$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft File: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft (raw, json) Hash identifier: iagbbuULg6ezvIwITWcp9nT3s7Y+iQNpSuZCDW4eksM= Subject key identifier: 59:0F:9C:59:B0:AD:7D:C4:FD:0B:91:BE:32:FC:DC:D7:7F:9C:DC:AE Authority key identifier: 66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A Certificate issuer: /CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Certificate serial: 59735D52B57EB42D25ABE259959BF19449E2F6AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft Manifest number: 012A Signing time: Fri 28 Aug 2026 06:47:46 +0000 Manifest this update: Fri 28 Aug 2026 06:42:46 +0000 Manifest next update: Mon 31 Aug 2026 08:45:46 +0000 Files and hashes: 1: 3135302e3234322e3234342e302f32322d3232203d3e20313334373635.roa (hash: Z0Og2VRkF9so8DXGO9qx7+fqZAupDQA2fhEa1vdrebg=) 2: 3230332e38312e31362e302f32302d3230203d3e20313334373635.roa (hash: 5MWmFfMa0D6WNDGkRqnlKQV80cTKOloRp4FR2LPMSGw=) 3: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl (hash: xet66aYh7NJ5h1NfZPc4WfVVsoM1a5F6rPYdLT1w8c8=) 4: 3130332e32302e3136302e302f32322d3232203d3e20313334373635.roa (hash: Bj3NdvzxuoljrwIvbWbuXcn7NpJjDq3od3bmKo7Wh/w=) 5: 3131362e35382e3230382e302f32302d3230203d3e20313334373635.roa (hash: VwIiHJbm3cBD8lhL8wmRmh0pfQiLWDNx7qvhjrjHDtM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 08:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:73:5d:52:b5:7e:b4:2d:25:ab:e2:59:95:9b:f1:94:49:e2:f6:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Validity Not Before: Aug 28 06:42:46 2026 GMT Not After : Aug 31 08:45:46 2026 GMT Subject: CN=590F9C59B0AD7DC4FD0B91BE32FCDCD77F9CDCAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fc:4a:4f:6d:2e:0e:6b:19:07:0b:7e:66:64: fe:94:65:24:fe:ca:67:8a:b1:eb:2c:34:53:4b:33: 5b:22:cb:1d:d4:f9:3b:d4:e7:9f:47:9f:ca:8d:36: cc:fa:31:52:76:6b:6e:4e:2f:e9:66:69:82:22:53: f7:9a:aa:21:01:85:cc:fb:7c:ef:d8:ff:8f:50:1b: c9:5e:78:70:be:1d:4f:2f:1b:3d:9d:48:41:ef:70: 31:96:01:1a:18:74:f1:5b:d8:fd:77:c7:88:7c:5e: 7f:42:f0:a5:15:85:28:e0:c0:d1:8f:ab:d1:b8:2a: ba:89:84:66:ea:25:6a:b1:a0:b8:0a:32:66:a3:17: c8:82:3a:90:10:96:5e:83:03:34:6d:c6:a5:6e:69: d2:64:80:c2:1d:a3:2d:df:eb:87:fe:85:64:a5:b7: 7e:d4:46:37:77:df:b8:c0:fc:88:ce:13:70:94:32: 95:4a:1a:83:c9:07:2a:95:58:63:9e:35:34:1d:83: d0:8f:f0:5a:35:60:6f:4a:28:d3:d8:63:a6:05:e6: 57:bc:3f:44:36:32:13:34:60:39:5f:c6:db:c6:a5: 44:02:36:ad:6d:37:8e:71:a4:6c:57:d7:c3:d5:80: 8a:c3:26:af:32:87:3c:6e:cd:d2:56:72:d4:fb:d1: 71:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0F:9C:59:B0:AD:7D:C4:FD:0B:91:BE:32:FC:DC:D7:7F:9C:DC:AE X509v3 Authority Key Identifier: keyid:66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f5:03:23:8d:37:41:e1:38:08:7f:88:c7:70:26:28:7c:24: 5c:85:c6:e6:cc:5a:f4:0a:dc:d4:99:24:53:77:eb:3d:76:90: 7d:7a:f3:1c:4c:87:e3:14:d0:87:19:c8:fd:93:a5:74:32:f5: c4:81:b9:1d:b7:0f:11:01:0b:c3:4b:7e:92:d7:55:f5:22:6f: 64:ec:31:84:f9:e3:14:a2:40:9b:8f:39:4d:13:88:04:8f:fb: c8:54:1f:b1:b6:a0:c4:a7:90:85:49:50:6f:2c:7c:67:21:c0: 2b:08:39:c7:b3:6c:ac:f5:03:05:33:2d:fa:92:41:da:7d:b5: b3:bb:1b:78:7b:15:72:a8:ab:23:74:10:e5:fd:48:80:86:d1: 92:ca:63:63:73:c7:5f:0d:15:c1:c6:25:a3:b4:97:5e:e9:eb: 1d:93:3a:0f:65:8e:e4:80:ee:cf:c2:e1:a6:bf:bb:f7:83:40: 9f:e6:a4:41:f5:00:2e:8f:d7:25:d9:83:58:bf:e1:5e:57:b3: 37:bb:4f:48:33:36:42:65:94:89:98:9a:1f:4b:c0:1b:ef:01: c2:30:6b:36:55:d2:0a:e0:63:a9:de:d9:06:71:f8:1c:9a:6f: c2:03:03:64:2c:85:71:a0:83:53:96:0d:9c:c6:81:3d:0f:c8: d6:37:f0:cd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWXNdUrV+tC0lq+JZlZvxlEni9q4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4 NEFGQUEyQTAeFw0yNjA4MjgwNjQyNDZaFw0yNjA4MzEwODQ1NDZaMDMxMTAvBgNV BAMTKDU5MEY5QzU5QjBBRDdEQzRGRDBCOTFCRTMyRkNEQ0Q3N0Y5Q0RDQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH/EpPbS4OaxkHC35mZP6UZST+ ymeKsessNFNLM1siyx3U+TvU559Hn8qNNsz6MVJ2a25OL+lmaYIiU/eaqiEBhcz7 fO/Y/49QG8leeHC+HU8vGz2dSEHvcDGWARoYdPFb2P13x4h8Xn9C8KUVhSjgwNGP q9G4KrqJhGbqJWqxoLgKMmajF8iCOpAQll6DAzRtxqVuadJkgMIdoy3f64f+hWSl t37URjd337jA/IjOE3CUMpVKGoPJByqVWGOeNTQdg9CP8Fo1YG9KKNPYY6YF5le8 P0Q2MhM0YDlfxtvGpUQCNq1tN45xpGxX18PVgIrDJq8yhzxuzdJWctT70XF1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUWQ+cWbCtfcT9C5G+Mvzc13+c3K4wHwYDVR0j BBgwFoAUZviwXfuKSb2Nr5D88XC+C4SvqiowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8wLzY2RjhCMDVERkI4QTQ5QkQ4REFGOTBGQ0YxNzBC RTBCODRBRkFBMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4NEFGQUEyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMC82NkY4QjA1REZCOEE0 OUJEOERBRjkwRkNGMTcwQkUwQjg0QUZBQTJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvUDI403QeE4 CH+Ix3AmKHwkXIXG5sxa9Arc1JkkU3frPXaQfXrzHEyH4xTQhxnI/ZOldDL1xIG5 HbcPEQELw0t+ktdV9SJvZOwxhPnjFKJAm485TROIBI/7yFQfsbagxKeQhUlQbyx8 ZyHAKwg5x7NsrPUDBTMt+pJB2n21s7sbeHsVcqirI3QQ5f1IgIbRkspjY3PHXw0V wcYlo7SXXunrHZM6D2WO5IDuz8Lhpr+794NAn+akQfUALo/XJdmDWL/hXlezN7tP SDM2QmWUiZiaH0vAG+8BwjBrNlXSCuBjqd7ZBnH4HJpvwgMDZCyFcaCDU5YNnMaB PQ/I1jfwzQ== -----END CERTIFICATE-----Generated at Sat Aug 29 07:05:59 2026 by rpki-client