$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft File: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft (raw, json) Hash identifier: AHaRwYgNOSOOhhLj1Sndr3r/a5NTvTfZq0SpfKcYN98= Subject key identifier: 60:1D:8F:58:B7:4D:F2:4C:F0:CA:90:3C:28:18:96:5E:8F:6E:9E:C8 Authority key identifier: 58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39 Certificate issuer: /CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39 Certificate serial: 77F34A16443CC30A52A149CD639F05FEC594560E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft Manifest number: 07D7 Signing time: Tue 21 Jul 2026 04:27:54 +0000 Manifest this update: Tue 21 Jul 2026 04:22:54 +0000 Manifest next update: Wed 22 Jul 2026 05:45:54 +0000 Files and hashes: 1: AS45090.roa (hash: v9bIhUSWFpO+Oe9WfYi+pPkr+55HVbJ/yALR+h7JiOs=) 2: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl (hash: +smkZW+WvVx2yrXRT2DaDc9OFuhFfvI9Vsaa0KcrEJs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 05:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:f3:4a:16:44:3c:c3:0a:52:a1:49:cd:63:9f:05:fe:c5:94:56:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39 Validity Not Before: Jul 21 04:22:54 2026 GMT Not After : Jul 22 05:45:54 2026 GMT Subject: CN=601D8F58B74DF24CF0CA903C2818965E8F6E9EC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ba:0a:b2:b5:5b:3c:50:e5:76:88:ed:77:1b: 3c:cb:c3:78:f4:0e:9e:c1:d2:93:fb:56:07:a5:1e: ed:0b:3b:50:c8:ca:c4:ff:3e:b0:39:b4:8e:4c:5f: 9c:f4:5d:c3:9c:b8:db:8a:77:4f:80:f3:6b:d7:85: 69:6b:07:d2:ea:94:3a:5b:17:87:81:f9:72:c4:a5: bf:bb:c9:e7:a5:1d:d6:24:66:cd:c7:d8:94:ea:61: 02:e1:e4:d2:5d:48:ad:ee:e9:60:dd:3f:22:54:97: 3d:73:d9:9c:30:f9:38:5e:45:bf:50:47:80:c6:15: e2:15:80:a1:57:47:75:2c:f9:e3:ca:58:93:16:ad: 94:18:5b:59:2f:e1:28:9d:5a:9d:2c:ca:35:89:18: 3b:ac:23:2c:51:18:56:ef:70:b1:eb:2b:f3:4e:90: ba:99:24:6b:ed:88:ed:a0:40:3a:28:05:a2:df:cb: a1:77:24:d2:9c:66:87:57:d5:13:78:05:75:61:ec: 52:8c:ad:82:86:2e:2d:33:f6:c9:b5:b7:e8:75:a1: af:12:d9:7b:19:84:cf:87:9e:9f:89:f1:2c:ca:55: 22:51:10:2c:d4:33:5b:21:16:0b:76:68:ff:cb:82: 36:1d:e6:29:ff:b6:0d:bd:11:c2:7f:99:02:43:12: d5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1D:8F:58:B7:4D:F2:4C:F0:CA:90:3C:28:18:96:5E:8F:6E:9E:C8 X509v3 Authority Key Identifier: keyid:58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:a6:29:4a:a5:d3:dc:d3:73:ed:3a:67:61:b4:d1:cb:15:a1: f4:16:a3:9a:d1:d8:f3:41:04:7e:79:82:f0:11:2e:37:cb:aa: ef:4c:fc:1b:6f:0d:3c:31:a3:7d:77:6c:c8:68:ca:a7:29:73: d6:f8:bf:af:89:c0:55:0d:36:e5:3f:0c:d5:0c:38:4f:4d:70: 18:c5:ba:25:46:a2:67:57:aa:b3:2f:ba:df:d4:ad:3e:7c:91: 8a:e3:1a:7e:06:cb:98:7a:d0:3e:2f:8c:d6:27:d1:30:74:25: 84:02:22:80:26:89:41:56:d9:9e:1b:3a:34:05:19:78:05:b3: b9:2e:94:6d:29:47:b6:cd:57:87:2d:fe:4a:fc:8f:95:44:09: 86:8a:16:6e:f2:a4:3f:70:5e:75:26:78:4e:61:61:b9:2c:57: fd:1e:42:f5:5f:f2:00:1b:e3:f4:ed:5f:02:a1:76:f4:ea:7c: b0:64:ef:a0:2c:02:51:10:e7:21:bb:cd:d8:b7:c6:6d:55:fc: 39:ca:19:55:56:e3:e1:17:b6:e6:1e:c1:fa:67:b2:b7:ae:e3: 40:fb:1b:ee:14:23:a0:f0:fb:61:08:db:ff:e1:82:c0:8b:6f: 71:19:ea:1c:08:89:02:ef:36:ee:41:ee:c1:76:7e:bb:d4:a2: b8:c5:8a:14 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUd/NKFkQ8wwpSoUnNY58F/sWUVg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2 RDU4OUIzOTAeFw0yNjA3MjEwNDIyNTRaFw0yNjA3MjIwNTQ1NTRaMDMxMTAvBgNV BAMTKDYwMUQ4RjU4Qjc0REYyNENGMENBOTAzQzI4MTg5NjVFOEY2RTlFQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRugqytVs8UOV2iO13GzzLw3j0 Dp7B0pP7VgelHu0LO1DIysT/PrA5tI5MX5z0XcOcuNuKd0+A82vXhWlrB9LqlDpb F4eB+XLEpb+7yeelHdYkZs3H2JTqYQLh5NJdSK3u6WDdPyJUlz1z2Zww+TheRb9Q R4DGFeIVgKFXR3Us+ePKWJMWrZQYW1kv4SidWp0syjWJGDusIyxRGFbvcLHrK/NO kLqZJGvtiO2gQDooBaLfy6F3JNKcZodX1RN4BXVh7FKMrYKGLi0z9sm1t+h1oa8S 2XsZhM+Hnp+J8SzKVSJRECzUM1shFgt2aP/LgjYd5in/tg29EcJ/mQJDEtWZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYB2PWLdN8kzwypA8KBiWXo9unsgwHwYDVR0j BBgwFoAUWPqrjhwYIXm0bh1tsenKWm1YmzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTM2Mjk0Ni8xLzU4RkFBQjhFMUMxODIxNzlCNDZFMUQ2REIxRTlD QTVBNkQ1ODlCMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2RDU4OUIzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjEzNjI5NDYvMS81OEZBQUI4RTFDMTgy MTc5QjQ2RTFENkRCMUU5Q0E1QTZENTg5QjM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqaYpSqXT3NNz 7TpnYbTRyxWh9BajmtHY80EEfnmC8BEuN8uq70z8G28NPDGjfXdsyGjKpylz1vi/ r4nAVQ025T8M1Qw4T01wGMW6JUaiZ1eqsy+639StPnyRiuMafgbLmHrQPi+M1ifR MHQlhAIigCaJQVbZnhs6NAUZeAWzuS6UbSlHts1Xhy3+SvyPlUQJhooWbvKkP3Be dSZ4TmFhuSxX/R5C9V/yABvj9O1fAqF29Op8sGTvoCwCURDnIbvN2LfGbVX8OcoZ VVbj4Re25h7B+meyt67jQPsb7hQjoPD7YQjb/+GCwItvcRnqHAiJAu827kHuwXZ+ u9SiuMWKFA== -----END CERTIFICATE-----Generated at Tue Jul 21 22:46:50 2026 by rpki-client