
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft
File: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft (raw, json)
Hash identifier: wSP3lUvZhwQIz1UuUO6NvL+t8V4YBnfbl6w97csZDK8=
Subject key identifier: 79:08:2E:78:76:34:98:7C:91:E8:B5:FE:60:A7:E3:09:12:D3:73:A0
Authority key identifier: 58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39
Certificate issuer: /CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39
Certificate serial: 078109C817358E0837AB9EBA8D875239B7BA6D58
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft
Manifest number: 081E
Signing time: Mon 12 Oct 2026 16:32:08 +0000
Manifest this update: Mon 12 Oct 2026 16:27:08 +0000
Manifest next update: Fri 16 Oct 2026 00:48:08 +0000
Files and hashes: 1: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl (hash: zcq8zmPyZCMENxl0oCMKrwZQ69lYgVjgJhRBrnedgXA=)
2: AS45090.roa (hash: v9bIhUSWFpO+Oe9WfYi+pPkr+55HVbJ/yALR+h7JiOs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 10:58:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:81:09:c8:17:35:8e:08:37:ab:9e:ba:8d:87:52:39:b7:ba:6d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39
Validity
Not Before: Oct 12 16:27:08 2026 GMT
Not After : Oct 16 00:48:08 2026 GMT
Subject: CN=79082E787634987C91E8B5FE60A7E30912D373A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a9:ae:79:70:32:00:d5:67:1f:f0:5f:25:d1:
51:4b:21:68:26:e2:d3:ed:cd:a7:c7:de:4f:a7:31:
4e:2e:72:99:78:81:ec:3a:f2:8d:9d:0c:27:79:16:
37:62:c7:6a:05:db:98:9e:7c:68:e7:6d:cb:53:10:
8b:61:01:15:fe:a4:da:6d:ba:ee:f3:22:3d:8b:84:
6b:5b:6a:56:ed:74:75:52:56:be:be:3d:2d:64:70:
db:0c:fb:b6:78:11:b2:52:76:c4:d4:d2:16:58:4b:
65:83:c2:21:d2:dd:5a:ad:7e:1a:c8:79:bf:b7:09:
03:74:94:e3:c5:29:ed:d1:e2:e1:c4:75:75:66:79:
7c:8a:92:6c:f1:be:7f:d5:3c:d2:bc:ce:c1:21:ac:
e9:21:de:7c:cb:18:2a:06:3e:c4:a2:82:15:48:9a:
ed:58:f7:b1:e2:79:36:1d:3d:04:cc:ed:db:12:b3:
5c:47:d7:2b:7a:b0:9f:95:87:9f:9b:17:1a:51:6a:
d8:8f:b3:73:11:2d:71:dc:f3:fa:f3:e5:34:3a:ed:
6d:96:1f:9d:2f:72:57:92:db:9e:c2:9d:8f:b6:82:
f5:db:3b:29:ed:0f:50:bb:6d:64:59:12:c8:a2:2d:
7d:fe:20:37:14:81:9f:b8:a1:63:f9:95:4b:11:c0:
4f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:08:2E:78:76:34:98:7C:91:E8:B5:FE:60:A7:E3:09:12:D3:73:A0
X509v3 Authority Key Identifier:
keyid:58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:34:c9:58:73:6c:db:9a:38:2d:ee:8d:09:ef:eb:06:22:57:
a4:40:ba:cd:1c:20:f9:95:3f:e4:ab:1a:13:67:99:30:96:2e:
30:a7:50:88:e3:40:29:25:d1:22:25:ae:ee:44:e3:d7:39:4f:
3d:c1:b5:e9:76:41:b5:92:36:7a:0b:2c:ff:fb:a1:56:13:d2:
b8:aa:d3:8e:f3:63:2b:b2:8d:89:01:0d:4d:04:9e:ff:99:de:
a5:1d:b4:3b:0d:65:1e:7c:95:bb:d1:2f:fe:c3:85:a8:e4:62:
93:82:f3:32:b0:cd:30:f1:0d:d7:1a:9e:8b:db:0c:65:dc:a5:
26:24:b5:de:d9:8e:55:9f:69:4f:53:75:17:70:40:2a:1a:4b:
a4:8c:d9:41:93:4c:cb:d8:88:05:04:32:44:8d:35:8c:40:6b:
a9:fa:a2:b7:19:32:dc:aa:4a:62:df:7f:8b:33:f6:50:e9:df:
bd:54:2f:17:cc:fb:a1:02:11:41:75:89:91:40:12:63:5b:76:
81:21:fd:56:16:a2:cc:fb:fe:6c:3c:10:0f:70:9a:12:d4:4f:
48:6c:e1:a1:06:a0:6b:3b:1a:43:6a:25:73:8c:39:8f:fa:76:
ca:65:96:9f:4b:7e:c8:8b:46:4b:98:fd:ed:89:45:0e:c4:d9:
01:c8:74:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:50:48 2026 by rpki-client