
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft
File: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft (raw, json)
Hash identifier: bVOEVnraSTMMkFkPzwfEtc9rAylX2nSaAgNui8AJ51Y=
Subject key identifier: B1:28:ED:CE:19:EE:97:68:8B:4E:CE:86:3A:60:C7:E7:57:04:7D:D2
Authority key identifier: 58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39
Certificate issuer: /CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39
Certificate serial: 329C28BBFBFFBFC405B3966A43F9392A75AD13D9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft
Manifest number: 069B
Signing time: Sat 13 Jun 2026 13:06:49 +0000
Manifest this update: Sat 13 Jun 2026 13:01:49 +0000
Manifest next update: Sun 14 Jun 2026 16:41:49 +0000
Files and hashes: 1: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl (hash: rMlSeP/VovTpA4AP8vmopeUJ3culosbW+WWNcK3KJMk=)
2: AS45090.roa (hash: v9bIhUSWFpO+Oe9WfYi+pPkr+55HVbJ/yALR+h7JiOs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:9c:28:bb:fb:ff:bf:c4:05:b3:96:6a:43:f9:39:2a:75:ad:13:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39
Validity
Not Before: Jun 13 13:01:49 2026 GMT
Not After : Jun 14 16:41:49 2026 GMT
Subject: CN=B128EDCE19EE97688B4ECE863A60C7E757047DD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:db:2e:2d:40:f0:76:cd:26:23:6f:58:7e:
09:eb:36:7e:f2:5c:ff:3c:cb:38:8c:57:06:2a:bc:
56:5e:dc:c9:82:d5:a4:26:0b:0a:15:00:72:92:cd:
35:67:0b:51:86:f1:44:64:5e:d6:f6:dc:d6:1c:57:
70:c1:c2:46:ef:1a:34:f3:3f:72:6f:41:6e:bd:3c:
d0:1d:0f:87:39:01:7d:76:3d:ea:c7:9f:3f:94:83:
ae:a0:0d:7e:b2:ba:6b:d7:c8:de:e2:4d:78:e3:46:
2e:f5:35:27:13:68:62:d0:69:00:06:51:f9:f7:d7:
ab:79:13:11:7d:d8:5f:fc:ee:bf:10:4e:3b:be:90:
31:58:1d:fa:42:e4:2c:2a:e4:21:95:10:d7:a3:70:
2a:82:fc:b3:75:71:f7:c0:da:77:9a:6b:be:99:fc:
bd:df:4d:da:c5:aa:81:e2:1b:dc:46:bc:5b:17:ae:
ca:e4:33:b0:74:57:44:eb:c0:97:7d:54:93:79:f7:
48:f2:9a:92:9d:0a:32:f4:18:57:9e:0e:7e:b9:3c:
64:95:46:2e:b5:54:9a:69:e9:c8:03:82:35:9d:60:
08:b4:5d:61:b2:7b:87:48:6f:8c:a4:df:ea:39:f5:
7a:0c:06:9e:d3:74:ff:d6:0d:85:ce:51:bf:a6:e2:
70:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:28:ED:CE:19:EE:97:68:8B:4E:CE:86:3A:60:C7:E7:57:04:7D:D2
X509v3 Authority Key Identifier:
keyid:58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4c:70:3f:c7:90:a6:e0:2b:5a:b3:8c:b2:bc:79:b9:00:b8:
38:47:c4:6d:21:ea:88:a9:3e:56:c4:14:3b:5a:82:b8:b7:bc:
30:d4:36:e5:03:04:36:e7:b8:20:d8:74:72:c7:99:19:c7:25:
db:5c:6e:90:af:d8:6e:39:f5:9e:6a:3e:e9:be:49:24:cf:ac:
44:72:c0:03:cb:87:f7:76:35:fe:c1:13:b6:12:8e:31:53:3a:
51:39:ed:28:84:bb:95:67:56:f2:dd:9b:e0:4b:e2:97:1c:20:
79:c5:b4:0b:f1:08:2b:8f:84:00:1d:12:ef:30:b1:df:26:58:
da:f6:68:7f:30:9e:2d:87:96:ca:cf:78:0c:7f:9a:d9:27:a2:
30:40:5d:52:ef:35:98:dd:93:d7:02:45:73:bf:be:d3:23:93:
76:e9:de:e0:fd:a9:87:fe:9f:ef:eb:c7:d7:43:02:ba:1c:7b:
85:b4:69:ae:b2:46:e2:87:fd:b6:05:d0:5f:40:2a:4d:5c:3b:
95:16:b6:72:7d:3e:c8:25:ba:58:2d:a7:cc:79:2c:4e:99:3f:
11:9c:6a:e9:29:92:21:69:a0:d2:4c:fc:fb:e1:70:2a:b4:9e:
cc:7f:21:71:b4:90:87:21:50:33:f1:79:8b:a1:f9:63:31:c8:
6a:75:79:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:10:48 2026 by rpki-client