$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft File: 58040501FF5E61F0E29F465314024C0C7BD4DC49.mft (raw, json) Hash identifier: smD2dc5PXnibL1ePU7SN489Ptjjes5Wv2KGIurDgprs= Subject key identifier: 74:BE:2F:88:F7:E3:E7:AE:1F:AC:20:D7:81:8D:0F:9C:E9:88:12:A3 Authority key identifier: 58:04:05:01:FF:5E:61:F0:E2:9F:46:53:14:02:4C:0C:7B:D4:DC:49 Certificate issuer: /CN=58040501FF5E61F0E29F465314024C0C7BD4DC49 Certificate serial: 618C1AD084D24A83EE29D9F4F8F45B5A056023B9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft Manifest number: 53 Signing time: Fri 28 Aug 2026 06:48:22 +0000 Manifest this update: Fri 28 Aug 2026 06:43:22 +0000 Manifest next update: Mon 31 Aug 2026 12:26:22 +0000 Files and hashes: 1: 3131392e36312e3132382e302f32342d3234203d3e2034383131.roa (hash: fYfvjXqjCoc03TNTQEtlwVm2vbjTwaGtqZePx3A6mMc=) 2: 3130332e3130312e3132342e302f32332d3233203d3e203633313939.roa (hash: DweWbHrlfvMPYOypUHcgGMIcJYqAuKpPbkgcv+YezDc=) 3: 58040501FF5E61F0E29F465314024C0C7BD4DC49.crl (hash: fIP1zKgeCIX5VJzPgw4MPabWrgiKCcUu1xEbd4Mt12g=) 4: 3130332e3130312e3132342e302f32332d3233203d3e2034383131.roa (hash: tUU9CRZU47s83dslwBh17ysLnkJO3sTg8DsXMcR+XLo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.crl rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 12:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:8c:1a:d0:84:d2:4a:83:ee:29:d9:f4:f8:f4:5b:5a:05:60:23:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58040501FF5E61F0E29F465314024C0C7BD4DC49 Validity Not Before: Aug 28 06:43:22 2026 GMT Not After : Aug 31 12:26:22 2026 GMT Subject: CN=74BE2F88F7E3E7AE1FAC20D7818D0F9CE98812A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c3:35:37:57:40:18:7d:45:aa:a2:da:1f:4f: 36:ce:17:43:13:f0:04:05:26:d0:bb:83:3e:c8:58: 98:42:a2:73:c2:57:fe:1f:f3:ca:4a:df:55:be:88: 99:a5:2b:de:a4:63:24:44:1f:56:5d:84:e5:29:7a: 7e:76:ea:d8:8c:ec:4e:24:89:ba:57:ef:41:40:cd: 8f:cd:60:6e:16:98:ce:46:b2:6f:d6:3d:83:a9:c1: 07:b0:16:e8:35:fc:af:93:a1:76:9c:55:c3:07:ed: 0c:16:ed:3e:9d:11:af:8c:dc:ee:4c:b1:d5:50:ee: 3a:0e:23:8c:00:d6:25:15:31:15:d5:d1:e6:53:54: e2:ef:b5:70:7f:18:0a:85:b7:b8:a4:bd:b6:ce:b7: ec:5f:8b:0c:d0:cb:31:f9:de:39:02:8c:8b:98:85: 47:42:b6:d4:3b:bf:c2:3a:0d:26:ab:1c:b4:50:7a: 26:e1:ff:83:82:ee:e8:29:56:08:2c:2b:10:09:df: 90:d4:74:a2:cc:31:f8:53:49:38:e3:b2:a2:02:58: e8:b3:0b:52:f0:75:8b:b6:9e:11:93:cc:f9:f0:7a: 2b:d5:03:96:22:8a:52:30:f9:cd:94:b6:fc:4a:0f: 2a:97:72:2e:01:e5:3a:ad:d7:7e:16:0d:e3:f3:d5: f2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BE:2F:88:F7:E3:E7:AE:1F:AC:20:D7:81:8D:0F:9C:E9:88:12:A3 X509v3 Authority Key Identifier: keyid:58:04:05:01:FF:5E:61:F0:E2:9F:46:53:14:02:4C:0C:7B:D4:DC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/58040501FF5E61F0E29F465314024C0C7BD4DC49.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123602192389898275/0/58040501FF5E61F0E29F465314024C0C7BD4DC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:80:23:84:a7:1f:df:9c:8d:fc:05:0a:d4:73:af:63:99:68: 0a:55:e3:2b:c0:99:38:84:ca:cb:87:9c:3e:11:94:0f:bb:fa: 15:8d:e1:15:9f:2a:42:3d:0a:66:5b:ae:1e:74:a1:05:19:a1: c7:2f:24:81:35:63:33:fc:37:05:cc:8f:52:5b:e6:8c:69:92: 32:92:85:86:2f:ab:85:8f:5d:b6:67:4a:70:6a:8f:7e:5e:6d: 04:a9:7c:2d:f7:1b:04:90:92:33:c7:f5:89:4d:37:24:1f:5c: aa:cf:15:e2:e2:81:78:2d:f5:5b:a4:52:7f:e0:06:c3:b4:1e: 32:5c:a3:37:9d:71:d4:aa:27:67:80:40:b0:3d:0d:14:e3:38: 04:02:e3:42:af:58:42:2c:f0:57:92:96:23:1e:b5:80:c2:0f: 3c:f3:a9:61:b5:34:65:1c:5c:d2:72:12:b5:2b:11:54:db:9a: 44:b1:63:ea:04:61:a0:96:f7:7c:63:1f:3d:85:2c:6d:fd:a7: 9b:cf:70:27:a8:b6:90:5f:4a:41:a7:4c:44:8a:e0:62:d0:4d: fc:4a:74:1a:92:9f:23:d7:3f:2d:28:f4:8c:32:92:1e:3e:38: 48:14:42:35:13:1f:98:9b:c1:65:11:b0:27:41:fd:0c:99:ad: c5:03:fb:97 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYYwa0ITSSoPuKdn0+PRbWgVgI7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTgwNDA1MDFGRjVFNjFGMEUyOUY0NjUzMTQwMjRDMEM3 QkQ0REM0OTAeFw0yNjA4MjgwNjQzMjJaFw0yNjA4MzExMjI2MjJaMDMxMTAvBgNV BAMTKDc0QkUyRjg4RjdFM0U3QUUxRkFDMjBENzgxOEQwRjlDRTk4ODEyQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwzU3V0AYfUWqotofTzbOF0MT 8AQFJtC7gz7IWJhConPCV/4f88pK31W+iJmlK96kYyREH1ZdhOUpen526tiM7E4k ibpX70FAzY/NYG4WmM5Gsm/WPYOpwQewFug1/K+ToXacVcMH7QwW7T6dEa+M3O5M sdVQ7joOI4wA1iUVMRXV0eZTVOLvtXB/GAqFt7ikvbbOt+xfiwzQyzH53jkCjIuY hUdCttQ7v8I6DSarHLRQeibh/4OC7ugpVggsKxAJ35DUdKLMMfhTSTjjsqICWOiz C1LwdYu2nhGTzPnweivVA5YiilIw+c2UtvxKDyqXci4B5Tqt134WDePz1fInAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdL4viPfj564frCDXgY0PnOmIEqMwHwYDVR0j BBgwFoAUWAQFAf9eYfDin0ZTFAJMDHvU3EkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MzYwMjE5MjM4OTg5ODI3NS8wLzU4MDQwNTAxRkY1RTYxRjBFMjlGNDY1MzE0MDI0 QzBDN0JENERDNDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTgwNDA1MDFGRjVFNjFGMEUyOUY0NjUzMTQwMjRDMEM3QkQ0REM0OS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMjM2MDIxOTIzODk4OTgyNzUvMC81ODA0MDUwMUZGNUU2 MUYwRTI5RjQ2NTMxNDAyNEMwQzdCRDREQzQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIAjhKcf35yN /AUK1HOvY5loClXjK8CZOITKy4ecPhGUD7v6FY3hFZ8qQj0KZluuHnShBRmhxy8k gTVjM/w3BcyPUlvmjGmSMpKFhi+rhY9dtmdKcGqPfl5tBKl8LfcbBJCSM8f1iU03 JB9cqs8V4uKBeC31W6RSf+AGw7QeMlyjN51x1KonZ4BAsD0NFOM4BALjQq9YQizw V5KWIx61gMIPPPOpYbU0ZRxc0nIStSsRVNuaRLFj6gRhoJb3fGMfPYUsbf2nm89w J6i2kF9KQadMRIrgYtBN/Ep0GpKfI9c/LSj0jDKSHj44SBRCNRMfmJvBZRGwJ0H9 DJmtxQP7lw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:19:37 2026 by rpki-client