$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft File: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft (raw, json) Hash identifier: JglMyZCioCwHnWMD5yZfq0xIwmnFWtehCA2zfh/n3oA= Subject key identifier: EC:9B:0A:51:32:DA:9B:73:E2:B2:DB:F5:66:87:9C:EA:8F:9B:41:31 Authority key identifier: 66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A Certificate issuer: /CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Certificate serial: 7A242237EABF91880F6AE6FFB87B80BF0E226530 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft Manifest number: 38 Signing time: Sun 01 Mar 2026 11:28:16 +0000 Manifest this update: Sun 01 Mar 2026 11:23:16 +0000 Manifest next update: Mon 02 Mar 2026 13:48:16 +0000 Files and hashes: 1: 3130332e32302e3136302e302f32322d3232203d3e20313334373635.roa (hash: Bj3NdvzxuoljrwIvbWbuXcn7NpJjDq3od3bmKo7Wh/w=) 2: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl (hash: NZ9CXVYls810lvrz55G/3Ob8cse4nFxANt+c+39UWxA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 09:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:24:22:37:ea:bf:91:88:0f:6a:e6:ff:b8:7b:80:bf:0e:22:65:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Validity Not Before: Mar 1 11:23:16 2026 GMT Not After : Mar 2 13:48:16 2026 GMT Subject: CN=EC9B0A5132DA9B73E2B2DBF566879CEA8F9B4131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2a:5b:50:d0:6d:84:84:ca:97:6d:1c:97:ab: 04:c7:d9:0e:d2:97:24:27:7e:bc:01:17:2f:c8:5d: 13:cc:95:3a:e7:31:40:86:3b:75:4d:17:a0:b0:69: 21:cb:07:fe:06:60:e3:66:f0:05:ef:15:2c:bf:ea: 02:7f:f7:8f:18:77:31:ee:5e:46:07:e5:a5:64:fe: 15:59:cf:97:2c:5d:0c:c9:22:31:9d:d9:39:f1:ff: 21:d1:17:3f:10:4b:f7:66:5b:2e:f8:de:fd:9d:e9: 94:08:e3:8d:90:a9:d0:bc:99:dd:e7:bf:a8:62:57: 15:d2:af:08:a9:f8:02:7c:81:7a:11:f2:ba:bf:a7: bc:1a:32:26:24:02:f2:47:94:d7:14:88:35:83:9a: 01:23:eb:51:b5:a4:c9:aa:96:a2:6b:b1:90:15:c9: 9d:85:f7:e9:9f:b1:c7:46:59:11:77:4d:c1:e3:a8: e5:46:14:c1:cc:e3:9e:13:4e:89:db:77:4d:65:b6: c9:32:de:08:01:83:7e:ea:ec:72:45:3e:2d:3d:05: b6:61:0d:53:4f:e0:6e:3a:83:6b:fc:fc:1a:29:05: 55:35:1d:d4:28:53:51:a0:1c:59:fb:4c:49:39:5b: 24:ba:fa:f6:6a:09:20:ca:b2:99:e8:23:ca:9f:9d: d5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:9B:0A:51:32:DA:9B:73:E2:B2:DB:F5:66:87:9C:EA:8F:9B:41:31 X509v3 Authority Key Identifier: keyid:66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:be:dc:cf:e0:3c:64:10:2f:c0:17:8a:d1:8d:08:6c:38:ee: 90:6c:57:94:ee:e2:50:b2:cc:d5:ea:60:00:67:7e:37:3c:f3: 2e:42:e3:7b:80:bc:23:68:fa:9c:d3:84:36:af:e5:58:88:25: 45:46:0b:4c:c4:c9:8e:3f:51:59:d9:62:95:d7:04:79:ec:1a: 09:c0:ae:30:eb:f3:f1:43:bd:97:a7:a9:16:9f:47:20:60:f8: 13:2e:76:42:69:b1:91:2b:2b:7e:07:3b:6a:d9:ef:cf:18:25: 6c:89:1b:c6:b7:ab:9c:58:15:d1:fc:51:ff:21:21:fe:88:49: d8:d3:c7:4f:c6:38:a9:0b:1f:ab:45:d0:8e:aa:77:7b:27:ed: 2d:55:73:54:a8:4c:54:77:4d:12:b2:9a:bf:b8:4c:32:64:95: ae:4d:cd:50:ea:50:33:54:c4:62:3f:2d:6e:80:74:a7:c4:b3: 8b:eb:3a:1f:b7:35:21:b7:0c:47:6b:ab:91:da:2f:36:9c:09: db:d4:25:0d:0c:09:9e:c5:56:ab:6d:26:fe:e8:ca:48:29:f8: 8c:ed:79:c8:98:6c:a3:61:e5:3c:26:ec:93:cc:dd:27:09:e0: 5b:7a:05:6a:3b:93:0e:58:c9:10:2e:ac:a0:08:2e:1d:ca:a0: c8:7e:80:0a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeiQiN+q/kYgPaub/uHuAvw4iZTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4 NEFGQUEyQTAeFw0yNjAzMDExMTIzMTZaFw0yNjAzMDIxMzQ4MTZaMDMxMTAvBgNV BAMTKEVDOUIwQTUxMzJEQTlCNzNFMkIyREJGNTY2ODc5Q0VBOEY5QjQxMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJKltQ0G2EhMqXbRyXqwTH2Q7S lyQnfrwBFy/IXRPMlTrnMUCGO3VNF6CwaSHLB/4GYONm8AXvFSy/6gJ/948YdzHu XkYH5aVk/hVZz5csXQzJIjGd2Tnx/yHRFz8QS/dmWy743v2d6ZQI442QqdC8md3n v6hiVxXSrwip+AJ8gXoR8rq/p7waMiYkAvJHlNcUiDWDmgEj61G1pMmqlqJrsZAV yZ2F9+mfscdGWRF3TcHjqOVGFMHM454TTonbd01ltsky3ggBg37q7HJFPi09BbZh DVNP4G46g2v8/BopBVU1HdQoU1GgHFn7TEk5WyS6+vZqCSDKspnoI8qfndUPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7JsKUTLam3Pistv1Zoec6o+bQTEwHwYDVR0j BBgwFoAUZviwXfuKSb2Nr5D88XC+C4SvqiowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8wLzY2RjhCMDVERkI4QTQ5QkQ4REFGOTBGQ0YxNzBC RTBCODRBRkFBMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4NEFGQUEyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMC82NkY4QjA1REZCOEE0 OUJEOERBRjkwRkNGMTcwQkUwQjg0QUZBQTJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC77cz+A8ZBAv wBeK0Y0IbDjukGxXlO7iULLM1epgAGd+NzzzLkLje4C8I2j6nNOENq/lWIglRUYL TMTJjj9RWdlildcEeewaCcCuMOvz8UO9l6epFp9HIGD4Ey52QmmxkSsrfgc7atnv zxglbIkbxrernFgV0fxR/yEh/ohJ2NPHT8Y4qQsfq0XQjqp3eyftLVVzVKhMVHdN ErKav7hMMmSVrk3NUOpQM1TEYj8tboB0p8Szi+s6H7c1IbcMR2urkdovNpwJ29Ql DQwJnsVWq20m/ujKSCn4jO15yJhso2HlPCbsk8zdJwngW3oFajuTDljJEC6soAgu HcqgyH6ACg== -----END CERTIFICATE-----Generated at Mon Mar 2 02:49:42 2026 by rpki-client