$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft File: 66E8C6C4D3432C457DBC420613F170D1895B607C.mft (raw, json) Hash identifier: kuQPCW+r0dS5a9jzDm8Yxm5742ymBbUvfaign+1TaY4= Subject key identifier: 81:54:38:7C:5D:2A:16:04:AB:61:D7:01:47:72:25:0F:FB:96:D0:D0 Authority key identifier: 66:E8:C6:C4:D3:43:2C:45:7D:BC:42:06:13:F1:70:D1:89:5B:60:7C Certificate issuer: /CN=66E8C6C4D3432C457DBC420613F170D1895B607C Certificate serial: 04FB276DC0146C2D1B92ED5D6BD31700F630119C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft Manifest number: 28 Signing time: Wed 13 May 2026 06:16:00 +0000 Manifest this update: Wed 13 May 2026 06:11:00 +0000 Manifest next update: Thu 14 May 2026 09:39:00 +0000 Files and hashes: 1: 66E8C6C4D3432C457DBC420613F170D1895B607C.crl (hash: MvKM1/6lnunfeSec1BGgvMoOYrno9/Emhilb2ZSfdI4=) 2: 3131392e34322e3133362e302f32312d3234203d3e203338333735.roa (hash: onz07yEDGzQ5lM3czrPnQNjHr6shpdjA+AGj0B+B8V0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.crl rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:39:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:fb:27:6d:c0:14:6c:2d:1b:92:ed:5d:6b:d3:17:00:f6:30:11:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66E8C6C4D3432C457DBC420613F170D1895B607C Validity Not Before: May 13 06:11:00 2026 GMT Not After : May 14 09:39:00 2026 GMT Subject: CN=8154387C5D2A1604AB61D7014772250FFB96D0D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d5:90:cd:2d:5e:73:43:31:39:f7:a5:54:32: fe:73:d6:32:43:ba:64:16:3a:7b:70:0b:3a:ee:95: ab:9f:c0:e9:ca:05:ea:57:fe:7b:b6:53:a0:30:99: 70:48:45:1e:3d:ec:21:00:d0:d1:c0:4f:1f:49:90: b1:cb:9d:47:fa:57:2c:05:2e:bd:d3:e8:ec:1f:37: 34:5b:c5:44:97:51:c1:74:61:eb:ae:6a:c1:e3:4a: 87:ae:3d:3a:56:5e:69:0c:7f:9a:46:44:f2:7f:01: 5a:56:78:45:df:b7:1a:46:ee:38:f7:24:51:a3:a3: e9:19:27:22:71:fb:d8:d1:95:60:18:d4:df:35:d5: 5e:bc:3c:4c:07:a6:80:7b:d5:a4:09:25:27:f6:55: 2e:4d:b9:db:74:06:43:a2:61:28:09:d9:b2:9b:37: e3:9c:5b:33:39:fe:58:8f:5e:76:19:93:a9:5b:f5: 7b:b9:65:ff:a2:54:5c:d9:7d:63:50:2e:54:f3:1f: 49:51:1d:c5:f8:7e:4e:13:af:34:7d:7a:53:eb:7a: e0:74:61:81:6f:6c:62:09:fe:bc:a7:ab:fd:5e:8b: 82:6d:bb:8f:4f:6b:d0:9d:c1:9c:75:28:fe:2e:df: a8:15:36:87:72:45:56:1c:5e:2b:ef:92:27:48:18: c0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:54:38:7C:5D:2A:16:04:AB:61:D7:01:47:72:25:0F:FB:96:D0:D0 X509v3 Authority Key Identifier: keyid:66:E8:C6:C4:D3:43:2C:45:7D:BC:42:06:13:F1:70:D1:89:5B:60:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e7:47:b6:6f:4f:a1:1e:6a:a6:fc:74:85:45:88:ee:81:68: 97:d4:81:a8:ac:1d:fa:7f:96:11:fd:f1:c5:fa:f7:00:8c:f4: 56:c2:11:dc:07:ab:f9:67:ff:93:be:1d:5d:15:16:ac:ed:1c: c3:c2:cd:02:e0:ba:fa:9d:46:81:36:21:a1:5b:3e:11:b6:c1: 42:b7:ed:cc:09:0a:c1:13:44:5f:bc:51:0c:25:c7:1f:14:b6: d7:04:58:96:e8:30:f2:4a:b6:e6:af:69:07:9e:bb:4c:45:8b: 8e:97:fc:3b:2f:96:59:22:84:c7:25:d5:9f:bf:65:61:72:a4: 34:f4:35:5c:34:67:25:4d:70:c9:37:c9:21:97:62:21:fa:c5: fd:6a:79:37:b1:83:db:22:81:e7:2a:be:ea:f8:ef:22:e9:ee: 58:f1:b5:2b:95:ca:be:29:b6:14:ad:87:83:04:2f:ae:d5:1d: e6:09:83:43:e9:95:45:60:11:f5:dd:19:67:c3:3a:fe:8a:e4: f4:c4:c9:c8:be:a5:ff:2f:2c:ec:74:2c:b8:79:b0:06:ee:54: 40:7e:f5:82:99:a8:12:db:5f:50:3d:d1:a7:1e:7c:19:3c:d6: 6c:b5:16:3d:24:ba:de:fc:32:87:0f:f2:1e:3c:d1:2b:98:17: 6b:06:a7:95 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBPsnbcAUbC0bku1da9MXAPYwEZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZFOEM2QzREMzQzMkM0NTdEQkM0MjA2MTNGMTcwRDE4 OTVCNjA3QzAeFw0yNjA1MTMwNjExMDBaFw0yNjA1MTQwOTM5MDBaMDMxMTAvBgNV BAMTKDgxNTQzODdDNUQyQTE2MDRBQjYxRDcwMTQ3NzIyNTBGRkI5NkQwRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE1ZDNLV5zQzE596VUMv5z1jJD umQWOntwCzrulaufwOnKBepX/nu2U6AwmXBIRR497CEA0NHATx9JkLHLnUf6VywF Lr3T6OwfNzRbxUSXUcF0YeuuasHjSoeuPTpWXmkMf5pGRPJ/AVpWeEXftxpG7jj3 JFGjo+kZJyJx+9jRlWAY1N811V68PEwHpoB71aQJJSf2VS5Nudt0BkOiYSgJ2bKb N+OcWzM5/liPXnYZk6lb9Xu5Zf+iVFzZfWNQLlTzH0lRHcX4fk4TrzR9elPreuB0 YYFvbGIJ/rynq/1ei4Jtu49Pa9CdwZx1KP4u36gVNodyRVYcXivvkidIGMDfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgVQ4fF0qFgSrYdcBR3IlD/uW0NAwHwYDVR0j BBgwFoAUZujGxNNDLEV9vEIGE/Fw0YlbYHwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYyODQzNjY3NzQyNzIwMS8wLzY2RThDNkM0RDM0MzJDNDU3REJDNDIwNjEzRjE3 MEQxODk1QjYwN0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZFOEM2QzREMzQzMkM0NTdEQkM0MjA2MTNGMTcwRDE4OTVCNjA3Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2Mjg0MzY2Nzc0MjcyMDEvMC82NkU4QzZDNEQzNDMy QzQ1N0RCQzQyMDYxM0YxNzBEMTg5NUI2MDdDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+dHtm9PoR5q pvx0hUWI7oFol9SBqKwd+n+WEf3xxfr3AIz0VsIR3Aer+Wf/k74dXRUWrO0cw8LN AuC6+p1GgTYhoVs+EbbBQrftzAkKwRNEX7xRDCXHHxS21wRYlugw8kq25q9pB567 TEWLjpf8Oy+WWSKExyXVn79lYXKkNPQ1XDRnJU1wyTfJIZdiIfrF/Wp5N7GD2yKB 5yq+6vjvIunuWPG1K5XKvim2FK2HgwQvrtUd5gmDQ+mVRWAR9d0ZZ8M6/ork9MTJ yL6l/y8s7HQsuHmwBu5UQH71gpmoEttfUD3Rpx58GTzWbLUWPSS63vwyhw/yHjzR K5gXawanlQ== -----END CERTIFICATE-----Generated at Wed May 13 20:55:29 2026 by rpki-client