:20:84:F0:9B:74:56:2B:F7:4C:24:E1:9E:83:92:F2 X509v3 Authority Key Identifier: keyid:66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:7c:3f:52:6e:bf:22:93:3a:4a:c7:6c:65:b0:14:bf:2a:d3: 09:64:17:a7:54:59:4f:86:d8:ae:13:ad:89:51:16:04:02:22: 1d:10:71:de:b7:7e:dc:4b:60:d3:40:31:9e:47:05:41:e0:53: 1c:b2:8a:6f:c5:79:2d:d3:fa:5d:87:bd:5e:2b:87:e2:7a:cc: 27:f6:5b:b8:a7:7d:ce:12:bb:ec:2b:74:69:b1:8c:be:17:75: 7b:6a:04:6d:de:89:22:ac:74:7b:7e:46:23:bb:87:16:32:93: 7d:14:46:33:e0:9b:1a:88:17:3d:a8:f1:55:a1:de:5f:73:cd: 57:66:71:98:04:8a:98:b8:94:f6:eb:97:84:a1:34:95:6e:83: 42:7b:6e:5e:07:c1:72:24:23:d9:26:23:82:b5:a8:89:42:22: 34:40:6f:8d:c2:8d:f7:fd:80:19:4d:fa:08:c8:90:26:a1:36: 7b:af:ba:4a:e0:eb:23:7a:12:0b:9d:b1:81:87:b6:2f:1e:10: a0:40:49:f7:be:59:7c:44:de:d2:da:ff:f1:58:47:88:24:bb: 21:3b:a6:cd:a4:5e:91:31:10:fa:0e:fe:9c:43:9f:8e:a3:9e: a2:59:94:7f:12:d8:f5:c0:c8:e9:0f:21:56:7e:f2:23:39:3d: 15:91:ba:66 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUP6xqIH7YmsFVE1koqV+7nbfliPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4 NEFGQUEyQTAeFw0yNjEwMTIwMjQxMjBaFw0yNjEwMTUxMjQ4MjBaMDMxMTAvBgNV BAMTKDIyQjAzMDQ1QjEyMDg0RjA5Qjc0NTYyQkY3NEMyNEUxOUU4MzkyRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3tiIJontrEZeFAHfnI8CWVM3v yYXH8B7IElv1GlSdYtgMwuYNbUbNEZ5pFTxhjR7hrnI5q20fUQGsdWBHjT1nZIAo o+s65sPRrZ9zMDdvBOU75ZeD9H5TH2ckjOFvwageIsXMkOS5iT1NrcGyVydN/wg0 BROdGHXsp0/tpHNJk7BkY8RaEQSj2niEubNwAcqclSrKYobivbWl2shhaupB3bBz wcblXiuCgikYn4AhbPc0ZDeNNZHIFJkBYidblcPeTHWigJpNEYDQmTB9rQvHoFwk +bVFmTUjITT8vCqS8+FLbPHRVy0HyDRNxXe7PZ6mBOqGzj2jF4wabAPUGbFzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIrAwRbEghPCbdFYr90wk4Z6DkvIwHwYDVR0j BBgwFoAUZviwXfuKSb2Nr5D88XC+C4SvqiowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8wLzY2RjhCMDVERkI4QTQ5QkQ4REFGOTBGQ0YxNzBC RTBCODRBRkFBMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4NEFGQUEyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMC82NkY4QjA1REZCOEE0 OUJEOERBRjkwRkNGMTcwQkUwQjg0QUZBQTJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHw/Um6/IpM6 SsdsZbAUvyrTCWQXp1RZT4bYrhOtiVEWBAIiHRBx3rd+3Etg00AxnkcFQeBTHLKK b8V5LdP6XYe9XiuH4nrMJ/ZbuKd9zhK77Ct0abGMvhd1e2oEbd6JIqx0e35GI7uH FjKTfRRGM+CbGogXPajxVaHeX3PNV2ZxmASKmLiU9uuXhKE0lW6DQntuXgfBciQj 2SYjgrWoiUIiNEBvjcKN9/2AGU36CMiQJqE2e6+6SuDrI3oSC52xgYe2Lx4QoEBJ 975ZfETe0tr/8VhHiCS7ITumzaRekTEQ+g7+nEOfjqOeolmUfxLY9cDI6Q8hVn7y Izk9FZG6Zg== -----END CERTIFICATE-----Generated at Wed Oct 14 11:52:37 2026 by rpki-client