$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft File: 1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft (raw, json) Hash identifier: pmYVJuYftYHPDM9kLluRWRBKoYKLcuMiW816Y1vxdho= Subject key identifier: 32:0F:71:AA:18:85:EA:5A:C2:4A:A8:CA:40:3F:79:C6:89:4A:54:DC Authority key identifier: 18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8 Certificate issuer: /CN=1866933B3427D9BEFE57E3F20A7049BD1D54E7D8 Certificate serial: 665F54FF965FB43771A700030CE6FA24B6CC49CB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft Manifest number: 64 Signing time: Fri 28 Aug 2026 06:47:42 +0000 Manifest this update: Fri 28 Aug 2026 06:42:42 +0000 Manifest next update: Mon 31 Aug 2026 09:55:42 +0000 Files and hashes: 1: 323430313a646530303a3a2f33322d3332203d3e2037343937.roa (hash: rj+xhwjSRL8r9RnI2hIan5czVYkPPTC00QgifmSjB34=) 2: 1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl (hash: 7gC/ccH1BTWnBuGV+ySeceL3GjB7xe1SEdNIB80WhdU=) 3: 3230322e3132322e33322e302f32312d3231203d3e2037343937.roa (hash: mS1TYURsC1rJOd4t7iMX5ACFJtFx79PgFQvXC5HulAU=) 4: 3230322e33382e3132382e302f32332d3233203d3e2037343937.roa (hash: 3KN0MikBInjR2AE42lOEjDcp6hhwhQEE2fCSsY3rvnk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 09:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:5f:54:ff:96:5f:b4:37:71:a7:00:03:0c:e6:fa:24:b6:cc:49:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1866933B3427D9BEFE57E3F20A7049BD1D54E7D8 Validity Not Before: Aug 28 06:42:42 2026 GMT Not After : Aug 31 09:55:42 2026 GMT Subject: CN=320F71AA1885EA5AC24AA8CA403F79C6894A54DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:50:08:12:64:c2:1a:57:e3:9c:c9:7a:29: 3b:17:9f:68:4a:ce:45:92:40:cc:12:ba:14:21:bf: e0:cb:d5:08:84:2c:b5:a2:24:6d:25:e6:d0:7c:f0: ee:ce:bc:8c:ee:fc:48:55:f5:5e:aa:bb:78:33:de: 4c:5d:1a:df:6d:8b:ed:76:b3:3a:4e:97:99:c8:33: bd:c2:11:79:b4:26:8c:0a:a9:85:3f:16:48:76:ab: 85:d3:2f:45:16:af:f8:82:75:0d:82:99:b5:18:04: ce:34:0d:87:49:f3:22:d8:68:86:45:b7:28:9d:5b: 2b:70:b3:9a:d9:5f:34:0b:8a:3e:91:8e:af:87:54: 47:a4:02:7c:e2:b1:a5:cb:e6:6e:03:fc:b1:3b:08: 26:3f:04:ae:00:04:ea:df:19:53:5d:71:f1:c8:64: 82:cc:c4:d5:6b:82:1d:6e:d8:f8:bd:bd:b8:29:b4: fb:af:08:1a:bf:64:c9:df:a5:98:f7:86:0f:ad:f8: d2:26:8a:99:eb:ed:68:5d:c4:3e:cc:00:2a:8c:14: 8d:cf:87:62:10:fb:21:57:9f:8c:03:17:bf:ee:2e: 47:23:fb:fc:73:f8:23:4a:91:1b:28:57:ac:6e:e5: 85:04:11:11:ca:58:83:f8:52:68:40:91:8a:99:27: fe:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0F:71:AA:18:85:EA:5A:C2:4A:A8:CA:40:3F:79:C6:89:4A:54:DC X509v3 Authority Key Identifier: keyid:18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:1c:c5:58:1b:d9:11:90:1b:ab:d9:f9:41:9c:18:0a:7f:8a: 07:2b:80:32:25:cb:66:b8:6a:f5:23:7a:7b:e6:82:cc:7d:82: 60:ff:33:88:ec:6e:1f:cc:ac:d7:a4:d6:26:f3:4a:71:e1:f0: 0d:b1:de:2f:2e:49:4e:7f:c3:a9:10:64:ab:53:9b:5d:a1:83: d0:84:34:db:7f:fb:13:c0:28:50:46:a9:8b:da:b6:a7:f3:78: ce:b8:29:66:1d:b7:8d:39:9f:59:6e:4c:61:36:56:a8:cc:67: 41:e8:1d:b7:93:c2:a2:1a:1b:ab:a9:b5:44:80:9a:9c:5f:0f: 92:66:4e:b4:7e:b1:6f:be:45:30:1d:4e:ac:f9:ef:9d:52:ec: 2e:fc:86:23:15:c2:7c:a9:e3:26:47:ea:04:a0:58:99:47:55: cd:8e:af:e2:0b:b3:32:d1:e3:43:ee:e6:16:06:32:01:e8:19: ba:43:d5:ce:68:7d:02:e1:90:96:5e:87:71:67:ca:ba:c7:59: 1b:0c:dd:ee:52:3f:25:ce:82:1d:ba:9c:3a:71:7b:88:63:fc: 77:c1:a2:04:a1:83:93:1d:fa:d8:b1:ff:23:34:50:28:fd:06: ae:da:b8:ec:7b:ff:c3:cc:0b:ea:e5:d3:5b:91:4e:f4:21:1d: f2:19:ef:0b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZl9U/5ZftDdxpwADDOb6JLbMScswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg2NjkzM0IzNDI3RDlCRUZFNTdFM0YyMEE3MDQ5QkQx RDU0RTdEODAeFw0yNjA4MjgwNjQyNDJaFw0yNjA4MzEwOTU1NDJaMDMxMTAvBgNV BAMTKDMyMEY3MUFBMTg4NUVBNUFDMjRBQThDQTQwM0Y3OUM2ODk0QTU0REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2+VAIEmTCGlfjnMl6KTsXn2hK zkWSQMwSuhQhv+DL1QiELLWiJG0l5tB88O7OvIzu/EhV9V6qu3gz3kxdGt9ti+12 szpOl5nIM73CEXm0JowKqYU/Fkh2q4XTL0UWr/iCdQ2CmbUYBM40DYdJ8yLYaIZF tyidWytws5rZXzQLij6Rjq+HVEekAnzisaXL5m4D/LE7CCY/BK4ABOrfGVNdcfHI ZILMxNVrgh1u2Pi9vbgptPuvCBq/ZMnfpZj3hg+t+NImipnr7WhdxD7MACqMFI3P h2IQ+yFXn4wDF7/uLkcj+/xz+CNKkRsoV6xu5YUEERHKWIP4UmhAkYqZJ/57AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUMg9xqhiF6lrCSqjKQD95xolKVNwwHwYDVR0j BBgwFoAUGGaTOzQn2b7+V+PyCnBJvR1U59gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx OTE1MjY4NDU5MTQ4MDg2My8wLzE4NjY5MzNCMzQyN0Q5QkVGRTU3RTNGMjBBNzA0 OUJEMUQ1NEU3RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg2NjkzM0IzNDI3RDlCRUZFNTdFM0YyMEE3MDQ5QkQxRDU0RTdEOC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTkxNTI2ODQ1OTE0ODA4NjMvMC8xODY2OTMzQjM0MjdE OUJFRkU1N0UzRjIwQTcwNDlCRDFENTRFN0Q4Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBzFWBvZEZAb q9n5QZwYCn+KByuAMiXLZrhq9SN6e+aCzH2CYP8ziOxuH8ys16TWJvNKceHwDbHe Ly5JTn/DqRBkq1ObXaGD0IQ023/7E8AoUEapi9q2p/N4zrgpZh23jTmfWW5MYTZW qMxnQegdt5PCohobq6m1RICanF8PkmZOtH6xb75FMB1OrPnvnVLsLvyGIxXCfKnj JkfqBKBYmUdVzY6v4guzMtHjQ+7mFgYyAegZukPVzmh9AuGQll6HcWfKusdZGwzd 7lI/Jc6CHbqcOnF7iGP8d8GiBKGDkx362LH/IzRQKP0Grtq47Hv/w8wL6uXTW5FO 9CEd8hnvCw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:51 2026 by rpki-client