$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft File: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft (raw, json) Hash identifier: /OvZTjf4pJmxco9KZJNlc9zZw1knwY/eXFQC6QyIjEg= Subject key identifier: 12:D6:89:74:92:34:89:C9:E9:BF:07:D5:99:AC:BD:07:79:AA:A2:34 Authority key identifier: 58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39 Certificate issuer: /CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39 Certificate serial: 529C80CBF0C64CADBDEC9AE8934E13E7F49BCD62 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 04:38:16 +0000 Manifest this update: Mon 02 Mar 2026 04:33:16 +0000 Manifest next update: Tue 03 Mar 2026 08:03:16 +0000 Files and hashes: 1: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl (hash: 3AbhfLODAa4qWCiAWHCv6kLHVhw8Q8JQdaHdAzNsZwc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:9c:80:cb:f0:c6:4c:ad:bd:ec:9a:e8:93:4e:13:e7:f4:9b:cd:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39 Validity Not Before: Mar 2 04:33:16 2026 GMT Not After : Mar 3 08:03:16 2026 GMT Subject: CN=12D68974923489C9E9BF07D599ACBD0779AAA234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7c:c3:76:98:88:eb:7b:c7:e1:07:6b:a8:93: d3:2d:d2:13:4c:d0:ad:d5:9a:27:02:fb:4f:ab:52: f3:03:68:bf:16:ca:01:13:44:36:9e:9f:8f:da:8c: b3:e2:06:91:17:1c:9a:71:c5:51:81:a0:74:0c:3c: 3a:37:44:52:30:45:cc:2b:34:46:f1:93:7b:6a:1f: 65:a7:41:2d:f4:eb:2a:cb:1e:32:7d:78:94:f5:11: 4c:31:e7:6a:f2:4a:7a:f3:04:34:15:7f:be:c8:bf: 38:9a:eb:dd:99:ec:4a:a0:9e:91:f6:e5:80:5d:88: 15:88:5b:f8:1a:97:1f:5f:e1:56:f4:74:98:93:78: 5b:c2:f1:c0:b0:18:df:64:68:80:7f:89:0e:77:e9: d8:db:b3:8e:ed:ed:22:01:54:7a:49:f9:d2:e4:53: 4f:58:2f:49:96:0b:1d:75:4b:8e:c3:6a:58:6e:74: 90:06:d9:1f:5d:cc:1b:bf:10:c6:9a:93:4b:0b:58: f2:37:a0:08:ae:02:0b:1b:b9:15:03:d8:e4:09:c4: 5a:2a:92:be:c6:4a:6f:64:23:69:ec:45:a9:32:e9: 79:37:11:fd:93:dc:38:78:b6:03:6a:8e:18:8b:0e: ff:a9:4f:40:35:35:63:7f:e6:23:23:6a:85:dc:a2: 61:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D6:89:74:92:34:89:C9:E9:BF:07:D5:99:AC:BD:07:79:AA:A2:34 X509v3 Authority Key Identifier: keyid:58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:79:bf:c4:93:c9:ef:20:db:cf:19:fd:35:66:61:9d:b3:9b: 82:84:cc:5b:21:d7:44:ac:6c:d2:34:99:87:55:bc:ed:a7:74: 03:24:f1:3a:b3:ef:8a:6c:bd:bd:f9:e3:92:7e:14:97:cb:f7: d9:a4:35:91:c9:c0:9f:42:3c:ef:09:70:20:94:35:0c:53:db: 07:90:b2:d1:7c:a4:0a:8e:48:3e:12:96:5f:bd:41:b6:49:23: af:aa:3b:26:c9:97:ec:95:45:c0:ff:02:ae:ba:d2:f7:b4:d4: 44:99:87:b1:3d:96:a0:89:31:e8:2a:bb:cc:b8:45:9b:13:f9: a8:9d:37:26:20:fc:2e:5f:8a:50:6b:2f:92:c0:59:e0:2f:06: d1:da:39:d1:10:29:b6:d3:21:28:aa:47:b8:93:63:fb:13:89: 8e:fb:61:2c:2b:86:d9:79:f3:1e:d3:e4:96:5d:de:9c:7d:08: f8:65:84:b5:d8:b3:e6:ab:9c:4b:57:0a:86:11:82:c6:f9:35: 69:01:c0:cb:75:89:f1:9b:54:7b:bc:e6:d2:55:da:d0:4f:39: 62:99:6b:8d:5b:75:48:3e:78:db:7d:c3:4f:2b:aa:69:0e:7a: ba:c6:64:3c:e3:95:67:dc:9d:1a:92:39:c4:f2:fe:e4:c3:7e: bd:4d:55:b1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUpyAy/DGTK297Jrok04T5/SbzWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2 RDU4OUIzOTAeFw0yNjAzMDIwNDMzMTZaFw0yNjAzMDMwODAzMTZaMDMxMTAvBgNV BAMTKDEyRDY4OTc0OTIzNDg5QzlFOUJGMDdENTk5QUNCRDA3NzlBQUEyMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDfMN2mIjre8fhB2uok9Mt0hNM 0K3VmicC+0+rUvMDaL8WygETRDaen4/ajLPiBpEXHJpxxVGBoHQMPDo3RFIwRcwr NEbxk3tqH2WnQS306yrLHjJ9eJT1EUwx52rySnrzBDQVf77Ivzia692Z7EqgnpH2 5YBdiBWIW/galx9f4Vb0dJiTeFvC8cCwGN9kaIB/iQ536djbs47t7SIBVHpJ+dLk U09YL0mWCx11S47DalhudJAG2R9dzBu/EMaak0sLWPI3oAiuAgsbuRUD2OQJxFoq kr7GSm9kI2nsRaky6Xk3Ef2T3Dh4tgNqjhiLDv+pT0A1NWN/5iMjaoXcomHHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEtaJdJI0icnpvwfVmay9B3mqojQwHwYDVR0j BBgwFoAUWPqrjhwYIXm0bh1tsenKWm1YmzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTM2Mjk0Ni8xLzU4RkFBQjhFMUMxODIxNzlCNDZFMUQ2REIxRTlD QTVBNkQ1ODlCMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2RDU4OUIzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjEzNjI5NDYvMS81OEZBQUI4RTFDMTgy MTc5QjQ2RTFENkRCMUU5Q0E1QTZENTg5QjM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3m/xJPJ7yDb zxn9NWZhnbObgoTMWyHXRKxs0jSZh1W87ad0AyTxOrPvimy9vfnjkn4Ul8v32aQ1 kcnAn0I87wlwIJQ1DFPbB5Cy0XykCo5IPhKWX71Btkkjr6o7JsmX7JVFwP8CrrrS 97TURJmHsT2WoIkx6Cq7zLhFmxP5qJ03JiD8Ll+KUGsvksBZ4C8G0do50RApttMh KKpHuJNj+xOJjvthLCuG2XnzHtPkll3enH0I+GWEtdiz5qucS1cKhhGCxvk1aQHA y3WJ8ZtUe7zm0lXa0E85YplrjVt1SD54233DTyuqaQ56usZkPOOVZ9ydGpI5xPL+ 5MN+vU1VsQ== -----END CERTIFICATE-----Generated at Mon Mar 2 20:52:57 2026 by rpki-client