$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft File: 558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft (raw, json) Hash identifier: 4Hei0jxacPFuroNsd253y/pZxp3vMljo7hA+Mlqug4M= Subject key identifier: E6:F0:93:E8:39:69:19:32:25:59:EF:BE:07:7D:45:93:66:5D:CF:9D Authority key identifier: 55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1 Certificate issuer: /CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1 Certificate serial: 4BA9F0229139744C68401AB92B738C2E23CC1801 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft Manifest number: 42 Signing time: Tue 14 Jul 2026 00:40:00 +0000 Manifest this update: Tue 14 Jul 2026 00:35:00 +0000 Manifest next update: Wed 15 Jul 2026 03:50:00 +0000 Files and hashes: 1: 558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl (hash: XxNaCO7RaF4rN7a4vFLgWHGgicYXStRKySZ6L+A93kU=) 2: 3138302e3138382e34382e302f32302d3230203d3e2030.roa (hash: 7UmaBdtJD3c4k0+2bavMT9EYN1ewFR8Q7nmyf+Rrcsk=) 3: 323430303a633230303a3a2f33322d3332203d3e2030.roa (hash: jWSURrH5i9Ve77dNSm/DOqVvWVta2CLwxt5B21ziKXk=) 4: 3130332e3233352e35362e302f32322d3232203d3e2030.roa (hash: 5Juc8cbDRZJt1lx0LKQsAx+DhCJoZKzO4IygFaWnNb4=) 5: 3138302e3138382e36342e302f31382d3138203d3e2030.roa (hash: CDcfLDnojLav4F1oboeFWYrp/aoUNzF3QSznFZAxfwc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 03:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a9:f0:22:91:39:74:4c:68:40:1a:b9:2b:73:8c:2e:23:cc:18:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1 Validity Not Before: Jul 14 00:35:00 2026 GMT Not After : Jul 15 03:50:00 2026 GMT Subject: CN=E6F093E8396919322559EFBE077D4593665DCF9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f8:fb:0f:6f:52:20:97:74:25:78:46:47:8e: d9:5b:eb:e2:89:77:c3:42:75:d4:6f:01:2c:04:82: fe:e8:6b:b8:a6:ff:ac:a4:e6:5a:c2:85:ee:f8:91: a8:2d:4e:28:2a:ef:9c:07:f5:2a:4c:c3:a0:df:41: 89:a3:5c:9c:89:6e:e2:45:73:5e:03:03:ea:14:6a: 71:10:0e:a3:d7:7f:38:e1:0e:9c:d6:b1:48:a2:2f: 63:e7:be:32:6d:18:86:23:1f:41:11:ad:5d:24:41: fd:45:0e:b9:97:50:7d:11:8d:e7:eb:04:f3:35:34: 4b:d0:02:63:86:74:70:e6:b0:86:0f:41:56:01:b1: 4f:ec:87:20:69:c6:3c:3e:8f:4b:b2:d7:72:bd:98: 33:e4:ea:fd:78:83:ce:f6:5d:57:b3:85:62:77:ec: b6:f1:0c:e4:06:2f:41:de:4a:25:5a:df:46:71:26: f7:cd:57:6b:a2:20:b4:4b:fb:f1:d3:dd:fe:e1:9c: 97:45:b9:5c:43:bf:d2:3e:15:08:d0:6c:e8:76:2a: 32:f3:f4:08:c6:53:cb:37:00:b7:16:25:0e:5f:57: 15:e2:a6:07:de:12:83:92:ed:57:15:bc:33:58:45: d5:77:de:79:ab:35:15:ce:1d:33:e9:f5:0f:af:4c: 71:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F0:93:E8:39:69:19:32:25:59:EF:BE:07:7D:45:93:66:5D:CF:9D X509v3 Authority Key Identifier: keyid:55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:53:d9:04:7f:3a:91:b9:78:b6:dd:90:fb:f6:f9:5c:c6:44: 71:ee:2a:ab:ae:5b:82:a1:12:18:1e:5e:dd:86:ae:34:f4:48: df:f4:4f:16:7e:d8:30:8e:88:93:40:36:49:61:31:86:53:c1: 82:21:1a:8b:2c:1f:5b:5e:c5:5b:6b:32:21:93:64:dd:34:f6: 7f:8a:eb:f8:86:e0:d9:5a:5b:7a:5b:7f:a8:35:7c:4e:3c:23: 2d:ab:54:a7:90:91:50:f8:1e:57:a3:9b:db:8a:59:58:86:28: f4:cf:9d:e7:ce:d0:bd:46:15:70:eb:ce:e3:49:93:b4:02:3b: 80:29:6a:af:9b:f7:30:9e:9b:48:14:af:2c:bb:db:cd:22:b6: 91:85:fb:d8:6b:a7:aa:e0:84:05:8c:4b:3b:87:7d:70:2c:d7: bf:10:43:a8:93:fa:c9:41:e3:41:b3:3a:11:dd:38:6c:2b:a5: af:ef:80:b1:e4:78:51:74:c6:29:79:fa:1d:6c:c6:36:2b:22: b3:90:b1:77:45:79:5e:2c:f5:7a:04:95:2e:bc:c5:fe:30:54: 8f:15:a1:8b:db:e1:49:51:c2:34:bd:e4:a6:e2:11:da:ae:34: 67:ee:03:d1:23:05:cb:76:17:59:38:82:bb:c8:98:c0:b7:e6: 70:81:56:03 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUS6nwIpE5dExoQBq5K3OMLiPMGAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU4RTNBMjdCRDc2MjJGQUNDMzMxN0NCRjgxMzJFMDZE OTdGNDZCMTAeFw0yNjA3MTQwMDM1MDBaFw0yNjA3MTUwMzUwMDBaMDMxMTAvBgNV BAMTKEU2RjA5M0U4Mzk2OTE5MzIyNTU5RUZCRTA3N0Q0NTkzNjY1RENGOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD+PsPb1Igl3QleEZHjtlb6+KJ d8NCddRvASwEgv7oa7im/6yk5lrChe74kagtTigq75wH9SpMw6DfQYmjXJyJbuJF c14DA+oUanEQDqPXfzjhDpzWsUiiL2PnvjJtGIYjH0ERrV0kQf1FDrmXUH0Rjefr BPM1NEvQAmOGdHDmsIYPQVYBsU/shyBpxjw+j0uy13K9mDPk6v14g872XVezhWJ3 7LbxDOQGL0HeSiVa30ZxJvfNV2uiILRL+/HT3f7hnJdFuVxDv9I+FQjQbOh2KjLz 9AjGU8s3ALcWJQ5fVxXipgfeEoOS7VcVvDNYRdV33nmrNRXOHTPp9Q+vTHGlAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5vCT6DlpGTIlWe++B31Fk2Zdz50wHwYDVR0j BBgwFoAUVY46J712IvrMMxfL+BMuBtl/RrEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjI3OTcyNTg1NTgwMTM2NS8wLzU1OEUzQTI3QkQ3NjIyRkFDQzMzMTdDQkY4MTMy RTA2RDk3RjQ2QjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTU4RTNBMjdCRDc2MjJGQUNDMzMxN0NCRjgxMzJFMDZEOTdGNDZCMS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIyNzk3MjU4NTU4MDEzNjUvMC81NThFM0EyN0JENzYy MkZBQ0MzMzE3Q0JGODEzMkUwNkQ5N0Y0NkIxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmlPZBH86kbl4 tt2Q+/b5XMZEce4qq65bgqESGB5e3YauNPRI3/RPFn7YMI6Ik0A2SWExhlPBgiEa iywfW17FW2syIZNk3TT2f4rr+Ibg2Vpbelt/qDV8TjwjLatUp5CRUPgeV6Ob24pZ WIYo9M+d587QvUYVcOvO40mTtAI7gClqr5v3MJ6bSBSvLLvbzSK2kYX72GunquCE BYxLO4d9cCzXvxBDqJP6yUHjQbM6Ed04bCulr++AseR4UXTGKXn6HWzGNisis5Cx d0V5Xiz1egSVLrzF/jBUjxWhi9vhSVHCNL3kpuIR2q40Z+4D0SMFy3YXWTiCu8iY wLfmcIFWAw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:06 2026 by rpki-client