
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft
File: 66E8C6C4D3432C457DBC420613F170D1895B607C.mft (raw, json)
Hash identifier: lsiYLCoHsPmlcyJ1dA6y48CIH4EgyHSDmevRTGGl26Q=
Subject key identifier: 0F:B9:01:25:48:6A:33:78:A0:95:1F:57:04:8D:A2:04:97:94:74:63
Authority key identifier: 66:E8:C6:C4:D3:43:2C:45:7D:BC:42:06:13:F1:70:D1:89:5B:60:7C
Certificate issuer: /CN=66E8C6C4D3432C457DBC420613F170D1895B607C
Certificate serial: 15760EA5B6E0134FAAC76270DDB706B0505C103A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft
Manifest number: 52
Signing time: Sun 14 Jun 2026 02:22:37 +0000
Manifest this update: Sun 14 Jun 2026 02:17:37 +0000
Manifest next update: Mon 15 Jun 2026 02:26:37 +0000
Files and hashes: 1: 66E8C6C4D3432C457DBC420613F170D1895B607C.crl (hash: rcFYCP+ixKEZ0dMvgHB5DZi9X+BFtmQcRAf2/rUvbyI=)
2: 3131392e34322e3133362e302f32312d3234203d3e203338333735.roa (hash: onz07yEDGzQ5lM3czrPnQNjHr6shpdjA+AGj0B+B8V0=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.crl
rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:76:0e:a5:b6:e0:13:4f:aa:c7:62:70:dd:b7:06:b0:50:5c:10:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66E8C6C4D3432C457DBC420613F170D1895B607C
Validity
Not Before: Jun 14 02:17:37 2026 GMT
Not After : Jun 15 02:26:37 2026 GMT
Subject: CN=0FB90125486A3378A0951F57048DA20497947463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:1a:14:0a:47:70:b6:14:5f:5f:59:49:6d:
14:da:5f:c7:c6:6a:2c:35:c9:f4:f6:58:7e:c2:23:
56:1f:b6:fe:8c:6a:3e:5a:8e:cf:f7:55:23:1d:4c:
32:01:69:63:c3:a7:31:c1:ef:5d:4f:bb:fb:90:2d:
a0:63:01:64:4c:19:b2:36:be:ff:26:fa:9b:e3:b3:
7f:e9:cd:1d:d1:81:52:9b:fc:ab:ec:b7:e6:94:13:
6e:dc:4a:c6:f1:2a:09:cf:26:b4:40:0f:67:49:dd:
7d:f1:f4:34:a8:2b:28:cb:ae:36:6c:d3:e6:85:03:
57:53:c7:16:f7:9b:30:47:ae:c3:e2:92:3d:f7:82:
67:89:43:e8:3f:29:f9:03:b4:50:86:e9:89:c6:49:
99:97:ce:56:2b:e4:b3:fb:b7:c8:c6:80:e8:9b:f8:
bf:45:9a:b0:9e:57:a7:a7:02:4e:e3:bc:a2:8a:4b:
94:10:ef:7c:94:66:c0:fa:c3:ac:05:67:5e:af:f4:
93:ad:c3:5d:2b:7e:1e:3e:eb:3e:6f:bd:a9:a9:1c:
f7:c3:e6:66:7d:91:54:29:79:7b:0a:c1:eb:47:23:
81:0b:d2:82:82:0e:5e:2a:fe:d8:6d:5c:9a:7d:e7:
f0:49:90:db:ec:40:3c:43:1a:6b:a2:79:9c:3a:3a:
1f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B9:01:25:48:6A:33:78:A0:95:1F:57:04:8D:A2:04:97:94:74:63
X509v3 Authority Key Identifier:
keyid:66:E8:C6:C4:D3:43:2C:45:7D:BC:42:06:13:F1:70:D1:89:5B:60:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9e:18:1b:8d:93:cb:a2:28:47:80:ae:3f:88:61:ba:91:18:
49:ff:f0:4c:21:80:66:c4:07:51:1e:f1:a8:ae:66:2e:39:c5:
74:e3:66:d3:48:69:22:19:28:d6:cd:2e:39:b5:a6:63:39:fd:
33:8c:9d:d1:80:14:a4:a9:ea:50:83:8c:0c:49:13:5f:56:85:
32:be:09:71:90:3c:6a:29:06:35:72:f7:24:88:fb:1d:d5:40:
2c:e8:32:64:c9:31:89:e6:05:39:ea:02:c1:ab:7e:f8:03:e8:
bc:97:5d:72:3f:af:e5:40:8e:e2:6d:a2:fa:f4:6d:13:f8:9c:
06:ae:e6:27:50:81:f0:5b:88:d3:24:b9:93:61:bb:6b:20:60:
37:8d:57:0b:9d:52:e2:4d:0b:22:dd:b6:e9:77:c2:1e:75:54:
2a:6e:bc:23:ad:84:0c:c3:c7:8a:8c:36:a6:76:36:84:58:22:
73:79:99:de:6e:7d:66:41:85:9a:c2:f0:ad:17:88:70:91:b7:
b9:74:4e:26:e9:c4:e3:3e:e0:84:a4:65:62:31:b5:97:aa:5b:
b6:a3:0b:7c:c9:be:80:8a:6d:3a:e9:f7:f6:a7:31:d1:7b:dc:
fc:5d:81:3a:1d:3f:b5:96:e0:24:4e:dd:2e:4a:80:fb:f6:26:
6f:11:91:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:38:41 2026 by rpki-client