$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft File: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft (raw, json) Hash identifier: 89ao3Xf5MSz1o5QewNUVZUpptuZgmlRgzhaQBDcFuOs= Subject key identifier: F1:25:E9:7F:73:94:64:12:C2:E0:C8:74:92:86:41:FD:92:63:1D:91 Authority key identifier: 58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39 Certificate issuer: /CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39 Certificate serial: 43FC16200E4AE56A40B5584E9179976CBA67B723 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft Manifest number: 0826 Signing time: Fri 30 Oct 2026 22:38:41 +0000 Manifest this update: Fri 30 Oct 2026 22:33:41 +0000 Manifest next update: Tue 03 Nov 2026 07:05:41 +0000 Files and hashes: 1: AS45090.roa (hash: v9bIhUSWFpO+Oe9WfYi+pPkr+55HVbJ/yALR+h7JiOs=) 2: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl (hash: 2JDBYZu01jq0CjiGrq/a4L8t4QgrIpuY2cajHhKm/j8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 15:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:fc:16:20:0e:4a:e5:6a:40:b5:58:4e:91:79:97:6c:ba:67:b7:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39 Validity Not Before: Oct 30 22:33:41 2026 GMT Not After : Nov 3 07:05:41 2026 GMT Subject: CN=F125E97F73946412C2E0C874928641FD92631D91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6d:85:aa:55:2b:b1:8c:f9:03:40:43:7f:84: d9:40:57:7c:66:68:68:9f:8f:39:eb:e6:97:be:64: 0b:69:8a:ce:ff:28:61:87:2d:d5:eb:aa:48:46:44: 1f:34:af:1b:93:ae:19:3c:dc:eb:08:da:bc:2f:40: 30:2c:9d:05:a6:b6:33:8a:e3:11:98:94:4a:77:80: 93:8f:83:cf:bb:28:89:bf:e4:f2:2a:1d:97:9d:af: 4b:80:ee:3f:07:cd:77:2e:36:3a:a8:78:1c:47:de: e4:8c:3c:a9:56:39:a0:17:07:80:11:94:60:18:e7: 33:20:7c:cb:ce:e1:5e:c8:47:40:91:2c:c9:db:a7: e1:69:26:0b:d3:6b:67:0b:cb:1f:a5:2f:10:be:98: b1:be:7e:6d:4e:2c:45:78:b4:b5:b7:db:ec:7b:cd: b5:5a:4f:06:01:ce:b1:98:40:db:d4:92:ad:5a:32: f6:ab:4d:aa:d4:cc:9f:45:94:2a:45:13:cd:e3:41: 44:68:9e:2e:01:cd:07:9d:02:14:53:95:c0:b8:29: 93:aa:43:ea:04:86:14:53:6c:34:23:b9:f0:ab:00: 7c:f0:a3:6b:e2:d1:e5:9e:05:3c:b9:23:9a:6d:f3: 01:49:b3:bb:f6:6b:e0:9e:c7:8c:66:01:ff:49:e1: e1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:25:E9:7F:73:94:64:12:C2:E0:C8:74:92:86:41:FD:92:63:1D:91 X509v3 Authority Key Identifier: keyid:58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:8f:37:8a:4a:90:40:d2:a0:e4:d3:a6:96:c6:43:3c:70:7d: c6:f4:fa:6d:de:ad:ee:ad:84:22:55:c2:0e:3b:a8:bd:b8:a0: ce:83:82:49:39:ee:0c:d9:88:cf:02:12:99:06:3f:04:d8:84: d5:b6:51:5e:cb:0d:12:b8:67:60:89:3a:0f:a3:e8:62:a4:df: f4:8e:ab:75:02:24:40:b9:bb:99:67:87:a5:35:88:42:df:c7: 57:ca:90:ac:d7:a5:33:32:44:ba:c4:9c:98:9e:70:a3:43:f3: 3a:94:75:b7:2d:33:ed:4b:57:96:5f:ef:56:30:b5:7e:14:69: 9b:e2:15:7a:80:49:2a:81:72:8a:9c:e6:0a:52:62:cb:6e:4c: 16:75:1f:3f:59:e5:52:6a:20:5d:8d:45:47:9d:b1:2d:d8:2c: d4:16:52:6e:de:1b:04:d8:2d:4e:e3:6e:a3:68:32:1c:81:9a: fa:27:b0:7f:68:51:47:e6:97:c1:57:e2:8d:b1:b9:cf:c3:b3: 7f:3d:70:cd:33:8c:fe:22:25:ab:f4:9e:d5:6d:0f:67:70:e2: 62:80:4d:8d:71:6c:09:9d:98:40:f4:b3:c6:6d:0e:be:5e:b5: 1a:1e:c1:87:91:24:11:cf:20:52:70:22:1e:b3:b9:0d:7e:ff: f8:e3:7c:06 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQ/wWIA5K5WpAtVhOkXmXbLpntyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2 RDU4OUIzOTAeFw0yNjEwMzAyMjMzNDFaFw0yNjExMDMwNzA1NDFaMDMxMTAvBgNV BAMTKEYxMjVFOTdGNzM5NDY0MTJDMkUwQzg3NDkyODY0MUZEOTI2MzFEOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgbYWqVSuxjPkDQEN/hNlAV3xm aGifjznr5pe+ZAtpis7/KGGHLdXrqkhGRB80rxuTrhk83OsI2rwvQDAsnQWmtjOK 4xGYlEp3gJOPg8+7KIm/5PIqHZedr0uA7j8HzXcuNjqoeBxH3uSMPKlWOaAXB4AR lGAY5zMgfMvO4V7IR0CRLMnbp+FpJgvTa2cLyx+lLxC+mLG+fm1OLEV4tLW32+x7 zbVaTwYBzrGYQNvUkq1aMvarTarUzJ9FlCpFE83jQURoni4BzQedAhRTlcC4KZOq Q+oEhhRTbDQjufCrAHzwo2vi0eWeBTy5I5pt8wFJs7v2a+Cex4xmAf9J4eE3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8SXpf3OUZBLC4Mh0koZB/ZJjHZEwHwYDVR0j BBgwFoAUWPqrjhwYIXm0bh1tsenKWm1YmzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTM2Mjk0Ni8xLzU4RkFBQjhFMUMxODIxNzlCNDZFMUQ2REIxRTlD QTVBNkQ1ODlCMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2RDU4OUIzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjEzNjI5NDYvMS81OEZBQUI4RTFDMTgy MTc5QjQ2RTFENkRCMUU5Q0E1QTZENTg5QjM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd483ikqQQNKg 5NOmlsZDPHB9xvT6bd6t7q2EIlXCDjuovbigzoOCSTnuDNmIzwISmQY/BNiE1bZR XssNErhnYIk6D6PoYqTf9I6rdQIkQLm7mWeHpTWIQt/HV8qQrNelMzJEusScmJ5w o0PzOpR1ty0z7UtXll/vVjC1fhRpm+IVeoBJKoFyipzmClJiy25MFnUfP1nlUmog XY1FR52xLdgs1BZSbt4bBNgtTuNuo2gyHIGa+iewf2hRR+aXwVfijbG5z8Ozfz1w zTOM/iIlq/Se1W0PZ3DiYoBNjXFsCZ2YQPSzxm0Ovl61Gh7Bh5EkEc8gUnAiHrO5 DX7/+ON8Bg== -----END CERTIFICATE-----Generated at Sat Oct 31 02:20:44 2026 by rpki-client