$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft File: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft (raw, json) Hash identifier: IGqnJwfawgzaAN99UxrOiTZNS4yrVDJQ9pmvwWPbaEY= Subject key identifier: 85:3A:9A:06:07:9E:81:3E:B7:B2:62:6A:C9:CE:37:54:37:E6:9F:C6 Authority key identifier: 66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A Certificate issuer: /CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Certificate serial: 236D4E12D030CF68E34CD45039DB2840F2C49259 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft Manifest number: AE Signing time: Fri 29 May 2026 02:47:28 +0000 Manifest this update: Fri 29 May 2026 02:42:28 +0000 Manifest next update: Sat 30 May 2026 05:55:28 +0000 Files and hashes: 1: 3135302e3234322e3234342e302f32322d3232203d3e20313334373635.roa (hash: Z0Og2VRkF9so8DXGO9qx7+fqZAupDQA2fhEa1vdrebg=) 2: 3130332e32302e3136302e302f32322d3232203d3e20313334373635.roa (hash: Bj3NdvzxuoljrwIvbWbuXcn7NpJjDq3od3bmKo7Wh/w=) 3: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl (hash: ndbCj28z38QHvsyhc4QzWTP9Pz3BKkbpK+bvWtFgCSM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 05:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:6d:4e:12:d0:30:cf:68:e3:4c:d4:50:39:db:28:40:f2:c4:92:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Validity Not Before: May 29 02:42:28 2026 GMT Not After : May 30 05:55:28 2026 GMT Subject: CN=853A9A06079E813EB7B2626AC9CE375437E69FC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7f:e4:cc:9e:56:91:db:76:7c:b7:f2:21:36: bf:a0:0e:9b:74:e7:4d:a4:4a:4b:00:24:12:45:1f: 42:de:62:15:35:f8:48:52:93:e6:74:d9:8c:45:22: 94:22:61:5e:a6:54:88:51:eb:6b:83:d5:36:c2:44: 4c:9c:05:9b:40:f7:a9:97:08:c6:99:b3:96:26:41: 0d:79:61:65:01:5e:f8:a9:89:46:3e:4c:97:91:08: 65:28:a9:b6:bc:e5:e1:f8:f4:4a:49:e0:9e:f1:ee: 67:74:45:46:14:11:2d:f7:3e:ec:ce:b8:3b:ad:57: b8:f0:75:ac:2d:fb:c1:04:a9:d5:91:03:f7:e9:0b: 0e:85:ca:ab:1e:ce:9b:b1:55:60:6a:08:69:96:7a: e8:4e:e6:f8:64:00:79:69:60:a7:ad:28:a8:5d:75: 2b:a3:a7:bf:25:a7:fd:1e:a9:40:ed:1f:6f:4e:2a: 80:60:cf:47:48:8c:d0:fd:8f:a7:af:aa:75:4a:5b: e6:52:79:93:8a:06:5f:59:79:78:4d:b5:7a:1a:b7: 02:84:b4:61:65:20:04:da:67:6f:22:87:39:2d:2b: c0:a8:ca:34:c6:01:58:83:93:b3:77:0d:1d:8b:0e: 31:05:ff:aa:ac:41:46:8d:8f:5d:80:2d:8b:23:90: 36:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3A:9A:06:07:9E:81:3E:B7:B2:62:6A:C9:CE:37:54:37:E6:9F:C6 X509v3 Authority Key Identifier: keyid:66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:1f:62:81:b7:4f:f1:df:6f:b0:e7:dc:82:48:0c:79:8e:30: 65:42:cb:ba:66:7b:7a:5d:9a:a0:02:3f:a6:ac:0c:6c:12:14: f5:88:ad:5f:a1:e8:49:f8:97:dc:d5:50:90:54:e0:99:23:e2: 7f:e6:80:50:dc:9a:1e:ee:d8:37:6c:ba:96:11:75:83:d0:b4: 77:1b:9b:3c:d1:90:1d:b5:30:3b:3e:09:9c:c3:cd:7c:f3:b7: fc:91:78:ba:14:8a:56:ba:b5:88:db:d7:43:45:35:30:ff:b0: be:e7:d0:b2:a0:75:65:83:be:dc:35:02:69:dd:c4:98:85:50: 2a:2c:9a:33:87:4b:24:b0:53:1d:b0:20:ac:67:a2:5f:72:cd: 78:9e:18:04:67:37:85:85:76:05:1a:4b:ac:31:42:d0:18:53: a5:89:7b:e4:e3:cc:63:0e:d5:9e:55:00:de:d1:6a:6b:94:05: c5:93:3f:4f:38:fb:0b:e8:b0:c3:bb:27:24:23:ab:3e:98:35: c4:2a:75:c5:3a:8b:8e:b5:f2:50:e0:0f:1e:ff:b3:18:a1:6b: 2e:25:99:b0:f8:26:11:19:5a:bb:85:13:6b:c5:ce:a5:e9:7f: 89:de:aa:fb:06:1c:44:66:5d:30:5a:b4:da:21:33:85:f0:83: 9a:03:0c:f0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUI21OEtAwz2jjTNRQOdsoQPLEklkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4 NEFGQUEyQTAeFw0yNjA1MjkwMjQyMjhaFw0yNjA1MzAwNTU1MjhaMDMxMTAvBgNV BAMTKDg1M0E5QTA2MDc5RTgxM0VCN0IyNjI2QUM5Q0UzNzU0MzdFNjlGQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFf+TMnlaR23Z8t/IhNr+gDpt0 502kSksAJBJFH0LeYhU1+EhSk+Z02YxFIpQiYV6mVIhR62uD1TbCREycBZtA96mX CMaZs5YmQQ15YWUBXvipiUY+TJeRCGUoqba85eH49EpJ4J7x7md0RUYUES33PuzO uDutV7jwdawt+8EEqdWRA/fpCw6FyqsezpuxVWBqCGmWeuhO5vhkAHlpYKetKKhd dSujp78lp/0eqUDtH29OKoBgz0dIjND9j6evqnVKW+ZSeZOKBl9ZeXhNtXoatwKE tGFlIATaZ28ihzktK8CoyjTGAViDk7N3DR2LDjEF/6qsQUaNj12ALYsjkDZ5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhTqaBgeegT63smJqyc43VDfmn8YwHwYDVR0j BBgwFoAUZviwXfuKSb2Nr5D88XC+C4SvqiowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8wLzY2RjhCMDVERkI4QTQ5QkQ4REFGOTBGQ0YxNzBC RTBCODRBRkFBMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4NEFGQUEyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMC82NkY4QjA1REZCOEE0 OUJEOERBRjkwRkNGMTcwQkUwQjg0QUZBQTJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARx9igbdP8d9v sOfcgkgMeY4wZULLumZ7el2aoAI/pqwMbBIU9YitX6HoSfiX3NVQkFTgmSPif+aA UNyaHu7YN2y6lhF1g9C0dxubPNGQHbUwOz4JnMPNfPO3/JF4uhSKVrq1iNvXQ0U1 MP+wvufQsqB1ZYO+3DUCad3EmIVQKiyaM4dLJLBTHbAgrGeiX3LNeJ4YBGc3hYV2 BRpLrDFC0BhTpYl75OPMYw7VnlUA3tFqa5QFxZM/Tzj7C+iww7snJCOrPpg1xCp1 xTqLjrXyUOAPHv+zGKFrLiWZsPgmERlau4UTa8XOpel/id6q+wYcRGZdMFq02iEz hfCDmgMM8A== -----END CERTIFICATE-----Generated at Fri May 29 22:05:08 2026 by rpki-client