
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft
File: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft (raw, json)
Hash identifier: 07twd0EFGA4e5fM+u5ZM0qoeL412AZCb1cdGGu1camk=
Subject key identifier: 86:11:1F:D3:DF:12:95:5D:5A:19:63:20:05:AE:DD:D4:28:2C:FF:A6
Authority key identifier: 58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39
Certificate issuer: /CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39
Certificate serial: 57B22915CB8BFF07E02719E3284C71134A84AB6A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft
Manifest number: 9A
Signing time: Wed 13 May 2026 18:46:06 +0000
Manifest this update: Wed 13 May 2026 18:41:06 +0000
Manifest next update: Thu 14 May 2026 19:29:06 +0000
Files and hashes: 1: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl (hash: mRXBVL7oLKfuHB19NuN4MFC+ixnwL2pQf3CCqdp9CjI=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 12:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:b2:29:15:cb:8b:ff:07:e0:27:19:e3:28:4c:71:13:4a:84:ab:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39
Validity
Not Before: May 13 18:41:06 2026 GMT
Not After : May 14 19:29:06 2026 GMT
Subject: CN=86111FD3DF12955D5A19632005AEDDD4282CFFA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ff:ed:b2:ab:8f:c4:a8:55:51:e4:4d:4e:7a:
e9:48:1d:0c:58:93:55:ef:9c:d7:1b:ec:fb:d6:b5:
8f:9d:a5:2c:05:35:d8:85:86:8c:2e:e0:f9:e8:ee:
f8:6c:3e:ae:fb:90:ef:23:06:31:e1:ac:7d:cc:dd:
a4:b9:9d:ad:38:b5:86:53:3a:c7:e3:23:fb:0d:cf:
4e:a6:a9:d6:06:87:b6:5c:dd:30:85:ce:25:74:f2:
b4:0a:ea:79:1b:39:f6:06:b2:e3:5a:0d:7a:83:0a:
be:31:23:a6:b7:60:4c:f7:e6:29:b6:d5:87:e3:7f:
ea:a8:c4:4a:0e:00:3d:cf:ff:4b:cf:0d:df:bf:d0:
82:e5:98:68:36:8f:55:20:14:b5:d8:02:df:9b:38:
4b:34:24:a6:17:1f:97:e3:5a:a3:35:61:55:fe:fb:
ca:f0:7e:87:a2:b4:99:73:04:f6:f7:a2:cf:c7:a0:
fb:77:0a:7e:81:b5:e7:e7:fc:37:bb:4f:1c:ee:de:
dc:6a:3f:22:9b:a6:ce:2a:7f:02:10:4e:07:31:7e:
5c:c6:36:04:a4:51:01:2e:c4:03:07:f0:8f:8f:33:
eb:4b:d0:32:a1:df:fb:6d:00:24:8d:48:3e:97:d3:
1e:ed:1b:99:77:59:b2:05:04:de:46:2e:e3:cb:f2:
81:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:11:1F:D3:DF:12:95:5D:5A:19:63:20:05:AE:DD:D4:28:2C:FF:A6
X509v3 Authority Key Identifier:
keyid:58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:77:9d:8d:fe:12:b4:ab:07:87:55:be:b7:08:bc:0f:7e:aa:
fe:96:19:a2:06:4b:cd:6b:42:d8:47:bd:8c:25:ed:d9:9a:0e:
a6:d3:2f:f7:64:e0:87:c2:8e:be:f4:10:0e:9c:32:b0:58:54:
fe:4b:6d:4e:f4:ff:ba:0f:ab:31:83:4e:2e:6f:8a:53:ed:4b:
50:e0:a2:54:cd:48:af:ad:34:d9:1a:35:7d:34:6d:dd:e1:76:
ce:25:19:d6:aa:8e:c3:64:d3:9c:5f:51:13:47:c0:56:68:03:
70:c3:63:f5:4f:aa:61:13:a0:5f:b9:b8:dc:9a:b4:42:11:de:
ae:0b:a4:68:61:ce:78:06:00:2d:d0:06:3f:20:6a:00:99:c2:
5f:31:58:a1:0d:00:a5:35:8c:7d:55:1d:59:ba:72:e6:c6:bf:
79:f0:ea:83:50:c7:e9:91:d6:1b:a8:8f:ad:42:46:a0:27:85:
a2:f0:1b:bf:2c:51:20:79:87:d0:f3:29:4d:77:32:2f:a5:39:
6b:69:1f:0c:de:cc:4f:5a:bd:9b:88:33:9b:97:f4:71:cb:38:
c4:12:e0:78:ec:df:a0:c7:3e:52:31:1a:dd:2a:d3:aa:1d:4c:
04:6c:0a:4e:fb:fc:cf:a6:f3:98:b5:67:02:1a:84:79:45:51:
08:c3:5f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:33:06 2026 by rpki-client