$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft File: 66E8C6C4D3432C457DBC420613F170D1895B607C.mft (raw, json) Hash identifier: E3XM23ad4cQHVe6AKG8cm+26qHhIq3VdbpM7MZjO4b0= Subject key identifier: F4:B8:D9:0B:8D:CA:43:3C:14:6B:82:29:70:DA:88:DB:F7:00:3E:DB Authority key identifier: 66:E8:C6:C4:D3:43:2C:45:7D:BC:42:06:13:F1:70:D1:89:5B:60:7C Certificate issuer: /CN=66E8C6C4D3432C457DBC420613F170D1895B607C Certificate serial: 5049C916ABC93E31660BFED4C4E8D15FBFED1F5E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft Manifest number: 3D Signing time: Fri 29 May 2026 06:27:41 +0000 Manifest this update: Fri 29 May 2026 06:22:41 +0000 Manifest next update: Sat 30 May 2026 10:05:41 +0000 Files and hashes: 1: 66E8C6C4D3432C457DBC420613F170D1895B607C.crl (hash: yK85IEmIfl+GpUs/lSZC58kDmhZVKNIVfs6Ky869dX0=) 2: 3131392e34322e3133362e302f32312d3234203d3e203338333735.roa (hash: onz07yEDGzQ5lM3czrPnQNjHr6shpdjA+AGj0B+B8V0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.crl rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 10:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:49:c9:16:ab:c9:3e:31:66:0b:fe:d4:c4:e8:d1:5f:bf:ed:1f:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66E8C6C4D3432C457DBC420613F170D1895B607C Validity Not Before: May 29 06:22:41 2026 GMT Not After : May 30 10:05:41 2026 GMT Subject: CN=F4B8D90B8DCA433C146B822970DA88DBF7003EDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:9b:6f:f7:d5:34:d6:38:0d:6f:51:29:e4: 3d:c6:7c:be:d3:11:76:5d:52:e3:f2:a1:9e:3b:69: 54:6d:a1:51:67:a9:fb:b8:6b:34:da:3c:e5:16:03: 63:f2:29:08:1f:aa:a2:f1:ec:d1:ac:a2:0a:da:54: c7:28:33:cd:73:47:78:1e:77:90:9a:b1:31:bd:01: 8a:38:20:a1:1b:6c:f0:ef:09:13:a3:1f:0e:21:61: c9:2b:af:7d:89:9e:25:a6:45:af:6f:c3:e1:fa:ea: eb:f0:c5:64:dd:23:31:fb:84:11:d4:e3:0f:07:5a: 53:d2:ef:55:68:8a:ab:8c:82:03:71:15:58:44:70: fb:2b:aa:bb:d7:2e:91:88:7b:4d:17:51:a1:d7:15: dc:ca:8d:7c:93:a2:74:4f:2c:cf:30:e4:c1:69:32: e2:a5:a4:a1:7b:dc:3b:24:5f:d5:c5:23:1e:03:df: f2:77:1e:9c:bd:34:30:da:7b:77:af:8e:02:e3:d5: 62:d7:31:6d:cf:ea:b0:e4:c2:73:35:9d:f6:45:f5: af:c2:a5:d3:19:38:f3:8b:ff:b7:ef:78:d5:d5:95: 54:53:29:b9:e1:80:c8:41:97:ae:92:44:9e:64:1f: 49:47:65:dc:ae:5c:c6:2b:15:ca:e9:0d:9d:b7:3f: 66:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B8:D9:0B:8D:CA:43:3C:14:6B:82:29:70:DA:88:DB:F7:00:3E:DB X509v3 Authority Key Identifier: keyid:66:E8:C6:C4:D3:43:2C:45:7D:BC:42:06:13:F1:70:D1:89:5B:60:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:3a:79:ec:d7:cd:28:5a:ff:3e:80:36:2d:d8:b5:f7:22:81: b4:83:72:6d:b1:6b:25:a4:4e:12:b4:08:84:16:3f:2b:19:ce: 00:cd:da:88:3d:4d:14:04:fb:c6:f6:c3:c3:a3:18:a3:0c:b6: 23:28:98:34:37:39:78:f3:6d:e4:a2:4a:52:25:9b:27:fc:a3: e9:7e:29:c0:f2:23:02:98:30:a4:34:23:12:85:8f:bd:07:b4: c4:07:d4:79:5c:1a:d1:5b:fa:8e:df:5a:1a:93:2a:b0:1f:89: 4a:02:38:05:2f:f0:1d:1d:77:c1:13:55:51:3d:f6:d7:93:7c: 78:ab:31:c9:54:6b:69:ba:1c:cd:28:9d:72:ad:b3:0b:5d:6d: 5b:37:9e:e6:0d:f7:b2:33:bc:1b:4f:c0:57:aa:19:69:2f:57: 1a:f9:2e:f5:4a:78:24:29:85:0f:7b:bd:fb:a6:16:56:0a:eb: 9e:a4:8f:8f:a5:1a:64:57:46:28:2a:91:58:f9:9b:1f:c8:ed: ac:f8:e8:1f:af:80:cb:5b:63:93:1a:1f:74:21:99:50:76:b4: ce:ae:65:ac:f4:4c:b6:7d:f2:99:a2:c9:10:37:42:fc:0d:b6: 7f:d6:ea:4b:93:e3:5a:3f:bd:00:83:01:13:ab:ac:8f:2a:02: f7:14:8f:22 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUEnJFqvJPjFmC/7UxOjRX7/tH14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZFOEM2QzREMzQzMkM0NTdEQkM0MjA2MTNGMTcwRDE4 OTVCNjA3QzAeFw0yNjA1MjkwNjIyNDFaFw0yNjA1MzAxMDA1NDFaMDMxMTAvBgNV BAMTKEY0QjhEOTBCOERDQTQzM0MxNDZCODIyOTcwREE4OERCRjcwMDNFREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48ptv99U01jgNb1Ep5D3GfL7T EXZdUuPyoZ47aVRtoVFnqfu4azTaPOUWA2PyKQgfqqLx7NGsograVMcoM81zR3ge d5CasTG9AYo4IKEbbPDvCROjHw4hYckrr32JniWmRa9vw+H66uvwxWTdIzH7hBHU 4w8HWlPS71VoiquMggNxFVhEcPsrqrvXLpGIe00XUaHXFdzKjXyTonRPLM8w5MFp MuKlpKF73DskX9XFIx4D3/J3Hpy9NDDae3evjgLj1WLXMW3P6rDkwnM1nfZF9a/C pdMZOPOL/7fveNXVlVRTKbnhgMhBl66SRJ5kH0lHZdyuXMYrFcrpDZ23P2brAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9LjZC43KQzwUa4IpcNqI2/cAPtswHwYDVR0j BBgwFoAUZujGxNNDLEV9vEIGE/Fw0YlbYHwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYyODQzNjY3NzQyNzIwMS8wLzY2RThDNkM0RDM0MzJDNDU3REJDNDIwNjEzRjE3 MEQxODk1QjYwN0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZFOEM2QzREMzQzMkM0NTdEQkM0MjA2MTNGMTcwRDE4OTVCNjA3Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2Mjg0MzY2Nzc0MjcyMDEvMC82NkU4QzZDNEQzNDMy QzQ1N0RCQzQyMDYxM0YxNzBEMTg5NUI2MDdDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzp57NfNKFr/ PoA2Ldi19yKBtINybbFrJaROErQIhBY/KxnOAM3aiD1NFAT7xvbDw6MYowy2IyiY NDc5ePNt5KJKUiWbJ/yj6X4pwPIjApgwpDQjEoWPvQe0xAfUeVwa0Vv6jt9aGpMq sB+JSgI4BS/wHR13wRNVUT3215N8eKsxyVRraboczSidcq2zC11tWzee5g33sjO8 G0/AV6oZaS9XGvku9Up4JCmFD3u9+6YWVgrrnqSPj6UaZFdGKCqRWPmbH8jtrPjo H6+Ay1tjkxofdCGZUHa0zq5lrPRMtn3ymaLJEDdC/A22f9bqS5PjWj+9AIMBE6us jyoC9xSPIg== -----END CERTIFICATE-----Generated at Fri May 29 22:03:31 2026 by rpki-client