$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft File: 66E8C6C4D3432C457DBC420613F170D1895B607C.mft (raw, json) Hash identifier: /nIRsYKvZoV4OiFa2DiZAJ2qPHQOlAHoIfkk+QjmESo= Subject key identifier: 99:2A:99:C0:18:EF:EA:97:30:14:4A:BA:F1:4E:A6:03:36:00:27:02 Authority key identifier: 66:E8:C6:C4:D3:43:2C:45:7D:BC:42:06:13:F1:70:D1:89:5B:60:7C Certificate issuer: /CN=66E8C6C4D3432C457DBC420613F170D1895B607C Certificate serial: 01B2A4A2AE5A40C16F9B709AC1B334099E84B184 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft Manifest number: B7 Signing time: Fri 28 Aug 2026 06:47:36 +0000 Manifest this update: Fri 28 Aug 2026 06:42:36 +0000 Manifest next update: Mon 31 Aug 2026 09:41:36 +0000 Files and hashes: 1: 66E8C6C4D3432C457DBC420613F170D1895B607C.crl (hash: UEEEg50V8tdUwh6LCrLPhaCkjbx1b54Yafb4EgYJnVQ=) 2: 3131392e34322e3133362e302f32312d3234203d3e203338333735.roa (hash: onz07yEDGzQ5lM3czrPnQNjHr6shpdjA+AGj0B+B8V0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.crl rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 09:41:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:b2:a4:a2:ae:5a:40:c1:6f:9b:70:9a:c1:b3:34:09:9e:84:b1:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66E8C6C4D3432C457DBC420613F170D1895B607C Validity Not Before: Aug 28 06:42:36 2026 GMT Not After : Aug 31 09:41:36 2026 GMT Subject: CN=992A99C018EFEA9730144ABAF14EA60336002702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5f:d0:7a:2a:71:3b:4a:27:9b:07:36:76:16: 54:2f:5d:c5:d1:b9:36:a0:97:ee:5e:4f:6c:60:3c: c2:3e:fc:1b:5b:83:94:36:fb:bd:1c:67:1b:08:9f: 23:ee:d1:58:16:89:5b:ac:86:8d:6b:fb:53:42:01: 2c:0d:c3:d2:9a:c2:c5:d5:1a:b0:6c:c5:4b:98:89: b0:3e:2f:5f:92:f0:f7:eb:88:5b:fd:8e:9b:8d:fd: af:5d:0f:27:9a:d8:ab:ac:b3:4a:2a:a5:68:5e:d7: 51:75:3d:ff:22:3d:eb:b9:4c:b2:8d:ff:16:67:ff: 1b:23:da:16:22:23:68:6f:05:c9:4d:c9:8b:3f:2a: f1:6e:8e:9a:c2:7d:20:ae:d9:a5:a5:d9:ee:18:9d: f5:b4:df:29:ee:a2:5f:a6:67:7d:b6:6e:c5:a6:09: 44:4b:fb:78:82:10:47:af:94:08:c0:59:26:ca:de: 44:64:01:a9:36:fa:4b:75:b3:8b:fc:ce:9c:43:a7: aa:bd:6c:46:e2:b6:59:eb:8f:2b:36:90:ae:60:4a: 09:c0:5d:ee:75:7b:f0:5b:16:10:2d:f0:96:4c:bb: a8:b0:60:78:66:28:f7:30:70:e7:82:68:8a:9a:f9: 7f:6b:92:d6:0d:af:f0:da:be:75:70:78:ed:a1:36: 4b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2A:99:C0:18:EF:EA:97:30:14:4A:BA:F1:4E:A6:03:36:00:27:02 X509v3 Authority Key Identifier: keyid:66:E8:C6:C4:D3:43:2C:45:7D:BC:42:06:13:F1:70:D1:89:5B:60:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:fb:00:fe:86:95:6c:51:8c:b3:26:24:4f:55:9c:30:99:2c: ed:e2:00:7a:c0:aa:9d:f3:2c:d6:0f:76:24:f5:e0:db:02:5d: 8c:6a:c0:84:73:c1:2e:e4:b0:89:6a:b1:be:5e:6c:9f:fc:fc: 5a:3b:ec:9d:6f:0b:88:90:e0:0a:75:00:84:c8:9e:b0:fd:d1: 76:86:00:ce:77:86:9d:45:03:f7:0a:f0:36:96:81:67:f3:c6: 1f:2d:40:f7:da:4b:83:1e:52:72:df:c4:41:51:c7:62:5f:8d: 5b:94:a6:1b:db:0e:8b:29:51:5f:52:bb:35:5e:30:4c:40:ab: e1:ff:d4:de:bc:3c:81:98:4c:cb:42:77:5f:c7:df:0a:8c:32: b0:f2:6b:59:1a:ec:ca:01:fe:73:60:c9:c7:d7:86:ae:1c:39: 82:f0:c6:90:59:46:ed:62:6c:12:8a:62:c7:d9:6f:a4:e0:88: 40:82:23:35:75:1e:5c:34:09:68:f8:75:8a:08:e2:c5:9b:8e: d8:9c:05:73:9e:a9:1c:f6:4e:bf:af:e6:09:41:78:aa:2f:cb: 80:9c:32:3b:53:f8:1d:94:71:0e:8c:8c:9e:1d:05:a8:d0:62: 61:a1:6a:9f:ff:41:5a:cc:11:8d:54:d9:1e:de:88:0a:13:93: 99:67:b7:fc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAbKkoq5aQMFvm3CawbM0CZ6EsYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZFOEM2QzREMzQzMkM0NTdEQkM0MjA2MTNGMTcwRDE4 OTVCNjA3QzAeFw0yNjA4MjgwNjQyMzZaFw0yNjA4MzEwOTQxMzZaMDMxMTAvBgNV BAMTKDk5MkE5OUMwMThFRkVBOTczMDE0NEFCQUYxNEVBNjAzMzYwMDI3MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDX9B6KnE7SiebBzZ2FlQvXcXR uTagl+5eT2xgPMI+/Btbg5Q2+70cZxsInyPu0VgWiVusho1r+1NCASwNw9KawsXV GrBsxUuYibA+L1+S8PfriFv9jpuN/a9dDyea2Kuss0oqpWhe11F1Pf8iPeu5TLKN /xZn/xsj2hYiI2hvBclNyYs/KvFujprCfSCu2aWl2e4YnfW03ynuol+mZ322bsWm CURL+3iCEEevlAjAWSbK3kRkAak2+kt1s4v8zpxDp6q9bEbitlnrjys2kK5gSgnA Xe51e/BbFhAt8JZMu6iwYHhmKPcwcOeCaIqa+X9rktYNr/DavnVweO2hNkuHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmSqZwBjv6pcwFEq68U6mAzYAJwIwHwYDVR0j BBgwFoAUZujGxNNDLEV9vEIGE/Fw0YlbYHwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYyODQzNjY3NzQyNzIwMS8wLzY2RThDNkM0RDM0MzJDNDU3REJDNDIwNjEzRjE3 MEQxODk1QjYwN0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZFOEM2QzREMzQzMkM0NTdEQkM0MjA2MTNGMTcwRDE4OTVCNjA3Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2Mjg0MzY2Nzc0MjcyMDEvMC82NkU4QzZDNEQzNDMy QzQ1N0RCQzQyMDYxM0YxNzBEMTg5NUI2MDdDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAafsA/oaVbFGM syYkT1WcMJks7eIAesCqnfMs1g92JPXg2wJdjGrAhHPBLuSwiWqxvl5sn/z8Wjvs nW8LiJDgCnUAhMiesP3RdoYAzneGnUUD9wrwNpaBZ/PGHy1A99pLgx5Sct/EQVHH Yl+NW5SmG9sOiylRX1K7NV4wTECr4f/U3rw8gZhMy0J3X8ffCowysPJrWRrsygH+ c2DJx9eGrhw5gvDGkFlG7WJsEopix9lvpOCIQIIjNXUeXDQJaPh1igjixZuO2JwF c56pHPZOv6/mCUF4qi/LgJwyO1P4HZRxDoyMnh0FqNBiYaFqn/9BWswRjVTZHt6I ChOTmWe3/A== -----END CERTIFICATE-----Generated at Sat Aug 29 06:59:34 2026 by rpki-client