$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft File: 558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft (raw, json) Hash identifier: IhC68OuhdsG7NHFEJtO2/usq8dMLbKJAZnL4G66Ey44= Subject key identifier: E4:81:68:E2:73:69:CF:23:1C:1B:91:43:BF:32:19:E3:19:98:1E:D1 Authority key identifier: 55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1 Certificate issuer: /CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1 Certificate serial: 387E17145EE466518CF1E150B88EAA8DF81B2C8D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft Manifest number: 04 Signing time: Fri 29 May 2026 02:57:28 +0000 Manifest this update: Fri 29 May 2026 02:52:28 +0000 Manifest next update: Sat 30 May 2026 05:51:28 +0000 Files and hashes: 1: 323430303a633230303a3a2f33322d3332203d3e2030.roa (hash: jWSURrH5i9Ve77dNSm/DOqVvWVta2CLwxt5B21ziKXk=) 2: 3130332e3233352e35362e302f32322d3232203d3e2030.roa (hash: 5Juc8cbDRZJt1lx0LKQsAx+DhCJoZKzO4IygFaWnNb4=) 3: 3138302e3138382e36342e302f31382d3138203d3e2030.roa (hash: CDcfLDnojLav4F1oboeFWYrp/aoUNzF3QSznFZAxfwc=) 4: 3138302e3138382e34382e302f32302d3230203d3e2030.roa (hash: 7UmaBdtJD3c4k0+2bavMT9EYN1ewFR8Q7nmyf+Rrcsk=) 5: 558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl (hash: yR0/fOEsU84Uo5SYNg0+NfQqPyR5ZYardlzH6DtoMcw=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 05:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:7e:17:14:5e:e4:66:51:8c:f1:e1:50:b8:8e:aa:8d:f8:1b:2c:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1 Validity Not Before: May 29 02:52:28 2026 GMT Not After : May 30 05:51:28 2026 GMT Subject: CN=E48168E27369CF231C1B9143BF3219E319981ED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:17:d1:77:5e:d6:46:82:2b:95:90:8c:aa:2a: e3:2e:9e:50:6e:50:f4:19:d1:4b:34:ae:a9:54:d3: 86:f4:ad:6a:fd:3b:0f:96:ec:0a:ea:37:52:e2:e3: 81:b8:04:af:5a:4d:46:5f:7a:c2:dc:fb:e5:a5:02: 6c:d4:84:7d:31:ba:2d:14:4e:53:35:4d:92:3e:5d: ac:e2:7b:13:c6:85:69:6d:c8:86:8a:65:21:19:51: 8f:a5:f5:c7:00:bb:c8:6d:f3:d8:77:2f:5c:4b:14: 8b:29:0c:e9:a6:81:28:eb:00:cb:d9:11:47:db:09: 95:57:94:26:f8:60:ae:3f:e8:d7:a8:28:a6:38:3b: 9e:b1:c9:1e:b2:0f:a3:69:bc:cd:97:0b:9c:9f:9b: 53:51:02:a0:d1:70:06:03:11:1f:8a:0e:e6:d3:9d: c0:97:0e:39:59:d5:0e:8c:38:cb:27:d5:e8:3f:16: 87:4f:b6:f9:74:8a:14:3c:c4:03:59:28:6f:93:91: 4f:9c:cf:cb:b3:19:69:b6:5a:87:8e:26:c6:62:f0: a8:fd:0d:09:54:1d:3f:cc:38:4c:df:9f:d4:f0:ce: 7c:1e:3c:6c:e3:53:00:e5:0d:02:0a:79:57:d3:b9: 94:74:ff:b9:1c:57:13:ab:d6:df:8c:37:f8:02:01: 07:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:81:68:E2:73:69:CF:23:1C:1B:91:43:BF:32:19:E3:19:98:1E:D1 X509v3 Authority Key Identifier: keyid:55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:2c:e7:7d:6f:f0:58:fe:4a:7a:4d:74:e6:92:c5:55:a7:6b: eb:41:74:84:9a:b4:f6:1e:71:12:65:19:45:c8:fd:13:4d:13: 5a:71:60:ee:06:eb:f5:e0:24:a3:cc:f3:18:0a:43:66:bb:97: fb:f4:51:a6:e3:bb:b1:67:15:95:35:e7:36:33:e2:1b:80:80: 26:7f:dd:05:83:72:d1:b0:f9:80:ed:57:7c:dc:5b:56:87:32: c6:7f:5f:80:b6:79:fb:ec:8b:e6:97:9b:fa:f6:13:27:82:01: 70:55:48:21:24:93:2a:70:54:f6:a8:f4:b6:54:21:63:f1:dd: 5c:09:aa:4a:f9:8e:ff:1c:a4:3c:cb:cb:96:4c:11:41:8a:97: 2a:86:e0:05:79:1d:63:0a:99:e3:04:25:91:28:94:63:01:11: 2c:e1:de:26:74:80:80:35:b2:da:dd:29:69:44:0e:d3:1b:27: 19:e9:b3:92:a8:84:5f:ab:78:e2:2d:16:b5:1d:07:90:09:ac: 0a:74:3a:8c:0e:1f:99:0d:68:bf:8b:ac:ca:47:ee:3b:a7:a7: 98:e9:0a:6d:09:0c:3c:97:5a:c3:d1:ce:52:8b:4e:26:e4:b8: 04:f1:a5:ee:6c:d4:43:33:53:fa:24:f8:ac:07:07:c4:57:43: f5:ad:44:8d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOH4XFF7kZlGM8eFQuI6qjfgbLI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU4RTNBMjdCRDc2MjJGQUNDMzMxN0NCRjgxMzJFMDZE OTdGNDZCMTAeFw0yNjA1MjkwMjUyMjhaFw0yNjA1MzAwNTUxMjhaMDMxMTAvBgNV BAMTKEU0ODE2OEUyNzM2OUNGMjMxQzFCOTE0M0JGMzIxOUUzMTk5ODFFRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWF9F3XtZGgiuVkIyqKuMunlBu UPQZ0Us0rqlU04b0rWr9Ow+W7ArqN1Li44G4BK9aTUZfesLc++WlAmzUhH0xui0U TlM1TZI+XaziexPGhWltyIaKZSEZUY+l9ccAu8ht89h3L1xLFIspDOmmgSjrAMvZ EUfbCZVXlCb4YK4/6NeoKKY4O56xyR6yD6NpvM2XC5yfm1NRAqDRcAYDER+KDubT ncCXDjlZ1Q6MOMsn1eg/FodPtvl0ihQ8xANZKG+TkU+cz8uzGWm2WoeOJsZi8Kj9 DQlUHT/MOEzfn9TwznwePGzjUwDlDQIKeVfTuZR0/7kcVxOr1t+MN/gCAQe5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5IFo4nNpzyMcG5FDvzIZ4xmYHtEwHwYDVR0j BBgwFoAUVY46J712IvrMMxfL+BMuBtl/RrEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjI3OTcyNTg1NTgwMTM2NS8wLzU1OEUzQTI3QkQ3NjIyRkFDQzMzMTdDQkY4MTMy RTA2RDk3RjQ2QjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTU4RTNBMjdCRDc2MjJGQUNDMzMxN0NCRjgxMzJFMDZEOTdGNDZCMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIyNzk3MjU4NTU4MDEzNjUvMC81NThFM0EyN0JENzYy MkZBQ0MzMzE3Q0JGODEzMkUwNkQ5N0Y0NkIxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFSznfW/wWP5K ek105pLFVadr60F0hJq09h5xEmUZRcj9E00TWnFg7gbr9eAko8zzGApDZruX+/RR puO7sWcVlTXnNjPiG4CAJn/dBYNy0bD5gO1XfNxbVocyxn9fgLZ5++yL5peb+vYT J4IBcFVIISSTKnBU9qj0tlQhY/HdXAmqSvmO/xykPMvLlkwRQYqXKobgBXkdYwqZ 4wQlkSiUYwERLOHeJnSAgDWy2t0paUQO0xsnGemzkqiEX6t44i0WtR0HkAmsCnQ6 jA4fmQ1ov4usykfuO6enmOkKbQkMPJdaw9HOUotOJuS4BPGl7mzUQzNT+iT4rAcH xFdD9a1EjQ== -----END CERTIFICATE-----Generated at Fri May 29 22:02:56 2026 by rpki-client