$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft File: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft (raw, json) Hash identifier: 0eRXQEuyR5ZgfdFmhdehBRBJMNAzhB1+wtmVtdHSFk4= Subject key identifier: 6E:E8:9F:BE:6D:66:42:AE:A7:8F:12:99:A1:B9:AE:53:EC:E6:75:F5 Authority key identifier: 58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39 Certificate issuer: /CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39 Certificate serial: 1C859F6AD264881A4101180ED84D975219BA2B8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft Manifest number: 07E1 Signing time: Tue 28 Jul 2026 19:02:34 +0000 Manifest this update: Tue 28 Jul 2026 18:57:34 +0000 Manifest next update: Wed 29 Jul 2026 21:32:34 +0000 Files and hashes: 1: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl (hash: VzL+1TKQDDq248xWoFb3Gj3CpUzm+E23Yx7UN6MU5KI=) 2: AS45090.roa (hash: v9bIhUSWFpO+Oe9WfYi+pPkr+55HVbJ/yALR+h7JiOs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:32:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:85:9f:6a:d2:64:88:1a:41:01:18:0e:d8:4d:97:52:19:ba:2b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39 Validity Not Before: Jul 28 18:57:34 2026 GMT Not After : Jul 29 21:32:34 2026 GMT Subject: CN=6EE89FBE6D6642AEA78F1299A1B9AE53ECE675F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8a:46:52:bf:9e:ae:84:3c:5a:48:e1:e0:1b: ad:de:a7:11:0d:cf:b3:9a:f7:11:6e:27:aa:a6:c5: a3:60:41:40:3a:24:d6:0b:8a:75:6c:8a:25:6c:1e: f8:d0:39:6d:28:b4:28:f5:e4:d2:a6:28:0f:e9:fb: 14:64:f1:4c:09:43:b3:ac:7d:f5:7e:42:03:15:1a: 3a:69:3f:e2:05:5c:75:03:02:53:5a:77:c2:12:42: f4:a4:f8:9f:e2:cd:4c:8c:eb:6a:71:c0:1d:02:b5: a7:19:35:18:0a:8a:91:4a:55:1f:7a:34:47:88:5f: e3:2e:d0:16:bd:db:2b:a2:13:99:e6:7b:e7:f8:87: 1f:95:11:a3:b6:31:84:31:18:34:52:96:17:35:bb: b9:e1:96:17:04:40:84:28:37:75:ea:d2:0d:95:93: 66:38:1f:a8:17:ec:cd:a2:ff:8a:02:41:91:55:f7: f4:24:0e:8b:63:30:20:29:29:85:6f:1a:01:73:3c: d4:17:04:73:da:f4:4b:e2:5f:9e:0c:09:58:78:30: d9:9a:a6:71:2e:83:79:89:65:67:8b:95:45:e5:53: 57:c4:27:3a:c3:51:95:ae:8c:ee:02:5f:c7:1c:94: e9:45:f0:73:0a:cc:45:2b:54:04:6c:5b:52:48:7e: b1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E8:9F:BE:6D:66:42:AE:A7:8F:12:99:A1:B9:AE:53:EC:E6:75:F5 X509v3 Authority Key Identifier: keyid:58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:73:00:de:92:af:13:88:eb:ed:a4:be:a6:05:54:a3:22:f5: d0:45:bb:a7:8d:60:56:d1:8e:45:76:dd:bc:a5:ec:0c:7f:50: fb:d5:34:93:ff:19:25:e7:60:29:cf:be:1b:5d:4a:f2:20:34: 94:8f:74:b3:f4:13:69:3e:09:7b:f9:32:7e:78:dd:79:ed:c9: 34:4a:6d:ce:a2:d6:74:e6:74:e4:dd:c2:57:bf:43:2d:25:07: a1:d5:91:62:d0:5d:e4:de:a3:c5:b3:35:61:0e:13:1c:30:4e: 49:4a:9c:c6:32:55:1e:ea:fb:d7:96:98:be:92:7a:c8:ce:82: 7c:66:26:f1:38:1f:c7:46:00:81:47:cc:e7:71:b6:e2:77:5f: de:66:88:21:fd:cf:89:07:1c:52:4b:49:a0:24:26:9a:77:b4: fa:89:40:41:59:c4:9f:9e:83:2c:70:fb:0c:50:60:12:13:49: e0:f5:82:8f:d5:48:c9:3e:44:bd:26:86:2b:ab:99:fa:c7:22: b7:2d:96:19:d1:c8:e2:d3:b1:d9:5a:d9:c6:00:66:67:72:bd: a2:65:e2:da:a7:b4:fc:28:c2:7d:e5:f0:03:1d:cf:ad:b6:0f: ec:e3:22:6b:8a:6e:a7:c7:53:27:90:83:d6:f4:aa:be:50:3d: 58:55:60:18 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHIWfatJkiBpBARgO2E2XUhm6K44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2 RDU4OUIzOTAeFw0yNjA3MjgxODU3MzRaFw0yNjA3MjkyMTMyMzRaMDMxMTAvBgNV BAMTKDZFRTg5RkJFNkQ2NjQyQUVBNzhGMTI5OUExQjlBRTUzRUNFNjc1RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLikZSv56uhDxaSOHgG63epxEN z7Oa9xFuJ6qmxaNgQUA6JNYLinVsiiVsHvjQOW0otCj15NKmKA/p+xRk8UwJQ7Os ffV+QgMVGjppP+IFXHUDAlNad8ISQvSk+J/izUyM62pxwB0CtacZNRgKipFKVR96 NEeIX+Mu0Ba92yuiE5nme+f4hx+VEaO2MYQxGDRSlhc1u7nhlhcEQIQoN3Xq0g2V k2Y4H6gX7M2i/4oCQZFV9/QkDotjMCApKYVvGgFzPNQXBHPa9EviX54MCVh4MNma pnEug3mJZWeLlUXlU1fEJzrDUZWujO4CX8cclOlF8HMKzEUrVARsW1JIfrFVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUbuifvm1mQq6njxKZobmuU+zmdfUwHwYDVR0j BBgwFoAUWPqrjhwYIXm0bh1tsenKWm1YmzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTM2Mjk0Ni8xLzU4RkFBQjhFMUMxODIxNzlCNDZFMUQ2REIxRTlD QTVBNkQ1ODlCMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2RDU4OUIzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjEzNjI5NDYvMS81OEZBQUI4RTFDMTgy MTc5QjQ2RTFENkRCMUU5Q0E1QTZENTg5QjM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZHMA3pKvE4jr 7aS+pgVUoyL10EW7p41gVtGORXbdvKXsDH9Q+9U0k/8ZJedgKc++G11K8iA0lI90 s/QTaT4Je/kyfnjdee3JNEptzqLWdOZ05N3CV79DLSUHodWRYtBd5N6jxbM1YQ4T HDBOSUqcxjJVHur715aYvpJ6yM6CfGYm8Tgfx0YAgUfM53G24ndf3maIIf3PiQcc UktJoCQmmne0+olAQVnEn56DLHD7DFBgEhNJ4PWCj9VIyT5EvSaGK6uZ+scity2W GdHI4tOx2VrZxgBmZ3K9omXi2qe0/CjCfeXwAx3PrbYP7OMia4pup8dTJ5CD1vSq vlA9WFVgGA== -----END CERTIFICATE-----Generated at Wed Jul 29 12:31:11 2026 by rpki-client