$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft File: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft (raw, json) Hash identifier: g+K8lScZfrTY8SAu/Q43ymT5fcNjmMggA593pxffzSA= Subject key identifier: 36:F7:99:65:AC:FE:AC:3A:92:50:62:97:1F:9B:2C:77:D5:0F:40:C6 Authority key identifier: 66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A Certificate issuer: /CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Certificate serial: 4BE5FD1BC1B78BF813964020C607937B0A4DD375 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 14:58:28 +0000 Manifest this update: Thu 26 Mar 2026 14:53:28 +0000 Manifest next update: Fri 27 Mar 2026 16:02:28 +0000 Files and hashes: 1: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl (hash: OLZO5xnKXQEpXgr6yVBsA+QdrM20WugldpOtBZ+nGXU=) 2: 3130332e32302e3136302e302f32322d3232203d3e20313334373635.roa (hash: Bj3NdvzxuoljrwIvbWbuXcn7NpJjDq3od3bmKo7Wh/w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:e5:fd:1b:c1:b7:8b:f8:13:96:40:20:c6:07:93:7b:0a:4d:d3:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Validity Not Before: Mar 26 14:53:28 2026 GMT Not After : Mar 27 16:02:28 2026 GMT Subject: CN=36F79965ACFEAC3A925062971F9B2C77D50F40C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:12:13:7a:c4:51:a4:a6:0f:2e:92:9b:6b:f9: 5e:cf:48:29:7b:5e:9f:36:9a:0f:77:cb:c0:34:b9: 3d:28:b0:db:8e:b0:08:43:05:89:9b:c2:f8:da:b8: eb:77:f1:59:ee:da:ec:ce:b1:d0:e7:b4:4d:fc:c6: cf:a8:f3:1d:1f:fe:7e:5c:7c:3c:e1:6f:fb:8a:a3: 01:19:b0:50:b0:63:14:bd:bf:e8:aa:45:c4:da:91: c8:15:f7:a5:ba:bf:be:f1:f2:a7:4c:27:40:c6:ae: 3b:5d:c9:fa:ba:e7:20:43:0f:f0:dd:38:44:31:91: 70:c7:b9:62:7e:64:20:7b:29:2a:bd:11:ae:90:56: 45:e9:9e:bb:db:5e:44:dc:6d:a2:1f:ba:b3:55:ff: 2f:ee:e0:82:06:92:ed:66:44:38:ae:df:3d:e5:c7: 23:c3:a0:9a:c6:2e:5a:e4:5d:66:43:cd:83:3b:7b: 3c:1a:f2:ad:f1:c6:48:0e:94:d0:25:0a:fd:ad:7e: 83:39:6f:9e:6c:c4:9a:58:19:47:17:d1:e0:7f:f6: 4c:e3:05:df:66:ea:6e:09:e5:1c:ab:65:cc:29:ee: fa:51:70:ae:98:e1:86:96:97:00:ec:ce:96:56:92: 92:14:dd:d3:3a:46:de:c6:a3:d6:24:5d:01:00:8a: 3b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F7:99:65:AC:FE:AC:3A:92:50:62:97:1F:9B:2C:77:D5:0F:40:C6 X509v3 Authority Key Identifier: keyid:66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:cd:a9:b4:5d:05:39:1b:f6:c0:0b:5d:83:0e:1d:30:12:e5: d4:9c:12:48:89:35:3f:68:50:70:20:46:c0:50:29:30:c1:31: 92:f9:00:09:db:78:13:1c:16:e3:0b:21:00:ab:a8:b4:58:26: c8:a2:e7:97:48:da:51:6f:b9:ad:5c:75:78:44:9e:41:c5:a4: 69:c6:2f:56:93:20:d5:63:d8:0a:08:b3:b6:74:9d:aa:cc:4f: 44:82:63:b9:c0:4d:16:0c:16:57:02:9e:07:1f:ea:ba:f6:e8: 43:10:c1:f6:5b:89:33:78:a6:d4:bb:4f:5c:88:7f:30:1c:f5: e7:80:8d:ac:c6:97:22:09:57:3a:41:a0:61:40:3d:e1:50:13: 67:54:1a:a4:f9:10:fe:55:3a:cf:ca:9a:f9:09:0e:43:6d:0a: f1:50:8a:34:65:57:bb:29:f9:2d:dd:6d:f5:fc:39:8f:77:40: 24:1b:1d:3d:e9:86:4e:a8:d7:92:03:f6:1c:15:39:7c:ec:76: b5:92:1d:6d:0d:53:47:91:22:c9:c9:95:88:87:b6:b0:66:3c: 3e:04:5d:d9:d1:b9:94:8f:0c:6b:45:5c:d5:0b:38:94:7a:b4: 2b:77:01:e9:ff:f3:83:db:01:18:15:c0:18:99:2e:94:49:bb: 18:09:96:af -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUS+X9G8G3i/gTlkAgxgeTewpN03UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4 NEFGQUEyQTAeFw0yNjAzMjYxNDUzMjhaFw0yNjAzMjcxNjAyMjhaMDMxMTAvBgNV BAMTKDM2Rjc5OTY1QUNGRUFDM0E5MjUwNjI5NzFGOUIyQzc3RDUwRjQwQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKEhN6xFGkpg8ukptr+V7PSCl7 Xp82mg93y8A0uT0osNuOsAhDBYmbwvjauOt38Vnu2uzOsdDntE38xs+o8x0f/n5c fDzhb/uKowEZsFCwYxS9v+iqRcTakcgV96W6v77x8qdMJ0DGrjtdyfq65yBDD/Dd OEQxkXDHuWJ+ZCB7KSq9Ea6QVkXpnrvbXkTcbaIfurNV/y/u4IIGku1mRDiu3z3l xyPDoJrGLlrkXWZDzYM7ezwa8q3xxkgOlNAlCv2tfoM5b55sxJpYGUcX0eB/9kzj Bd9m6m4J5RyrZcwp7vpRcK6Y4YaWlwDszpZWkpIU3dM6Rt7Go9YkXQEAijvJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNveZZaz+rDqSUGKXH5ssd9UPQMYwHwYDVR0j BBgwFoAUZviwXfuKSb2Nr5D88XC+C4SvqiowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8wLzY2RjhCMDVERkI4QTQ5QkQ4REFGOTBGQ0YxNzBC RTBCODRBRkFBMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4NEFGQUEyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMC82NkY4QjA1REZCOEE0 OUJEOERBRjkwRkNGMTcwQkUwQjg0QUZBQTJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi82ptF0FORv2 wAtdgw4dMBLl1JwSSIk1P2hQcCBGwFApMMExkvkACdt4ExwW4wshAKuotFgmyKLn l0jaUW+5rVx1eESeQcWkacYvVpMg1WPYCgiztnSdqsxPRIJjucBNFgwWVwKeBx/q uvboQxDB9luJM3im1LtPXIh/MBz154CNrMaXIglXOkGgYUA94VATZ1QapPkQ/lU6 z8qa+QkOQ20K8VCKNGVXuyn5Ld1t9fw5j3dAJBsdPemGTqjXkgP2HBU5fOx2tZId bQ1TR5EiycmViIe2sGY8PgRd2dG5lI8Ma0Vc1Qs4lHq0K3cB6f/zg9sBGBXAGJku lEm7GAmWrw== -----END CERTIFICATE-----Generated at Fri Mar 27 04:59:21 2026 by rpki-client