$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft File: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft (raw, json) Hash identifier: xDc95YU5WJPAOaXUOR7hb+Swr23w0TKdrsNacECZOng= Subject key identifier: DA:85:6A:EE:69:29:A1:8B:72:43:2B:CC:81:1D:ED:A8:7E:FA:57:92 Authority key identifier: 66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A Certificate issuer: /CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Certificate serial: 2E442234017FF81CDCA6D2AC50C0AFE8D2F7BFF5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft Manifest number: 0138 Signing time: Mon 28 Sep 2026 00:00:13 +0000 Manifest this update: Sun 27 Sep 2026 23:55:13 +0000 Manifest next update: Thu 01 Oct 2026 05:24:13 +0000 Files and hashes: 1: 3135302e3234322e3234342e302f32322d3232203d3e20313334373635.roa (hash: Z0Og2VRkF9so8DXGO9qx7+fqZAupDQA2fhEa1vdrebg=) 2: 3130332e32302e3136302e302f32322d3232203d3e20313334373635.roa (hash: Bj3NdvzxuoljrwIvbWbuXcn7NpJjDq3od3bmKo7Wh/w=) 3: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl (hash: gkbqp8KnI9N+lsIJTDYCc17JX79jlGpsNL4YtCfQUj4=) 4: 3230332e38312e31362e302f32302d3230203d3e20313334373635.roa (hash: 5MWmFfMa0D6WNDGkRqnlKQV80cTKOloRp4FR2LPMSGw=) 5: 3131362e35382e3230382e302f32302d3230203d3e20313334373635.roa (hash: VwIiHJbm3cBD8lhL8wmRmh0pfQiLWDNx7qvhjrjHDtM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 05:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:44:22:34:01:7f:f8:1c:dc:a6:d2:ac:50:c0:af:e8:d2:f7:bf:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Validity Not Before: Sep 27 23:55:13 2026 GMT Not After : Oct 1 05:24:13 2026 GMT Subject: CN=DA856AEE6929A18B72432BCC811DEDA87EFA5792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0a:cb:2e:b8:f7:8b:8b:fb:6e:26:47:f8:39: 59:bb:d4:6e:65:71:a6:75:5c:59:1d:c5:91:a9:35: 05:1b:62:65:ea:fb:67:a3:bb:9c:04:7f:f6:b2:e4: 6a:67:bb:e0:72:ba:12:93:52:04:8a:10:a1:06:aa: e0:a8:75:93:7f:ed:0f:3a:82:9c:e7:c0:3e:ef:05: ac:55:4b:21:3b:f7:08:29:6d:05:59:27:aa:eb:62: 6b:df:61:38:19:f0:4f:da:fd:c4:a3:f9:fe:f8:ee: ec:b7:41:5b:b6:d9:bf:8b:21:c2:22:f9:95:d1:49: c8:78:b8:ab:35:10:db:bb:79:fb:e9:94:91:1e:f9: 67:3b:86:be:ac:3c:44:95:c7:1d:2a:7e:ae:07:0b: 0a:48:0b:f8:be:09:21:d4:db:a7:41:16:42:58:f7: 66:60:26:8d:32:08:04:22:76:1c:bd:fd:7e:c4:6d: f4:47:5c:1d:66:b5:dc:19:50:3f:95:d5:79:07:50: 8c:19:af:02:9f:fc:14:2d:f3:06:29:3b:3f:d6:3c: 15:eb:08:dc:7c:a2:eb:42:59:5a:03:69:97:41:ee: f2:1a:eb:20:3a:53:09:8c:d1:62:a6:27:be:5c:78: 98:b1:da:dc:ea:2f:47:ec:55:69:6e:a2:5b:b7:80: 24:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:85:6A:EE:69:29:A1:8B:72:43:2B:CC:81:1D:ED:A8:7E:FA:57:92 X509v3 Authority Key Identifier: keyid:66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:81:bd:25:b4:e2:fb:bd:5b:e9:ee:48:59:1e:84:b4:90:7e: 84:5a:05:a0:a7:c0:d5:54:63:40:3b:51:aa:4b:fc:7a:4e:77: eb:16:1e:10:c1:7f:ec:d8:6b:82:1a:1a:af:ed:17:cb:31:63: 2a:97:40:ed:17:08:bb:36:94:0a:a6:92:74:a6:a8:3c:fa:29: b5:33:bf:07:df:34:4f:15:ec:fa:5d:9b:e8:c4:9d:1f:34:53: 3d:e8:e6:65:c6:06:dd:4a:5c:7e:49:73:1a:5d:8c:82:88:d8: 18:d9:97:a5:e1:8b:8f:a0:1c:de:7e:b4:62:ae:9d:90:5b:5d: 9f:ea:30:5a:1a:13:1b:62:62:04:ee:de:31:53:24:bc:22:f4: 4c:8c:de:d1:64:05:f5:42:19:a4:72:dc:fc:3c:4c:41:e4:11: d1:ca:d6:4d:de:1f:82:8c:62:71:46:dc:68:31:f9:5b:2e:f6: 31:91:be:76:3b:8f:c4:3d:5b:c6:64:14:e6:16:5b:57:6e:5b: 1f:1b:68:bb:02:55:66:e9:96:d9:2e:92:89:80:bb:77:f9:84: 3c:6c:cd:09:2b:1c:6e:f1:35:1b:17:24:7b:a3:47:0e:10:1b: b6:f8:ae:2a:ac:5d:72:ec:1f:0b:34:b6:06:f0:15:57:14:71: 1f:1d:c1:7c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULkQiNAF/+BzcptKsUMCv6NL3v/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4 NEFGQUEyQTAeFw0yNjA5MjcyMzU1MTNaFw0yNjEwMDEwNTI0MTNaMDMxMTAvBgNV BAMTKERBODU2QUVFNjkyOUExOEI3MjQzMkJDQzgxMURFREE4N0VGQTU3OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxCssuuPeLi/tuJkf4OVm71G5l caZ1XFkdxZGpNQUbYmXq+2eju5wEf/ay5Gpnu+ByuhKTUgSKEKEGquCodZN/7Q86 gpznwD7vBaxVSyE79wgpbQVZJ6rrYmvfYTgZ8E/a/cSj+f747uy3QVu22b+LIcIi +ZXRSch4uKs1ENu7efvplJEe+Wc7hr6sPESVxx0qfq4HCwpIC/i+CSHU26dBFkJY 92ZgJo0yCAQidhy9/X7EbfRHXB1mtdwZUD+V1XkHUIwZrwKf/BQt8wYpOz/WPBXr CNx8outCWVoDaZdB7vIa6yA6UwmM0WKmJ75ceJix2tzqL0fsVWluolu3gCRrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2oVq7mkpoYtyQyvMgR3tqH76V5IwHwYDVR0j BBgwFoAUZviwXfuKSb2Nr5D88XC+C4SvqiowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8wLzY2RjhCMDVERkI4QTQ5QkQ4REFGOTBGQ0YxNzBC RTBCODRBRkFBMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4NEFGQUEyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMC82NkY4QjA1REZCOEE0 OUJEOERBRjkwRkNGMTcwQkUwQjg0QUZBQTJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYG9JbTi+71b 6e5IWR6EtJB+hFoFoKfA1VRjQDtRqkv8ek536xYeEMF/7Nhrghoar+0XyzFjKpdA 7RcIuzaUCqaSdKaoPPoptTO/B980TxXs+l2b6MSdHzRTPejmZcYG3UpcfklzGl2M gojYGNmXpeGLj6Ac3n60Yq6dkFtdn+owWhoTG2JiBO7eMVMkvCL0TIze0WQF9UIZ pHLc/DxMQeQR0crWTd4fgoxicUbcaDH5Wy72MZG+djuPxD1bxmQU5hZbV25bHxto uwJVZumW2S6SiYC7d/mEPGzNCSscbvE1Gxcke6NHDhAbtviuKqxdcuwfCzS2BvAV VxRxHx3BfA== -----END CERTIFICATE-----Generated at Tue Sep 29 15:14:35 2026 by rpki-client