$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft File: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft (raw, json) Hash identifier: sCIZGFv90ivPzCRGUBylvOlwNhmxliW9OWvmYLFHUTY= Subject key identifier: 2E:5F:63:2D:97:BF:BE:38:A3:DA:80:C7:6C:76:C8:7F:E4:80:14:CE Authority key identifier: 58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39 Certificate issuer: /CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39 Certificate serial: 4380FE5F234F45CA954C014C390FF2EC85A9AC6E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft Manifest number: 07DB Signing time: Fri 24 Jul 2026 06:00:32 +0000 Manifest this update: Fri 24 Jul 2026 05:55:32 +0000 Manifest next update: Sat 25 Jul 2026 08:29:32 +0000 Files and hashes: 1: AS45090.roa (hash: v9bIhUSWFpO+Oe9WfYi+pPkr+55HVbJ/yALR+h7JiOs=) 2: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl (hash: fpzKzCoDU1Hbr2tCmXqigjPtTF1QisZj1cRtPkcEDkU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 08:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:80:fe:5f:23:4f:45:ca:95:4c:01:4c:39:0f:f2:ec:85:a9:ac:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39 Validity Not Before: Jul 24 05:55:32 2026 GMT Not After : Jul 25 08:29:32 2026 GMT Subject: CN=2E5F632D97BFBE38A3DA80C76C76C87FE48014CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a2:95:9d:44:50:1e:51:f8:a7:1b:70:6e:ee: 23:6c:3c:f2:bc:f6:f6:e9:2f:46:74:a1:9f:82:05: 81:6e:40:af:3d:11:09:93:87:2d:15:a8:bf:6c:59: 32:51:40:90:16:37:af:7b:29:c7:2b:25:32:88:90: 6d:bf:14:17:1f:c9:62:9d:9a:a7:6f:42:f7:d7:38: 47:84:85:1f:e4:1f:28:d7:20:68:52:e7:86:67:21: 82:d7:f6:d9:09:2b:36:52:ba:58:2f:1c:4e:6f:b8: 5c:b7:d8:db:fb:43:ad:01:a5:db:9f:89:49:3a:3f: 48:63:ab:7c:4f:5f:0d:3e:16:f2:50:3a:fb:e1:ce: 7b:49:c0:38:54:db:19:5e:54:f3:7f:7e:8a:5a:26: 79:de:1d:0c:e7:ca:65:9a:28:13:15:74:14:5d:b6: b5:fe:b8:df:0d:93:95:7a:c6:55:6a:fd:96:f2:ba: df:ce:e5:37:76:aa:94:91:fb:35:8c:1e:b5:ee:76: a8:7d:57:50:04:75:70:75:24:e3:18:ae:74:f0:b7: 8f:71:44:72:a5:71:5c:98:de:ba:53:1e:11:93:45: 3c:27:e6:4f:da:f4:44:07:56:6e:d1:aa:51:e2:7c: cc:38:6a:83:a5:5a:46:85:97:6e:ea:8d:dd:7c:fb: 42:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5F:63:2D:97:BF:BE:38:A3:DA:80:C7:6C:76:C8:7F:E4:80:14:CE X509v3 Authority Key Identifier: keyid:58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:1a:2d:3b:82:fb:cf:8e:d8:88:5a:69:34:ec:55:ba:ad:9b: 01:4d:54:88:21:92:3c:63:42:4c:0b:76:54:20:d6:02:81:76: af:a3:6d:9c:17:07:65:cc:6a:17:c2:9a:9f:b7:44:b9:58:94: 52:01:0a:49:48:3a:b6:d2:a2:34:a5:fe:fd:28:37:83:ed:46: b3:64:01:41:ea:a0:01:7e:ac:37:af:87:79:03:b1:74:b1:5d: 49:65:ac:d9:8e:99:73:04:79:56:9c:44:d2:cd:f7:09:12:cf: 63:94:ae:4e:7c:89:b8:9a:2b:8c:66:f7:48:b2:00:73:d8:15: 0d:2e:7c:c5:eb:5d:fd:f7:3d:24:eb:23:b0:6f:2b:92:36:32: 62:a6:7f:98:97:f2:0d:9e:25:91:c1:2a:55:55:3e:cb:03:2d: f9:69:0d:e7:eb:e4:b1:b7:80:c9:74:b5:6b:2b:a8:8e:78:a2: c6:11:3a:07:5e:20:e7:a6:b3:1d:5b:60:83:cd:07:67:20:a1: 3f:ad:18:52:fb:24:fa:de:3c:8b:6e:50:7c:ab:22:de:10:c7: aa:10:13:b3:cd:d1:1f:ef:b4:a6:3a:ba:a5:c3:ac:bc:64:db: 70:5d:42:0b:37:26:f7:2b:6f:e8:20:ac:25:af:06:45:4d:04: 40:2a:60:fc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQ4D+XyNPRcqVTAFMOQ/y7IWprG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2 RDU4OUIzOTAeFw0yNjA3MjQwNTU1MzJaFw0yNjA3MjUwODI5MzJaMDMxMTAvBgNV BAMTKDJFNUY2MzJEOTdCRkJFMzhBM0RBODBDNzZDNzZDODdGRTQ4MDE0Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPopWdRFAeUfinG3Bu7iNsPPK8 9vbpL0Z0oZ+CBYFuQK89EQmThy0VqL9sWTJRQJAWN697KccrJTKIkG2/FBcfyWKd mqdvQvfXOEeEhR/kHyjXIGhS54ZnIYLX9tkJKzZSulgvHE5vuFy32Nv7Q60Bpduf iUk6P0hjq3xPXw0+FvJQOvvhzntJwDhU2xleVPN/fopaJnneHQznymWaKBMVdBRd trX+uN8Nk5V6xlVq/Zbyut/O5Td2qpSR+zWMHrXudqh9V1AEdXB1JOMYrnTwt49x RHKlcVyY3rpTHhGTRTwn5k/a9EQHVm7RqlHifMw4aoOlWkaFl27qjd18+0JvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQULl9jLZe/vjij2oDHbHbIf+SAFM4wHwYDVR0j BBgwFoAUWPqrjhwYIXm0bh1tsenKWm1YmzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTM2Mjk0Ni8xLzU4RkFBQjhFMUMxODIxNzlCNDZFMUQ2REIxRTlD QTVBNkQ1ODlCMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2RDU4OUIzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjEzNjI5NDYvMS81OEZBQUI4RTFDMTgy MTc5QjQ2RTFENkRCMUU5Q0E1QTZENTg5QjM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhotO4L7z47Y iFppNOxVuq2bAU1UiCGSPGNCTAt2VCDWAoF2r6NtnBcHZcxqF8Kan7dEuViUUgEK SUg6ttKiNKX+/Sg3g+1Gs2QBQeqgAX6sN6+HeQOxdLFdSWWs2Y6ZcwR5VpxE0s33 CRLPY5SuTnyJuJorjGb3SLIAc9gVDS58xetd/fc9JOsjsG8rkjYyYqZ/mJfyDZ4l kcEqVVU+ywMt+WkN5+vksbeAyXS1ayuojniixhE6B14g56azHVtgg80HZyChP60Y Uvsk+t48i25QfKsi3hDHqhATs83RH++0pjq6pcOsvGTbcF1CCzcm9ytv6CCsJa8G RU0EQCpg/A== -----END CERTIFICATE-----Generated at Sat Jul 25 00:52:38 2026 by rpki-client