$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft File: 558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft (raw, json) Hash identifier: t2qq/phA0ZgbIcPy05iMu2Bi560+Jm7ACg5DaS717T4= Subject key identifier: 47:5A:99:17:2A:36:31:29:EE:FB:1E:AE:C2:0D:E4:C1:06:1B:66:0C Authority key identifier: 55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1 Certificate issuer: /CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1 Certificate serial: 1EA30F21D746B30EE8D38B535EDDC585D58DD16F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft Manifest number: 94 Signing time: Tue 13 Oct 2026 23:08:19 +0000 Manifest this update: Tue 13 Oct 2026 23:03:19 +0000 Manifest next update: Fri 16 Oct 2026 23:28:19 +0000 Files and hashes: 1: 323430303a633230303a3a2f33322d3332203d3e2030.roa (hash: jWSURrH5i9Ve77dNSm/DOqVvWVta2CLwxt5B21ziKXk=) 2: 3138302e3138382e34382e302f32302d3230203d3e2030.roa (hash: 7UmaBdtJD3c4k0+2bavMT9EYN1ewFR8Q7nmyf+Rrcsk=) 3: 3130332e3233352e35362e302f32322d3232203d3e2030.roa (hash: 5Juc8cbDRZJt1lx0LKQsAx+DhCJoZKzO4IygFaWnNb4=) 4: 558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl (hash: gnHbG/ow8bGJMtHobTlFdOMi5bkmkPryYOAOzaqy7YI=) 5: 3138302e3138382e36342e302f31382d3138203d3e2030.roa (hash: CDcfLDnojLav4F1oboeFWYrp/aoUNzF3QSznFZAxfwc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 23:28:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:a3:0f:21:d7:46:b3:0e:e8:d3:8b:53:5e:dd:c5:85:d5:8d:d1:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1 Validity Not Before: Oct 13 23:03:19 2026 GMT Not After : Oct 16 23:28:19 2026 GMT Subject: CN=475A99172A363129EEFB1EAEC20DE4C1061B660C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:69:ba:1c:3f:93:74:64:99:18:d7:5a:0c:67: 7b:b0:f7:92:16:5a:5a:71:23:f4:f6:88:34:3b:2a: 6c:1d:0c:42:96:47:40:a5:1b:35:0a:44:fa:d7:71: e2:12:17:cb:c2:8f:1a:ae:73:75:f4:36:36:99:f3: 53:a5:dc:94:39:b7:6b:37:57:12:27:86:26:4d:b3: 9c:c1:07:3d:b2:1e:21:9b:be:75:87:71:4a:c1:53: b9:bc:de:f9:99:17:89:ba:7f:6a:10:38:67:10:3c: bf:64:af:8e:3e:0f:5d:e0:16:7f:5e:33:0a:80:88: 3a:1f:c3:72:2b:b5:95:f9:e4:d7:c7:09:34:fb:42: c1:26:32:09:c3:7a:85:d3:b6:7b:e1:b9:7c:9f:2d: 1a:77:08:d5:52:fa:02:55:36:16:70:df:b1:a7:4a: 9e:55:02:84:3c:39:3d:ae:b1:81:d0:47:cd:de:d3: f3:36:a3:cb:48:e4:d5:eb:4b:a8:cc:0a:af:c6:e5: 5d:ba:39:ec:74:f4:93:c5:05:54:e9:97:43:88:66: 35:d6:09:d3:6e:49:bd:d8:98:a0:83:d1:33:a4:31: 17:0b:40:cc:38:cb:f0:48:4c:0a:0b:d8:2c:20:f8: 98:50:27:84:cb:a0:1e:bf:6c:af:76:8d:ba:0c:0e: 99:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5A:99:17:2A:36:31:29:EE:FB:1E:AE:C2:0D:E4:C1:06:1B:66:0C X509v3 Authority Key Identifier: keyid:55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e7:f5:1c:f1:25:26:be:ed:c8:17:81:b0:4f:45:e9:d1:93: 1b:76:2d:5f:45:7a:43:a2:75:f7:4e:60:6a:85:23:be:c5:85: 9b:37:33:31:c3:51:af:79:28:5a:0a:90:db:e5:36:c1:d8:eb: 9a:4f:84:54:da:aa:0b:fc:92:03:f0:29:ea:84:1f:17:d3:8c: f7:e0:89:6e:ee:d7:7f:ba:5d:85:e1:22:fb:6c:d1:e6:ae:93: 9e:bd:55:af:8d:fc:e0:81:02:dc:4b:5f:17:28:a4:5c:72:97: bb:70:40:2a:c8:48:2d:b1:81:f5:0c:47:3c:bb:60:99:9d:83: c9:8d:a8:64:d2:9f:cf:6f:bd:19:c7:00:cd:f4:46:8a:88:3a: ae:a2:84:98:12:3b:86:94:2f:04:74:3f:11:f7:2c:29:32:21: d0:34:ed:60:0c:c5:0b:4c:16:5f:ef:59:d0:16:ae:c0:9f:aa: 2d:e5:e9:c9:6c:ae:84:fc:4f:12:fc:e5:6f:5e:53:1e:23:0f: be:74:66:13:af:ec:fb:f7:03:71:52:7b:d4:49:63:65:52:3a: dd:81:fe:f5:9d:dc:21:81:02:38:67:4a:e2:ec:31:aa:df:7f: bd:95:2a:72:f6:7b:1f:65:b7:c7:fb:66:8d:26:da:19:af:04: 52:c5:d6:98 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHqMPIddGsw7o04tTXt3FhdWN0W8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU4RTNBMjdCRDc2MjJGQUNDMzMxN0NCRjgxMzJFMDZE OTdGNDZCMTAeFw0yNjEwMTMyMzAzMTlaFw0yNjEwMTYyMzI4MTlaMDMxMTAvBgNV BAMTKDQ3NUE5OTE3MkEzNjMxMjlFRUZCMUVBRUMyMERFNEMxMDYxQjY2MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiabocP5N0ZJkY11oMZ3uw95IW WlpxI/T2iDQ7KmwdDEKWR0ClGzUKRPrXceISF8vCjxquc3X0NjaZ81Ol3JQ5t2s3 VxInhiZNs5zBBz2yHiGbvnWHcUrBU7m83vmZF4m6f2oQOGcQPL9kr44+D13gFn9e MwqAiDofw3IrtZX55NfHCTT7QsEmMgnDeoXTtnvhuXyfLRp3CNVS+gJVNhZw37Gn Sp5VAoQ8OT2usYHQR83e0/M2o8tI5NXrS6jMCq/G5V26Oex09JPFBVTpl0OIZjXW CdNuSb3YmKCD0TOkMRcLQMw4y/BITAoL2Cwg+JhQJ4TLoB6/bK92jboMDplVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUR1qZFyo2MSnu+x6uwg3kwQYbZgwwHwYDVR0j BBgwFoAUVY46J712IvrMMxfL+BMuBtl/RrEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjI3OTcyNTg1NTgwMTM2NS8wLzU1OEUzQTI3QkQ3NjIyRkFDQzMzMTdDQkY4MTMy RTA2RDk3RjQ2QjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTU4RTNBMjdCRDc2MjJGQUNDMzMxN0NCRjgxMzJFMDZEOTdGNDZCMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIyNzk3MjU4NTU4MDEzNjUvMC81NThFM0EyN0JENzYy MkZBQ0MzMzE3Q0JGODEzMkUwNkQ5N0Y0NkIxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+f1HPElJr7t yBeBsE9F6dGTG3YtX0V6Q6J1905gaoUjvsWFmzczMcNRr3koWgqQ2+U2wdjrmk+E VNqqC/ySA/Ap6oQfF9OM9+CJbu7Xf7pdheEi+2zR5q6Tnr1Vr4384IEC3EtfFyik XHKXu3BAKshILbGB9QxHPLtgmZ2DyY2oZNKfz2+9GccAzfRGiog6rqKEmBI7hpQv BHQ/EfcsKTIh0DTtYAzFC0wWX+9Z0BauwJ+qLeXpyWyuhPxPEvzlb15THiMPvnRm E6/s+/cDcVJ71EljZVI63YH+9Z3cIYECOGdK4uwxqt9/vZUqcvZ7H2W3x/tmjSba Ga8EUsXWmA== -----END CERTIFICATE-----Generated at Wed Oct 14 20:30:48 2026 by rpki-client