$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft File: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft (raw, json) Hash identifier: doENzoKWCQW7MizQeu2rRkORU3/SUKuXLDhdVJv5SxM= Subject key identifier: 86:3A:FC:7A:F0:A1:F7:0B:FE:25:4F:FC:E4:B2:4C:4B:FD:98:79:B1 Authority key identifier: 58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39 Certificate issuer: /CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39 Certificate serial: 25416837F6E0BF807E16CCAC818EF0FB0C6C4582 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft Manifest number: C3 Signing time: Thu 04 Jun 2026 11:18:35 +0000 Manifest this update: Thu 04 Jun 2026 11:13:35 +0000 Manifest next update: Fri 05 Jun 2026 11:28:35 +0000 Files and hashes: 1: 3133392e3139392e34322e302f32332d3233203d3e203435303930.roa (hash: s5dvmIaXQE77eO89ZjC1lQmMyYmrUjpKMJa6mT7PtCA=) 2: 58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl (hash: sVJjRXsYK7PZwDhtJ8Ydht96WIaXfWB3ad0N4f+MvMg=) 3: 3134302e3134332e3137362e302f32322d3232203d3e203435303930.roa (hash: eq+lHmDOYu9eOa5PF89G3wbCTcmbuk/3SSPiHm+/jwg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 11:28:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:41:68:37:f6:e0:bf:80:7e:16:cc:ac:81:8e:f0:fb:0c:6c:45:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39 Validity Not Before: Jun 4 11:13:35 2026 GMT Not After : Jun 5 11:28:35 2026 GMT Subject: CN=863AFC7AF0A1F70BFE254FFCE4B24C4BFD9879B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a8:97:52:54:cb:d4:ab:0c:a7:7a:df:99:cd: a8:92:fd:ed:e8:7d:45:cf:ed:02:00:49:70:69:70: b7:7f:b0:b7:8e:7b:62:b3:4c:9e:61:1b:49:ff:32: 24:da:a2:d4:df:a2:7d:c3:44:50:93:f5:f3:be:bd: 37:79:e1:ab:47:0f:dd:fc:93:e1:29:72:bc:83:d6: f3:a8:f4:fb:e4:42:89:07:5b:cc:f8:96:a5:88:fb: 8c:82:ef:36:78:5c:10:73:0f:d8:9e:c1:67:63:d3: 4c:9c:a6:33:dd:60:16:0a:ee:13:b4:f6:f6:7e:e4: c0:7c:32:7b:67:68:2a:bc:df:20:e4:97:98:5a:1b: e9:b9:28:7e:de:43:9e:37:47:d0:c5:16:20:ad:3c: 6b:ec:24:e2:f5:8d:bc:71:8d:1e:3f:cd:74:f6:c9: 8b:ea:11:93:d8:ea:52:93:96:9f:d4:13:98:f2:18: 0e:57:00:a7:a6:61:55:2a:35:8d:8d:14:16:d3:36: 08:de:1f:36:ad:68:11:24:7b:0e:86:17:7e:8b:85: bd:40:6f:2c:7c:f7:19:84:8d:79:5d:49:06:73:87: 0a:71:1e:af:10:a6:30:d3:c6:36:d6:aa:cb:8b:9d: 62:b2:fd:e3:5f:e3:55:5b:d9:29:f1:ac:69:42:c0: 9a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3A:FC:7A:F0:A1:F7:0B:FE:25:4F:FC:E4:B2:4C:4B:FD:98:79:B1 X509v3 Authority Key Identifier: keyid:58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:4a:cc:3f:2a:6e:3e:27:b6:64:a9:c4:c4:3f:d5:9e:c0:1b: b6:26:ea:8d:df:45:98:8c:c1:56:37:ae:57:8a:3a:76:54:83: 92:bd:cc:a1:c0:bc:e2:8d:bc:0d:59:0a:72:f4:40:52:b8:ef: 1e:f3:80:eb:8a:d0:af:9f:7c:9c:a6:41:e0:7f:05:d3:96:b3: 27:e7:17:53:e3:df:6f:c9:cc:54:7f:bf:ed:ea:9a:d3:bf:69: 4d:97:f7:23:3b:5f:4a:8e:cb:17:79:36:17:f8:bc:24:09:16: e6:54:da:6f:87:9c:c9:f4:00:87:38:96:f2:a4:70:ce:e1:a2: ca:b0:dc:48:fe:ea:0e:f4:aa:41:be:c5:52:26:15:a8:72:ce: da:68:fa:6b:ca:42:40:13:20:1f:17:f1:28:f8:72:75:41:96: 84:3b:23:a1:fe:43:d8:f7:18:0c:ed:19:13:93:50:86:e3:02: e5:d2:4a:ce:96:1f:79:d3:f5:17:22:fa:ee:89:63:48:c5:5e: 80:14:8e:a3:f1:e4:6f:46:69:44:24:9b:f2:6a:79:9b:e4:ee: 7f:04:80:b7:d0:3c:77:14:c8:af:43:36:46:32:5e:ba:db:64: 85:7b:0f:03:e5:d5:00:33:c8:74:5d:91:2e:fb:0a:5b:7b:85: 36:25:a1:e5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJUFoN/bgv4B+FsysgY7w+wxsRYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2 RDU4OUIzOTAeFw0yNjA2MDQxMTEzMzVaFw0yNjA2MDUxMTI4MzVaMDMxMTAvBgNV BAMTKDg2M0FGQzdBRjBBMUY3MEJGRTI1NEZGQ0U0QjI0QzRCRkQ5ODc5QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOqJdSVMvUqwynet+ZzaiS/e3o fUXP7QIASXBpcLd/sLeOe2KzTJ5hG0n/MiTaotTfon3DRFCT9fO+vTd54atHD938 k+EpcryD1vOo9PvkQokHW8z4lqWI+4yC7zZ4XBBzD9iewWdj00ycpjPdYBYK7hO0 9vZ+5MB8MntnaCq83yDkl5haG+m5KH7eQ543R9DFFiCtPGvsJOL1jbxxjR4/zXT2 yYvqEZPY6lKTlp/UE5jyGA5XAKemYVUqNY2NFBbTNgjeHzataBEkew6GF36Lhb1A byx89xmEjXldSQZzhwpxHq8QpjDTxjbWqsuLnWKy/eNf41Vb2SnxrGlCwJonAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhjr8evCh9wv+JU/85LJMS/2YebEwHwYDVR0j BBgwFoAUWPqrjhwYIXm0bh1tsenKWm1YmzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTM2Mjk0Ni8xLzU4RkFBQjhFMUMxODIxNzlCNDZFMUQ2REIxRTlD QTVBNkQ1ODlCMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2RDU4OUIzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjEzNjI5NDYvMS81OEZBQUI4RTFDMTgy MTc5QjQ2RTFENkRCMUU5Q0E1QTZENTg5QjM5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUrMPypuPie2 ZKnExD/VnsAbtibqjd9FmIzBVjeuV4o6dlSDkr3MocC84o28DVkKcvRAUrjvHvOA 64rQr598nKZB4H8F05azJ+cXU+Pfb8nMVH+/7eqa079pTZf3IztfSo7LF3k2F/i8 JAkW5lTab4ecyfQAhziW8qRwzuGiyrDcSP7qDvSqQb7FUiYVqHLO2mj6a8pCQBMg HxfxKPhydUGWhDsjof5D2PcYDO0ZE5NQhuMC5dJKzpYfedP1FyL67oljSMVegBSO o/Hkb0ZpRCSb8mp5m+TufwSAt9A8dxTIr0M2RjJeuttkhXsPA+XVADPIdF2RLvsK W3uFNiWh5Q== -----END CERTIFICATE-----Generated at Thu Jun 4 15:18:32 2026 by rpki-client