$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft File: 66E8C6C4D3432C457DBC420613F170D1895B607C.mft (raw, json) Hash identifier: va+6vPGr5lxfPvDFhV+lkmaaJ7aU7qfmMf87P5Vahps= Subject key identifier: AA:CD:92:F1:D5:ED:A3:A4:A6:A6:CD:EA:FD:52:86:6F:59:D2:7F:50 Authority key identifier: 66:E8:C6:C4:D3:43:2C:45:7D:BC:42:06:13:F1:70:D1:89:5B:60:7C Certificate issuer: /CN=66E8C6C4D3432C457DBC420613F170D1895B607C Certificate serial: 236DBF0058B6BC0D0A68AEDEA2517EBC9A38B0B1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft Manifest number: CD Signing time: Sat 17 Oct 2026 12:33:54 +0000 Manifest this update: Sat 17 Oct 2026 12:28:54 +0000 Manifest next update: Tue 20 Oct 2026 13:13:54 +0000 Files and hashes: 1: 66E8C6C4D3432C457DBC420613F170D1895B607C.crl (hash: cY6Prs1lsu/UyaowTJszXlKqvIkHoGmiRtAv3nywE6U=) 2: 3131392e34322e3133362e302f32312d3234203d3e203338333735.roa (hash: onz07yEDGzQ5lM3czrPnQNjHr6shpdjA+AGj0B+B8V0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.crl rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 11:10:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:6d:bf:00:58:b6:bc:0d:0a:68:ae:de:a2:51:7e:bc:9a:38:b0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66E8C6C4D3432C457DBC420613F170D1895B607C Validity Not Before: Oct 17 12:28:54 2026 GMT Not After : Oct 20 13:13:54 2026 GMT Subject: CN=AACD92F1D5EDA3A4A6A6CDEAFD52866F59D27F50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:df:d9:21:fa:fb:65:7a:91:df:86:8d:39:9b: 28:89:2d:8e:29:a6:3e:b7:a0:71:e8:9c:1d:41:70: c1:9c:0a:fd:14:11:d3:4f:9c:bd:da:d4:0d:33:38: 3a:17:62:8e:18:2f:64:f5:e6:9d:fe:c9:8a:54:29: cb:0f:7b:6f:49:86:e2:b6:e6:89:ee:28:d7:19:74: 81:9e:6f:83:28:48:7e:d7:e5:38:b1:39:7b:cb:35: b6:6a:67:5d:0c:9b:28:2d:a3:53:94:3b:f6:21:95: 11:de:ec:01:91:e1:0d:d5:71:1b:f0:2d:7f:b5:66: 2d:08:01:b8:da:fa:52:7b:5b:ba:eb:fb:26:c5:63: f9:0e:dd:bc:64:30:e3:70:e0:c1:87:1c:09:3b:05: c2:c2:da:5a:fe:46:d1:30:a6:6c:46:66:09:51:d4: 27:5a:ab:5b:9d:c6:45:ea:cc:c6:27:eb:e3:38:35: 74:53:42:86:73:ea:3c:ad:15:40:ac:47:4b:de:30: 01:b2:5a:26:94:c4:ae:36:88:cb:a2:fa:9f:76:8e: 5a:56:7e:81:99:c6:7d:2f:69:f7:67:5b:08:f5:fc: 82:ef:bf:3d:31:d3:40:ea:e6:11:2a:07:06:ce:fa: 52:77:d1:bc:dc:77:9f:74:35:1c:52:ab:db:ec:ed: d2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CD:92:F1:D5:ED:A3:A4:A6:A6:CD:EA:FD:52:86:6F:59:D2:7F:50 X509v3 Authority Key Identifier: keyid:66:E8:C6:C4:D3:43:2C:45:7D:BC:42:06:13:F1:70:D1:89:5B:60:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:4d:78:cc:33:25:04:56:52:64:00:d2:5e:c1:60:46:d7:31: c0:89:07:71:14:1a:e2:ba:ed:71:cb:4d:72:9a:ef:97:b7:84: 65:e2:4c:9c:92:ec:f4:37:8f:e3:ec:2f:4c:f0:c2:cc:7d:36: 70:04:cb:2f:99:73:be:27:ab:5c:c4:b9:0b:5f:15:69:01:e6: 4d:2e:c6:07:88:dc:2a:74:d1:82:e9:5a:db:31:cb:48:d3:03: ed:7f:01:1b:1d:e5:ad:ce:84:7f:db:17:5f:db:a2:a8:ad:a8: 5f:83:a4:33:2a:c6:1c:d1:60:44:8f:a0:eb:5d:89:b3:e6:ba: f7:82:e5:10:3c:de:49:a4:4b:d6:03:3b:03:f1:58:9c:70:1f: 67:87:53:8f:81:03:18:b6:84:a7:69:6e:dd:0c:6f:58:31:55: af:8e:b7:e9:24:4d:c3:58:4a:a7:14:bb:10:5c:5c:ef:53:be: cf:3a:79:94:b5:32:a7:42:70:4d:fb:39:d3:44:ec:a9:26:29: e5:fc:7c:38:43:07:b4:86:21:a3:d6:2c:86:32:f1:ce:24:25: 1b:99:6c:21:ca:cd:4b:70:60:c7:70:d2:13:ce:79:c5:e8:82: d6:59:d1:c3:05:cf:4f:d1:be:2e:2b:bc:e5:3d:94:2c:db:97: 10:f7:98:f9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUI22/AFi2vA0KaK7eolF+vJo4sLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZFOEM2QzREMzQzMkM0NTdEQkM0MjA2MTNGMTcwRDE4 OTVCNjA3QzAeFw0yNjEwMTcxMjI4NTRaFw0yNjEwMjAxMzEzNTRaMDMxMTAvBgNV BAMTKEFBQ0Q5MkYxRDVFREEzQTRBNkE2Q0RFQUZENTI4NjZGNTlEMjdGNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX39kh+vtlepHfho05myiJLY4p pj63oHHonB1BcMGcCv0UEdNPnL3a1A0zODoXYo4YL2T15p3+yYpUKcsPe29JhuK2 5onuKNcZdIGeb4MoSH7X5TixOXvLNbZqZ10Mmygto1OUO/YhlRHe7AGR4Q3VcRvw LX+1Zi0IAbja+lJ7W7rr+ybFY/kO3bxkMONw4MGHHAk7BcLC2lr+RtEwpmxGZglR 1Cdaq1udxkXqzMYn6+M4NXRTQoZz6jytFUCsR0veMAGyWiaUxK42iMui+p92jlpW foGZxn0vafdnWwj1/ILvvz0x00Dq5hEqBwbO+lJ30bzcd590NRxSq9vs7dLhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqs2S8dXto6Smps3q/VKGb1nSf1AwHwYDVR0j BBgwFoAUZujGxNNDLEV9vEIGE/Fw0YlbYHwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYyODQzNjY3NzQyNzIwMS8wLzY2RThDNkM0RDM0MzJDNDU3REJDNDIwNjEzRjE3 MEQxODk1QjYwN0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZFOEM2QzREMzQzMkM0NTdEQkM0MjA2MTNGMTcwRDE4OTVCNjA3Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2Mjg0MzY2Nzc0MjcyMDEvMC82NkU4QzZDNEQzNDMy QzQ1N0RCQzQyMDYxM0YxNzBEMTg5NUI2MDdDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVU14zDMlBFZS ZADSXsFgRtcxwIkHcRQa4rrtcctNcprvl7eEZeJMnJLs9DeP4+wvTPDCzH02cATL L5lzvierXMS5C18VaQHmTS7GB4jcKnTRgula2zHLSNMD7X8BGx3lrc6Ef9sXX9ui qK2oX4OkMyrGHNFgRI+g612Js+a694LlEDzeSaRL1gM7A/FYnHAfZ4dTj4EDGLaE p2lu3QxvWDFVr4636SRNw1hKpxS7EFxc71O+zzp5lLUyp0JwTfs500TsqSYp5fx8 OEMHtIYho9YshjLxziQlG5lsIcrNS3Bgx3DSE855xeiC1lnRwwXPT9G+Liu85T2U LNuXEPeY+Q== -----END CERTIFICATE-----Generated at Sun Oct 18 09:25:31 2026 by rpki-client