$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft File: 58040501FF5E61F0E29F465314024C0C7BD4DC49.mft (raw, json) Hash identifier: je5AqCyhRNUnwHYBgDumlnGDbGl/j43448jpWd77ALI= Subject key identifier: 26:92:C5:16:B4:E7:00:DC:97:67:E1:E1:BD:22:5C:E1:F6:2D:67:C9 Authority key identifier: 58:04:05:01:FF:5E:61:F0:E2:9F:46:53:14:02:4C:0C:7B:D4:DC:49 Certificate issuer: /CN=58040501FF5E61F0E29F465314024C0C7BD4DC49 Certificate serial: 7FB465ACB35509C5109C4E708AC863A524C4C675 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft Manifest number: 66 Signing time: Sat 10 Oct 2026 16:09:46 +0000 Manifest this update: Sat 10 Oct 2026 16:04:46 +0000 Manifest next update: Wed 14 Oct 2026 03:31:46 +0000 Files and hashes: 1: 58040501FF5E61F0E29F465314024C0C7BD4DC49.crl (hash: g3T71EBWAiKdVBszAJVHreoHih3ZCW+7uSZZvkdVz+s=) 2: 3130332e3130312e3132342e302f32332d3233203d3e2034383131.roa (hash: tUU9CRZU47s83dslwBh17ysLnkJO3sTg8DsXMcR+XLo=) 3: 3131392e36312e3132382e302f32342d3234203d3e2034383131.roa (hash: fYfvjXqjCoc03TNTQEtlwVm2vbjTwaGtqZePx3A6mMc=) 4: 3130332e3130312e3132342e302f32332d3233203d3e203633313939.roa (hash: DweWbHrlfvMPYOypUHcgGMIcJYqAuKpPbkgcv+YezDc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.crl rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b4:65:ac:b3:55:09:c5:10:9c:4e:70:8a:c8:63:a5:24:c4:c6:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58040501FF5E61F0E29F465314024C0C7BD4DC49 Validity Not Before: Oct 10 16:04:46 2026 GMT Not After : Oct 14 03:31:46 2026 GMT Subject: CN=2692C516B4E700DC9767E1E1BD225CE1F62D67C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:03:1c:5b:64:c2:aa:54:d8:40:4e:5a:76:ce: 47:45:61:fb:67:26:4c:b0:6a:9e:d3:02:b7:d2:4a: df:db:08:65:53:64:07:f6:fd:b2:df:e6:d1:38:65: 79:e1:3a:97:55:bd:36:ab:09:64:3e:bf:40:84:de: 95:a4:8d:19:d2:b0:96:e3:6f:a9:0e:81:df:80:7f: 0c:42:97:60:80:60:f1:69:6c:55:02:0e:35:90:af: aa:a2:61:32:e0:f1:a1:40:e9:67:51:4f:72:2e:88: ca:4d:89:32:15:74:14:15:a3:58:2e:d5:47:05:aa: d1:cb:e0:4f:33:87:47:c6:e6:33:9f:b3:42:62:1d: d2:1f:32:fc:b6:a7:9c:f9:a9:c9:af:7e:15:7e:09: 8e:bd:24:4a:02:9b:e7:f1:78:0e:4b:ec:c1:d3:e5: 81:43:1e:ac:04:9c:56:14:2b:76:f1:0b:c2:58:c9: bf:f3:62:1b:47:2c:45:0f:7f:ca:4f:a4:c7:14:4e: 20:1d:0c:46:d5:d0:0f:bf:12:96:d2:72:e0:37:5b: f9:bd:f0:7c:c2:a0:73:10:55:41:13:7d:21:6c:0c: 68:6d:38:2b:af:1a:a7:ed:09:d0:12:2a:4b:a1:fc: 83:93:af:21:c6:67:80:75:5c:50:0c:82:89:0c:fb: 87:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:92:C5:16:B4:E7:00:DC:97:67:E1:E1:BD:22:5C:E1:F6:2D:67:C9 X509v3 Authority Key Identifier: keyid:58:04:05:01:FF:5E:61:F0:E2:9F:46:53:14:02:4C:0C:7B:D4:DC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c6:55:59:4c:83:54:cc:9e:9c:61:f3:b6:82:2a:98:16:61: 0d:19:66:3b:59:b7:e1:08:64:31:d9:7c:c7:7b:c7:8e:f6:70: de:ec:ca:14:28:3d:6d:b6:57:b1:46:63:eb:a5:62:b6:b5:2b: cb:e3:0b:c7:cb:4b:5a:36:aa:ce:e1:44:f0:99:49:40:34:df: ab:3c:13:9c:c3:04:cc:90:34:e3:a0:68:e9:d3:a8:9d:40:b6: 9d:f2:86:a2:3a:cd:5a:06:16:26:81:a4:f2:30:ba:00:f0:6f: 77:31:f6:82:2d:ff:85:9f:b5:d5:03:0e:4c:49:a5:db:79:e4: 49:30:ca:a6:43:2b:ab:33:ec:a5:74:0f:62:94:84:6c:3a:58: 98:4b:1d:3f:e2:ca:58:f2:d0:24:e5:19:bb:36:0f:2a:6c:78: 9d:6f:c2:ff:3e:68:99:74:60:58:53:ff:0a:2a:46:cb:b2:5b: a6:44:42:49:40:95:c8:56:df:50:61:ad:98:cb:d8:81:db:e9: f6:3c:89:86:cd:73:ce:98:13:fb:b2:44:54:78:58:37:46:0b: 96:8a:8f:93:b8:99:04:5c:68:4a:28:d7:c2:34:80:0e:90:d5: 5a:63:7f:40:49:dd:30:87:fa:52:33:78:53:93:a9:65:25:b5: 5c:39:15:25 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUf7RlrLNVCcUQnE5wishjpSTExnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgwNDA1MDFGRjVFNjFGMEUyOUY0NjUzMTQwMjRDMEM3 QkQ0REM0OTAeFw0yNjEwMTAxNjA0NDZaFw0yNjEwMTQwMzMxNDZaMDMxMTAvBgNV BAMTKDI2OTJDNTE2QjRFNzAwREM5NzY3RTFFMUJEMjI1Q0UxRjYyRDY3QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxAxxbZMKqVNhATlp2zkdFYftn Jkywap7TArfSSt/bCGVTZAf2/bLf5tE4ZXnhOpdVvTarCWQ+v0CE3pWkjRnSsJbj b6kOgd+AfwxCl2CAYPFpbFUCDjWQr6qiYTLg8aFA6WdRT3IuiMpNiTIVdBQVo1gu 1UcFqtHL4E8zh0fG5jOfs0JiHdIfMvy2p5z5qcmvfhV+CY69JEoCm+fxeA5L7MHT 5YFDHqwEnFYUK3bxC8JYyb/zYhtHLEUPf8pPpMcUTiAdDEbV0A+/EpbScuA3W/m9 8HzCoHMQVUETfSFsDGhtOCuvGqftCdASKkuh/IOTryHGZ4B1XFAMgokM+4eBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJpLFFrTnANyXZ+HhvSJc4fYtZ8kwHwYDVR0j BBgwFoAUWAQFAf9eYfDin0ZTFAJMDHvU3EkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzYwMjE5MjM4OTg5ODI3NS8wLzU4MDQwNTAxRkY1RTYxRjBFMjlGNDY1MzE0MDI0 QzBDN0JENERDNDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTgwNDA1MDFGRjVFNjFGMEUyOUY0NjUzMTQwMjRDMEM3QkQ0REM0OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM2MDIxOTIzODk4OTgyNzUvMC81ODA0MDUwMUZGNUU2 MUYwRTI5RjQ2NTMxNDAyNEMwQzdCRDREQzQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApsZVWUyDVMye nGHztoIqmBZhDRlmO1m34QhkMdl8x3vHjvZw3uzKFCg9bbZXsUZj66VitrUry+ML x8tLWjaqzuFE8JlJQDTfqzwTnMMEzJA046Bo6dOonUC2nfKGojrNWgYWJoGk8jC6 APBvdzH2gi3/hZ+11QMOTEml23nkSTDKpkMrqzPspXQPYpSEbDpYmEsdP+LKWPLQ JOUZuzYPKmx4nW/C/z5omXRgWFP/CipGy7JbpkRCSUCVyFbfUGGtmMvYgdvp9jyJ hs1zzpgT+7JEVHhYN0YLloqPk7iZBFxoSijXwjSADpDVWmN/QEndMIf6UjN4U5Op ZSW1XDkVJQ== -----END CERTIFICATE-----Generated at Sun Oct 11 08:56:19 2026 by rpki-client