$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft File: 66E8C6C4D3432C457DBC420613F170D1895B607C.mft (raw, json) Hash identifier: fneG9YSGcfovjvtMAbHBarj6331IR+m4Q9Bq2o9C7Hg= Subject key identifier: 3D:10:9A:D1:0C:52:E8:2D:91:17:1E:AB:03:52:36:87:A8:81:72:7F Authority key identifier: 66:E8:C6:C4:D3:43:2C:45:7D:BC:42:06:13:F1:70:D1:89:5B:60:7C Certificate issuer: /CN=66E8C6C4D3432C457DBC420613F170D1895B607C Certificate serial: 1923D8DDD8ADC0915A7292426B99F84E0637B8E7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft Manifest number: 88 Signing time: Thu 23 Jul 2026 23:04:47 +0000 Manifest this update: Thu 23 Jul 2026 22:59:47 +0000 Manifest next update: Sat 25 Jul 2026 01:42:47 +0000 Files and hashes: 1: 66E8C6C4D3432C457DBC420613F170D1895B607C.crl (hash: lUPFHe1nDYIYQPu0MogM8SUTZIXFau4j4es1bqWRtUo=) 2: 3131392e34322e3133362e302f32312d3234203d3e203338333735.roa (hash: onz07yEDGzQ5lM3czrPnQNjHr6shpdjA+AGj0B+B8V0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.crl rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:23:d8:dd:d8:ad:c0:91:5a:72:92:42:6b:99:f8:4e:06:37:b8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66E8C6C4D3432C457DBC420613F170D1895B607C Validity Not Before: Jul 23 22:59:47 2026 GMT Not After : Jul 25 01:42:47 2026 GMT Subject: CN=3D109AD10C52E82D91171EAB03523687A881727F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:92:e0:09:80:e6:59:91:43:8a:b4:17:81:40: e6:05:76:f4:63:57:c9:f6:d2:76:b0:27:a6:80:b1: 78:7e:b6:81:13:3e:6d:0f:bf:1d:c0:2c:57:58:bd: 2c:78:79:3c:9b:d5:cc:5d:27:fc:15:51:ff:d9:f1: 04:a3:06:cc:7e:d5:c8:ca:30:94:d8:06:90:ea:9f: 84:bd:d9:0d:ec:1e:f2:82:e9:59:a6:e8:e7:3d:4e: 3a:4d:9c:05:72:8a:66:eb:1e:ca:8a:66:81:0f:be: 0d:7a:61:a8:0f:60:5d:83:ef:69:ce:19:07:54:1c: 40:c2:ad:e4:74:42:22:6d:b2:0c:f1:17:f3:c1:e2: 80:9a:16:26:17:56:5b:52:75:f3:48:89:83:f4:48: 3a:f4:56:0b:23:5f:39:8f:bf:c8:85:9c:da:f4:ca: d7:f3:d5:81:c0:aa:13:34:2a:8c:ca:39:e6:4b:73: c0:b8:ef:e9:61:63:31:23:1d:37:80:d6:5e:8a:00: 5b:1d:a5:d0:65:74:ca:a9:d0:56:5f:2c:c9:ce:95: f3:1b:6b:62:fb:7f:80:ef:36:00:e7:1c:44:10:ee: 93:e8:3f:78:54:91:d0:86:36:81:67:75:0d:97:61: 8e:68:aa:91:b8:7c:e0:cb:d4:32:ab:33:ec:c0:28: 63:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:10:9A:D1:0C:52:E8:2D:91:17:1E:AB:03:52:36:87:A8:81:72:7F X509v3 Authority Key Identifier: keyid:66:E8:C6:C4:D3:43:2C:45:7D:BC:42:06:13:F1:70:D1:89:5B:60:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/66E8C6C4D3432C457DBC420613F170D1895B607C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096628436677427201/0/66E8C6C4D3432C457DBC420613F170D1895B607C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:64:10:92:09:f5:99:f2:db:22:c6:aa:20:86:48:44:c6:b0: 06:4e:d1:93:4c:84:13:e7:6a:00:a2:4c:8d:45:2f:67:db:8c: 78:6a:92:7c:0b:39:77:4c:4e:b3:b0:99:e0:c4:af:24:77:3d: 97:b9:dd:97:df:16:7c:44:ef:8c:d5:70:ea:7c:27:1e:0d:08: fe:50:24:fa:86:1d:44:34:eb:fa:a4:4c:30:b7:63:45:d8:f3: 54:2a:e9:2b:4d:dd:76:67:de:eb:e3:e7:f7:39:38:2e:9d:aa: d5:83:8d:5a:c6:52:9b:7c:53:92:62:21:67:05:93:ed:cf:70: 4a:31:24:51:41:f1:b8:3b:81:dc:bd:1f:f4:07:a6:a3:24:6b: 69:79:d6:49:a2:5c:ee:7d:b0:b4:89:02:44:16:36:84:69:87: e5:7f:bf:90:5f:37:b2:69:1d:a2:c3:9f:94:75:f3:a0:c9:43: 90:17:b0:b3:e3:24:be:3d:69:4b:f9:3e:c3:0d:7f:93:15:c9: 38:a9:df:5f:a4:06:0b:d5:d6:80:4d:43:ca:e2:b1:d2:8b:38: 89:82:d4:e4:6a:c5:8b:47:a6:30:00:14:7e:43:47:dd:a9:9b: 4d:a4:25:27:97:03:98:64:de:ad:4c:d0:8b:bc:65:4e:5a:51: 9e:f6:96:92 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGSPY3ditwJFacpJCa5n4TgY3uOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZFOEM2QzREMzQzMkM0NTdEQkM0MjA2MTNGMTcwRDE4 OTVCNjA3QzAeFw0yNjA3MjMyMjU5NDdaFw0yNjA3MjUwMTQyNDdaMDMxMTAvBgNV BAMTKDNEMTA5QUQxMEM1MkU4MkQ5MTE3MUVBQjAzNTIzNjg3QTg4MTcyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvkuAJgOZZkUOKtBeBQOYFdvRj V8n20nawJ6aAsXh+toETPm0Pvx3ALFdYvSx4eTyb1cxdJ/wVUf/Z8QSjBsx+1cjK MJTYBpDqn4S92Q3sHvKC6Vmm6Oc9TjpNnAVyimbrHsqKZoEPvg16YagPYF2D72nO GQdUHEDCreR0QiJtsgzxF/PB4oCaFiYXVltSdfNIiYP0SDr0VgsjXzmPv8iFnNr0 ytfz1YHAqhM0KozKOeZLc8C47+lhYzEjHTeA1l6KAFsdpdBldMqp0FZfLMnOlfMb a2L7f4DvNgDnHEQQ7pPoP3hUkdCGNoFndQ2XYY5oqpG4fODL1DKrM+zAKGP/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPRCa0QxS6C2RFx6rA1I2h6iBcn8wHwYDVR0j BBgwFoAUZujGxNNDLEV9vEIGE/Fw0YlbYHwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYyODQzNjY3NzQyNzIwMS8wLzY2RThDNkM0RDM0MzJDNDU3REJDNDIwNjEzRjE3 MEQxODk1QjYwN0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjZFOEM2QzREMzQzMkM0NTdEQkM0MjA2MTNGMTcwRDE4OTVCNjA3Qy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2Mjg0MzY2Nzc0MjcyMDEvMC82NkU4QzZDNEQzNDMy QzQ1N0RCQzQyMDYxM0YxNzBEMTg5NUI2MDdDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYGQQkgn1mfLb IsaqIIZIRMawBk7Rk0yEE+dqAKJMjUUvZ9uMeGqSfAs5d0xOs7CZ4MSvJHc9l7nd l98WfETvjNVw6nwnHg0I/lAk+oYdRDTr+qRMMLdjRdjzVCrpK03ddmfe6+Pn9zk4 Lp2q1YONWsZSm3xTkmIhZwWT7c9wSjEkUUHxuDuB3L0f9AemoyRraXnWSaJc7n2w tIkCRBY2hGmH5X+/kF83smkdosOflHXzoMlDkBews+Mkvj1pS/k+ww1/kxXJOKnf X6QGC9XWgE1DyuKx0os4iYLU5GrFi0emMAAUfkNH3ambTaQlJ5cDmGTerUzQi7xl TlpRnvaWkg== -----END CERTIFICATE-----Generated at Fri Jul 24 16:44:40 2026 by rpki-client