$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft File: 58040501FF5E61F0E29F465314024C0C7BD4DC49.mft (raw, json) Hash identifier: NT0Fl1perL9x7pXFnhcfS7JGuIRIqF5QzrqsKnUvZ1Q= Subject key identifier: DB:0C:50:AB:27:27:93:A9:5B:5B:41:5A:DC:D0:E1:2F:55:FF:A1:C2 Authority key identifier: 58:04:05:01:FF:5E:61:F0:E2:9F:46:53:14:02:4C:0C:7B:D4:DC:49 Certificate issuer: /CN=58040501FF5E61F0E29F465314024C0C7BD4DC49 Certificate serial: 2AC36BF0C5A8EC3CF749EC3E008BC875B1BF8FAB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft Manifest number: 67 Signing time: Tue 13 Oct 2026 03:32:41 +0000 Manifest this update: Tue 13 Oct 2026 03:27:41 +0000 Manifest next update: Fri 16 Oct 2026 12:11:41 +0000 Files and hashes: 1: 3130332e3130312e3132342e302f32332d3233203d3e2034383131.roa (hash: tUU9CRZU47s83dslwBh17ysLnkJO3sTg8DsXMcR+XLo=) 2: 3131392e36312e3132382e302f32342d3234203d3e2034383131.roa (hash: fYfvjXqjCoc03TNTQEtlwVm2vbjTwaGtqZePx3A6mMc=) 3: 3130332e3130312e3132342e302f32332d3233203d3e203633313939.roa (hash: DweWbHrlfvMPYOypUHcgGMIcJYqAuKpPbkgcv+YezDc=) 4: 58040501FF5E61F0E29F465314024C0C7BD4DC49.crl (hash: lhjtATeZT+5b6mBiHv1xgp2lEi8bmwe/55+PmDLBw00=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.crl rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 12:11:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c3:6b:f0:c5:a8:ec:3c:f7:49:ec:3e:00:8b:c8:75:b1:bf:8f:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58040501FF5E61F0E29F465314024C0C7BD4DC49 Validity Not Before: Oct 13 03:27:41 2026 GMT Not After : Oct 16 12:11:41 2026 GMT Subject: CN=DB0C50AB272793A95B5B415ADCD0E12F55FFA1C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:31:f1:06:d0:8c:01:32:74:6f:b1:75:aa:c6: e3:5a:aa:41:cb:5b:d5:ac:16:18:b8:bd:2d:14:62: 38:8a:3a:2e:d4:3c:59:25:c9:48:e8:c8:8b:a2:1f: d3:4a:7c:bd:63:c8:2a:3e:ff:52:eb:39:17:ca:3f: 42:ad:94:92:c6:af:3c:e8:9f:aa:c7:9c:09:70:71: f6:73:0f:92:70:27:8d:f8:22:e3:d8:72:47:18:bc: 97:97:cd:f6:a6:63:b0:44:ee:e5:fc:76:18:71:82: a1:b4:30:1c:ca:fd:4c:da:43:94:36:f2:da:93:d5: 00:b0:a9:80:e5:2f:d8:7f:85:7a:37:8b:38:03:d9: 64:ff:12:17:b0:56:c0:ff:87:9c:6d:8b:77:39:3c: c5:7a:21:cb:ed:b4:48:9a:ad:bb:30:19:e9:2f:a4: f4:49:80:78:08:82:e8:d0:96:20:2f:c0:0b:89:99: 37:0d:72:e1:33:b2:ae:93:2f:41:81:82:dd:65:f1: f8:17:a6:b6:14:50:e4:0f:57:47:68:bf:07:60:3e: 54:03:26:c7:4e:3c:13:2c:9c:d0:e9:53:0b:e7:0a: 10:3c:a2:62:29:45:2b:ce:5e:69:85:dd:d6:82:92: 1f:d1:7b:bc:53:e4:17:8c:40:b7:d3:8e:81:7c:ac: 5f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:0C:50:AB:27:27:93:A9:5B:5B:41:5A:DC:D0:E1:2F:55:FF:A1:C2 X509v3 Authority Key Identifier: keyid:58:04:05:01:FF:5E:61:F0:E2:9F:46:53:14:02:4C:0C:7B:D4:DC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:04:4d:1b:c2:81:a9:be:e3:da:08:c9:88:ea:ee:6b:06:04: 50:8c:59:14:f9:11:56:31:49:fb:cc:8e:5e:ff:e3:d6:75:47: ca:1f:30:c7:d7:a1:b9:ee:d5:b8:92:ce:60:bd:ce:7a:d7:e4: c8:50:01:33:fc:55:93:31:af:20:58:74:db:77:97:d2:8c:56: bd:31:c4:7a:1c:e1:4b:b6:50:b4:5a:ba:22:48:68:8d:94:ae: c2:d6:4d:f0:e1:90:4d:af:9c:9e:2b:f8:9b:93:63:57:e4:e0: 65:ea:3a:36:79:7a:43:d0:a5:a9:e3:d4:db:85:b5:02:73:a9: ab:55:07:f1:a1:5d:2e:18:8f:b1:56:07:89:55:7d:3b:89:ce: 68:13:76:d3:77:3e:bb:e2:11:d1:02:3d:93:a4:fc:cd:fd:d7: e4:2c:18:be:88:4a:e5:ef:56:ba:8d:78:e0:04:08:49:af:fd: 60:e4:7d:e5:83:03:73:36:c9:63:50:ab:e7:f6:d9:30:cd:8d: d7:e4:ac:f0:49:ae:11:df:92:7b:ee:ed:00:8b:3a:28:2a:30: de:1b:c5:23:c7:2a:b9:57:07:4c:9d:e5:de:c7:88:ca:7c:2a: 68:f4:ec:2b:5f:11:a6:2a:d8:b8:9a:7a:00:e6:e2:2b:f8:44: 88:1e:65:28 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKsNr8MWo7Dz3Sew+AIvIdbG/j6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgwNDA1MDFGRjVFNjFGMEUyOUY0NjUzMTQwMjRDMEM3 QkQ0REM0OTAeFw0yNjEwMTMwMzI3NDFaFw0yNjEwMTYxMjExNDFaMDMxMTAvBgNV BAMTKERCMEM1MEFCMjcyNzkzQTk1QjVCNDE1QURDRDBFMTJGNTVGRkExQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsMfEG0IwBMnRvsXWqxuNaqkHL W9WsFhi4vS0UYjiKOi7UPFklyUjoyIuiH9NKfL1jyCo+/1LrORfKP0KtlJLGrzzo n6rHnAlwcfZzD5JwJ434IuPYckcYvJeXzfamY7BE7uX8dhhxgqG0MBzK/UzaQ5Q2 8tqT1QCwqYDlL9h/hXo3izgD2WT/EhewVsD/h5xti3c5PMV6IcvttEiarbswGekv pPRJgHgIgujQliAvwAuJmTcNcuEzsq6TL0GBgt1l8fgXprYUUOQPV0dovwdgPlQD JsdOPBMsnNDpUwvnChA8omIpRSvOXmmF3daCkh/Re7xT5BeMQLfTjoF8rF+XAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2wxQqycnk6lbW0Fa3NDhL1X/ocIwHwYDVR0j BBgwFoAUWAQFAf9eYfDin0ZTFAJMDHvU3EkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzYwMjE5MjM4OTg5ODI3NS8wLzU4MDQwNTAxRkY1RTYxRjBFMjlGNDY1MzE0MDI0 QzBDN0JENERDNDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTgwNDA1MDFGRjVFNjFGMEUyOUY0NjUzMTQwMjRDMEM3QkQ0REM0OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM2MDIxOTIzODk4OTgyNzUvMC81ODA0MDUwMUZGNUU2 MUYwRTI5RjQ2NTMxNDAyNEMwQzdCRDREQzQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngRNG8KBqb7j 2gjJiOruawYEUIxZFPkRVjFJ+8yOXv/j1nVHyh8wx9ehue7VuJLOYL3OetfkyFAB M/xVkzGvIFh023eX0oxWvTHEehzhS7ZQtFq6IkhojZSuwtZN8OGQTa+cniv4m5Nj V+TgZeo6Nnl6Q9ClqePU24W1AnOpq1UH8aFdLhiPsVYHiVV9O4nOaBN203c+u+IR 0QI9k6T8zf3X5CwYvohK5e9Wuo144AQISa/9YOR95YMDczbJY1Cr5/bZMM2N1+Ss 8EmuEd+Se+7tAIs6KCow3hvFI8cquVcHTJ3l3seIynwqaPTsK18RpirYuJp6AObi K/hEiB5lKA== -----END CERTIFICATE-----Generated at Wed Oct 14 12:57:30 2026 by rpki-client