$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft File: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft (raw, json) Hash identifier: sk5jskDS133XvvHUABw0YDZaXUiD0cBU4qft79lOvPI= Subject key identifier: E4:6D:74:E5:8F:41:0A:D1:A1:A7:45:A9:30:1A:56:EB:CE:AB:F3:B3 Authority key identifier: 66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A Certificate issuer: /CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Certificate serial: 5A65B6BC651DF769941D8CFDC07AEC28F2DC3960 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft Manifest number: 76 Signing time: Fri 17 Apr 2026 07:54:42 +0000 Manifest this update: Fri 17 Apr 2026 07:49:42 +0000 Manifest next update: Sat 18 Apr 2026 10:47:42 +0000 Files and hashes: 1: 3130332e32302e3136302e302f32322d3232203d3e20313334373635.roa (hash: Bj3NdvzxuoljrwIvbWbuXcn7NpJjDq3od3bmKo7Wh/w=) 2: 3135302e3234322e3234342e302f32322d3232203d3e20313334373635.roa (hash: Z0Og2VRkF9so8DXGO9qx7+fqZAupDQA2fhEa1vdrebg=) 3: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl (hash: +RdHm6LEl5JnLUUw5dkiZmuvTCwaa5Uh6mMYKb19lWU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 10:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:65:b6:bc:65:1d:f7:69:94:1d:8c:fd:c0:7a:ec:28:f2:dc:39:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Validity Not Before: Apr 17 07:49:42 2026 GMT Not After : Apr 18 10:47:42 2026 GMT Subject: CN=E46D74E58F410AD1A1A745A9301A56EBCEABF3B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bc:db:0e:f5:4c:ce:a6:51:c7:d4:fb:9f:9b: c4:4c:b2:d7:98:f7:f7:5a:8e:c2:84:47:8a:b9:1b: a4:01:3b:ab:3a:51:c3:a0:4a:d5:78:ff:3f:9e:e9: 44:ef:52:d9:52:76:a4:b0:c5:50:55:00:7d:46:1a: 05:4a:e7:66:99:20:0d:d5:13:85:ce:9c:04:d1:45: 57:35:6b:7b:80:1c:cf:1d:b1:5c:6b:a8:2a:d6:0b: d8:00:cb:a2:7a:95:e8:3e:35:9d:c3:2d:d7:4a:cd: 0c:17:9b:21:bc:08:8b:3e:a7:2f:a6:26:16:8f:47: 80:48:aa:20:bf:60:e2:e2:35:1b:4c:1d:f7:63:c1: e8:d6:37:9f:7d:7e:1e:f5:00:3b:c2:f7:d1:27:de: d3:53:72:29:b4:0b:10:de:83:26:ec:71:6c:ef:e8: a7:de:ff:5a:33:b2:c9:1a:19:c4:f6:ce:97:60:b0: 99:b0:c1:04:c3:c6:c1:b2:ab:3c:37:9c:b4:b3:da: d7:1d:f1:af:90:42:f9:c6:48:d4:4d:61:9c:b1:10: c6:e1:47:6c:0a:de:9a:89:2f:db:e5:7d:60:4a:94: 8f:18:42:3b:f0:84:f2:5f:f0:ca:26:f1:5d:e7:b3: 60:ac:2d:72:ba:d7:b4:d3:b3:29:a8:ca:6a:8d:84: 5a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:6D:74:E5:8F:41:0A:D1:A1:A7:45:A9:30:1A:56:EB:CE:AB:F3:B3 X509v3 Authority Key Identifier: keyid:66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:77:16:48:a9:01:f9:14:d5:58:57:87:7a:b4:b4:b2:57:65: 71:b2:6a:c0:11:2c:4c:c4:08:dc:af:40:7e:3b:3c:b6:1b:b3: 10:61:79:0b:53:e5:74:ef:80:db:22:dd:2f:99:e9:6d:0c:9f: 31:32:7d:08:ab:50:2f:7b:1e:d7:ea:c7:d1:fb:a2:2c:8d:87: 16:e4:fa:4d:fa:69:4f:85:a5:48:ff:0a:47:2c:5d:95:1b:49: 2d:fd:01:fb:87:70:e4:21:f9:2b:3c:c2:54:ae:da:bc:36:2d: 78:28:2d:ca:d2:9e:67:34:3b:10:2a:b0:83:4c:12:f3:99:11: 58:0b:bc:15:62:fd:e2:31:dc:08:12:96:3f:c7:c2:8c:bb:23: 9c:36:ac:ea:fc:d3:88:86:79:1e:78:cb:35:e8:ad:52:bc:f1: d7:de:bd:be:97:1f:58:d2:c4:8c:f3:6b:ec:6b:5e:b0:ad:8d: c5:ed:22:f9:1a:82:a0:52:73:6c:80:49:43:e7:c4:05:c6:9a: 8c:c6:cc:9d:c9:3e:20:f2:90:59:ee:40:0b:2e:9b:6d:42:22: 20:ce:06:08:70:77:be:98:71:a3:13:0b:f5:87:f2:12:8e:47: 65:8e:1c:d5:f1:57:de:7a:de:80:15:9d:2f:20:a4:4d:c6:09: 05:de:ba:d4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWmW2vGUd92mUHYz9wHrsKPLcOWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4 NEFGQUEyQTAeFw0yNjA0MTcwNzQ5NDJaFw0yNjA0MTgxMDQ3NDJaMDMxMTAvBgNV BAMTKEU0NkQ3NEU1OEY0MTBBRDFBMUE3NDVBOTMwMUE1NkVCQ0VBQkYzQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtvNsO9UzOplHH1Pufm8RMsteY 9/dajsKER4q5G6QBO6s6UcOgStV4/z+e6UTvUtlSdqSwxVBVAH1GGgVK52aZIA3V E4XOnATRRVc1a3uAHM8dsVxrqCrWC9gAy6J6leg+NZ3DLddKzQwXmyG8CIs+py+m JhaPR4BIqiC/YOLiNRtMHfdjwejWN599fh71ADvC99En3tNTcim0CxDegybscWzv 6Kfe/1ozsskaGcT2zpdgsJmwwQTDxsGyqzw3nLSz2tcd8a+QQvnGSNRNYZyxEMbh R2wK3pqJL9vlfWBKlI8YQjvwhPJf8Mom8V3ns2CsLXK617TTsymoymqNhFq3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5G105Y9BCtGhp0WpMBpW686r87MwHwYDVR0j BBgwFoAUZviwXfuKSb2Nr5D88XC+C4SvqiowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8wLzY2RjhCMDVERkI4QTQ5QkQ4REFGOTBGQ0YxNzBC RTBCODRBRkFBMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4NEFGQUEyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMC82NkY4QjA1REZCOEE0 OUJEOERBRjkwRkNGMTcwQkUwQjg0QUZBQTJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoncWSKkB+RTV WFeHerS0sldlcbJqwBEsTMQI3K9Afjs8thuzEGF5C1PldO+A2yLdL5npbQyfMTJ9 CKtQL3se1+rH0fuiLI2HFuT6TfppT4WlSP8KRyxdlRtJLf0B+4dw5CH5KzzCVK7a vDYteCgtytKeZzQ7ECqwg0wS85kRWAu8FWL94jHcCBKWP8fCjLsjnDas6vzTiIZ5 HnjLNeitUrzx1969vpcfWNLEjPNr7GtesK2Nxe0i+RqCoFJzbIBJQ+fEBcaajMbM nck+IPKQWe5ACy6bbUIiIM4GCHB3vphxoxML9YfyEo5HZY4c1fFX3nregBWdLyCk TcYJBd661A== -----END CERTIFICATE-----Generated at Fri Apr 17 19:34:21 2026 by rpki-client