$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft File: 558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft (raw, json) Hash identifier: A/8oqgqCtB/lIuMc1hxAAymSWZEI5anDNeuwbFocmN8= Subject key identifier: BD:52:F3:8C:FA:89:89:F7:97:D2:70:32:56:F9:03:09:11:42:3F:40 Authority key identifier: 55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1 Certificate issuer: /CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1 Certificate serial: 77339494BAA7A4E55466F4932B9F13FCA820DE78 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft Manifest number: 93 Signing time: Sun 11 Oct 2026 16:00:42 +0000 Manifest this update: Sun 11 Oct 2026 15:55:42 +0000 Manifest next update: Wed 14 Oct 2026 23:03:42 +0000 Files and hashes: 1: 3130332e3233352e35362e302f32322d3232203d3e2030.roa (hash: 5Juc8cbDRZJt1lx0LKQsAx+DhCJoZKzO4IygFaWnNb4=) 2: 558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl (hash: bbS7ijZmAdnqfWGfL+s1rqfQLHwPWOaBU1MISw5UxB8=) 3: 3138302e3138382e34382e302f32302d3230203d3e2030.roa (hash: 7UmaBdtJD3c4k0+2bavMT9EYN1ewFR8Q7nmyf+Rrcsk=) 4: 3138302e3138382e36342e302f31382d3138203d3e2030.roa (hash: CDcfLDnojLav4F1oboeFWYrp/aoUNzF3QSznFZAxfwc=) 5: 323430303a633230303a3a2f33322d3332203d3e2030.roa (hash: jWSURrH5i9Ve77dNSm/DOqVvWVta2CLwxt5B21ziKXk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 23:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:33:94:94:ba:a7:a4:e5:54:66:f4:93:2b:9f:13:fc:a8:20:de:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1 Validity Not Before: Oct 11 15:55:42 2026 GMT Not After : Oct 14 23:03:42 2026 GMT Subject: CN=BD52F38CFA8989F797D2703256F9030911423F40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:53:5a:e1:4c:b0:87:1f:35:bd:cd:33:0f:a6: 95:b5:54:a2:70:19:a8:8a:42:0e:c4:e9:22:11:0a: 0d:9f:5b:11:c9:7c:23:87:fd:7f:f4:02:be:a9:40: 8f:83:f7:48:c8:e9:14:29:de:68:c1:b8:01:d6:87: 3d:c1:23:00:5f:7c:40:7a:f3:7e:50:24:96:eb:d7: b0:65:f8:94:3a:54:8c:ee:81:99:b6:02:7d:11:c5: fb:af:e1:57:4e:be:8b:d1:ef:74:0b:78:b6:57:95: f9:fd:b9:10:8d:4b:02:0a:8e:77:68:07:4b:ae:50: 1c:52:e5:81:5b:15:b3:4b:9c:7b:d4:94:d3:3f:26: 4d:51:14:c9:fe:76:1d:32:04:e1:d2:64:d1:59:23: b4:2e:64:2c:53:f3:f4:1e:f0:14:d2:73:9e:84:30: 84:75:b5:9e:a5:97:0e:ec:f8:16:da:17:88:da:75: fe:e1:c6:73:a0:40:78:bc:59:4a:26:58:ee:d1:2a: 06:33:62:6e:53:16:62:e8:82:90:8c:10:06:b4:d4: a2:89:ce:a5:1d:ad:17:e6:94:00:df:ee:89:01:74: 4c:5e:84:12:fe:75:7e:11:88:55:fc:e0:ac:43:e3: 5c:99:77:cc:90:cf:44:4d:f3:e8:7f:24:d9:2e:b7: 44:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:52:F3:8C:FA:89:89:F7:97:D2:70:32:56:F9:03:09:11:42:3F:40 X509v3 Authority Key Identifier: keyid:55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:11:b3:f6:cf:ed:a6:6d:18:e7:98:6d:88:ec:e8:6c:fe:b9: 13:38:02:a9:73:cc:09:43:86:17:d1:d7:22:71:11:14:19:18: f3:68:b2:8d:c0:a7:c5:d9:e9:46:b6:c0:c8:fc:75:38:da:ee: 8b:c2:ba:fe:4f:4a:1a:65:08:5d:c1:d8:25:f6:10:c7:86:ce: 25:25:3d:9d:b6:b5:fc:2f:a6:74:93:10:18:73:18:67:e1:bb: bd:68:8b:9e:5e:ff:88:ea:bb:f6:b0:34:56:7c:ad:02:fe:17: 4d:f3:65:1e:46:71:b5:1b:79:a1:81:e7:2e:f1:b8:d6:65:7a: 5a:33:6e:be:71:1c:2d:85:a0:f4:c2:d0:ec:dd:08:e0:6e:f9: a3:10:7f:26:63:3a:16:f7:a4:a1:93:4c:ae:04:2c:6e:ad:a8: 8c:1b:7d:d9:61:f9:fb:3f:96:25:e8:c2:8e:e8:73:f1:66:d4: f1:82:4e:ee:43:0f:4d:6e:0f:43:89:6e:75:b4:96:ef:aa:e9: 06:5d:61:42:bc:7e:93:36:00:ce:72:f2:15:85:fd:bb:8a:3c: ca:29:4d:fa:c5:b1:d9:bd:2d:b7:63:06:82:ad:27:16:17:22: fa:e6:86:5e:d3:65:43:52:31:bd:b9:e0:ea:f5:54:e6:43:c9: 8f:51:f3:7b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdzOUlLqnpOVUZvSTK58T/Kgg3ngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU4RTNBMjdCRDc2MjJGQUNDMzMxN0NCRjgxMzJFMDZE OTdGNDZCMTAeFw0yNjEwMTExNTU1NDJaFw0yNjEwMTQyMzAzNDJaMDMxMTAvBgNV BAMTKEJENTJGMzhDRkE4OTg5Rjc5N0QyNzAzMjU2RjkwMzA5MTE0MjNGNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqU1rhTLCHHzW9zTMPppW1VKJw GaiKQg7E6SIRCg2fWxHJfCOH/X/0Ar6pQI+D90jI6RQp3mjBuAHWhz3BIwBffEB6 835QJJbr17Bl+JQ6VIzugZm2An0Rxfuv4VdOvovR73QLeLZXlfn9uRCNSwIKjndo B0uuUBxS5YFbFbNLnHvUlNM/Jk1RFMn+dh0yBOHSZNFZI7QuZCxT8/Qe8BTSc56E MIR1tZ6llw7s+BbaF4jadf7hxnOgQHi8WUomWO7RKgYzYm5TFmLogpCMEAa01KKJ zqUdrRfmlADf7okBdExehBL+dX4RiFX84KxD41yZd8yQz0RN8+h/JNkut0QLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvVLzjPqJifeX0nAyVvkDCRFCP0AwHwYDVR0j BBgwFoAUVY46J712IvrMMxfL+BMuBtl/RrEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjI3OTcyNTg1NTgwMTM2NS8wLzU1OEUzQTI3QkQ3NjIyRkFDQzMzMTdDQkY4MTMy RTA2RDk3RjQ2QjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTU4RTNBMjdCRDc2MjJGQUNDMzMxN0NCRjgxMzJFMDZEOTdGNDZCMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIyNzk3MjU4NTU4MDEzNjUvMC81NThFM0EyN0JENzYy MkZBQ0MzMzE3Q0JGODEzMkUwNkQ5N0Y0NkIxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORGz9s/tpm0Y 55htiOzobP65EzgCqXPMCUOGF9HXInERFBkY82iyjcCnxdnpRrbAyPx1ONrui8K6 /k9KGmUIXcHYJfYQx4bOJSU9nba1/C+mdJMQGHMYZ+G7vWiLnl7/iOq79rA0Vnyt Av4XTfNlHkZxtRt5oYHnLvG41mV6WjNuvnEcLYWg9MLQ7N0I4G75oxB/JmM6Fvek oZNMrgQsbq2ojBt92WH5+z+WJejCjuhz8WbU8YJO7kMPTW4PQ4ludbSW76rpBl1h Qrx+kzYAznLyFYX9u4o8yilN+sWx2b0tt2MGgq0nFhci+uaGXtNlQ1Ixvbng6vVU 5kPJj1Hzew== -----END CERTIFICATE-----Generated at Mon Oct 12 22:16:10 2026 by rpki-client