$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft File: 558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft (raw, json) Hash identifier: nHJZIlhUJ7LomX6cv2CwkvMGZ8h6IaEM9YbEk6yQnUk= Subject key identifier: AC:C7:72:BB:EE:6E:E0:57:F3:EA:11:08:FB:4E:F9:63:E1:97:58:56 Authority key identifier: 55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1 Certificate issuer: /CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1 Certificate serial: 36BCB82CCD240A02C05CC14CBB9CE95AC2AFA740 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft Manifest number: 8D Signing time: Sun 27 Sep 2026 21:05:11 +0000 Manifest this update: Sun 27 Sep 2026 21:00:11 +0000 Manifest next update: Thu 01 Oct 2026 02:57:11 +0000 Files and hashes: 1: 3138302e3138382e34382e302f32302d3230203d3e2030.roa (hash: 7UmaBdtJD3c4k0+2bavMT9EYN1ewFR8Q7nmyf+Rrcsk=) 2: 558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl (hash: iEfcHf8snGq29csTX+kv96ecetI0t9f/z+8tDgAlC0U=) 3: 323430303a633230303a3a2f33322d3332203d3e2030.roa (hash: jWSURrH5i9Ve77dNSm/DOqVvWVta2CLwxt5B21ziKXk=) 4: 3138302e3138382e36342e302f31382d3138203d3e2030.roa (hash: CDcfLDnojLav4F1oboeFWYrp/aoUNzF3QSznFZAxfwc=) 5: 3130332e3233352e35362e302f32322d3232203d3e2030.roa (hash: 5Juc8cbDRZJt1lx0LKQsAx+DhCJoZKzO4IygFaWnNb4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:bc:b8:2c:cd:24:0a:02:c0:5c:c1:4c:bb:9c:e9:5a:c2:af:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1 Validity Not Before: Sep 27 21:00:11 2026 GMT Not After : Oct 1 02:57:11 2026 GMT Subject: CN=ACC772BBEE6EE057F3EA1108FB4EF963E1975856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a6:00:b7:f5:41:54:83:46:83:d5:ee:27:e0: 03:2f:9e:37:78:df:f5:e2:73:dc:bc:63:f9:cd:59: 7a:c2:ce:c1:62:0d:a9:7a:36:97:0f:ef:b9:e9:41: e8:42:17:f8:77:b3:95:cc:9e:78:4a:9f:ff:9a:73: 7a:6c:c6:2a:04:d5:01:5f:48:a5:96:d8:51:a1:75: 15:46:ee:f1:ba:e5:49:7a:7e:e8:66:a3:09:2f:fb: aa:0b:4f:0a:15:ec:4e:32:65:42:55:bd:61:6c:ad: 78:7b:3d:dc:26:ef:1b:0e:8f:20:b6:1d:1c:34:fa: 3d:4b:7a:73:c4:fe:b3:c3:fa:96:53:ff:78:3d:2b: 9a:9f:5b:07:2f:ec:31:a2:f4:b9:f6:b8:a7:77:3c: 58:ac:5b:bc:2a:14:c3:73:b2:63:9d:0b:38:42:36: ff:32:a5:84:a4:c7:dd:4e:16:c4:b4:eb:5c:83:0a: b7:12:c8:21:a9:e7:06:a7:af:dd:48:96:b4:07:88: 9b:54:90:1b:b0:13:db:53:46:0c:48:8e:e5:c0:0e: 9f:d5:80:25:b6:29:17:57:62:3f:e2:92:0f:96:c2: 62:fa:fb:d9:01:54:7d:6c:0b:b6:65:1e:54:ff:a4: 5f:1f:d8:c5:9c:e9:71:87:a9:10:d0:d8:e6:e2:9f: d8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C7:72:BB:EE:6E:E0:57:F3:EA:11:08:FB:4E:F9:63:E1:97:58:56 X509v3 Authority Key Identifier: keyid:55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:cc:79:20:2e:b9:24:c9:4f:24:86:cd:2e:ee:f7:f8:2e:e2: 91:d1:bd:96:03:c8:80:02:aa:8a:9c:e9:37:cf:3b:32:9a:93: de:ad:8e:50:af:45:60:90:19:d1:16:8d:c4:8b:53:f7:00:b4: ae:5b:e5:e2:90:eb:27:82:9e:2a:a0:9a:58:1b:23:71:6d:27: f9:fa:d3:b8:88:11:89:bf:88:92:90:bb:00:02:30:3a:d8:10: b6:4e:98:5c:71:25:b7:64:63:30:c8:17:4c:42:1e:50:81:10: 63:37:0e:54:95:77:8d:df:5c:3f:81:e4:27:4e:31:dd:1c:ed: 9e:af:93:aa:4d:be:de:e5:3d:0d:5e:4c:4b:50:85:03:a6:59: 8c:6b:20:2a:24:6d:de:6c:e3:c8:fe:c4:ce:bd:a5:30:e8:7c: b0:ae:fe:f2:b6:6d:2f:10:10:81:91:75:4c:e3:1c:82:b3:37: 1d:e6:48:26:f2:59:e0:76:17:15:5d:fb:b2:c8:1a:73:f4:2c: 5b:d1:eb:98:bd:a8:7b:db:f1:7f:fc:8f:17:0e:b6:76:ef:43: 80:a0:b1:c7:ab:66:9b:a6:d2:b0:b0:44:80:cb:ba:48:07:f6: 76:3e:b6:b8:48:0c:d9:1a:f2:9d:37:b5:a1:82:08:d1:a2:7a: 66:47:9c:73 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNry4LM0kCgLAXMFMu5zpWsKvp0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU4RTNBMjdCRDc2MjJGQUNDMzMxN0NCRjgxMzJFMDZE OTdGNDZCMTAeFw0yNjA5MjcyMTAwMTFaFw0yNjEwMDEwMjU3MTFaMDMxMTAvBgNV BAMTKEFDQzc3MkJCRUU2RUUwNTdGM0VBMTEwOEZCNEVGOTYzRTE5NzU4NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0pgC39UFUg0aD1e4n4AMvnjd4 3/Xic9y8Y/nNWXrCzsFiDal6NpcP77npQehCF/h3s5XMnnhKn/+ac3psxioE1QFf SKWW2FGhdRVG7vG65Ul6fuhmowkv+6oLTwoV7E4yZUJVvWFsrXh7Pdwm7xsOjyC2 HRw0+j1LenPE/rPD+pZT/3g9K5qfWwcv7DGi9Ln2uKd3PFisW7wqFMNzsmOdCzhC Nv8ypYSkx91OFsS061yDCrcSyCGp5wanr91IlrQHiJtUkBuwE9tTRgxIjuXADp/V gCW2KRdXYj/ikg+WwmL6+9kBVH1sC7ZlHlT/pF8f2MWc6XGHqRDQ2Obin9jJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrMdyu+5u4Ffz6hEI+075Y+GXWFYwHwYDVR0j BBgwFoAUVY46J712IvrMMxfL+BMuBtl/RrEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjI3OTcyNTg1NTgwMTM2NS8wLzU1OEUzQTI3QkQ3NjIyRkFDQzMzMTdDQkY4MTMy RTA2RDk3RjQ2QjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTU4RTNBMjdCRDc2MjJGQUNDMzMxN0NCRjgxMzJFMDZEOTdGNDZCMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIyNzk3MjU4NTU4MDEzNjUvMC81NThFM0EyN0JENzYy MkZBQ0MzMzE3Q0JGODEzMkUwNkQ5N0Y0NkIxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMx5IC65JMlP JIbNLu73+C7ikdG9lgPIgAKqipzpN887MpqT3q2OUK9FYJAZ0RaNxItT9wC0rlvl 4pDrJ4KeKqCaWBsjcW0n+frTuIgRib+IkpC7AAIwOtgQtk6YXHElt2RjMMgXTEIe UIEQYzcOVJV3jd9cP4HkJ04x3Rztnq+Tqk2+3uU9DV5MS1CFA6ZZjGsgKiRt3mzj yP7Ezr2lMOh8sK7+8rZtLxAQgZF1TOMcgrM3HeZIJvJZ4HYXFV37ssgac/QsW9Hr mL2oe9vxf/yPFw62du9DgKCxx6tmm6bSsLBEgMu6SAf2dj62uEgM2RrynTe1oYII 0aJ6Zkeccw== -----END CERTIFICATE-----Generated at Mon Sep 28 00:51:12 2026 by rpki-client