$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft File: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft (raw, json) Hash identifier: M8z4Ki/BJgCbdEWTT6xSIlCV6VZuHyQYJImwoI6hu2I= Subject key identifier: 39:6F:ED:C4:F8:40:28:53:42:6B:A2:24:ED:91:F5:51:13:D6:97:DD Authority key identifier: 66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A Certificate issuer: /CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Certificate serial: 5A8A158DE028B79BFFB91E426DC2C464EF655FAC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft Manifest number: 013D Signing time: Fri 09 Oct 2026 16:28:34 +0000 Manifest this update: Fri 09 Oct 2026 16:23:34 +0000 Manifest next update: Tue 13 Oct 2026 02:44:34 +0000 Files and hashes: 1: 3230332e38312e31362e302f32302d3230203d3e20313334373635.roa (hash: 5MWmFfMa0D6WNDGkRqnlKQV80cTKOloRp4FR2LPMSGw=) 2: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl (hash: IFyusxRaf7qGYbxokcjsxKnEr4fTMIpYuqRwM1sfFCc=) 3: 3130332e32302e3136302e302f32322d3232203d3e20313334373635.roa (hash: Bj3NdvzxuoljrwIvbWbuXcn7NpJjDq3od3bmKo7Wh/w=) 4: 3131362e35382e3230382e302f32302d3230203d3e20313334373635.roa (hash: VwIiHJbm3cBD8lhL8wmRmh0pfQiLWDNx7qvhjrjHDtM=) 5: 3135302e3234322e3234342e302f32322d3232203d3e20313334373635.roa (hash: Z0Og2VRkF9so8DXGO9qx7+fqZAupDQA2fhEa1vdrebg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 02:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:8a:15:8d:e0:28:b7:9b:ff:b9:1e:42:6d:c2:c4:64:ef:65:5f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Validity Not Before: Oct 9 16:23:34 2026 GMT Not After : Oct 13 02:44:34 2026 GMT Subject: CN=396FEDC4F8402853426BA224ED91F55113D697DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:02:0e:e5:be:30:01:92:cf:d8:87:a2:9d:49: 9a:ad:a0:1c:8a:16:7a:44:06:0a:21:85:f8:36:ec: 71:d0:91:59:84:c2:6d:69:e7:3e:b2:d7:ec:03:45: 63:c5:07:e6:b2:70:95:eb:97:c6:e8:65:aa:75:a2: 0b:eb:13:aa:d6:9f:c9:d9:87:2b:d4:a8:15:1d:43: f8:26:af:f6:a6:7f:b8:3b:16:cd:b9:d8:1f:c9:ad: f4:52:57:e5:8c:b5:b2:fe:52:9c:d7:09:98:aa:85: 9c:b5:3f:30:46:c3:15:14:bd:60:61:e0:fc:aa:2a: e4:f0:42:44:d6:a7:f6:4b:15:c7:24:60:74:06:1f: 1b:40:f2:ed:4f:42:62:71:1c:67:7b:43:17:93:b1: 48:bc:58:8c:1e:4d:e3:a8:73:7b:01:71:dc:7e:0b: ed:5f:0e:c9:62:19:22:1b:fa:ec:5a:4d:55:39:aa: 3b:cd:2e:53:2a:c3:38:9d:cf:b4:0a:e5:aa:d9:fe: 09:87:fc:98:a0:1d:06:13:02:88:e0:c4:bd:1d:56: c2:98:ec:33:b9:de:3c:6f:52:1f:42:57:42:05:b5: d5:e3:43:f8:a1:94:36:c9:e1:d7:47:77:9f:94:36: 0d:99:37:b9:09:1d:39:0b:2d:c9:31:ae:f1:d8:34: b4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6F:ED:C4:F8:40:28:53:42:6B:A2:24:ED:91:F5:51:13:D6:97:DD X509v3 Authority Key Identifier: keyid:66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c7:83:12:11:68:7c:b0:3d:83:2e:6a:38:b9:92:e0:bf:13: d6:b3:89:d7:b1:9d:6d:17:bd:9d:e4:ac:ec:39:66:fd:e5:06: 78:1f:00:88:66:e4:b3:61:8f:38:01:f8:05:a2:d0:16:32:ed: c7:4a:41:50:8e:1e:88:71:73:b2:df:85:5e:42:5b:24:e0:11: 31:84:ac:59:2c:52:57:46:4c:fb:3f:86:8f:6d:22:18:0e:08: 9e:fb:a5:5b:37:22:29:e5:4d:c2:10:bf:27:62:77:53:c7:65: 94:43:7a:df:bf:54:f0:68:8c:75:e7:ad:ae:ad:7e:f4:f8:67: 3b:32:e2:ba:eb:ce:64:cf:0c:ff:ba:50:f4:28:cb:60:7e:7a: 93:d0:f6:4f:6d:ac:80:72:8c:dc:a8:fd:bb:45:3f:ec:22:05: a1:24:12:4f:b9:d3:69:7c:3b:ad:81:14:28:a4:4d:35:48:d1: 12:4a:6e:dc:3d:77:dc:6b:17:e7:2e:1c:97:2a:be:24:a0:46: 2a:02:ba:3b:af:42:fd:7e:09:eb:2e:85:ac:78:a6:24:fd:97: de:70:38:cc:08:fe:39:7e:c4:ee:a2:d9:ee:22:ec:73:a2:1a: 90:29:63:8e:ba:08:e3:a0:03:73:fa:21:91:4c:1d:5b:c8:b5: 83:e7:d0:c0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWooVjeAot5v/uR5CbcLEZO9lX6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4 NEFGQUEyQTAeFw0yNjEwMDkxNjIzMzRaFw0yNjEwMTMwMjQ0MzRaMDMxMTAvBgNV BAMTKDM5NkZFREM0Rjg0MDI4NTM0MjZCQTIyNEVEOTFGNTUxMTNENjk3REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyAg7lvjABks/Yh6KdSZqtoByK FnpEBgohhfg27HHQkVmEwm1p5z6y1+wDRWPFB+aycJXrl8boZap1ogvrE6rWn8nZ hyvUqBUdQ/gmr/amf7g7Fs252B/JrfRSV+WMtbL+UpzXCZiqhZy1PzBGwxUUvWBh 4PyqKuTwQkTWp/ZLFcckYHQGHxtA8u1PQmJxHGd7QxeTsUi8WIweTeOoc3sBcdx+ C+1fDsliGSIb+uxaTVU5qjvNLlMqwzidz7QK5arZ/gmH/JigHQYTAojgxL0dVsKY 7DO53jxvUh9CV0IFtdXjQ/ihlDbJ4ddHd5+UNg2ZN7kJHTkLLckxrvHYNLT9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOW/txPhAKFNCa6Ik7ZH1URPWl90wHwYDVR0j BBgwFoAUZviwXfuKSb2Nr5D88XC+C4SvqiowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8wLzY2RjhCMDVERkI4QTQ5QkQ4REFGOTBGQ0YxNzBC RTBCODRBRkFBMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4NEFGQUEyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMC82NkY4QjA1REZCOEE0 OUJEOERBRjkwRkNGMTcwQkUwQjg0QUZBQTJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALseDEhFofLA9 gy5qOLmS4L8T1rOJ17GdbRe9neSs7Dlm/eUGeB8AiGbks2GPOAH4BaLQFjLtx0pB UI4eiHFzst+FXkJbJOARMYSsWSxSV0ZM+z+Gj20iGA4InvulWzciKeVNwhC/J2J3 U8dllEN6379U8GiMdeetrq1+9PhnOzLiuuvOZM8M/7pQ9CjLYH56k9D2T22sgHKM 3Kj9u0U/7CIFoSQST7nTaXw7rYEUKKRNNUjREkpu3D133GsX5y4clyq+JKBGKgK6 O69C/X4J6y6FrHimJP2X3nA4zAj+OX7E7qLZ7iLsc6IakCljjroI46ADc/ohkUwd W8i1g+fQwA== -----END CERTIFICATE-----Generated at Sun Oct 11 11:19:50 2026 by rpki-client