$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft File: 66E8C6C4D3432C457DBC420613F170D1895B607C.mft (raw, json) Hash identifier: FDJ0JHX+liRIfnMYYE8dzWq8R+y2R3Nnn6T6TcAy+XI= Subject key identifier: 04:35:9A:8B:4C:5A:0F:20:FA:1C:3C:16:7F:47:03:B7:6A:CD:64:8D Authority key identifier: 66:E8:C6:C4:D3:43:2C:45:7D:BC:42:06:13:F1:70:D1:89:5B:60:7C Certificate issuer: /CN=66E8C6C4D3432C457DBC420613F170D1895B607C Certificate serial: 3AFF4084A71856EFE63D82B7F294D215484EC566 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft Manifest number: 7B Signing time: Tue 14 Jul 2026 08:10:47 +0000 Manifest this update: Tue 14 Jul 2026 08:05:47 +0000 Manifest next update: Wed 15 Jul 2026 09:40:47 +0000 Files and hashes: 1: 66E8C6C4D3432C457DBC420613F170D1895B607C.crl (hash: Ng92dSuIY4FAN/H+SkAMnNYCqmy+d1RNt2JOIp1WYss=) 2: 3131392e34322e3133362e302f32312d3234203d3e203338333735.roa (hash: onz07yEDGzQ5lM3czrPnQNjHr6shpdjA+AGj0B+B8V0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.crl rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ff:40:84:a7:18:56:ef:e6:3d:82:b7:f2:94:d2:15:48:4e:c5:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66E8C6C4D3432C457DBC420613F170D1895B607C Validity Not Before: Jul 14 08:05:47 2026 GMT Not After : Jul 15 09:40:47 2026 GMT Subject: CN=04359A8B4C5A0F20FA1C3C167F4703B76ACD648D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:54:e8:b9:61:c7:e0:b3:92:65:9b:e8:ae:29: 7b:74:8d:e5:34:43:56:e4:84:ca:62:29:93:c7:5d: 58:de:74:42:9e:b4:d0:83:b9:85:92:39:be:0f:e5: aa:fb:df:87:b6:26:2d:a0:ed:8e:aa:07:7f:b7:c7: a5:b9:81:4d:63:1d:32:77:f9:fc:4b:5e:8b:8d:a8: a9:e9:18:2f:ae:00:c2:3a:5a:29:63:c8:67:f6:08: a2:90:9b:8b:44:2c:8d:7a:25:bf:fa:06:d8:47:4e: 0a:0f:9b:68:7a:7c:6c:a1:d7:24:68:ea:a1:2e:0a: 7a:26:da:35:81:34:72:4b:78:ff:62:a0:3f:9a:fd: 33:9a:5b:9f:c9:a9:6e:44:a5:95:53:d5:0f:49:c2: 6b:8a:65:60:dd:9b:a2:52:a4:2c:f0:20:72:04:03: 92:f5:54:83:55:af:a1:95:67:3d:4c:40:63:37:b3: 99:fd:af:1d:f9:43:d1:30:c1:3d:8d:89:ee:47:e4: 55:f4:ce:48:b2:b2:58:de:8c:1d:86:d1:ab:d4:3e: dc:ae:95:94:d2:13:64:cf:1e:1a:c0:57:f7:a4:5f: 7a:b9:78:b0:b7:46:8f:11:1e:b1:67:46:40:48:ce: b0:2c:68:04:9b:b4:50:64:a7:6a:99:b4:b4:0a:69: 92:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:35:9A:8B:4C:5A:0F:20:FA:1C:3C:16:7F:47:03:B7:6A:CD:64:8D X509v3 Authority Key Identifier: keyid:66:E8:C6:C4:D3:43:2C:45:7D:BC:42:06:13:F1:70:D1:89:5B:60:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:d0:05:bd:dc:e6:4e:44:65:ee:3c:c0:fa:a4:2d:cd:00:ab: 17:c6:4d:d7:70:a6:c3:44:ba:3f:a5:14:81:59:83:a6:83:23: c1:1d:31:d9:5a:0b:c6:8a:38:73:82:2d:e5:fc:f9:6e:9c:e7: 33:88:46:57:f3:51:7f:86:b3:bc:54:6a:22:d4:d4:1f:21:80: 5f:b2:cf:98:cf:05:d6:24:0f:cb:11:c5:e5:34:1e:06:3d:e0: 19:10:fd:5a:bb:3d:68:89:3a:3a:dc:84:9f:ad:fa:ab:e9:08: 01:fb:8e:be:d5:ce:6a:c7:e2:89:b7:4e:86:64:90:05:a8:58: 81:23:87:99:43:dc:12:3b:50:72:51:21:55:4e:e5:32:fc:85: 87:8b:c7:07:7a:41:7e:ea:2c:fb:27:20:5c:5f:07:06:ad:22: 21:c2:73:a2:ce:fd:e2:0e:95:cf:7a:7c:c2:db:fa:07:77:78: dc:f7:3e:66:cb:41:4d:70:28:3d:1b:33:bc:ec:f7:c0:54:94: 79:98:62:fa:bc:31:34:36:1e:2d:16:1d:77:d9:41:99:4a:96: a2:29:ac:da:92:73:d3:a2:81:02:fc:e8:2f:a4:b4:d1:a4:ac: f2:d3:68:d7:e3:3b:65:80:83:9c:60:3c:98:2d:37:63:40:ad: 8a:b5:75:77 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOv9AhKcYVu/mPYK38pTSFUhOxWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZFOEM2QzREMzQzMkM0NTdEQkM0MjA2MTNGMTcwRDE4 OTVCNjA3QzAeFw0yNjA3MTQwODA1NDdaFw0yNjA3MTUwOTQwNDdaMDMxMTAvBgNV BAMTKDA0MzU5QThCNEM1QTBGMjBGQTFDM0MxNjdGNDcwM0I3NkFDRDY0OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIVOi5Ycfgs5Jlm+iuKXt0jeU0 Q1bkhMpiKZPHXVjedEKetNCDuYWSOb4P5ar734e2Ji2g7Y6qB3+3x6W5gU1jHTJ3 +fxLXouNqKnpGC+uAMI6WiljyGf2CKKQm4tELI16Jb/6BthHTgoPm2h6fGyh1yRo 6qEuCnom2jWBNHJLeP9ioD+a/TOaW5/JqW5EpZVT1Q9JwmuKZWDdm6JSpCzwIHIE A5L1VINVr6GVZz1MQGM3s5n9rx35Q9EwwT2Nie5H5FX0zkiysljejB2G0avUPtyu lZTSE2TPHhrAV/ekX3q5eLC3Ro8RHrFnRkBIzrAsaASbtFBkp2qZtLQKaZLjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUBDWai0xaDyD6HDwWf0cDt2rNZI0wHwYDVR0j BBgwFoAUZujGxNNDLEV9vEIGE/Fw0YlbYHwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYyODQzNjY3NzQyNzIwMS8wLzY2RThDNkM0RDM0MzJDNDU3REJDNDIwNjEzRjE3 MEQxODk1QjYwN0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZFOEM2QzREMzQzMkM0NTdEQkM0MjA2MTNGMTcwRDE4OTVCNjA3Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2Mjg0MzY2Nzc0MjcyMDEvMC82NkU4QzZDNEQzNDMy QzQ1N0RCQzQyMDYxM0YxNzBEMTg5NUI2MDdDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadAFvdzmTkRl 7jzA+qQtzQCrF8ZN13Cmw0S6P6UUgVmDpoMjwR0x2VoLxoo4c4It5fz5bpznM4hG V/NRf4azvFRqItTUHyGAX7LPmM8F1iQPyxHF5TQeBj3gGRD9Wrs9aIk6OtyEn636 q+kIAfuOvtXOasfiibdOhmSQBahYgSOHmUPcEjtQclEhVU7lMvyFh4vHB3pBfuos +ycgXF8HBq0iIcJzos794g6Vz3p8wtv6B3d43Pc+ZstBTXAoPRszvOz3wFSUeZhi +rwxNDYeLRYdd9lBmUqWoims2pJz06KBAvzoL6S00aSs8tNo1+M7ZYCDnGA8mC03 Y0CtirV1dw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:39 2026 by rpki-client