$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft File: 558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft (raw, json) Hash identifier: 7RKjvPdPjs8lcBMMTdKK9h56y7uz0NxujPwWFNzl6j0= Subject key identifier: 0F:8E:41:4C:D6:71:5D:C5:F2:E1:B9:7A:86:BD:5D:31:22:17:64:FB Authority key identifier: 55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1 Certificate issuer: /CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1 Certificate serial: 4E10F9161B689A84F587FF6C16ABCF738A5FA05B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft Manifest number: 4F Signing time: Thu 23 Jul 2026 23:49:52 +0000 Manifest this update: Thu 23 Jul 2026 23:44:52 +0000 Manifest next update: Sat 25 Jul 2026 01:21:52 +0000 Files and hashes: 1: 558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl (hash: Thl6jMT3NuBtzymxaaEkXUxUzULU5BMHuHCSLKr5boY=) 2: 3138302e3138382e34382e302f32302d3230203d3e2030.roa (hash: 7UmaBdtJD3c4k0+2bavMT9EYN1ewFR8Q7nmyf+Rrcsk=) 3: 3138302e3138382e36342e302f31382d3138203d3e2030.roa (hash: CDcfLDnojLav4F1oboeFWYrp/aoUNzF3QSznFZAxfwc=) 4: 3130332e3233352e35362e302f32322d3232203d3e2030.roa (hash: 5Juc8cbDRZJt1lx0LKQsAx+DhCJoZKzO4IygFaWnNb4=) 5: 323430303a633230303a3a2f33322d3332203d3e2030.roa (hash: jWSURrH5i9Ve77dNSm/DOqVvWVta2CLwxt5B21ziKXk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:21:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:10:f9:16:1b:68:9a:84:f5:87:ff:6c:16:ab:cf:73:8a:5f:a0:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1 Validity Not Before: Jul 23 23:44:52 2026 GMT Not After : Jul 25 01:21:52 2026 GMT Subject: CN=0F8E414CD6715DC5F2E1B97A86BD5D31221764FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5a:97:be:b6:d4:dd:b0:2d:51:47:a4:95:d0: 8a:f5:0b:eb:86:1b:79:0a:24:b5:39:7c:4a:98:ee: c1:02:65:50:ae:de:b8:e3:6a:e7:9f:3f:2c:1b:b9: 4e:2d:45:25:99:07:e4:5a:67:7f:66:4d:49:27:fb: 9b:05:8d:5c:0d:c2:35:ee:38:b3:32:2d:21:b3:ec: 04:94:3a:42:05:55:d3:a9:8d:94:96:3e:46:31:7e: b0:93:f3:c4:6e:d0:ed:24:87:be:1b:75:b6:39:b3: 76:24:b2:14:b4:b7:05:cb:8d:e8:35:65:c7:2d:28: a6:d3:18:e0:57:4b:5a:1d:56:ba:81:4b:3f:d2:0c: 4c:4a:d7:01:7e:e4:4e:b5:2e:14:06:a4:eb:0f:95: 89:d3:63:d3:99:aa:8c:35:9a:ea:d7:40:ea:7b:85: 28:3f:f0:a6:9f:ce:f1:3f:aa:57:db:d7:1d:e9:12: ed:1a:f8:5c:57:55:eb:65:ab:26:df:8f:e4:18:b2: 66:09:6d:2b:bc:33:d0:be:5e:d0:53:bb:ab:10:31: 0b:8f:cb:df:05:01:0a:7f:8a:80:02:0a:98:93:e9: eb:24:7d:49:b7:e2:ef:e9:83:19:24:2b:6b:b8:36: 21:fc:5b:41:7d:bf:36:8f:70:e0:f4:3c:4a:a9:91: ce:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:8E:41:4C:D6:71:5D:C5:F2:E1:B9:7A:86:BD:5D:31:22:17:64:FB X509v3 Authority Key Identifier: keyid:55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:7d:e3:91:9e:88:56:52:19:9d:84:f6:b2:10:b3:be:21:a6: 8e:21:63:b9:f2:90:be:6c:21:b6:2e:33:bc:a2:30:5b:26:ea: cb:af:af:45:c5:98:4a:f7:d1:57:0f:c9:00:ba:88:d2:97:81: 69:a3:f0:fe:21:78:59:7a:c5:9f:39:66:84:b4:ca:dd:0b:00: 5d:e4:ba:9c:a5:f3:40:c7:d4:18:0f:b8:50:8e:a9:e5:1a:35: 55:7f:c5:99:5c:61:d4:59:97:72:03:38:95:c7:69:e3:0c:8f: 5f:75:98:ef:94:d4:2f:55:1d:6a:f0:8d:64:35:74:90:8f:8f: 8c:62:36:35:ff:da:15:d5:96:23:ba:82:91:17:cd:7b:24:12: 9c:d4:b0:10:58:4f:8d:ab:07:d7:ec:42:8f:42:66:68:72:3e: 58:2c:aa:33:3e:2c:47:25:57:65:bd:95:76:f0:93:92:9f:8e: 17:de:78:34:b2:b8:21:f6:bf:5c:d8:37:25:e1:fc:2d:80:58: fc:75:e1:76:e9:b5:51:b7:f7:a9:ea:a2:31:f9:d4:6f:f9:33: 55:5a:d0:9d:0f:f5:5c:2c:90:58:c1:d4:64:a4:53:96:6e:3e: 8b:5c:9d:18:23:dd:fe:34:0b:54:72:c3:7f:f9:55:c6:22:30: 1a:4a:cc:fc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUThD5FhtomoT1h/9sFqvPc4pfoFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU4RTNBMjdCRDc2MjJGQUNDMzMxN0NCRjgxMzJFMDZE OTdGNDZCMTAeFw0yNjA3MjMyMzQ0NTJaFw0yNjA3MjUwMTIxNTJaMDMxMTAvBgNV BAMTKDBGOEU0MTRDRDY3MTVEQzVGMkUxQjk3QTg2QkQ1RDMxMjIxNzY0RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYWpe+ttTdsC1RR6SV0Ir1C+uG G3kKJLU5fEqY7sECZVCu3rjjauefPywbuU4tRSWZB+RaZ39mTUkn+5sFjVwNwjXu OLMyLSGz7ASUOkIFVdOpjZSWPkYxfrCT88Ru0O0kh74bdbY5s3YkshS0twXLjeg1 ZcctKKbTGOBXS1odVrqBSz/SDExK1wF+5E61LhQGpOsPlYnTY9OZqow1murXQOp7 hSg/8KafzvE/qlfb1x3pEu0a+FxXVetlqybfj+QYsmYJbSu8M9C+XtBTu6sQMQuP y98FAQp/ioACCpiT6eskfUm34u/pgxkkK2u4NiH8W0F9vzaPcOD0PEqpkc7fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUD45BTNZxXcXy4bl6hr1dMSIXZPswHwYDVR0j BBgwFoAUVY46J712IvrMMxfL+BMuBtl/RrEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjI3OTcyNTg1NTgwMTM2NS8wLzU1OEUzQTI3QkQ3NjIyRkFDQzMzMTdDQkY4MTMy RTA2RDk3RjQ2QjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTU4RTNBMjdCRDc2MjJGQUNDMzMxN0NCRjgxMzJFMDZEOTdGNDZCMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIyNzk3MjU4NTU4MDEzNjUvMC81NThFM0EyN0JENzYy MkZBQ0MzMzE3Q0JGODEzMkUwNkQ5N0Y0NkIxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdn3jkZ6IVlIZ nYT2shCzviGmjiFjufKQvmwhti4zvKIwWybqy6+vRcWYSvfRVw/JALqI0peBaaPw /iF4WXrFnzlmhLTK3QsAXeS6nKXzQMfUGA+4UI6p5Ro1VX/FmVxh1FmXcgM4lcdp 4wyPX3WY75TUL1UdavCNZDV0kI+PjGI2Nf/aFdWWI7qCkRfNeyQSnNSwEFhPjasH 1+xCj0JmaHI+WCyqMz4sRyVXZb2VdvCTkp+OF954NLK4Ifa/XNg3JeH8LYBY/HXh dum1Ubf3qeqiMfnUb/kzVVrQnQ/1XCyQWMHUZKRTlm4+i1ydGCPd/jQLVHLDf/lV xiIwGkrM/A== -----END CERTIFICATE-----Generated at Fri Jul 24 09:20:38 2026 by rpki-client