$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft File: 558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft (raw, json) Hash identifier: JScrD/L3f9d0HgrXvGP/uhNY00XPQ1cj5IUdwgHnoig= Subject key identifier: FB:08:C3:A9:D3:31:7B:9C:6E:C2:0F:7F:EE:40:0D:4F:0F:CE:AC:D5 Authority key identifier: 55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1 Certificate issuer: /CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1 Certificate serial: 0159074D6DC6D793BEA97DD2964374E83C454508 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft Manifest number: 55 Signing time: Tue 28 Jul 2026 15:57:11 +0000 Manifest this update: Tue 28 Jul 2026 15:52:11 +0000 Manifest next update: Wed 29 Jul 2026 17:43:11 +0000 Files and hashes: 1: 3130332e3233352e35362e302f32322d3232203d3e2030.roa (hash: 5Juc8cbDRZJt1lx0LKQsAx+DhCJoZKzO4IygFaWnNb4=) 2: 558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl (hash: wLLpRa+7067DQOGbJGB0aAgkg4sSGf7bfyRj5wgko6M=) 3: 3138302e3138382e36342e302f31382d3138203d3e2030.roa (hash: CDcfLDnojLav4F1oboeFWYrp/aoUNzF3QSznFZAxfwc=) 4: 3138302e3138382e34382e302f32302d3230203d3e2030.roa (hash: 7UmaBdtJD3c4k0+2bavMT9EYN1ewFR8Q7nmyf+Rrcsk=) 5: 323430303a633230303a3a2f33322d3332203d3e2030.roa (hash: jWSURrH5i9Ve77dNSm/DOqVvWVta2CLwxt5B21ziKXk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 17:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:59:07:4d:6d:c6:d7:93:be:a9:7d:d2:96:43:74:e8:3c:45:45:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1 Validity Not Before: Jul 28 15:52:11 2026 GMT Not After : Jul 29 17:43:11 2026 GMT Subject: CN=FB08C3A9D3317B9C6EC20F7FEE400D4F0FCEACD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:88:c1:83:b3:7c:9c:b1:a5:6e:3d:35:67:c2: 48:d6:a7:6c:2b:37:a8:6a:be:62:e5:66:c6:b9:c4: 3d:e6:60:cf:28:6c:5c:55:51:3c:02:33:b2:55:b9: 31:cb:cf:39:2a:22:45:1a:76:17:bd:41:bd:d3:68: 5e:87:82:77:9f:95:b9:28:4e:f8:a3:00:88:14:ae: 19:bf:9e:df:6f:56:3b:b5:d6:02:65:3d:35:c0:3a: bc:29:ff:6f:bc:a0:fc:1a:19:c3:05:d6:5f:d6:29: 42:a1:c1:3d:38:27:c3:d0:fe:ee:e6:64:e1:47:16: 66:f5:ec:39:01:ca:a4:5b:47:38:ae:69:24:d9:99: 8d:1f:af:2c:7f:1c:12:2e:a0:1b:be:a4:04:48:57: f9:89:2c:f8:20:e5:d9:35:92:55:7d:e5:ff:32:80: 8a:f8:9d:5e:37:53:33:96:d1:53:20:2a:58:ca:cf: 68:6a:b8:b3:ee:e3:71:3f:0e:a3:31:f0:39:0b:4f: 13:3c:08:36:92:5b:b9:9c:4d:8a:4c:6a:19:95:2e: d2:96:50:e2:8c:d5:2d:5b:7d:57:0d:d3:d8:c2:bd: 5c:1d:cf:30:2c:02:95:6a:df:6c:2c:d6:15:3a:c3: 6a:a2:75:68:22:3f:c1:3c:a5:ec:48:4e:e4:d9:da: dd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:08:C3:A9:D3:31:7B:9C:6E:C2:0F:7F:EE:40:0D:4F:0F:CE:AC:D5 X509v3 Authority Key Identifier: keyid:55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:84:66:0f:d9:29:2e:5c:df:cd:8e:09:1f:c3:97:3a:c5:b1: b3:86:a5:45:a7:71:75:47:7b:5b:6a:41:7a:f3:b1:76:b5:33: 2f:06:57:34:58:12:aa:77:7f:19:29:af:05:a8:2f:19:86:bb: 35:3d:c2:6f:9e:23:ee:c0:c8:26:d9:30:ac:5d:3d:da:5e:fc: 2e:a7:a1:90:d5:5e:f6:a5:d4:33:8c:b0:e5:02:ed:aa:68:31: 3f:5e:f7:44:46:84:fd:4d:e0:8a:e7:54:d8:8a:9a:5f:5e:37: 49:f9:b7:d6:69:c3:21:1a:f4:17:27:27:4b:47:bc:c9:20:42: 17:92:7c:ae:33:37:52:63:93:00:bf:fa:9f:7d:f3:a8:1b:93: 30:16:de:9f:94:5e:bd:cf:93:60:5a:ad:ee:c6:6f:8e:57:2b: 19:2d:28:69:5d:c7:cd:6a:99:84:2b:ec:b5:93:87:a8:60:b1: 07:29:0a:5e:b1:18:b2:aa:af:18:a7:52:39:eb:bd:e5:87:57: cd:34:a1:32:e6:e7:f3:c6:f3:c5:57:1e:c9:41:25:cb:20:cd: 2c:83:6c:44:39:7c:28:92:6c:2a:1a:03:2e:f7:5a:0b:38:ca: 4c:12:40:22:64:81:8a:05:2e:58:ec:c1:39:48:1b:fc:68:06: 1c:74:73:22 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAVkHTW3G15O+qX3SlkN06DxFRQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU4RTNBMjdCRDc2MjJGQUNDMzMxN0NCRjgxMzJFMDZE OTdGNDZCMTAeFw0yNjA3MjgxNTUyMTFaFw0yNjA3MjkxNzQzMTFaMDMxMTAvBgNV BAMTKEZCMDhDM0E5RDMzMTdCOUM2RUMyMEY3RkVFNDAwRDRGMEZDRUFDRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmiMGDs3ycsaVuPTVnwkjWp2wr N6hqvmLlZsa5xD3mYM8obFxVUTwCM7JVuTHLzzkqIkUadhe9Qb3TaF6Hgneflbko TvijAIgUrhm/nt9vVju11gJlPTXAOrwp/2+8oPwaGcMF1l/WKUKhwT04J8PQ/u7m ZOFHFmb17DkByqRbRziuaSTZmY0fryx/HBIuoBu+pARIV/mJLPgg5dk1klV95f8y gIr4nV43UzOW0VMgKljKz2hquLPu43E/DqMx8DkLTxM8CDaSW7mcTYpMahmVLtKW UOKM1S1bfVcN09jCvVwdzzAsApVq32ws1hU6w2qidWgiP8E8pexITuTZ2t2NAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+wjDqdMxe5xuwg9/7kANTw/OrNUwHwYDVR0j BBgwFoAUVY46J712IvrMMxfL+BMuBtl/RrEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjI3OTcyNTg1NTgwMTM2NS8wLzU1OEUzQTI3QkQ3NjIyRkFDQzMzMTdDQkY4MTMy RTA2RDk3RjQ2QjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTU4RTNBMjdCRDc2MjJGQUNDMzMxN0NCRjgxMzJFMDZEOTdGNDZCMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIyNzk3MjU4NTU4MDEzNjUvMC81NThFM0EyN0JENzYy MkZBQ0MzMzE3Q0JGODEzMkUwNkQ5N0Y0NkIxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYRmD9kpLlzf zY4JH8OXOsWxs4alRadxdUd7W2pBevOxdrUzLwZXNFgSqnd/GSmvBagvGYa7NT3C b54j7sDIJtkwrF092l78LqehkNVe9qXUM4yw5QLtqmgxP173REaE/U3giudU2Iqa X143Sfm31mnDIRr0FycnS0e8ySBCF5J8rjM3UmOTAL/6n33zqBuTMBben5Revc+T YFqt7sZvjlcrGS0oaV3HzWqZhCvstZOHqGCxBykKXrEYsqqvGKdSOeu95YdXzTSh Mubn88bzxVceyUElyyDNLINsRDl8KJJsKhoDLvdaCzjKTBJAImSBigUuWOzBOUgb /GgGHHRzIg== -----END CERTIFICATE-----Generated at Wed Jul 29 06:30:00 2026 by rpki-client