$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft File: 58040501FF5E61F0E29F465314024C0C7BD4DC49.mft (raw, json) Hash identifier: 1zw9iXK4CRBf705G/yTuGdXQaEUuvSZOcLWv5KducqA= Subject key identifier: A4:55:27:99:18:B9:DD:DF:B7:F1:63:19:05:ED:77:5C:27:AC:A1:BA Authority key identifier: 58:04:05:01:FF:5E:61:F0:E2:9F:46:53:14:02:4C:0C:7B:D4:DC:49 Certificate issuer: /CN=58040501FF5E61F0E29F465314024C0C7BD4DC49 Certificate serial: 690CDAC319D385314DE888349F0BF443C5C387C9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft Manifest number: 65 Signing time: Thu 08 Oct 2026 08:27:26 +0000 Manifest this update: Thu 08 Oct 2026 08:22:26 +0000 Manifest next update: Sun 11 Oct 2026 16:09:26 +0000 Files and hashes: 1: 3130332e3130312e3132342e302f32332d3233203d3e203633313939.roa (hash: DweWbHrlfvMPYOypUHcgGMIcJYqAuKpPbkgcv+YezDc=) 2: 58040501FF5E61F0E29F465314024C0C7BD4DC49.crl (hash: F/rIBg3wwg66o6el/IwLDi9I37zsGzqKLIepbOjrMJE=) 3: 3131392e36312e3132382e302f32342d3234203d3e2034383131.roa (hash: fYfvjXqjCoc03TNTQEtlwVm2vbjTwaGtqZePx3A6mMc=) 4: 3130332e3130312e3132342e302f32332d3233203d3e2034383131.roa (hash: tUU9CRZU47s83dslwBh17ysLnkJO3sTg8DsXMcR+XLo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.crl rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 Oct 2026 16:09:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0c:da:c3:19:d3:85:31:4d:e8:88:34:9f:0b:f4:43:c5:c3:87:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58040501FF5E61F0E29F465314024C0C7BD4DC49 Validity Not Before: Oct 8 08:22:26 2026 GMT Not After : Oct 11 16:09:26 2026 GMT Subject: CN=A455279918B9DDDFB7F1631905ED775C27ACA1BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:52:9b:75:86:7c:50:30:d4:42:d4:9a:50:a3: 50:b1:63:d7:c5:6f:9b:c4:3c:dc:90:3a:03:f3:fd: 9d:0d:03:1a:ad:6c:42:89:f5:11:35:4c:bd:fb:b1: c0:e8:65:d9:36:7f:7b:e4:06:1c:0b:08:0e:28:c1: b4:83:fe:2b:8d:0b:8c:84:df:6b:7f:53:68:b7:45: f0:00:a3:97:8c:7b:a7:36:0f:43:db:30:b6:d7:b5: ec:15:44:73:46:89:cd:cd:e4:57:8b:4b:8c:de:c9: 6a:88:4e:3e:f9:ad:45:f4:2a:61:b3:d0:43:9a:05: 5c:fd:3c:1a:44:6b:db:6b:7f:3a:a1:a8:25:c8:12: f2:9f:67:cd:35:0b:9d:08:41:79:5c:1d:fd:35:e2: 3d:1b:46:15:2c:57:73:dd:8b:d5:68:15:c2:7d:37: a9:c1:6d:c0:6c:25:ff:5a:57:9c:85:a1:b1:98:dc: 68:93:0e:7c:6b:8f:88:36:a3:4c:81:e1:48:54:37: 7b:ee:c1:c0:98:4a:66:5c:b7:d7:97:52:f2:05:41: 22:db:26:6f:07:cb:97:c9:8e:6d:2d:7e:c0:5c:f2: 49:db:c2:6b:b5:b1:53:97:ab:f4:dc:ba:e9:db:9c: 0f:f9:9f:c6:64:76:6c:1b:13:1d:8f:93:13:51:c0: 19:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:55:27:99:18:B9:DD:DF:B7:F1:63:19:05:ED:77:5C:27:AC:A1:BA X509v3 Authority Key Identifier: keyid:58:04:05:01:FF:5E:61:F0:E2:9F:46:53:14:02:4C:0C:7B:D4:DC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:0a:47:01:89:49:ce:22:ad:53:d9:54:b6:c5:5c:bd:17:f3: c2:53:8b:45:0f:91:dd:de:64:3c:fd:83:e2:4d:e8:14:b9:13: 77:a2:76:55:e3:da:ba:e5:97:e0:dc:23:54:63:0a:85:42:c3: 29:d2:03:87:56:91:21:f9:70:01:55:d3:5a:86:b9:ec:99:72: 61:4b:bb:12:d1:01:e2:d5:d4:73:93:53:8a:00:7c:41:c0:1d: ae:27:75:6f:4a:51:41:a7:7c:ac:bd:4b:e5:31:82:bf:a7:2d: e6:65:0e:08:89:2a:62:64:a1:de:01:9d:97:05:51:62:20:e4: d6:3a:e7:33:49:65:0e:c6:07:59:5d:e4:8c:e1:61:9a:1c:41: 1b:a9:3b:ca:83:ed:be:b2:bf:99:d9:f8:9f:d3:2f:f4:d8:11: 9d:4b:c4:ce:28:03:9e:cc:fd:74:45:2b:0d:cd:8f:26:d9:7f: 05:66:b2:e2:a1:35:ef:c8:35:a6:b4:1b:80:92:7d:2c:c9:6d: ad:57:f4:5c:f9:a1:d6:fb:9f:f9:85:1a:ee:0f:0e:bf:61:a8: ff:f4:1c:7d:f7:25:6b:06:26:b1:87:de:82:6d:4c:6a:37:90: 82:5c:e5:32:31:62:24:2f:2e:b5:a3:8c:aa:e0:cb:c8:0e:6f: d6:4a:94:16 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaQzawxnThTFN6Ig0nwv0Q8XDh8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgwNDA1MDFGRjVFNjFGMEUyOUY0NjUzMTQwMjRDMEM3 QkQ0REM0OTAeFw0yNjEwMDgwODIyMjZaFw0yNjEwMTExNjA5MjZaMDMxMTAvBgNV BAMTKEE0NTUyNzk5MThCOUREREZCN0YxNjMxOTA1RUQ3NzVDMjdBQ0ExQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Upt1hnxQMNRC1JpQo1CxY9fF b5vEPNyQOgPz/Z0NAxqtbEKJ9RE1TL37scDoZdk2f3vkBhwLCA4owbSD/iuNC4yE 32t/U2i3RfAAo5eMe6c2D0PbMLbXtewVRHNGic3N5FeLS4zeyWqITj75rUX0KmGz 0EOaBVz9PBpEa9trfzqhqCXIEvKfZ801C50IQXlcHf014j0bRhUsV3Pdi9VoFcJ9 N6nBbcBsJf9aV5yFobGY3GiTDnxrj4g2o0yB4UhUN3vuwcCYSmZct9eXUvIFQSLb Jm8Hy5fJjm0tfsBc8knbwmu1sVOXq/TcuunbnA/5n8ZkdmwbEx2PkxNRwBnDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpFUnmRi53d+38WMZBe13XCesobowHwYDVR0j BBgwFoAUWAQFAf9eYfDin0ZTFAJMDHvU3EkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzYwMjE5MjM4OTg5ODI3NS8wLzU4MDQwNTAxRkY1RTYxRjBFMjlGNDY1MzE0MDI0 QzBDN0JENERDNDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTgwNDA1MDFGRjVFNjFGMEUyOUY0NjUzMTQwMjRDMEM3QkQ0REM0OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM2MDIxOTIzODk4OTgyNzUvMC81ODA0MDUwMUZGNUU2 MUYwRTI5RjQ2NTMxNDAyNEMwQzdCRDREQzQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQpHAYlJziKt U9lUtsVcvRfzwlOLRQ+R3d5kPP2D4k3oFLkTd6J2VePauuWX4NwjVGMKhULDKdID h1aRIflwAVXTWoa57JlyYUu7EtEB4tXUc5NTigB8QcAdrid1b0pRQad8rL1L5TGC v6ct5mUOCIkqYmSh3gGdlwVRYiDk1jrnM0llDsYHWV3kjOFhmhxBG6k7yoPtvrK/ mdn4n9Mv9NgRnUvEzigDnsz9dEUrDc2PJtl/BWay4qE178g1prQbgJJ9LMltrVf0 XPmh1vuf+YUa7g8Ov2Go//QcffclawYmsYfegm1MajeQglzlMjFiJC8utaOMquDL yA5v1kqUFg== -----END CERTIFICATE-----Generated at Sat Oct 10 14:44:27 2026 by rpki-client