$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft File: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft (raw, json) Hash identifier: d6ppu5k1m15OSXLjpBJFDpfjr2D0dLz1HoAusgLcJwM= Subject key identifier: 2F:BA:DA:7C:C9:4E:46:42:EB:53:3A:A4:A0:64:95:16:BA:25:D3:67 Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 Certificate issuer: /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Certificate serial: 7BE58464A786FDB08A16925350F105726B7E1D54 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft Manifest number: 39 Signing time: Mon 02 Mar 2026 12:08:17 +0000 Manifest this update: Mon 02 Mar 2026 12:03:17 +0000 Manifest next update: Tue 03 Mar 2026 14:59:17 +0000 Files and hashes: 1: 323430373a343938303a3a2f33322d3438203d3e203633373031.roa (hash: 2xrWqcYAWv5uaJ+UEIXDS5NCV5aUjwlhbOSNrGQlqmA=) 2: 34352e3131362e3230382e302f32322d3234203d3e203633373031.roa (hash: U7pMxSAG3hJgdZF9MfZ18nxXUA9nKKA1bO/qYqQYHtk=) 3: 3130332e36332e3234342e302f32322d3234203d3e203633373031.roa (hash: +6y/ZqD3ndBq58wqjIQAYJB+hGKh54Rr52DvmGnGOc0=) 4: 3130332e38382e39362e302f32322d3234203d3e203633373031.roa (hash: U8zN/uKQkuQOmx94aIzQZAVo1yFMKEWW8+KWrA4wMEU=) 5: 3130332e3132352e3233362e302f32322d3234203d3e203633373031.roa (hash: Yea68duwFifPXnruxUiyJ9UTHYU8mFtMaIPky0bpVBY=) 6: 3231382e3234362e34382e302f32322d3234203d3e203633373031.roa (hash: WcmfvhVSIdNuNti1E8ax2jBrWyZNrlupmGu8emD1ulA=) 7: 3130332e35372e31322e302f32322d3234203d3e203633373031.roa (hash: 8UtfI7LTrXwbIubSnHUAr4P3UqzZ1JNFE+rdAk5G7eE=) 8: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl (hash: HjbwDnAo6VLAlZ7k+HKLUajYPxQXjsYMlyFWOf3H+LM=) 9: 34352e3132332e3132382e302f32322d3234203d3e203633373031.roa (hash: D0DZcEu6aIrrlnKA0LePQ3snnhwXT075mcvbXRTNoSM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e5:84:64:a7:86:fd:b0:8a:16:92:53:50:f1:05:72:6b:7e:1d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Validity Not Before: Mar 2 12:03:17 2026 GMT Not After : Mar 3 14:59:17 2026 GMT Subject: CN=2FBADA7CC94E4642EB533AA4A0649516BA25D367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c3:8f:0f:3d:a4:4f:4e:96:c6:3f:5c:c1:85: 98:28:0a:f6:53:00:8b:4e:09:be:53:88:cf:2d:19: 9f:be:09:f5:fb:7c:4c:14:20:93:75:87:bf:c2:3d: a9:60:7f:38:d5:0a:83:64:5c:fa:d2:2b:c8:5f:c2: d1:49:20:bc:f5:c7:26:27:79:6c:ca:da:4d:f9:f2: de:ff:30:06:03:22:60:ea:cf:3a:24:53:e3:79:d8: 2c:eb:41:69:5f:08:75:60:ff:66:1c:f4:89:d9:30: 07:da:9f:c5:91:aa:b6:f1:38:94:35:0b:5d:db:4f: c3:69:f3:85:e0:00:b1:3f:4a:a4:ed:ae:4d:4b:aa: 76:7f:8a:f6:27:30:29:fc:d0:5b:4f:18:55:7a:97: 5d:72:5a:d9:6c:92:6c:a6:73:61:4e:16:b0:91:b9: 6e:da:40:3e:12:7d:62:78:02:e6:33:0c:1a:27:7b: 37:c8:e9:3b:fe:66:39:bc:78:a1:44:4f:a9:20:c5: 4b:84:79:c6:0b:ca:1b:27:de:e6:33:fe:30:36:50: 5a:68:0c:2d:65:3a:91:38:9e:6a:f3:a3:53:0f:23: 39:28:2d:be:58:0e:29:1a:50:2c:a3:71:e0:f0:0e: dc:19:7d:e1:e5:65:e6:30:3c:6c:1e:95:e1:89:a3: d5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BA:DA:7C:C9:4E:46:42:EB:53:3A:A4:A0:64:95:16:BA:25:D3:67 X509v3 Authority Key Identifier: keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:1a:17:33:b3:9a:f9:74:a8:e5:74:d5:cd:9a:db:7f:17:b0: 1f:3b:4c:9a:d9:78:ed:5c:b6:bc:8d:fb:05:10:8b:b9:b8:aa: 6f:5e:bb:0f:a8:af:eb:bf:8e:16:d6:ed:eb:50:85:d5:e5:b9: d9:a1:f5:78:8e:5d:91:81:24:e3:ae:68:e7:cf:c6:3e:79:69: e4:1c:38:3e:ea:c2:4f:5c:cc:26:e3:5b:eb:b1:c3:39:38:29: f5:ac:ff:cc:ff:f5:28:f9:8b:de:31:8f:1d:23:c4:6d:74:79: b6:3a:11:8d:5e:92:28:84:bd:14:c6:3a:ee:a2:4f:fa:61:32: 4c:1e:94:bb:91:c9:6d:9c:50:6b:37:5b:33:b2:87:0f:14:d0: 6d:c3:53:91:8c:f6:9f:03:8c:c1:d3:8e:42:19:03:2d:2b:3e: 36:ce:b8:bc:4b:a6:be:6a:55:4b:1d:9c:4e:c1:f3:3e:31:e1: 80:61:f0:f4:8d:fd:d1:7a:8e:27:68:53:df:6b:d9:5e:a1:c8: 1d:f6:b7:17:c3:e2:e5:18:8b:7c:d2:65:03:1f:27:73:89:0c: 4b:8d:3b:8e:53:7f:de:e2:eb:cc:b3:52:97:0a:47:db:c7:c0: 0f:85:ba:6a:ca:65:92:12:fe:d1:11:61:f4:46:20:4b:91:be: 39:c1:9b:d9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUe+WEZKeG/bCKFpJTUPEFcmt+HVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZE Q0I5NjM1NzAeFw0yNjAzMDIxMjAzMTdaFw0yNjAzMDMxNDU5MTdaMDMxMTAvBgNV BAMTKDJGQkFEQTdDQzk0RTQ2NDJFQjUzM0FBNEEwNjQ5NTE2QkEyNUQzNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJw48PPaRPTpbGP1zBhZgoCvZT AItOCb5TiM8tGZ++CfX7fEwUIJN1h7/CPalgfzjVCoNkXPrSK8hfwtFJILz1xyYn eWzK2k358t7/MAYDImDqzzokU+N52CzrQWlfCHVg/2Yc9InZMAfan8WRqrbxOJQ1 C13bT8Np84XgALE/SqTtrk1LqnZ/ivYnMCn80FtPGFV6l11yWtlskmymc2FOFrCR uW7aQD4SfWJ4AuYzDBonezfI6Tv+Zjm8eKFET6kgxUuEecYLyhsn3uYz/jA2UFpo DC1lOpE4nmrzo1MPIzkoLb5YDikaUCyjceDwDtwZfeHlZeYwPGweleGJo9XxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUL7rafMlORkLrUzqkoGSVFrol02cwHwYDVR0j BBgwFoAUUJvJ515E20DWkSvD91lxz9y5Y1cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDY4NDQxNy8wLzUwOUJDOUU3NUU0NERCNDBENjkxMkJDM0Y3NTk3 MUNGRENCOTYzNTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZEQ0I5NjM1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ2ODQ0MTcvMC81MDlCQzlFNzVFNDRE QjQwRDY5MTJCQzNGNzU5NzFDRkRDQjk2MzU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBoXM7Oa+XSo 5XTVzZrbfxewHztMmtl47Vy2vI37BRCLubiqb167D6iv67+OFtbt61CF1eW52aH1 eI5dkYEk465o58/GPnlp5Bw4PurCT1zMJuNb67HDOTgp9az/zP/1KPmL3jGPHSPE bXR5tjoRjV6SKIS9FMY67qJP+mEyTB6Uu5HJbZxQazdbM7KHDxTQbcNTkYz2nwOM wdOOQhkDLSs+Ns64vEumvmpVSx2cTsHzPjHhgGHw9I390XqOJ2hT32vZXqHIHfa3 F8Pi5RiLfNJlAx8nc4kMS407jlN/3uLrzLNSlwpH28fAD4W6asplkhL+0RFh9EYg S5G+OcGb2Q== -----END CERTIFICATE-----Generated at Mon Mar 2 20:51:47 2026 by rpki-client