$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft File: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft (raw, json) Hash identifier: ZLFcDkmJo3uXMNFUkZCvLah+XINfmiOdWb+E2XQieSg= Subject key identifier: 7C:38:0F:0F:BA:CB:60:DF:16:9A:F4:67:D6:02:DD:7D:41:50:2F:19 Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 Certificate issuer: /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Certificate serial: 755F3372E4958960AE6D356A3C4140880404EFD5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft Manifest number: 59 Signing time: Thu 26 Mar 2026 11:13:28 +0000 Manifest this update: Thu 26 Mar 2026 11:08:28 +0000 Manifest next update: Fri 27 Mar 2026 14:24:28 +0000 Files and hashes: 1: 3130332e35372e31322e302f32322d3234203d3e203633373031.roa (hash: 8UtfI7LTrXwbIubSnHUAr4P3UqzZ1JNFE+rdAk5G7eE=) 2: 34352e3132332e3132382e302f32322d3234203d3e203633373031.roa (hash: D0DZcEu6aIrrlnKA0LePQ3snnhwXT075mcvbXRTNoSM=) 3: 3231382e3234362e34382e302f32322d3234203d3e203633373031.roa (hash: WcmfvhVSIdNuNti1E8ax2jBrWyZNrlupmGu8emD1ulA=) 4: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl (hash: E7CbhqOST1aBQ/RyzESfjyD2k06VBNZ+Jiv8IvHnWaw=) 5: 3130332e3132352e3233362e302f32322d3234203d3e203633373031.roa (hash: Yea68duwFifPXnruxUiyJ9UTHYU8mFtMaIPky0bpVBY=) 6: 34352e3131362e3230382e302f32322d3234203d3e203633373031.roa (hash: U7pMxSAG3hJgdZF9MfZ18nxXUA9nKKA1bO/qYqQYHtk=) 7: 3130332e38382e39362e302f32322d3234203d3e203633373031.roa (hash: U8zN/uKQkuQOmx94aIzQZAVo1yFMKEWW8+KWrA4wMEU=) 8: 3130332e36332e3234342e302f32322d3234203d3e203633373031.roa (hash: +6y/ZqD3ndBq58wqjIQAYJB+hGKh54Rr52DvmGnGOc0=) 9: 323430373a343938303a3a2f33322d3438203d3e203633373031.roa (hash: 2xrWqcYAWv5uaJ+UEIXDS5NCV5aUjwlhbOSNrGQlqmA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:24:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:5f:33:72:e4:95:89:60:ae:6d:35:6a:3c:41:40:88:04:04:ef:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Validity Not Before: Mar 26 11:08:28 2026 GMT Not After : Mar 27 14:24:28 2026 GMT Subject: CN=7C380F0FBACB60DF169AF467D602DD7D41502F19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c7:2e:c7:aa:88:49:f0:75:58:37:72:ff:29: 12:29:fe:5d:29:eb:42:f3:30:d4:55:d0:23:ed:9a: 03:25:dc:f4:55:de:66:8b:0f:1d:06:9c:25:e5:6e: c6:83:54:7c:1e:29:b5:3f:84:f0:99:2e:ac:c2:41: 9d:14:be:8e:dc:8c:76:91:c2:01:de:a5:61:cf:1a: a9:81:20:70:82:a0:0c:8e:a4:0e:54:66:4c:cd:c7: 49:1d:ed:7c:98:06:b3:c9:ac:95:81:86:18:23:d8: 77:a5:68:e6:77:a1:c2:9d:86:de:a6:ba:22:75:49: 4e:a2:77:2f:54:a0:13:0c:66:0c:e2:94:96:6f:e6: a8:d5:c3:72:0b:43:f8:39:12:04:a0:30:4d:20:0f: 16:ea:20:8e:02:3c:58:49:db:95:d0:1b:a6:10:91: 50:79:ed:a7:3b:82:de:c6:cf:17:68:ca:a1:57:48: 92:1a:ac:2e:4b:49:99:f8:ef:e4:d4:fd:0e:15:d7: 9a:53:2f:e6:44:21:ad:0e:2a:14:2f:4e:32:18:2f: ae:42:1d:04:04:3e:a4:15:dc:c7:43:c5:4b:e9:ee: c1:3b:4b:75:3b:84:c1:8b:53:98:e3:7b:cd:38:02: cf:ea:a0:68:36:50:0a:d4:c3:99:22:9d:4f:9b:6f: bd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:38:0F:0F:BA:CB:60:DF:16:9A:F4:67:D6:02:DD:7D:41:50:2F:19 X509v3 Authority Key Identifier: keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:44:38:c1:ac:0b:03:ed:b4:46:a7:bb:f6:6c:6e:88:6b:fe: a7:05:43:4a:6f:5c:9d:bb:93:a4:af:55:19:73:2b:6a:ae:44: 29:c4:39:b9:65:37:47:14:1b:ad:23:47:bd:d9:4d:e0:03:55: 8a:35:38:c0:78:16:68:82:62:0d:1c:da:a0:3d:9e:8a:a9:58: 6b:54:d8:7f:74:e2:02:6a:9f:e8:61:46:36:e0:bf:ce:a9:2f: d6:4d:4b:7b:96:4a:b8:7d:90:e6:66:1d:0a:6b:27:99:83:1e: 0f:54:68:8d:94:ca:e3:d4:61:7c:35:b7:c8:83:92:94:95:05: 82:69:a8:9b:ae:d2:40:64:7d:20:52:cd:f5:69:af:7a:96:cf: 28:40:d0:be:13:56:60:1c:d5:2f:5a:e8:f0:a6:b1:c9:a1:4f: 69:b9:55:bc:dc:b1:d5:93:46:fd:e8:35:43:c7:fd:22:b1:5a: 28:3d:c5:37:2d:44:6d:23:db:7f:eb:0e:ff:77:1c:77:20:4a: b1:9e:73:4d:10:9c:02:08:44:ed:65:de:e7:fd:4f:f9:c0:ca: 0d:20:6d:e1:a9:84:48:c2:a2:c2:bb:1a:f4:9a:c1:aa:b6:9a: 44:6a:20:00:19:d9:3e:84:8d:c4:c0:16:98:9d:c1:f9:e3:51: 53:0d:c6:7b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdV8zcuSViWCubTVqPEFAiAQE79UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZE Q0I5NjM1NzAeFw0yNjAzMjYxMTA4MjhaFw0yNjAzMjcxNDI0MjhaMDMxMTAvBgNV BAMTKDdDMzgwRjBGQkFDQjYwREYxNjlBRjQ2N0Q2MDJERDdENDE1MDJGMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuxy7HqohJ8HVYN3L/KRIp/l0p 60LzMNRV0CPtmgMl3PRV3maLDx0GnCXlbsaDVHweKbU/hPCZLqzCQZ0Uvo7cjHaR wgHepWHPGqmBIHCCoAyOpA5UZkzNx0kd7XyYBrPJrJWBhhgj2HelaOZ3ocKdht6m uiJ1SU6idy9UoBMMZgzilJZv5qjVw3ILQ/g5EgSgME0gDxbqII4CPFhJ25XQG6YQ kVB57ac7gt7GzxdoyqFXSJIarC5LSZn47+TU/Q4V15pTL+ZEIa0OKhQvTjIYL65C HQQEPqQV3MdDxUvp7sE7S3U7hMGLU5jje804As/qoGg2UArUw5kinU+bb71NAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfDgPD7rLYN8WmvRn1gLdfUFQLxkwHwYDVR0j BBgwFoAUUJvJ515E20DWkSvD91lxz9y5Y1cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDY4NDQxNy8wLzUwOUJDOUU3NUU0NERCNDBENjkxMkJDM0Y3NTk3 MUNGRENCOTYzNTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZEQ0I5NjM1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ2ODQ0MTcvMC81MDlCQzlFNzVFNDRE QjQwRDY5MTJCQzNGNzU5NzFDRkRDQjk2MzU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0Q4wawLA+20 Rqe79mxuiGv+pwVDSm9cnbuTpK9VGXMraq5EKcQ5uWU3RxQbrSNHvdlN4ANVijU4 wHgWaIJiDRzaoD2eiqlYa1TYf3TiAmqf6GFGNuC/zqkv1k1Le5ZKuH2Q5mYdCmsn mYMeD1RojZTK49RhfDW3yIOSlJUFgmmom67SQGR9IFLN9WmvepbPKEDQvhNWYBzV L1ro8KaxyaFPablVvNyx1ZNG/eg1Q8f9IrFaKD3FNy1EbSPbf+sO/3ccdyBKsZ5z TRCcAghE7WXe5/1P+cDKDSBt4amESMKiwrsa9JrBqraaRGogABnZPoSNxMAWmJ3B +eNRUw3Gew== -----END CERTIFICATE-----Generated at Fri Mar 27 02:03:25 2026 by rpki-client