$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft File: 58040501FF5E61F0E29F465314024C0C7BD4DC49.mft (raw, json) Hash identifier: YTwgEIx8FwhKeYS5UwroQztyfIABYvX+PN6/cqNen8g= Subject key identifier: 9F:EE:CB:2F:3E:16:1C:A6:44:40:91:D2:53:D1:5C:6C:09:36:57:B2 Authority key identifier: 58:04:05:01:FF:5E:61:F0:E2:9F:46:53:14:02:4C:0C:7B:D4:DC:49 Certificate issuer: /CN=58040501FF5E61F0E29F465314024C0C7BD4DC49 Certificate serial: 115135E03A0EE8A97E6ABC5FC95C76546001B7D1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft Manifest number: 2A Signing time: Tue 28 Jul 2026 10:26:41 +0000 Manifest this update: Tue 28 Jul 2026 10:21:41 +0000 Manifest next update: Wed 29 Jul 2026 13:20:41 +0000 Files and hashes: 1: 58040501FF5E61F0E29F465314024C0C7BD4DC49.crl (hash: Ty29+vRBjwwez2BfTztLnMyLq9SgBMhCIzsqdciMkEc=) 2: 3130332e3130312e3132342e302f32332d3233203d3e203633313939.roa (hash: DweWbHrlfvMPYOypUHcgGMIcJYqAuKpPbkgcv+YezDc=) 3: 3130332e3130312e3132342e302f32332d3233203d3e2034383131.roa (hash: tUU9CRZU47s83dslwBh17ysLnkJO3sTg8DsXMcR+XLo=) 4: 3131392e36312e3132382e302f32342d3234203d3e2034383131.roa (hash: fYfvjXqjCoc03TNTQEtlwVm2vbjTwaGtqZePx3A6mMc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.crl rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 13:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:51:35:e0:3a:0e:e8:a9:7e:6a:bc:5f:c9:5c:76:54:60:01:b7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58040501FF5E61F0E29F465314024C0C7BD4DC49 Validity Not Before: Jul 28 10:21:41 2026 GMT Not After : Jul 29 13:20:41 2026 GMT Subject: CN=9FEECB2F3E161CA6444091D253D15C6C093657B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:a6:cb:ed:5e:31:f6:78:22:3a:4d:1f:35:4e: ee:3e:95:1b:03:2f:59:7d:cc:32:be:4a:77:ba:fa: b5:a5:67:c8:3c:e4:89:5a:87:e7:1e:0d:9b:67:26: fd:74:32:44:55:3b:53:3c:f7:9c:82:f0:8e:eb:88: 00:01:77:17:f0:78:68:f8:e4:f1:61:76:e0:af:8b: ca:75:0e:18:49:3b:46:2e:57:18:83:e1:1d:fe:fc: 8d:09:fe:26:18:28:ab:4e:12:50:f8:a2:23:50:9c: 74:81:8e:30:bc:9f:f0:c1:8e:af:60:1c:1b:8b:67: 63:58:8a:61:d7:f2:30:59:7f:da:5a:8d:d0:b1:c7: 7a:d9:8c:7e:9e:20:30:56:fc:99:5d:80:aa:8f:ec: fd:79:0d:75:a8:47:15:17:7b:4a:f9:02:7e:72:66: 65:3f:5c:37:cb:9d:c9:5a:62:53:fe:8b:16:5e:dc: 05:66:d9:06:37:13:fe:78:07:a4:bd:49:ea:01:db: 53:d9:96:2b:96:f0:39:8b:c6:5c:a8:30:09:88:77: 30:20:16:b6:9f:9b:0f:d1:27:a9:ca:ba:a1:3c:a4: 7e:40:65:f1:9a:3d:44:2d:c6:10:d5:bf:01:ad:f3: 2c:07:ad:64:80:d5:56:60:eb:bf:1d:78:e8:df:82: c4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:EE:CB:2F:3E:16:1C:A6:44:40:91:D2:53:D1:5C:6C:09:36:57:B2 X509v3 Authority Key Identifier: keyid:58:04:05:01:FF:5E:61:F0:E2:9F:46:53:14:02:4C:0C:7B:D4:DC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c2:e2:a0:89:07:31:57:25:5f:63:90:95:07:c1:af:b0:94: 95:d6:21:bf:89:b0:5a:c4:79:47:34:d6:ed:d4:fe:45:6d:f0: ee:3e:e9:5e:2c:a7:f4:f6:a5:94:51:a5:88:af:df:56:44:87: 98:02:51:1e:c5:a0:0d:0a:f6:9d:7c:b4:1e:0e:6e:63:1b:9b: f5:a4:b6:a8:92:7b:09:f8:f6:20:65:6f:f4:15:04:35:db:35: 7d:25:b6:d8:79:fa:ed:85:34:1d:c5:cf:5c:b6:ee:ae:49:44: 00:5a:2e:39:7b:2a:74:22:a3:86:ba:1d:75:42:66:fc:fd:6f: 9b:8d:cd:36:84:42:1d:62:3b:73:e5:e4:d3:5b:14:03:f9:14: 38:d5:c4:95:3f:b0:3b:38:61:96:fe:c8:d1:43:62:a9:ed:e1: 4d:a5:ca:4a:45:60:21:63:18:60:87:3c:2f:13:ae:17:db:93: 50:a7:65:18:03:8a:e8:a7:b6:26:51:bd:f7:a1:d8:36:bf:ef: ae:e1:61:1e:19:11:94:50:a8:67:d6:3f:37:c3:48:7b:06:d2: 84:f5:bb:5f:1e:59:83:f4:40:70:7f:06:31:b1:be:d0:15:71: 96:f3:f3:ec:f9:b4:10:6c:9b:d9:81:38:f2:c6:2a:97:3a:9c: b0:59:5c:ed -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUEVE14DoO6Kl+arxfyVx2VGABt9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgwNDA1MDFGRjVFNjFGMEUyOUY0NjUzMTQwMjRDMEM3 QkQ0REM0OTAeFw0yNjA3MjgxMDIxNDFaFw0yNjA3MjkxMzIwNDFaMDMxMTAvBgNV BAMTKDlGRUVDQjJGM0UxNjFDQTY0NDQwOTFEMjUzRDE1QzZDMDkzNjU3QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8psvtXjH2eCI6TR81Tu4+lRsD L1l9zDK+Sne6+rWlZ8g85Ilah+ceDZtnJv10MkRVO1M895yC8I7riAABdxfweGj4 5PFhduCvi8p1DhhJO0YuVxiD4R3+/I0J/iYYKKtOElD4oiNQnHSBjjC8n/DBjq9g HBuLZ2NYimHX8jBZf9pajdCxx3rZjH6eIDBW/JldgKqP7P15DXWoRxUXe0r5An5y ZmU/XDfLnclaYlP+ixZe3AVm2QY3E/54B6S9SeoB21PZliuW8DmLxlyoMAmIdzAg Frafmw/RJ6nKuqE8pH5AZfGaPUQtxhDVvwGt8ywHrWSA1VZg678deOjfgsTvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUn+7LLz4WHKZEQJHSU9FcbAk2V7IwHwYDVR0j BBgwFoAUWAQFAf9eYfDin0ZTFAJMDHvU3EkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzYwMjE5MjM4OTg5ODI3NS8wLzU4MDQwNTAxRkY1RTYxRjBFMjlGNDY1MzE0MDI0 QzBDN0JENERDNDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTgwNDA1MDFGRjVFNjFGMEUyOUY0NjUzMTQwMjRDMEM3QkQ0REM0OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM2MDIxOTIzODk4OTgyNzUvMC81ODA0MDUwMUZGNUU2 MUYwRTI5RjQ2NTMxNDAyNEMwQzdCRDREQzQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecLioIkHMVcl X2OQlQfBr7CUldYhv4mwWsR5RzTW7dT+RW3w7j7pXiyn9PallFGliK/fVkSHmAJR HsWgDQr2nXy0Hg5uYxub9aS2qJJ7Cfj2IGVv9BUENds1fSW22Hn67YU0HcXPXLbu rklEAFouOXsqdCKjhroddUJm/P1vm43NNoRCHWI7c+Xk01sUA/kUONXElT+wOzhh lv7I0UNiqe3hTaXKSkVgIWMYYIc8LxOuF9uTUKdlGAOK6Ke2JlG996HYNr/vruFh HhkRlFCoZ9Y/N8NIewbShPW7Xx5Zg/RAcH8GMbG+0BVxlvPz7Pm0EGyb2YE48sYq lzqcsFlc7Q== -----END CERTIFICATE-----Generated at Tue Jul 28 22:38:29 2026 by rpki-client