
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft
File: 558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft (raw, json)
Hash identifier: RBDPRsgPqC+eg8kingRrIjO4/hnV4auqvUBkVB9tF5k=
Subject key identifier: F5:0B:8A:C0:1D:8F:37:DB:6A:48:2D:E2:90:50:70:2F:60:79:6C:FB
Authority key identifier: 55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1
Certificate issuer: /CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1
Certificate serial: 7CA4C17391DD23EB2E24CC3AD57897272838573C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft
Manifest number: 18
Signing time: Sat 13 Jun 2026 03:51:08 +0000
Manifest this update: Sat 13 Jun 2026 03:46:08 +0000
Manifest next update: Sun 14 Jun 2026 04:17:08 +0000
Files and hashes: 1: 3138302e3138382e36342e302f31382d3138203d3e2030.roa (hash: CDcfLDnojLav4F1oboeFWYrp/aoUNzF3QSznFZAxfwc=)
2: 3138302e3138382e34382e302f32302d3230203d3e2030.roa (hash: 7UmaBdtJD3c4k0+2bavMT9EYN1ewFR8Q7nmyf+Rrcsk=)
3: 323430303a633230303a3a2f33322d3332203d3e2030.roa (hash: jWSURrH5i9Ve77dNSm/DOqVvWVta2CLwxt5B21ziKXk=)
4: 558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl (hash: Mo4na8eZRXzfSLYw+D3p9OqVPARZUc4ZM8vLdzwemgY=)
5: 3130332e3233352e35362e302f32322d3232203d3e2030.roa (hash: 5Juc8cbDRZJt1lx0LKQsAx+DhCJoZKzO4IygFaWnNb4=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl
rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 04:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:a4:c1:73:91:dd:23:eb:2e:24:cc:3a:d5:78:97:27:28:38:57:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1
Validity
Not Before: Jun 13 03:46:08 2026 GMT
Not After : Jun 14 04:17:08 2026 GMT
Subject: CN=F50B8AC01D8F37DB6A482DE29050702F60796CFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1e:2a:9c:f9:06:7a:29:5e:c8:94:82:0a:e0:
7d:50:cc:ce:32:86:e4:20:a7:fa:93:ee:5e:ed:be:
04:cb:04:ad:11:ca:52:5a:32:3e:ee:f9:a0:1b:02:
ff:9d:c4:91:10:9e:71:74:76:f8:41:03:5d:33:e9:
a7:5f:61:35:a4:aa:09:89:cb:be:0b:98:8e:8e:6c:
a1:99:7e:86:82:4d:cd:c0:92:1e:08:64:b4:c5:72:
70:f8:56:06:cb:2f:3c:84:17:e4:db:32:ed:2c:07:
2e:4a:9e:be:19:9a:c5:c6:e2:87:ca:ff:9c:3a:69:
2f:ce:8b:5e:30:04:ef:b1:de:5a:54:31:e3:54:3a:
42:dc:fb:19:4d:42:83:23:be:b7:91:40:09:8f:f8:
5b:9d:38:cf:00:c5:15:d7:d9:b0:fc:30:6c:6f:c0:
46:bf:0a:fe:43:6e:ab:7d:86:a6:67:96:7d:ba:b4:
24:9d:ea:9b:58:a4:bc:ac:3e:e7:b4:04:e1:4f:b1:
a6:ac:12:57:60:3d:d0:b1:3b:20:6e:2e:f4:3f:f7:
3b:c5:84:e8:37:a6:a2:10:58:5f:c0:96:9a:42:f8:
9b:0a:69:56:77:1e:f4:ba:89:23:82:d3:5c:00:9c:
50:fb:3f:99:42:f6:33:7f:b7:69:0d:5f:f0:8c:81:
c6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0B:8A:C0:1D:8F:37:DB:6A:48:2D:E2:90:50:70:2F:60:79:6C:FB
X509v3 Authority Key Identifier:
keyid:55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:43:2c:05:e6:10:17:77:0d:2f:37:18:ff:0f:1d:b7:55:31:
31:6a:e5:3f:8c:99:d7:56:b5:68:00:43:0b:4a:ee:e6:4e:ad:
e6:13:ed:76:d7:d0:c5:01:cb:49:e7:27:f7:68:3f:14:d2:8b:
68:fa:82:62:01:66:08:8e:cf:a1:cb:34:80:af:71:bc:cc:76:
25:4b:50:7e:54:83:26:15:75:26:7b:e7:12:28:9c:b5:68:b4:
2e:54:ca:e5:dc:da:84:79:7c:9f:ea:70:7e:5c:f7:a0:31:dc:
b9:7c:42:e2:d8:2a:82:dd:a7:aa:c3:04:af:cb:7c:b9:1c:10:
16:8e:ee:04:1d:88:c3:a0:88:ea:ca:2b:1d:8f:6a:e0:ac:79:
2f:36:5a:29:89:78:05:be:7c:ea:cf:42:54:37:65:ba:ac:37:
4d:a8:f3:e3:33:7d:96:2b:58:e3:d3:44:64:21:0e:da:18:7a:
0a:02:23:76:27:f5:52:57:83:6c:50:41:66:2b:6d:c8:ab:54:
ff:e2:d1:31:3d:24:8b:b9:03:81:ec:46:3c:91:08:94:14:bf:
8e:24:72:05:b9:c2:63:21:93:d0:45:1e:57:9b:bc:7a:b3:82:
85:9b:2e:82:4a:b9:36:90:5e:e1:57:15:92:57:09:aa:1e:33:
60:86:a3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:55:55 2026 by rpki-client