$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft File: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft (raw, json) Hash identifier: acSbFTBUW0ysJIogV9tvOr0pY0t+9kywTPOszCcqfyY= Subject key identifier: D6:AD:5C:88:25:18:7F:7D:72:A6:42:C7:B2:E0:C7:1F:AF:4D:C9:06 Authority key identifier: 58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39 Certificate issuer: /CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39 Certificate serial: 04D18B5EA03C85197886CDBCC6179F0179BC480C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft Manifest number: 3C Signing time: Wed 04 Mar 2026 11:08:20 +0000 Manifest this update: Wed 04 Mar 2026 11:03:20 +0000 Manifest next update: Thu 05 Mar 2026 12:59:20 +0000 Files and hashes: 1: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl (hash: RnXpFFuSbrPmUztOTI4tVbH1zneLLIdu4vKCQu9KHaQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 12:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:d1:8b:5e:a0:3c:85:19:78:86:cd:bc:c6:17:9f:01:79:bc:48:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39 Validity Not Before: Mar 4 11:03:20 2026 GMT Not After : Mar 5 12:59:20 2026 GMT Subject: CN=D6AD5C8825187F7D72A642C7B2E0C71FAF4DC906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ea:b4:25:9f:bb:89:41:ee:a5:ed:14:43:7c: 0c:96:7d:f0:b9:a2:70:40:8e:26:90:1c:38:c8:92: 39:ac:8b:07:48:03:cc:c2:68:82:22:a8:ad:cc:f7: a1:d2:c1:79:e5:c1:04:1e:9e:50:b1:9d:e5:ec:b9: e3:00:de:35:e4:d2:91:28:a2:bf:11:0e:b9:02:ec: 19:d4:68:ff:e2:1b:c4:4b:79:08:87:2a:70:e0:92: 45:f2:c7:52:f4:62:ca:12:c0:e6:41:14:ab:de:48: 70:03:35:e3:cb:e0:2c:8a:62:99:2e:8d:c6:19:30: 80:f3:f8:fa:bf:5b:eb:fe:27:5a:2d:cc:c9:b0:cb: f1:2c:4b:05:e0:20:b3:4b:f4:44:40:81:a3:53:35: 32:c7:1c:4f:94:c8:09:10:a7:9a:9f:05:ca:25:1e: 79:ed:10:6d:47:1a:1a:cd:26:28:24:33:73:f2:d8: 6f:99:aa:e9:bf:60:88:31:bf:d7:6f:a2:56:98:e0: 13:76:4f:40:28:40:70:2c:94:4b:64:b8:f6:2d:b0: 21:4b:fd:e5:96:8f:0a:f1:67:48:2d:47:38:a9:c8: 0b:71:7e:7d:b2:43:1a:c3:bb:72:8a:23:3f:50:11: ca:7e:91:46:25:14:b5:1e:75:1d:4a:43:cc:39:d2: 08:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AD:5C:88:25:18:7F:7D:72:A6:42:C7:B2:E0:C7:1F:AF:4D:C9:06 X509v3 Authority Key Identifier: keyid:58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:94:e0:df:0f:bf:7e:ff:d4:6a:0f:e3:49:4a:f6:a2:61:31: ef:ce:40:6a:68:71:ae:6a:fd:54:a2:39:34:ab:03:77:24:70: 4e:b3:d6:27:3e:ce:13:93:4c:c1:25:f5:5c:38:8d:ba:26:5d: e8:e3:5c:c6:66:3b:bf:7d:1d:2a:32:ce:4b:68:eb:b4:c8:8d: e9:21:47:a7:6e:f6:3f:bb:0f:e1:92:fe:10:ac:32:dd:ba:c6: b5:c6:76:18:6b:fa:26:70:f5:0c:0e:6b:25:7f:81:9c:59:96: 37:1f:a0:35:cf:91:16:5f:d1:3b:79:5f:ff:64:b8:59:6e:62: 82:ce:cb:0a:7a:32:9c:a0:a9:b7:44:53:83:b9:8f:7a:2b:0b: 05:36:2d:7b:e9:21:a4:40:5d:20:92:d6:6a:d5:8d:ce:e2:5b: 5f:d1:a9:76:7c:b6:0c:e9:3d:e2:aa:35:de:03:c1:0d:03:07: ed:d3:5b:77:ca:3f:23:f1:d0:8f:f6:da:c0:a5:5a:1a:9b:ef: cc:6c:fd:fb:ab:2d:b4:31:d7:55:44:0c:2a:12:45:13:2d:06: 1f:48:ba:65:ba:4e:f1:9b:a0:db:9d:11:b6:1e:29:6f:d3:fc: cc:25:cc:0f:d3:85:7c:29:3d:1f:e8:0f:41:6c:7e:66:a6:fd: 99:9e:90:5b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBNGLXqA8hRl4hs28xhefAXm8SAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2 RDU4OUIzOTAeFw0yNjAzMDQxMTAzMjBaFw0yNjAzMDUxMjU5MjBaMDMxMTAvBgNV BAMTKEQ2QUQ1Qzg4MjUxODdGN0Q3MkE2NDJDN0IyRTBDNzFGQUY0REM5MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH6rQln7uJQe6l7RRDfAyWffC5 onBAjiaQHDjIkjmsiwdIA8zCaIIiqK3M96HSwXnlwQQenlCxneXsueMA3jXk0pEo or8RDrkC7BnUaP/iG8RLeQiHKnDgkkXyx1L0YsoSwOZBFKveSHADNePL4CyKYpku jcYZMIDz+Pq/W+v+J1otzMmwy/EsSwXgILNL9ERAgaNTNTLHHE+UyAkQp5qfBcol HnntEG1HGhrNJigkM3Py2G+Zqum/YIgxv9dvolaY4BN2T0AoQHAslEtkuPYtsCFL /eWWjwrxZ0gtRzipyAtxfn2yQxrDu3KKIz9QEcp+kUYlFLUedR1KQ8w50ggDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1q1ciCUYf31ypkLHsuDHH69NyQYwHwYDVR0j BBgwFoAUWPqrjhwYIXm0bh1tsenKWm1YmzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTM2Mjk0Ni8xLzU4RkFBQjhFMUMxODIxNzlCNDZFMUQ2REIxRTlD QTVBNkQ1ODlCMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2RDU4OUIzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjEzNjI5NDYvMS81OEZBQUI4RTFDMTgy MTc5QjQ2RTFENkRCMUU5Q0E1QTZENTg5QjM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpTg3w+/fv/U ag/jSUr2omEx785Aamhxrmr9VKI5NKsDdyRwTrPWJz7OE5NMwSX1XDiNuiZd6ONc xmY7v30dKjLOS2jrtMiN6SFHp272P7sP4ZL+EKwy3brGtcZ2GGv6JnD1DA5rJX+B nFmWNx+gNc+RFl/RO3lf/2S4WW5igs7LCnoynKCpt0RTg7mPeisLBTYte+khpEBd IJLWatWNzuJbX9Gpdny2DOk94qo13gPBDQMH7dNbd8o/I/HQj/bawKVaGpvvzGz9 +6sttDHXVUQMKhJFEy0GH0i6ZbpO8Zug250Rth4pb9P8zCXMD9OFfCk9H+gPQWx+ Zqb9mZ6QWw== -----END CERTIFICATE-----Generated at Wed Mar 4 13:10:33 2026 by rpki-client