$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft File: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft (raw, json) Hash identifier: 8plWI6d3zevUqBKrXnIR8DlxBqaSeQLKy0oRSdS+BiI= Subject key identifier: 97:AB:41:15:65:16:BB:37:2E:84:8E:96:5C:11:55:81:97:71:E3:AD Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 Certificate issuer: /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Certificate serial: 23E9C5DBC2FAF48C6DDDAC557497BBA27A3AA168 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft Manifest number: 9D Signing time: Wed 13 May 2026 13:51:05 +0000 Manifest this update: Wed 13 May 2026 13:46:05 +0000 Manifest next update: Thu 14 May 2026 15:43:05 +0000 Files and hashes: 1: 3130332e35372e31322e302f32322d3234203d3e203633373031.roa (hash: 8UtfI7LTrXwbIubSnHUAr4P3UqzZ1JNFE+rdAk5G7eE=) 2: 3130332e3135322e3230382e302f32332d3234203d3e203633373031.roa (hash: AY1Rkv8eWCaCc1IqIqb/hR6fEF7YAcghCDJ1PXekeR4=) 3: 34352e3132332e3132382e302f32322d3234203d3e203633373031.roa (hash: D0DZcEu6aIrrlnKA0LePQ3snnhwXT075mcvbXRTNoSM=) 4: 3130332e38382e39362e302f32322d3234203d3e203633373031.roa (hash: U8zN/uKQkuQOmx94aIzQZAVo1yFMKEWW8+KWrA4wMEU=) 5: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl (hash: ypEQnO9pOX9YK+g7IoxYm2S6YpTNSVi7dqP4ENOD4R0=) 6: 3231382e3234362e34382e302f32322d3234203d3e203633373031.roa (hash: WcmfvhVSIdNuNti1E8ax2jBrWyZNrlupmGu8emD1ulA=) 7: 323430373a343938303a3a2f33322d3438203d3e203633373031.roa (hash: 2xrWqcYAWv5uaJ+UEIXDS5NCV5aUjwlhbOSNrGQlqmA=) 8: 34352e3131362e3230382e302f32322d3234203d3e203633373031.roa (hash: U7pMxSAG3hJgdZF9MfZ18nxXUA9nKKA1bO/qYqQYHtk=) 9: 3130332e3132352e3233362e302f32322d3234203d3e203633373031.roa (hash: Yea68duwFifPXnruxUiyJ9UTHYU8mFtMaIPky0bpVBY=) 10: 3130332e36332e3234342e302f32322d3234203d3e203633373031.roa (hash: +6y/ZqD3ndBq58wqjIQAYJB+hGKh54Rr52DvmGnGOc0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:e9:c5:db:c2:fa:f4:8c:6d:dd:ac:55:74:97:bb:a2:7a:3a:a1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Validity Not Before: May 13 13:46:05 2026 GMT Not After : May 14 15:43:05 2026 GMT Subject: CN=97AB41156516BB372E848E965C1155819771E3AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ea:f9:01:f5:4d:34:1c:99:c6:ae:de:e1:49: 8b:69:88:76:1c:c8:c6:ea:d1:eb:09:da:35:70:2c: 18:3c:e0:17:af:3d:32:5c:3e:03:d4:d1:af:05:d9: ee:57:e0:4c:c9:72:3d:7c:94:60:e3:61:d5:cd:4f: d1:a3:e4:92:81:14:da:1a:a2:1b:fb:13:03:7d:3c: 3f:80:cc:e2:d6:cb:80:88:df:04:9a:29:ea:16:13: 3d:0b:b8:49:11:6e:db:d8:3c:55:c9:8c:10:cb:e3: 3b:82:6a:05:9c:8b:d1:f8:70:3d:ce:3e:d0:66:f1: cf:11:5d:a9:d8:7e:86:61:91:9b:32:0a:93:7e:57: 59:85:20:34:c9:18:bf:ba:a0:2e:66:a6:de:6c:ad: d1:6d:50:07:9f:b8:a6:a8:30:2a:d7:e1:be:6f:5c: 7a:5b:83:2a:42:4a:8f:c5:8f:b0:d1:50:6a:c7:70: c8:e7:45:3c:23:14:c7:0b:da:2c:f9:17:f1:14:0a: d8:22:30:54:3b:cf:ba:fd:78:4b:57:8a:fc:a3:44: ab:06:e5:88:6f:37:cc:20:58:84:a1:3e:56:a1:66: 27:f3:3f:9f:27:46:12:c4:76:0f:61:32:52:71:27: 7d:74:49:f2:7d:ee:68:ac:25:ac:3f:32:be:48:85: d1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AB:41:15:65:16:BB:37:2E:84:8E:96:5C:11:55:81:97:71:E3:AD X509v3 Authority Key Identifier: keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ca:d6:90:04:c2:0e:1a:ec:2b:80:30:67:01:bc:0e:d6:3a: 4d:08:b7:31:43:9e:15:b7:25:e0:03:6a:9c:97:87:1e:1e:41: 03:5d:fa:d1:03:30:8c:fc:e7:17:de:e7:40:86:74:f1:7c:e6: 4a:15:7b:4e:ca:ee:ba:e5:d3:e7:4c:6b:af:10:7a:b1:21:eb: 8d:62:1e:34:3c:1e:97:ab:fa:3f:c1:c7:67:b4:74:94:f8:9c: e8:87:04:5c:cd:e9:e0:07:05:4c:52:2c:b0:40:e9:34:8c:3b: 3e:34:6d:93:3d:97:b7:27:9c:8c:37:d3:c7:8a:9a:87:60:b3: fb:43:58:b3:14:e4:99:e9:55:59:11:77:c6:13:ee:fb:fc:85: 3f:68:7e:96:05:68:80:9f:d5:87:79:8a:90:0a:cb:a7:0e:5d: b1:ed:c2:2c:be:f4:d2:d2:05:eb:26:3f:f2:26:1b:5d:2d:90: dd:52:b2:5d:ff:0b:7a:09:79:29:f4:04:eb:e2:00:77:d5:54: bc:b8:b7:1e:dd:b7:ac:83:87:2e:50:da:77:23:da:76:3a:40: 12:11:9d:e3:52:1c:24:8a:18:6f:33:8e:01:b0:34:b3:3b:29: 04:e2:6c:d7:81:d2:e4:52:83:84:6d:ed:4f:c0:15:f7:3f:94: 50:e3:a2:c4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUI+nF28L69Ixt3axVdJe7ono6oWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZE Q0I5NjM1NzAeFw0yNjA1MTMxMzQ2MDVaFw0yNjA1MTQxNTQzMDVaMDMxMTAvBgNV BAMTKDk3QUI0MTE1NjUxNkJCMzcyRTg0OEU5NjVDMTE1NTgxOTc3MUUzQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp6vkB9U00HJnGrt7hSYtpiHYc yMbq0esJ2jVwLBg84BevPTJcPgPU0a8F2e5X4EzJcj18lGDjYdXNT9Gj5JKBFNoa ohv7EwN9PD+AzOLWy4CI3wSaKeoWEz0LuEkRbtvYPFXJjBDL4zuCagWci9H4cD3O PtBm8c8RXanYfoZhkZsyCpN+V1mFIDTJGL+6oC5mpt5srdFtUAefuKaoMCrX4b5v XHpbgypCSo/Fj7DRUGrHcMjnRTwjFMcL2iz5F/EUCtgiMFQ7z7r9eEtXivyjRKsG 5YhvN8wgWIShPlahZifzP58nRhLEdg9hMlJxJ310SfJ97misJaw/Mr5IhdEHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUl6tBFWUWuzcuhI6WXBFVgZdx460wHwYDVR0j BBgwFoAUUJvJ515E20DWkSvD91lxz9y5Y1cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDY4NDQxNy8wLzUwOUJDOUU3NUU0NERCNDBENjkxMkJDM0Y3NTk3 MUNGRENCOTYzNTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZEQ0I5NjM1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ2ODQ0MTcvMC81MDlCQzlFNzVFNDRE QjQwRDY5MTJCQzNGNzU5NzFDRkRDQjk2MzU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8rWkATCDhrs K4AwZwG8DtY6TQi3MUOeFbcl4ANqnJeHHh5BA1360QMwjPznF97nQIZ08XzmShV7 TsruuuXT50xrrxB6sSHrjWIeNDwel6v6P8HHZ7R0lPic6IcEXM3p4AcFTFIssEDp NIw7PjRtkz2XtyecjDfTx4qah2Cz+0NYsxTkmelVWRF3xhPu+/yFP2h+lgVogJ/V h3mKkArLpw5dse3CLL700tIF6yY/8iYbXS2Q3VKyXf8Legl5KfQE6+IAd9VUvLi3 Ht23rIOHLlDadyPadjpAEhGd41IcJIoYbzOOAbA0szspBOJs14HS5FKDhG3tT8AV 9z+UUOOixA== -----END CERTIFICATE-----Generated at Wed May 13 19:42:35 2026 by rpki-client