
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft
File: 58040501FF5E61F0E29F465314024C0C7BD4DC49.mft (raw, json)
Hash identifier: nL9VyH2UDXjdFryBQGfnu+WXXxqd1pr5Vv0KvIYP5BA=
Subject key identifier: 55:A0:86:8C:4A:C1:56:42:AC:9D:3D:CB:00:E3:14:DB:82:9E:6B:7B
Authority key identifier: 58:04:05:01:FF:5E:61:F0:E2:9F:46:53:14:02:4C:0C:7B:D4:DC:49
Certificate issuer: /CN=58040501FF5E61F0E29F465314024C0C7BD4DC49
Certificate serial: 5EE09F5E79376C264DF865C34520625F156E74DA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft
Manifest number: 17
Signing time: Tue 14 Jul 2026 02:05:09 +0000
Manifest this update: Tue 14 Jul 2026 02:00:09 +0000
Manifest next update: Wed 15 Jul 2026 03:52:09 +0000
Files and hashes: 1: 58040501FF5E61F0E29F465314024C0C7BD4DC49.crl (hash: NqtkrnaXwtdB/TPzkcq/bTkGV/KBH8b/HLwAJVbuUXk=)
2: 3130332e3130312e3132342e302f32332d3233203d3e203633313939.roa (hash: DweWbHrlfvMPYOypUHcgGMIcJYqAuKpPbkgcv+YezDc=)
3: 3130332e3130312e3132342e302f32332d3233203d3e2034383131.roa (hash: tUU9CRZU47s83dslwBh17ysLnkJO3sTg8DsXMcR+XLo=)
4: 3131392e36312e3132382e302f32342d3234203d3e2034383131.roa (hash: fYfvjXqjCoc03TNTQEtlwVm2vbjTwaGtqZePx3A6mMc=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.crl
rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 03:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e0:9f:5e:79:37:6c:26:4d:f8:65:c3:45:20:62:5f:15:6e:74:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58040501FF5E61F0E29F465314024C0C7BD4DC49
Validity
Not Before: Jul 14 02:00:09 2026 GMT
Not After : Jul 15 03:52:09 2026 GMT
Subject: CN=55A0868C4AC15642AC9D3DCB00E314DB829E6B7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:0a:0b:77:d4:c4:45:c0:28:94:64:e8:b0:
b8:98:6a:bb:b4:e9:2b:90:99:d9:11:07:b8:eb:a9:
af:48:a7:34:fd:bd:1c:bb:39:e7:05:c5:87:48:49:
27:27:8c:0f:b8:b7:a7:b1:07:7d:d8:d9:b9:59:24:
63:fc:98:d5:8f:08:b8:24:6e:41:3c:0a:4e:c1:bd:
79:7f:62:d3:fe:0b:7e:40:7d:ed:86:53:ae:86:9e:
9e:f7:a4:de:0d:9c:91:b3:c8:6d:e3:a7:8b:cd:13:
79:df:99:5b:86:ca:a6:75:36:d5:a3:8d:45:3d:5d:
27:de:33:03:47:26:a2:c0:86:ca:37:b8:61:bd:36:
1f:5f:f8:9a:91:ca:46:6b:bf:1e:4a:1c:25:5d:47:
54:0e:81:f7:69:08:1d:7c:ac:46:73:93:27:fe:ed:
8a:30:7a:58:b4:00:50:f0:f6:5e:47:96:af:e6:d3:
06:ff:5d:ca:9d:d6:fa:4a:6c:2c:0c:f0:ed:27:30:
09:e9:9f:72:61:37:14:b9:f9:56:b7:54:36:8a:7f:
53:5c:b4:09:7b:b1:0b:cf:d7:07:b3:fa:bc:05:bb:
3d:36:9a:b1:e2:8d:86:f6:78:3e:9f:e4:f2:20:26:
4d:13:74:f9:be:6d:eb:26:29:63:cc:90:b1:1a:94:
ac:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A0:86:8C:4A:C1:56:42:AC:9D:3D:CB:00:E3:14:DB:82:9E:6B:7B
X509v3 Authority Key Identifier:
keyid:58:04:05:01:FF:5E:61:F0:E2:9F:46:53:14:02:4C:0C:7B:D4:DC:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:39:47:02:4d:12:56:a2:5f:30:de:4b:fa:89:bc:db:f0:3b:
03:b3:ee:e4:6e:42:76:3c:70:85:ff:f9:94:b3:8b:41:be:10:
04:e5:a3:4f:59:35:61:08:95:04:d6:8a:51:11:f6:ab:81:64:
f0:a0:9a:8f:00:69:86:5a:fe:5c:d6:e7:33:60:00:83:70:dd:
6d:a7:ad:ca:7a:c4:56:23:d3:86:05:5f:2e:e5:de:e9:72:ba:
64:94:04:4b:ce:7a:6b:61:9a:c5:28:62:b7:87:6d:d2:14:ac:
14:3d:a9:52:3e:f6:1f:39:54:f1:61:14:cd:38:85:7d:bb:e1:
ae:74:80:3b:13:7c:64:f1:fb:2b:78:90:c3:15:cb:6c:07:d5:
25:f2:ab:04:fa:73:1d:a4:de:f4:17:86:75:38:31:42:bc:50:
53:7f:44:98:31:17:3d:58:8b:be:c3:f1:1e:db:f1:2a:61:39:
5a:f1:59:cb:2e:a5:b6:3d:56:c9:1d:94:8b:a6:ff:bf:b1:d4:
9d:b7:ba:3b:cb:1b:c4:c6:45:0b:68:46:66:3a:69:ca:84:4a:
24:87:f7:7e:e5:24:19:23:4b:59:5b:21:41:d3:ca:33:94:e0:
ef:2d:c7:86:82:93:59:d2:d8:6f:e5:35:28:02:10:28:0e:73:
bf:31:c2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:02:04 2026 by rpki-client