$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft File: 58040501FF5E61F0E29F465314024C0C7BD4DC49.mft (raw, json) Hash identifier: +tSszpRk/VsVgBHROqyEpmsePHtRzn6QC6AZ3G+tbU8= Subject key identifier: 2B:DF:2F:93:76:62:1A:9C:DA:82:6F:A7:70:14:98:EE:D6:1C:B7:48 Authority key identifier: 58:04:05:01:FF:5E:61:F0:E2:9F:46:53:14:02:4C:0C:7B:D4:DC:49 Certificate issuer: /CN=58040501FF5E61F0E29F465314024C0C7BD4DC49 Certificate serial: 5FFE5320FDF573DFD1F48B2F9E4DD5D21892D042 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft Manifest number: 24 Signing time: Thu 23 Jul 2026 21:54:40 +0000 Manifest this update: Thu 23 Jul 2026 21:49:40 +0000 Manifest next update: Fri 24 Jul 2026 22:18:40 +0000 Files and hashes: 1: 3130332e3130312e3132342e302f32332d3233203d3e203633313939.roa (hash: DweWbHrlfvMPYOypUHcgGMIcJYqAuKpPbkgcv+YezDc=) 2: 3130332e3130312e3132342e302f32332d3233203d3e2034383131.roa (hash: tUU9CRZU47s83dslwBh17ysLnkJO3sTg8DsXMcR+XLo=) 3: 58040501FF5E61F0E29F465314024C0C7BD4DC49.crl (hash: hGGO2SP3PcqTqrIAs2iyGkya7bJlVaerJvIu41LXjHA=) 4: 3131392e36312e3132382e302f32342d3234203d3e2034383131.roa (hash: fYfvjXqjCoc03TNTQEtlwVm2vbjTwaGtqZePx3A6mMc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.crl rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:fe:53:20:fd:f5:73:df:d1:f4:8b:2f:9e:4d:d5:d2:18:92:d0:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58040501FF5E61F0E29F465314024C0C7BD4DC49 Validity Not Before: Jul 23 21:49:40 2026 GMT Not After : Jul 24 22:18:40 2026 GMT Subject: CN=2BDF2F9376621A9CDA826FA7701498EED61CB748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e9:4a:95:d2:c9:0f:76:36:54:01:4b:f2:89: 3d:48:bb:f7:04:8d:d9:eb:dd:42:ad:3e:50:1e:44: 5d:33:d3:f1:67:1a:ef:67:a9:46:69:99:55:1c:8d: c5:e4:e5:20:bc:23:66:e3:5e:35:ac:f6:06:37:92: a8:36:7e:4f:b5:55:a0:bf:c1:9b:e1:df:12:de:f3: 8b:c4:5a:ab:39:74:bd:15:31:32:a3:ee:a0:5d:cd: da:f8:b8:7d:8b:c5:1e:5c:8c:06:59:4f:70:77:ed: d3:1b:ce:7a:19:5e:98:41:ce:77:27:dc:54:2d:85: b5:ff:82:87:4d:28:43:f9:e9:a7:62:32:0a:0d:14: dc:ce:b3:55:da:11:bf:69:d6:2d:93:10:5d:4d:1d: 09:af:5c:c9:f7:92:97:7c:ee:f4:3d:b8:bc:ec:0d: 46:bb:c6:9a:b2:7b:28:a4:f9:60:10:89:30:c6:76: 8e:e8:19:76:f0:94:e2:b6:4d:bf:22:79:45:0e:80: c8:d1:f1:91:6e:5b:2b:5c:6b:e1:b0:2e:e9:54:d0: cf:73:f6:9e:17:f8:75:ab:ef:db:25:2b:17:8e:2a: 21:a4:f4:c8:7b:5b:d0:09:c0:eb:f3:95:1b:c0:35: 40:1f:83:66:02:44:97:48:28:bd:83:65:6b:60:fb: ec:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DF:2F:93:76:62:1A:9C:DA:82:6F:A7:70:14:98:EE:D6:1C:B7:48 X509v3 Authority Key Identifier: keyid:58:04:05:01:FF:5E:61:F0:E2:9F:46:53:14:02:4C:0C:7B:D4:DC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f2:80:c7:82:dc:4a:46:02:5f:5e:74:33:a8:b6:aa:34:25: 1e:9b:bb:59:fd:3c:ba:74:1c:dd:36:ee:1b:f6:9b:3d:e8:b8: 01:80:3d:ce:0e:32:ca:3b:33:53:33:6f:bf:f2:d1:bc:b2:d8: 50:61:dd:12:ef:50:63:cc:4c:bd:30:45:1c:5b:89:7f:7b:5a: 42:82:27:70:f4:4f:cd:ae:dc:6b:dd:92:5e:c6:77:92:0c:db: 1a:c0:64:6b:9e:cf:30:c2:5b:65:a5:58:0e:28:18:18:19:c4: 68:29:82:15:4b:cc:f0:ca:ee:40:0d:ac:a5:1c:40:93:5f:48: 19:04:b1:0c:ee:9e:e0:ae:97:dc:70:b3:6e:22:9e:a7:91:46: 9f:dc:10:3b:a4:4c:ba:c8:14:52:89:a6:84:6e:78:de:70:92: f2:4c:23:ad:7a:c7:5e:0f:e3:fc:25:1b:d0:f7:d9:e8:1a:3d: 1d:f6:cd:de:1e:5b:a8:0f:b1:ab:96:ac:3b:d6:69:09:2a:f5: ef:08:9e:42:f5:d4:d1:4c:9b:56:d9:ae:ad:3a:01:ab:1d:fe: 1b:7b:cb:03:c7:f9:29:14:b9:da:a5:88:36:5f:f5:c7:f0:4b: e3:24:b7:42:9e:ab:40:76:8e:be:35:4e:ce:b0:a3:67:bb:19: d9:80:31:bb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX/5TIP31c9/R9Isvnk3V0hiS0EIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgwNDA1MDFGRjVFNjFGMEUyOUY0NjUzMTQwMjRDMEM3 QkQ0REM0OTAeFw0yNjA3MjMyMTQ5NDBaFw0yNjA3MjQyMjE4NDBaMDMxMTAvBgNV BAMTKDJCREYyRjkzNzY2MjFBOUNEQTgyNkZBNzcwMTQ5OEVFRDYxQ0I3NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp6UqV0skPdjZUAUvyiT1Iu/cE jdnr3UKtPlAeRF0z0/FnGu9nqUZpmVUcjcXk5SC8I2bjXjWs9gY3kqg2fk+1VaC/ wZvh3xLe84vEWqs5dL0VMTKj7qBdzdr4uH2LxR5cjAZZT3B37dMbznoZXphBzncn 3FQthbX/godNKEP56adiMgoNFNzOs1XaEb9p1i2TEF1NHQmvXMn3kpd87vQ9uLzs DUa7xpqyeyik+WAQiTDGdo7oGXbwlOK2Tb8ieUUOgMjR8ZFuWytca+GwLulU0M9z 9p4X+HWr79slKxeOKiGk9Mh7W9AJwOvzlRvANUAfg2YCRJdIKL2DZWtg++ydAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUK98vk3ZiGpzagm+ncBSY7tYct0gwHwYDVR0j BBgwFoAUWAQFAf9eYfDin0ZTFAJMDHvU3EkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzYwMjE5MjM4OTg5ODI3NS8wLzU4MDQwNTAxRkY1RTYxRjBFMjlGNDY1MzE0MDI0 QzBDN0JENERDNDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTgwNDA1MDFGRjVFNjFGMEUyOUY0NjUzMTQwMjRDMEM3QkQ0REM0OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM2MDIxOTIzODk4OTgyNzUvMC81ODA0MDUwMUZGNUU2 MUYwRTI5RjQ2NTMxNDAyNEMwQzdCRDREQzQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/KAx4LcSkYC X150M6i2qjQlHpu7Wf08unQc3TbuG/abPei4AYA9zg4yyjszUzNvv/LRvLLYUGHd Eu9QY8xMvTBFHFuJf3taQoIncPRPza7ca92SXsZ3kgzbGsBka57PMMJbZaVYDigY GBnEaCmCFUvM8MruQA2spRxAk19IGQSxDO6e4K6X3HCzbiKep5FGn9wQO6RMusgU UommhG543nCS8kwjrXrHXg/j/CUb0PfZ6Bo9HfbN3h5bqA+xq5asO9ZpCSr17wie QvXU0UybVtmurToBqx3+G3vLA8f5KRS52qWINl/1x/BL4yS3Qp6rQHaOvjVOzrCj Z7sZ2YAxuw== -----END CERTIFICATE-----Generated at Fri Jul 24 14:57:11 2026 by rpki-client