$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft File: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft (raw, json) Hash identifier: lT+N6BYZDcpmS7fQs7zg3EvML6l93iD3qxhuUBvRO04= Subject key identifier: DD:F4:8D:20:71:AC:07:B1:85:B9:C3:AE:E6:06:5A:03:1C:20:34:B4 Authority key identifier: 66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A Certificate issuer: /CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Certificate serial: 5BED19375D63675D44EA036F41EC3536BA8A6AB8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft Manifest number: 99 Signing time: Wed 13 May 2026 15:36:05 +0000 Manifest this update: Wed 13 May 2026 15:31:05 +0000 Manifest next update: Thu 14 May 2026 16:51:05 +0000 Files and hashes: 1: 66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl (hash: bS0gCqxxwdbvdmvXRLikTpFtufI/K2nFbyywNdCD1bY=) 2: 3135302e3234322e3234342e302f32322d3232203d3e20313334373635.roa (hash: Z0Og2VRkF9so8DXGO9qx7+fqZAupDQA2fhEa1vdrebg=) 3: 3130332e32302e3136302e302f32322d3232203d3e20313334373635.roa (hash: Bj3NdvzxuoljrwIvbWbuXcn7NpJjDq3od3bmKo7Wh/w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ed:19:37:5d:63:67:5d:44:ea:03:6f:41:ec:35:36:ba:8a:6a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A Validity Not Before: May 13 15:31:05 2026 GMT Not After : May 14 16:51:05 2026 GMT Subject: CN=DDF48D2071AC07B185B9C3AEE6065A031C2034B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:95:32:ab:6c:82:3b:59:d6:9b:4c:dd:17:80: 19:94:6b:da:80:1f:9e:52:22:44:74:cc:04:4a:96: aa:d5:d3:3b:5f:39:99:83:ed:ca:88:1a:dc:c9:5f: bf:a8:6d:94:2a:8e:20:ef:51:b7:ab:a0:be:05:89: a1:c0:75:bd:0a:d2:03:86:76:63:d0:80:d1:71:84: 0c:f6:cf:8c:56:08:e1:58:d9:92:db:cd:63:b0:d7: e0:82:db:f4:fc:13:dd:ed:a6:11:38:5e:7a:09:c4: 9b:3e:eb:fc:21:48:63:52:b0:8c:05:fc:d8:37:63: e7:dc:6d:1b:d6:00:ea:7f:b3:2d:ac:e6:ee:58:f2: 74:b6:58:1a:c5:c1:fe:ad:4a:3b:d0:99:23:41:2f: 79:20:18:7a:8f:5b:79:23:42:92:69:cc:3e:19:cd: 7b:b5:8d:cb:e7:d6:10:87:66:10:e7:44:4a:48:e7: dd:0b:4f:b3:9f:75:3f:79:0e:d3:64:db:f3:09:1b: c9:17:44:75:8f:64:77:52:b5:e5:d9:e1:a9:d4:1b: 9d:69:a9:10:74:54:d0:04:1b:37:f3:7e:25:d4:ec: 64:ca:50:2e:61:c9:a9:55:21:32:d6:1c:0b:92:66: 50:26:ae:5a:8d:29:00:29:7b:c0:77:5b:76:ec:a6: c7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F4:8D:20:71:AC:07:B1:85:B9:C3:AE:E6:06:5A:03:1C:20:34:B4 X509v3 Authority Key Identifier: keyid:66:F8:B0:5D:FB:8A:49:BD:8D:AF:90:FC:F1:70:BE:0B:84:AF:AA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591117757612035/0/66F8B05DFB8A49BD8DAF90FCF170BE0B84AFAA2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:85:52:8c:5b:20:08:0f:ed:06:5b:f3:20:94:7b:2c:ff:6a: ee:90:23:4d:df:96:47:9c:e0:c6:c9:57:b2:fe:b1:ab:84:a3: 20:19:fd:de:7f:91:7a:7c:e3:cf:ca:58:b6:2e:07:3a:a5:38: 76:0d:a4:23:9c:93:57:24:b3:2a:93:e7:11:7a:d3:a0:96:f3: 02:0a:d0:67:a2:2d:0f:53:6f:76:b0:c8:c5:4c:8e:92:2c:c7: 90:db:31:e3:2a:7f:4e:cb:32:25:ab:f7:56:16:78:e8:ac:d1: 38:2f:5d:e5:63:65:7a:30:82:44:2c:0c:20:b8:00:1e:9d:ca: f6:53:1f:3d:32:8b:18:18:43:df:68:6b:d6:8c:b9:f8:cd:82: 7c:2e:9e:e4:bd:c1:1d:04:46:d6:74:91:d4:19:fc:52:82:d6: c0:6a:41:d2:73:1b:b2:26:aa:04:20:ad:0d:38:67:6c:c5:42: 38:9a:90:9c:db:10:05:cb:a5:63:b0:86:1f:20:e7:f9:d0:e9: df:f5:16:80:06:75:0f:50:2e:78:7f:9d:69:2b:3d:bf:2a:71: 85:5e:c3:fb:a1:65:bc:2a:44:ec:00:27:d5:99:07:c7:5f:66: 88:c5:10:94:1f:d0:8e:a0:e2:18:06:72:dd:56:a6:b8:d6:49: b9:cb:e5:b5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUW+0ZN11jZ11E6gNvQew1NrqKargwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4 NEFGQUEyQTAeFw0yNjA1MTMxNTMxMDVaFw0yNjA1MTQxNjUxMDVaMDMxMTAvBgNV BAMTKERERjQ4RDIwNzFBQzA3QjE4NUI5QzNBRUU2MDY1QTAzMUMyMDM0QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFlTKrbII7WdabTN0XgBmUa9qA H55SIkR0zARKlqrV0ztfOZmD7cqIGtzJX7+obZQqjiDvUberoL4FiaHAdb0K0gOG dmPQgNFxhAz2z4xWCOFY2ZLbzWOw1+CC2/T8E93tphE4XnoJxJs+6/whSGNSsIwF /Ng3Y+fcbRvWAOp/sy2s5u5Y8nS2WBrFwf6tSjvQmSNBL3kgGHqPW3kjQpJpzD4Z zXu1jcvn1hCHZhDnREpI590LT7OfdT95DtNk2/MJG8kXRHWPZHdSteXZ4anUG51p qRB0VNAEGzfzfiXU7GTKUC5hyalVITLWHAuSZlAmrlqNKQApe8B3W3bspsedAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3fSNIHGsB7GFucOu5gZaAxwgNLQwHwYDVR0j BBgwFoAUZviwXfuKSb2Nr5D88XC+C4SvqiowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTExNzc1NzYxMjAzNS8wLzY2RjhCMDVERkI4QTQ5QkQ4REFGOTBGQ0YxNzBC RTBCODRBRkFBMkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZGOEIwNURGQjhBNDlCRDhEQUY5MEZDRjE3MEJFMEI4NEFGQUEyQS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1OTExMTc3NTc2MTIwMzUvMC82NkY4QjA1REZCOEE0 OUJEOERBRjkwRkNGMTcwQkUwQjg0QUZBQTJBLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYVSjFsgCA/t BlvzIJR7LP9q7pAjTd+WR5zgxslXsv6xq4SjIBn93n+Renzjz8pYti4HOqU4dg2k I5yTVySzKpPnEXrToJbzAgrQZ6ItD1NvdrDIxUyOkizHkNsx4yp/TssyJav3VhZ4 6KzROC9d5WNlejCCRCwMILgAHp3K9lMfPTKLGBhD32hr1oy5+M2CfC6e5L3BHQRG 1nSR1Bn8UoLWwGpB0nMbsiaqBCCtDThnbMVCOJqQnNsQBculY7CGHyDn+dDp3/UW gAZ1D1AueH+daSs9vypxhV7D+6FlvCpE7AAn1ZkHx19miMUQlB/QjqDiGAZy3Vam uNZJucvltQ== -----END CERTIFICATE-----Generated at Wed May 13 19:42:35 2026 by rpki-client