$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft File: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft (raw, json) Hash identifier: BTV1HKiY9PBJNgcwtd2xw0Rfx/9+rSmDA66FbeOaclI= Subject key identifier: B2:00:8D:72:50:5E:28:0A:43:D0:AB:A6:DF:AA:CF:3D:46:03:E6:64 Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 Certificate issuer: /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Certificate serial: 2E182D0D55268011E52A253BE3C6F26F2E84DDA0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft Manifest number: 7B Signing time: Sat 18 Apr 2026 03:39:50 +0000 Manifest this update: Sat 18 Apr 2026 03:34:50 +0000 Manifest next update: Sun 19 Apr 2026 05:12:50 +0000 Files and hashes: 1: 3130332e36332e3234342e302f32322d3234203d3e203633373031.roa (hash: +6y/ZqD3ndBq58wqjIQAYJB+hGKh54Rr52DvmGnGOc0=) 2: 34352e3132332e3132382e302f32322d3234203d3e203633373031.roa (hash: D0DZcEu6aIrrlnKA0LePQ3snnhwXT075mcvbXRTNoSM=) 3: 3130332e35372e31322e302f32322d3234203d3e203633373031.roa (hash: 8UtfI7LTrXwbIubSnHUAr4P3UqzZ1JNFE+rdAk5G7eE=) 4: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl (hash: McpAe0T4Nz6hN+XyGIwDLmNgHqxFR5AA/55UUEqC2Gk=) 5: 3130332e38382e39362e302f32322d3234203d3e203633373031.roa (hash: U8zN/uKQkuQOmx94aIzQZAVo1yFMKEWW8+KWrA4wMEU=) 6: 3130332e3135322e3230382e302f32332d3234203d3e203633373031.roa (hash: AY1Rkv8eWCaCc1IqIqb/hR6fEF7YAcghCDJ1PXekeR4=) 7: 3130332e3132352e3233362e302f32322d3234203d3e203633373031.roa (hash: Yea68duwFifPXnruxUiyJ9UTHYU8mFtMaIPky0bpVBY=) 8: 323430373a343938303a3a2f33322d3438203d3e203633373031.roa (hash: 2xrWqcYAWv5uaJ+UEIXDS5NCV5aUjwlhbOSNrGQlqmA=) 9: 3231382e3234362e34382e302f32322d3234203d3e203633373031.roa (hash: WcmfvhVSIdNuNti1E8ax2jBrWyZNrlupmGu8emD1ulA=) 10: 34352e3131362e3230382e302f32322d3234203d3e203633373031.roa (hash: U7pMxSAG3hJgdZF9MfZ18nxXUA9nKKA1bO/qYqQYHtk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:18:2d:0d:55:26:80:11:e5:2a:25:3b:e3:c6:f2:6f:2e:84:dd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Validity Not Before: Apr 18 03:34:50 2026 GMT Not After : Apr 19 05:12:50 2026 GMT Subject: CN=B2008D72505E280A43D0ABA6DFAACF3D4603E664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:28:66:c2:87:6a:54:dd:aa:a5:b3:03:84: da:17:ec:60:5f:54:84:f1:c4:49:bb:72:74:38:d4: 30:d8:a0:ea:52:69:85:8b:d0:05:c0:35:85:ec:1a: f5:ab:96:6a:60:c2:02:84:3c:f6:8e:2d:1c:33:ff: 5b:78:88:61:d9:d4:5d:e8:db:2f:ec:6d:18:d9:f9: 08:9e:aa:52:05:33:3c:79:e7:ff:4c:a6:d5:36:2f: a0:cc:02:ed:7b:0e:b7:d0:4e:19:da:d8:cc:34:f6: b3:c6:b6:5a:82:59:bc:31:5f:c0:b6:0d:76:f5:71: 57:d3:bb:cd:fd:cf:05:65:44:48:59:85:e3:6c:79: 74:73:24:70:74:b9:33:96:f8:5a:1e:85:2e:95:18: fb:e2:a2:66:9f:d3:5c:b7:fd:e4:06:a0:95:3d:27: 88:c9:5f:ea:07:cb:f7:74:4e:95:7c:d5:09:46:60: 93:ac:06:68:65:c7:ee:d2:1c:bf:3f:9a:5e:33:9f: cb:7c:8c:e0:6d:19:80:be:dc:56:74:0a:84:09:1f: bd:9e:b3:24:b5:44:a2:a1:a6:3d:06:3b:ad:c2:cb: ec:4c:b0:06:99:ac:7d:f5:ef:f7:05:da:56:57:62: c7:aa:f5:79:12:38:ca:da:2d:7e:7d:67:0b:1a:bf: 96:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:00:8D:72:50:5E:28:0A:43:D0:AB:A6:DF:AA:CF:3D:46:03:E6:64 X509v3 Authority Key Identifier: keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:48:be:8f:27:f3:af:d1:8b:a7:2f:88:21:b4:ef:64:c2:10: b9:f0:38:8f:05:a9:f3:eb:9a:1c:95:2c:2e:10:31:fb:8b:47: 4e:13:bf:69:81:b7:fe:59:b0:5a:0b:1a:29:42:38:95:10:24: 21:7f:74:15:b8:24:7b:06:fd:28:32:19:aa:c5:42:73:b2:4f: cc:5a:d5:f3:27:fc:b8:0a:b6:dc:b7:d9:e5:81:15:90:ce:84: cd:52:c5:ec:8e:29:17:34:56:b9:9f:c8:55:7e:81:de:e7:ec: e0:f6:7e:dc:77:bb:f9:90:4f:8b:9e:4e:dd:a7:1a:a4:12:1e: 42:f6:2d:39:fd:53:43:ca:18:60:98:d5:d0:0b:07:c6:19:6a: d4:18:f5:a3:03:92:d5:94:63:27:2f:f1:07:20:13:78:2d:0a: 6e:72:6a:c7:5e:f8:bd:4f:99:2a:b2:67:ee:8c:25:83:a3:af: 1b:be:8c:b7:d4:38:76:81:b4:62:d0:d9:c5:dc:e4:e9:d9:59: 20:56:8e:8c:98:dc:22:dc:85:b0:d4:d9:7d:65:57:05:04:b2: 64:57:16:75:1b:13:6d:30:99:8e:82:db:2d:04:ad:77:06:c8: 70:ce:79:18:e6:b9:7f:82:a3:c3:b0:89:16:fc:00:45:24:b4: fc:ca:9a:f3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULhgtDVUmgBHlKiU748byby6E3aAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZE Q0I5NjM1NzAeFw0yNjA0MTgwMzM0NTBaFw0yNjA0MTkwNTEyNTBaMDMxMTAvBgNV BAMTKEIyMDA4RDcyNTA1RTI4MEE0M0QwQUJBNkRGQUFDRjNENDYwM0U2NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDvShmwodqVN2qpbMDhNoX7GBf VITxxEm7cnQ41DDYoOpSaYWL0AXANYXsGvWrlmpgwgKEPPaOLRwz/1t4iGHZ1F3o 2y/sbRjZ+QieqlIFMzx55/9MptU2L6DMAu17DrfQThna2Mw09rPGtlqCWbwxX8C2 DXb1cVfTu839zwVlREhZheNseXRzJHB0uTOW+FoehS6VGPviomaf01y3/eQGoJU9 J4jJX+oHy/d0TpV81QlGYJOsBmhlx+7SHL8/ml4zn8t8jOBtGYC+3FZ0CoQJH72e syS1RKKhpj0GO63Cy+xMsAaZrH317/cF2lZXYseq9XkSOMraLX59Zwsav5ZLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsgCNclBeKApD0Kum36rPPUYD5mQwHwYDVR0j BBgwFoAUUJvJ515E20DWkSvD91lxz9y5Y1cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDY4NDQxNy8wLzUwOUJDOUU3NUU0NERCNDBENjkxMkJDM0Y3NTk3 MUNGRENCOTYzNTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZEQ0I5NjM1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ2ODQ0MTcvMC81MDlCQzlFNzVFNDRE QjQwRDY5MTJCQzNGNzU5NzFDRkRDQjk2MzU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0i+jyfzr9GL py+IIbTvZMIQufA4jwWp8+uaHJUsLhAx+4tHThO/aYG3/lmwWgsaKUI4lRAkIX90 Fbgkewb9KDIZqsVCc7JPzFrV8yf8uAq23LfZ5YEVkM6EzVLF7I4pFzRWuZ/IVX6B 3ufs4PZ+3He7+ZBPi55O3acapBIeQvYtOf1TQ8oYYJjV0AsHxhlq1Bj1owOS1ZRj Jy/xByATeC0KbnJqx174vU+ZKrJn7owlg6OvG76Mt9Q4doG0YtDZxdzk6dlZIFaO jJjcItyFsNTZfWVXBQSyZFcWdRsTbTCZjoLbLQStdwbIcM55GOa5f4Kjw7CJFvwA RSS0/Mqa8w== -----END CERTIFICATE-----Generated at Sat Apr 18 06:11:20 2026 by rpki-client