$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft File: 66E8C6C4D3432C457DBC420613F170D1895B607C.mft (raw, json) Hash identifier: Bq0zwS83jM/cCM8ayO9UL5zdyjhteiBfciMNqi4987c= Subject key identifier: 14:5F:63:9A:B4:96:BB:A6:9E:D0:DE:71:B7:1F:30:81:11:E5:BC:3C Authority key identifier: 66:E8:C6:C4:D3:43:2C:45:7D:BC:42:06:13:F1:70:D1:89:5B:60:7C Certificate issuer: /CN=66E8C6C4D3432C457DBC420613F170D1895B607C Certificate serial: 7D1F644CC613874843EBE296E1FD3BBD952045B5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft Manifest number: CB Signing time: Tue 13 Oct 2026 08:47:53 +0000 Manifest this update: Tue 13 Oct 2026 08:42:53 +0000 Manifest next update: Fri 16 Oct 2026 11:53:53 +0000 Files and hashes: 1: 3131392e34322e3133362e302f32312d3234203d3e203338333735.roa (hash: onz07yEDGzQ5lM3czrPnQNjHr6shpdjA+AGj0B+B8V0=) 2: 66E8C6C4D3432C457DBC420613F170D1895B607C.crl (hash: rDMDseLxkwd/1ETP4ZyuyWW1Rpnz/btjpCCmwD1mRGY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.crl rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 11:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:1f:64:4c:c6:13:87:48:43:eb:e2:96:e1:fd:3b:bd:95:20:45:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66E8C6C4D3432C457DBC420613F170D1895B607C Validity Not Before: Oct 13 08:42:53 2026 GMT Not After : Oct 16 11:53:53 2026 GMT Subject: CN=145F639AB496BBA69ED0DE71B71F308111E5BC3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:81:c4:9a:ce:7e:6d:44:9b:d6:9f:f2:79:72: ac:57:44:bf:0d:20:d5:bb:83:65:1c:b1:2b:d3:92: dd:21:ac:74:a0:52:b4:2b:77:06:61:45:85:1f:c0: 46:d5:b2:28:1c:6e:c7:ee:b1:e8:3e:37:3c:51:8d: ee:f7:00:57:94:1d:dd:93:75:74:e9:50:68:0c:33: e0:fc:a4:19:e2:75:a4:b5:40:84:22:1c:c0:c2:39: 3e:85:eb:e3:f2:28:c7:10:5e:c8:80:61:d2:0e:ec: 0d:61:fa:78:e3:ad:82:00:0f:f9:5b:16:b7:ee:96: f8:b3:9a:b6:b3:31:b7:f4:76:b7:5c:00:65:68:84: c1:bc:9a:2f:bc:6d:77:88:af:ec:d6:9e:44:c0:4d: 7f:ae:c9:4b:af:70:d4:c1:45:e7:a3:3f:f7:67:52: 27:9d:e6:1d:2a:71:b1:c0:74:b3:82:0a:9a:3f:c0: 9a:f8:6e:8c:d1:e7:65:c6:77:8b:5f:d0:85:96:a3: 21:4a:48:24:ed:ed:e7:f0:f6:c8:00:c9:d2:d8:e7: 69:09:ae:ee:89:6a:8c:6a:d6:59:4f:52:3b:65:c8: 8c:a1:97:c4:44:9f:21:6d:8a:ea:30:08:c6:5b:27: 88:c3:8a:e8:0b:a0:bf:16:b0:0c:d5:49:25:ac:c4: 2d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:5F:63:9A:B4:96:BB:A6:9E:D0:DE:71:B7:1F:30:81:11:E5:BC:3C X509v3 Authority Key Identifier: keyid:66:E8:C6:C4:D3:43:2C:45:7D:BC:42:06:13:F1:70:D1:89:5B:60:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:54:d5:e4:82:2d:ea:4a:de:54:69:cb:cb:f6:62:07:94:d8: 93:06:99:23:14:b9:e7:bd:89:db:86:aa:34:e1:1d:49:fe:20: 71:1c:9e:c2:58:0a:aa:5e:5e:0b:de:2a:d4:51:ca:f0:1c:0b: 1f:fb:f9:43:ec:6a:0d:4f:48:3d:e8:5a:6e:09:d7:73:a7:2a: 78:4f:f4:9b:20:2c:90:e6:2c:e6:d9:00:8f:53:34:fb:6e:06: 68:f3:f9:67:6d:e1:70:81:1b:46:8a:24:07:8c:15:6b:31:88: 4a:1c:d5:9a:e9:fe:21:7e:31:bc:71:f4:2a:be:b3:09:8d:3b: 2e:16:ea:07:2c:c5:21:92:45:d5:a7:f2:3b:85:b9:64:e1:56: 5f:b6:00:91:74:16:e5:44:8f:05:24:45:8c:09:62:a5:4d:9b: 13:3b:c9:3c:04:91:09:d8:22:de:1f:6b:04:3d:f0:c3:ea:64: 7a:56:09:94:4f:76:2d:48:d3:fa:80:b3:4b:1e:bb:75:7a:27: 5a:67:cc:92:84:be:52:c8:70:4a:4d:04:78:ae:5a:20:13:9a: 59:89:2b:cc:6a:4f:3f:3f:8a:1a:33:0f:fe:31:d3:8a:59:a0: ad:51:c7:39:11:96:a6:df:8f:b4:d9:5c:89:f1:21:c9:08:da: da:1d:0f:18 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfR9kTMYTh0hD6+KW4f07vZUgRbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZFOEM2QzREMzQzMkM0NTdEQkM0MjA2MTNGMTcwRDE4 OTVCNjA3QzAeFw0yNjEwMTMwODQyNTNaFw0yNjEwMTYxMTUzNTNaMDMxMTAvBgNV BAMTKDE0NUY2MzlBQjQ5NkJCQTY5RUQwREU3MUI3MUYzMDgxMTFFNUJDM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFgcSazn5tRJvWn/J5cqxXRL8N INW7g2UcsSvTkt0hrHSgUrQrdwZhRYUfwEbVsigcbsfuseg+NzxRje73AFeUHd2T dXTpUGgMM+D8pBnidaS1QIQiHMDCOT6F6+PyKMcQXsiAYdIO7A1h+njjrYIAD/lb FrfulvizmrazMbf0drdcAGVohMG8mi+8bXeIr+zWnkTATX+uyUuvcNTBReejP/dn Uied5h0qcbHAdLOCCpo/wJr4bozR52XGd4tf0IWWoyFKSCTt7efw9sgAydLY52kJ ru6Jaoxq1llPUjtlyIyhl8REnyFtiuowCMZbJ4jDiugLoL8WsAzVSSWsxC01AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUFF9jmrSWu6ae0N5xtx8wgRHlvDwwHwYDVR0j BBgwFoAUZujGxNNDLEV9vEIGE/Fw0YlbYHwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYyODQzNjY3NzQyNzIwMS8wLzY2RThDNkM0RDM0MzJDNDU3REJDNDIwNjEzRjE3 MEQxODk1QjYwN0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZFOEM2QzREMzQzMkM0NTdEQkM0MjA2MTNGMTcwRDE4OTVCNjA3Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2Mjg0MzY2Nzc0MjcyMDEvMC82NkU4QzZDNEQzNDMy QzQ1N0RCQzQyMDYxM0YxNzBEMTg5NUI2MDdDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxFTV5IIt6kre VGnLy/ZiB5TYkwaZIxS5572J24aqNOEdSf4gcRyewlgKql5eC94q1FHK8BwLH/v5 Q+xqDU9IPehabgnXc6cqeE/0myAskOYs5tkAj1M0+24GaPP5Z23hcIEbRookB4wV azGIShzVmun+IX4xvHH0Kr6zCY07LhbqByzFIZJF1afyO4W5ZOFWX7YAkXQW5USP BSRFjAlipU2bEzvJPASRCdgi3h9rBD3ww+pkelYJlE92LUjT+oCzSx67dXonWmfM koS+UshwSk0EeK5aIBOaWYkrzGpPPz+KGjMP/jHTilmgrVHHORGWpt+PtNlcifEh yQja2h0PGA== -----END CERTIFICATE-----Generated at Wed Oct 14 11:55:55 2026 by rpki-client