$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft File: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft (raw, json) Hash identifier: 6xzArHQm6LDWni/ScPBP/EAbeSGsMFsYh3nNiegjse0= Subject key identifier: 12:D7:C2:A8:76:23:7E:B4:54:BD:D3:75:66:19:74:C1:12:5B:A1:2A Authority key identifier: 58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39 Certificate issuer: /CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39 Certificate serial: 22E835A79E1091ABB9D49B4A48DC11354083A262 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft Manifest number: 081D Signing time: Sat 10 Oct 2026 05:34:18 +0000 Manifest this update: Sat 10 Oct 2026 05:29:18 +0000 Manifest next update: Tue 13 Oct 2026 16:31:18 +0000 Files and hashes: 1: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl (hash: Yy3MOkIdPd0g65Vb0O0q0Esegl4r8AM4Q+OCDC9T/YE=) 2: AS45090.roa (hash: v9bIhUSWFpO+Oe9WfYi+pPkr+55HVbJ/yALR+h7JiOs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 16:31:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e8:35:a7:9e:10:91:ab:b9:d4:9b:4a:48:dc:11:35:40:83:a2:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39 Validity Not Before: Oct 10 05:29:18 2026 GMT Not After : Oct 13 16:31:18 2026 GMT Subject: CN=12D7C2A876237EB454BDD375661974C1125BA12A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:af:67:6e:87:d5:50:1f:d7:7e:58:32:47:6d: 3b:c3:e2:01:00:43:b1:c2:d3:7f:9a:57:a5:58:d5: c4:b3:79:fe:2f:1f:25:b8:82:db:8c:e1:62:8b:55: f5:3f:47:66:c2:f5:61:de:77:80:99:a2:92:8b:a4: e1:a4:4d:ab:64:63:82:27:ae:be:1e:90:0d:cf:d6: 68:84:32:7d:fc:2a:63:c9:c3:7d:6a:98:06:3d:03: 17:0e:12:14:69:f8:fd:5f:b7:24:65:91:70:1a:6b: 08:97:e2:f7:62:a8:30:e6:36:a5:fb:3f:35:81:89: 19:ca:50:9e:46:d1:b2:d3:f1:0f:75:be:f1:99:95: 09:4b:8e:09:0b:d0:70:24:87:2c:ac:bf:93:17:7e: 96:6d:b4:bf:ce:28:c3:61:5a:87:94:b9:67:38:bf: 7d:a7:dd:0c:26:13:20:05:37:7e:c3:8e:98:c5:b8: e8:60:35:20:d6:bb:2e:1c:a3:c9:ac:a4:6e:a9:85: f3:0a:9e:0f:91:8d:35:d2:30:d4:46:da:4f:39:a4: ca:12:d7:9c:b0:06:2d:26:18:42:74:54:86:5a:77: 26:c1:4b:2e:f3:f4:a2:67:ed:93:f5:01:4e:9c:12: 0d:a7:a9:08:85:28:bc:13:5f:ef:9f:ac:2e:39:40: 61:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D7:C2:A8:76:23:7E:B4:54:BD:D3:75:66:19:74:C1:12:5B:A1:2A X509v3 Authority Key Identifier: keyid:58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:9b:2a:d3:41:03:47:12:b0:58:51:41:db:71:74:a8:60:0f: 76:e4:ec:36:e4:08:03:9f:35:a7:39:56:d7:ec:0c:d6:42:68: bf:a4:d8:92:65:58:a9:e9:11:b7:ec:5a:9a:10:b0:34:dd:26: 62:ef:87:5e:ea:74:72:29:5a:75:af:7c:51:e9:84:f8:95:60: 3d:5c:23:b4:17:c6:6e:3f:6d:2c:7d:8c:55:7d:db:74:a1:5b: c3:21:ba:f1:82:29:03:9a:fd:dc:d1:07:b7:15:a9:e6:52:72: 24:ba:d2:1e:ae:9c:f4:95:27:30:ab:5c:60:4a:ca:9d:d5:d8: 48:cf:ae:d4:37:ff:57:2f:7c:4c:fe:d1:a0:93:ca:c6:83:df: 46:f0:81:f5:c6:ee:e7:2a:0a:1e:70:9d:02:e9:bf:48:c8:f3: 5d:07:e3:61:44:08:1f:51:5b:63:cd:8c:fa:7b:d1:c3:e4:fe: c4:be:9c:14:94:6a:a7:de:81:aa:92:2a:b6:aa:47:03:66:b1: 30:01:2b:68:46:c5:2f:aa:2b:b2:4b:8d:74:f7:0a:20:43:fc: 45:eb:b8:de:c4:a5:52:b4:d8:a6:b2:da:ba:87:75:e4:4b:d8: c2:f4:2f:38:e4:ef:e3:a5:73:12:cb:07:49:ee:09:bc:5d:7c: 08:77:66:6e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIug1p54Qkau51JtKSNwRNUCDomIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2 RDU4OUIzOTAeFw0yNjEwMTAwNTI5MThaFw0yNjEwMTMxNjMxMThaMDMxMTAvBgNV BAMTKDEyRDdDMkE4NzYyMzdFQjQ1NEJERDM3NTY2MTk3NEMxMTI1QkExMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOr2duh9VQH9d+WDJHbTvD4gEA Q7HC03+aV6VY1cSzef4vHyW4gtuM4WKLVfU/R2bC9WHed4CZopKLpOGkTatkY4In rr4ekA3P1miEMn38KmPJw31qmAY9AxcOEhRp+P1ftyRlkXAaawiX4vdiqDDmNqX7 PzWBiRnKUJ5G0bLT8Q91vvGZlQlLjgkL0HAkhyysv5MXfpZttL/OKMNhWoeUuWc4 v32n3QwmEyAFN37DjpjFuOhgNSDWuy4co8mspG6phfMKng+RjTXSMNRG2k85pMoS 15ywBi0mGEJ0VIZadybBSy7z9KJn7ZP1AU6cEg2nqQiFKLwTX++frC45QGGxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUEtfCqHYjfrRUvdN1Zhl0wRJboSowHwYDVR0j BBgwFoAUWPqrjhwYIXm0bh1tsenKWm1YmzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTM2Mjk0Ni8xLzU4RkFBQjhFMUMxODIxNzlCNDZFMUQ2REIxRTlD QTVBNkQ1ODlCMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2RDU4OUIzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjEzNjI5NDYvMS81OEZBQUI4RTFDMTgy MTc5QjQ2RTFENkRCMUU5Q0E1QTZENTg5QjM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipsq00EDRxKw WFFB23F0qGAPduTsNuQIA581pzlW1+wM1kJov6TYkmVYqekRt+xamhCwNN0mYu+H Xup0cilada98UemE+JVgPVwjtBfGbj9tLH2MVX3bdKFbwyG68YIpA5r93NEHtxWp 5lJyJLrSHq6c9JUnMKtcYErKndXYSM+u1Df/Vy98TP7RoJPKxoPfRvCB9cbu5yoK HnCdAum/SMjzXQfjYUQIH1FbY82M+nvRw+T+xL6cFJRqp96BqpIqtqpHA2axMAEr aEbFL6orskuNdPcKIEP8Reu43sSlUrTYprLauod15EvYwvQvOOTv46VzEssHSe4J vF18CHdmbg== -----END CERTIFICATE-----Generated at Mon Oct 12 18:21:39 2026 by rpki-client