$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft File: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft (raw, json) Hash identifier: 9o55vizawcvOMaeUI48Wmp6ZRh59bJWhWZ1VSTGB180= Subject key identifier: 1E:07:CA:7A:FD:2B:9C:32:88:BD:86:20:C0:00:DE:A7:62:05:CB:2C Authority key identifier: 66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A Certificate issuer: /CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Certificate serial: 692FFD351ACFAEFC216DD6862F7662DC00D8ED91 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft Manifest number: 0101 Signing time: Tue 28 Jul 2026 21:52:49 +0000 Manifest this update: Tue 28 Jul 2026 21:47:49 +0000 Manifest next update: Thu 30 Jul 2026 00:56:49 +0000 Files and hashes: 1: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl (hash: JDZycDGqKIvcDEZrBnTKHPTgJ21CeT5WNZA7hF4Ana4=) 2: 3130332e32302e3136302e302f32322d3232203d3e20313334373635.roa (hash: Bj3NdvzxuoljrwIvbWbuXcn7NpJjDq3od3bmKo7Wh/w=) 3: 3131362e35382e3230382e302f32302d3230203d3e20313334373635.roa (hash: VwIiHJbm3cBD8lhL8wmRmh0pfQiLWDNx7qvhjrjHDtM=) 4: 3135302e3234322e3234342e302f32322d3232203d3e20313334373635.roa (hash: Z0Og2VRkF9so8DXGO9qx7+fqZAupDQA2fhEa1vdrebg=) 5: 3230332e38312e31362e302f32302d3230203d3e20313334373635.roa (hash: 5MWmFfMa0D6WNDGkRqnlKQV80cTKOloRp4FR2LPMSGw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:56:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:2f:fd:35:1a:cf:ae:fc:21:6d:d6:86:2f:76:62:dc:00:d8:ed:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Validity Not Before: Jul 28 21:47:49 2026 GMT Not After : Jul 30 00:56:49 2026 GMT Subject: CN=1E07CA7AFD2B9C3288BD8620C000DEA76205CB2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:19:74:30:8e:cc:df:85:58:bc:5a:35:65:38: 4a:f5:7b:21:b8:e9:9f:94:33:93:80:f2:6a:c6:87: 7f:22:3a:38:97:d1:bd:7c:84:69:4a:f4:1f:a2:4b: 56:3c:c1:a5:27:ee:59:c1:fc:c3:1b:35:0c:a6:7f: 18:6c:e0:dc:3a:e3:a7:56:f6:57:a8:7d:fa:de:c8: 62:7e:aa:4d:88:74:fe:26:c9:f2:48:9b:ef:15:7d: b3:5f:22:c4:22:4c:33:20:b5:fd:50:77:a3:25:6c: f7:84:3d:a6:87:d6:d3:98:fb:dc:ed:26:e3:f5:5c: 59:f6:cf:65:b6:af:ee:69:3d:e6:d1:0a:15:14:e6: 2f:a0:e6:3b:2a:38:62:04:74:95:6a:85:96:f2:fb: 9f:0f:91:74:5c:d4:d5:e1:d3:cc:bb:24:25:b2:3f: 66:f2:1c:09:b1:15:9c:14:a6:6f:9d:c7:09:6f:ea: 69:e1:08:74:4f:c2:c9:04:e6:e2:d9:e4:3e:9e:34: 71:c4:8c:3d:2f:8e:b1:84:0a:65:af:47:fb:d3:4d: f5:7e:b9:de:b3:b7:e6:ad:71:dc:85:e7:3f:56:dc: a6:e6:57:04:75:a0:61:a3:6a:01:31:9c:bf:5b:57: 76:9a:db:61:3e:07:34:86:55:89:35:38:9f:a2:d2: a9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:07:CA:7A:FD:2B:9C:32:88:BD:86:20:C0:00:DE:A7:62:05:CB:2C X509v3 Authority Key Identifier: keyid:66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:16:a7:fd:13:5a:2a:57:cb:8b:5b:f4:a1:f8:63:4f:e4:c6: e6:4c:64:f0:75:0e:79:cc:fc:b9:fb:ef:f9:a1:98:d2:8c:3d: 3c:51:da:26:2c:71:5a:f4:67:8f:d9:50:9d:e9:82:e8:67:d4: dd:e0:83:b3:0e:f6:0a:22:89:da:4f:d2:00:40:84:8c:b3:41: 6f:f1:4f:81:4f:92:15:47:c1:f5:87:67:45:cf:75:31:a1:56: 16:ec:97:fa:49:e5:7c:a6:74:85:35:31:a2:69:a9:dc:16:32: 50:78:35:03:97:9a:d3:f1:5c:67:0f:6a:61:01:f9:da:a2:87: 0a:05:59:14:1c:5f:89:3b:e6:3c:b8:13:fa:8b:0d:ed:0a:e8: 13:d0:02:73:b8:41:1f:fd:0b:c0:40:79:a0:31:da:91:47:36: b9:f9:4c:a1:d2:36:bf:f6:da:86:ff:03:09:3b:68:1b:30:dc: 8a:86:0c:6d:cb:4c:30:bd:6c:55:19:e5:68:f1:08:93:01:30: fd:a0:ea:e6:98:9d:b2:db:57:61:da:92:ce:97:88:c8:68:8e: af:9c:28:0e:5d:3d:c0:6b:ed:7f:bb:5d:4a:91:e8:c7:d6:06: 2d:d4:10:88:07:30:c3:ac:84:b2:c7:d2:6c:a8:ad:8a:da:b8: ff:95:ff:5f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaS/9NRrPrvwhbdaGL3Zi3ADY7ZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4 NEFGQUEyQTAeFw0yNjA3MjgyMTQ3NDlaFw0yNjA3MzAwMDU2NDlaMDMxMTAvBgNV BAMTKDFFMDdDQTdBRkQyQjlDMzI4OEJEODYyMEMwMDBERUE3NjIwNUNCMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcGXQwjszfhVi8WjVlOEr1eyG4 6Z+UM5OA8mrGh38iOjiX0b18hGlK9B+iS1Y8waUn7lnB/MMbNQymfxhs4Nw646dW 9leoffreyGJ+qk2IdP4myfJIm+8VfbNfIsQiTDMgtf1Qd6MlbPeEPaaH1tOY+9zt JuP1XFn2z2W2r+5pPebRChUU5i+g5jsqOGIEdJVqhZby+58PkXRc1NXh08y7JCWy P2byHAmxFZwUpm+dxwlv6mnhCHRPwskE5uLZ5D6eNHHEjD0vjrGECmWvR/vTTfV+ ud6zt+atcdyF5z9W3KbmVwR1oGGjagExnL9bV3aa22E+BzSGVYk1OJ+i0qk3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHgfKev0rnDKIvYYgwADep2IFyywwHwYDVR0j BBgwFoAUZviwXfuKSb2Nr5D88XC+C4SvqiowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8wLzY2RjhCMDVERkI4QTQ5QkQ4REFGOTBGQ0YxNzBC RTBCODRBRkFBMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4NEFGQUEyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMC82NkY4QjA1REZCOEE0 OUJEOERBRjkwRkNGMTcwQkUwQjg0QUZBQTJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoRan/RNaKlfL i1v0ofhjT+TG5kxk8HUOecz8ufvv+aGY0ow9PFHaJixxWvRnj9lQnemC6GfU3eCD sw72CiKJ2k/SAECEjLNBb/FPgU+SFUfB9YdnRc91MaFWFuyX+knlfKZ0hTUxommp 3BYyUHg1A5ea0/FcZw9qYQH52qKHCgVZFBxfiTvmPLgT+osN7QroE9ACc7hBH/0L wEB5oDHakUc2uflModI2v/bahv8DCTtoGzDcioYMbctMML1sVRnlaPEIkwEw/aDq 5pidsttXYdqSzpeIyGiOr5woDl09wGvtf7tdSpHox9YGLdQQiAcww6yEssfSbKit itq4/5X/Xw== -----END CERTIFICATE-----Generated at Wed Jul 29 17:02:08 2026 by rpki-client