$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft File: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft (raw, json) Hash identifier: /z8eQlGR2T1EAIsB0ECltLxeDCewYRv0ahff0Wl5Pco= Subject key identifier: 51:FB:1D:FD:3E:5E:73:64:EE:78:83:1C:B0:67:1D:EC:63:81:CB:AE Authority key identifier: 58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39 Certificate issuer: /CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39 Certificate serial: 5003C78FFE16FAF4A53AE940E58DC6A79FA29D65 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft Manifest number: 5A Signing time: Fri 27 Mar 2026 02:38:28 +0000 Manifest this update: Fri 27 Mar 2026 02:33:28 +0000 Manifest next update: Sat 28 Mar 2026 06:31:28 +0000 Files and hashes: 1: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl (hash: Ai4FtlJawWsKhVjUGaP68fuORI7pT7hhlnUhyinWl10=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:03:c7:8f:fe:16:fa:f4:a5:3a:e9:40:e5:8d:c6:a7:9f:a2:9d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39 Validity Not Before: Mar 27 02:33:28 2026 GMT Not After : Mar 28 06:31:28 2026 GMT Subject: CN=51FB1DFD3E5E7364EE78831CB0671DEC6381CBAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:19:61:0b:55:5e:d7:27:57:93:97:07:a4:e7: 39:a8:f0:0c:da:29:94:ab:45:7c:20:d1:cd:9c:5b: c7:9a:08:e2:a0:9f:b6:c4:48:0c:6c:67:bb:b2:40: c4:52:8b:ba:64:fe:e8:32:30:f2:62:e3:4b:19:5a: 0b:db:78:f0:9e:51:6f:cf:00:48:67:cc:82:b2:5f: 2d:4b:68:af:c6:42:ff:42:7a:63:11:1e:8a:8e:db: 76:a1:fc:5d:b4:4e:29:93:ce:63:f2:cc:f1:8b:bd: 7d:b6:59:6c:06:e2:88:17:b0:fb:42:4e:9f:b0:52: eb:36:b9:1f:55:e7:58:18:7d:df:95:53:53:d8:d1: ed:8c:eb:16:31:28:08:74:32:de:28:dd:6a:ce:39: c8:88:d8:60:6b:13:12:d1:2d:ec:77:11:76:a3:0a: f4:e7:c7:25:45:76:31:40:bc:14:fd:1e:67:07:d3: ac:1a:c5:6b:3f:b2:94:e2:4a:e7:0d:bb:5e:ea:71: 89:86:c2:1a:59:2e:a1:08:e5:ff:9b:aa:9f:70:dd: fc:cb:a2:16:48:84:cf:6c:cc:6a:03:1e:77:26:83: 72:05:7f:60:eb:8e:40:97:72:2d:21:fc:3e:40:14: ac:97:d8:e8:fa:6c:c0:38:2a:4a:03:d7:61:5f:d1: 47:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FB:1D:FD:3E:5E:73:64:EE:78:83:1C:B0:67:1D:EC:63:81:CB:AE X509v3 Authority Key Identifier: keyid:58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:09:c4:22:af:be:50:81:5b:7c:ca:d0:a1:0d:98:98:8f:6b: 9f:74:7f:f7:6a:40:c0:29:fa:c1:ad:7f:07:fc:4a:c4:c9:3c: 04:1a:3d:a1:31:dc:5d:51:b2:e2:a0:50:0d:67:af:ab:be:e7: a3:47:73:77:84:9e:3e:52:ab:61:cd:94:4d:85:53:20:a2:bc: ca:7a:d5:be:44:9f:30:3c:50:5c:aa:40:77:22:f9:d0:71:af: 6f:09:d8:94:19:0e:cf:f1:8d:03:0d:b2:bb:69:ed:21:be:7e: c0:fe:9e:c4:e4:f9:5d:ad:33:53:1d:27:f1:fd:f0:64:a0:c4: be:c1:8f:d9:2f:3b:f8:0f:46:cd:c6:49:b8:c5:9f:ca:f9:96: ed:e6:bc:4f:6a:4c:b5:cc:6e:12:13:e0:91:19:c5:20:fa:c7: 94:df:e7:aa:67:eb:6a:61:c8:d1:34:86:d9:56:83:8d:df:ea: 5d:de:83:ca:a3:df:6e:a4:21:30:1d:ab:5d:2c:da:56:49:6e: eb:c1:27:bc:2c:0b:74:75:8f:03:c7:f0:bf:dd:cb:12:86:85: 73:1e:8b:ca:39:2b:08:53:4b:33:48:36:83:e6:b2:60:30:d5: 28:8e:59:f0:4b:cd:e0:9d:57:aa:d5:2b:f3:95:4e:e9:62:a0: 06:d5:e6:93 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUAPHj/4W+vSlOulA5Y3Gp5+inWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2 RDU4OUIzOTAeFw0yNjAzMjcwMjMzMjhaFw0yNjAzMjgwNjMxMjhaMDMxMTAvBgNV BAMTKDUxRkIxREZEM0U1RTczNjRFRTc4ODMxQ0IwNjcxREVDNjM4MUNCQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTGWELVV7XJ1eTlwek5zmo8Aza KZSrRXwg0c2cW8eaCOKgn7bESAxsZ7uyQMRSi7pk/ugyMPJi40sZWgvbePCeUW/P AEhnzIKyXy1LaK/GQv9CemMRHoqO23ah/F20TimTzmPyzPGLvX22WWwG4ogXsPtC Tp+wUus2uR9V51gYfd+VU1PY0e2M6xYxKAh0Mt4o3WrOOciI2GBrExLRLex3EXaj CvTnxyVFdjFAvBT9HmcH06waxWs/spTiSucNu17qcYmGwhpZLqEI5f+bqp9w3fzL ohZIhM9szGoDHncmg3IFf2DrjkCXci0h/D5AFKyX2Oj6bMA4KkoD12Ff0UdzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUfsd/T5ec2TueIMcsGcd7GOBy64wHwYDVR0j BBgwFoAUWPqrjhwYIXm0bh1tsenKWm1YmzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTM2Mjk0Ni8xLzU4RkFBQjhFMUMxODIxNzlCNDZFMUQ2REIxRTlD QTVBNkQ1ODlCMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2RDU4OUIzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjEzNjI5NDYvMS81OEZBQUI4RTFDMTgy MTc5QjQ2RTFENkRCMUU5Q0E1QTZENTg5QjM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqAnEIq++UIFb fMrQoQ2YmI9rn3R/92pAwCn6wa1/B/xKxMk8BBo9oTHcXVGy4qBQDWevq77no0dz d4SePlKrYc2UTYVTIKK8ynrVvkSfMDxQXKpAdyL50HGvbwnYlBkOz/GNAw2yu2nt Ib5+wP6exOT5Xa0zUx0n8f3wZKDEvsGP2S87+A9GzcZJuMWfyvmW7ea8T2pMtcxu EhPgkRnFIPrHlN/nqmframHI0TSG2VaDjd/qXd6DyqPfbqQhMB2rXSzaVklu68En vCwLdHWPA8fwv93LEoaFcx6LyjkrCFNLM0g2g+ayYDDVKI5Z8EvN4J1XqtUr85VO 6WKgBtXmkw== -----END CERTIFICATE-----Generated at Fri Mar 27 08:31:26 2026 by rpki-client