$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft File: 66E8C6C4D3432C457DBC420613F170D1895B607C.mft (raw, json) Hash identifier: OiWpTN8tcQKiTp+nUBgeGct70pBoUuYR/+6RXln3q9w= Subject key identifier: 9A:1F:00:EF:CD:51:C0:BC:8A:5C:67:E2:14:B4:BF:10:E3:3D:36:6F Authority key identifier: 66:E8:C6:C4:D3:43:2C:45:7D:BC:42:06:13:F1:70:D1:89:5B:60:7C Certificate issuer: /CN=66E8C6C4D3432C457DBC420613F170D1895B607C Certificate serial: 4DD0219673DE3C0973709AC4FD1F7491CD503981 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft Manifest number: 05 Signing time: Fri 17 Apr 2026 05:24:40 +0000 Manifest this update: Fri 17 Apr 2026 05:19:40 +0000 Manifest next update: Sat 18 Apr 2026 05:43:40 +0000 Files and hashes: 1: 3131392e34322e3133362e302f32312d3234203d3e203338333735.roa (hash: onz07yEDGzQ5lM3czrPnQNjHr6shpdjA+AGj0B+B8V0=) 2: 66E8C6C4D3432C457DBC420613F170D1895B607C.crl (hash: 4ssHdGsJ78+aT1pMiKNZhVAzgVbQknwLtqBb19MZwmc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.crl rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:43:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:d0:21:96:73:de:3c:09:73:70:9a:c4:fd:1f:74:91:cd:50:39:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66E8C6C4D3432C457DBC420613F170D1895B607C Validity Not Before: Apr 17 05:19:40 2026 GMT Not After : Apr 18 05:43:40 2026 GMT Subject: CN=9A1F00EFCD51C0BC8A5C67E214B4BF10E33D366F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e4:30:1b:12:eb:3d:f4:37:a9:82:65:71:7b: e3:8b:c8:5a:cd:22:fb:3a:ee:f1:c2:7d:29:7c:43: d0:8c:6e:35:8a:50:50:ea:24:3b:51:c5:f1:a8:6d: 4e:65:8b:75:12:0d:3c:2e:f2:9e:e6:c8:ec:3c:4d: e6:16:bd:fa:db:9d:09:a2:78:ab:4a:19:18:4d:7e: 0f:47:08:0f:68:7d:49:7c:16:29:96:ba:40:38:c4: 6a:ec:0d:13:6e:9d:e9:a3:68:49:09:28:55:29:df: 7f:4b:e1:ec:79:f7:61:ad:0d:af:38:95:e8:cd:a3: 84:44:f3:3c:a0:90:1e:aa:50:eb:d1:65:9f:dc:00: 7c:4b:cc:d9:38:07:81:16:36:3e:76:c5:2d:ef:74: 4f:15:92:91:07:3e:93:97:e6:68:0e:e5:c4:e6:8c: 03:bb:ce:b6:1d:84:d9:19:89:b9:16:94:2f:a2:88: 10:84:a5:06:29:bc:a6:69:53:86:95:dc:92:da:c7: c9:0c:91:83:f9:cd:56:0b:46:7a:08:37:2a:fb:79: 54:33:bc:13:01:93:04:e9:f9:ab:98:a6:54:25:d2: 61:3c:27:c8:e4:15:92:55:3f:cb:38:c4:00:37:bc: 7f:03:11:de:54:23:38:fc:9d:1a:05:c1:0b:84:2d: 93:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1F:00:EF:CD:51:C0:BC:8A:5C:67:E2:14:B4:BF:10:E3:3D:36:6F X509v3 Authority Key Identifier: keyid:66:E8:C6:C4:D3:43:2C:45:7D:BC:42:06:13:F1:70:D1:89:5B:60:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:6c:be:b6:a0:ef:79:42:36:6c:a6:c0:86:16:7a:1c:6d:74: 1f:7f:59:ef:f0:ad:47:6a:84:ee:1c:f8:58:fb:8a:40:8f:5a: ce:48:4b:b5:5f:b5:6e:6d:e6:cd:5a:9a:02:b6:70:9c:67:ea: 1e:e9:8e:e0:d4:c2:cc:08:3c:b9:94:aa:46:d8:fa:33:65:53: a9:6d:62:ce:34:e9:c7:5f:42:2c:7b:48:1d:f1:b0:a2:b7:13: 47:7f:d3:09:27:b3:bb:70:fe:b5:6a:ef:06:b2:cd:9e:4c:08: a5:46:cf:dd:b9:cd:98:e1:f2:89:ad:f0:89:24:6a:3b:dd:48: 3c:77:a5:79:8d:9d:d0:23:ac:0e:a0:e0:da:eb:f0:bf:57:1d: f5:50:19:4f:68:28:86:62:eb:13:48:55:29:51:0a:0a:7e:e9: 97:77:3e:f4:d9:49:a2:51:b1:58:09:1f:e4:60:13:73:6b:c2: 75:09:cd:53:bd:b1:5a:34:ad:80:01:c8:f3:54:a6:16:c7:7e: d6:96:b2:af:2e:b8:62:a6:c9:73:f6:b8:7e:38:4e:99:7a:cc: e1:0f:d9:fc:42:aa:d2:5d:1e:96:64:87:2f:30:8e:88:b5:06: 93:ac:a4:69:aa:64:97:ec:e6:8e:98:18:37:88:98:e6:1f:af: 54:e2:93:1c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTdAhlnPePAlzcJrE/R90kc1QOYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZFOEM2QzREMzQzMkM0NTdEQkM0MjA2MTNGMTcwRDE4 OTVCNjA3QzAeFw0yNjA0MTcwNTE5NDBaFw0yNjA0MTgwNTQzNDBaMDMxMTAvBgNV BAMTKDlBMUYwMEVGQ0Q1MUMwQkM4QTVDNjdFMjE0QjRCRjEwRTMzRDM2NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi5DAbEus99DepgmVxe+OLyFrN Ivs67vHCfSl8Q9CMbjWKUFDqJDtRxfGobU5li3USDTwu8p7myOw8TeYWvfrbnQmi eKtKGRhNfg9HCA9ofUl8FimWukA4xGrsDRNunemjaEkJKFUp339L4ex592GtDa84 lejNo4RE8zygkB6qUOvRZZ/cAHxLzNk4B4EWNj52xS3vdE8VkpEHPpOX5mgO5cTm jAO7zrYdhNkZibkWlC+iiBCEpQYpvKZpU4aV3JLax8kMkYP5zVYLRnoINyr7eVQz vBMBkwTp+auYplQl0mE8J8jkFZJVP8s4xAA3vH8DEd5UIzj8nRoFwQuELZNJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmh8A781RwLyKXGfiFLS/EOM9Nm8wHwYDVR0j BBgwFoAUZujGxNNDLEV9vEIGE/Fw0YlbYHwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYyODQzNjY3NzQyNzIwMS8wLzY2RThDNkM0RDM0MzJDNDU3REJDNDIwNjEzRjE3 MEQxODk1QjYwN0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZFOEM2QzREMzQzMkM0NTdEQkM0MjA2MTNGMTcwRDE4OTVCNjA3Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2Mjg0MzY2Nzc0MjcyMDEvMC82NkU4QzZDNEQzNDMy QzQ1N0RCQzQyMDYxM0YxNzBEMTg5NUI2MDdDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxWy+tqDveUI2 bKbAhhZ6HG10H39Z7/CtR2qE7hz4WPuKQI9azkhLtV+1bm3mzVqaArZwnGfqHumO 4NTCzAg8uZSqRtj6M2VTqW1izjTpx19CLHtIHfGworcTR3/TCSezu3D+tWrvBrLN nkwIpUbP3bnNmOHyia3wiSRqO91IPHeleY2d0COsDqDg2uvwv1cd9VAZT2gohmLr E0hVKVEKCn7pl3c+9NlJolGxWAkf5GATc2vCdQnNU72xWjStgAHI81SmFsd+1pay ry64YqbJc/a4fjhOmXrM4Q/Z/EKq0l0elmSHLzCOiLUGk6ykaapkl+zmjpgYN4iY 5h+vVOKTHA== -----END CERTIFICATE-----Generated at Fri Apr 17 21:43:32 2026 by rpki-client