
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
File: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft (raw, json)
Hash identifier: 7hBVl5p+W43U1P0Eq85SY9HjUXXMNDMhrcgN3rEjhiM=
Subject key identifier: 61:20:E9:27:CD:2C:40:61:23:30:32:82:73:08:3D:CB:33:E6:8C:B9
Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57
Certificate issuer: /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
Certificate serial: 019852F71E49FA3C189E9C4A76A60F6D37DA930A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
Manifest number: 72
Signing time: Mon 13 Apr 2026 05:44:17 +0000
Manifest this update: Mon 13 Apr 2026 05:39:17 +0000
Manifest next update: Tue 14 Apr 2026 07:40:17 +0000
Files and hashes: 1: 3130332e37352e3130342e302f32322d3234203d3e203633373031.roa (hash: aeACiq24WzNuqNoiZEWz6bXGj59Rj/c0kBVmOgCJJIk=)
2: 34352e3131362e3230382e302f32322d3234203d3e203633373031.roa (hash: U7pMxSAG3hJgdZF9MfZ18nxXUA9nKKA1bO/qYqQYHtk=)
3: 3130332e3132352e3233362e302f32322d3234203d3e203633373031.roa (hash: Yea68duwFifPXnruxUiyJ9UTHYU8mFtMaIPky0bpVBY=)
4: 323430373a343938303a3a2f33322d3438203d3e203633373031.roa (hash: 2xrWqcYAWv5uaJ+UEIXDS5NCV5aUjwlhbOSNrGQlqmA=)
5: 323430323a396138303a3a2f33322d3634203d3e203633373031.roa (hash: TyUk2dIso5uRayQ9o5Fitop9Ij85oRmPNSYUBO+LxpQ=)
6: 3130332e38382e39362e302f32322d3234203d3e203633373031.roa (hash: U8zN/uKQkuQOmx94aIzQZAVo1yFMKEWW8+KWrA4wMEU=)
7: 3231382e3234362e34382e302f32322d3234203d3e203633373031.roa (hash: WcmfvhVSIdNuNti1E8ax2jBrWyZNrlupmGu8emD1ulA=)
8: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl (hash: u1+pT/WdNKdELoq5GFvnrrCJeQgQ0HAZLqpizT4NSbA=)
9: 323430373a333763303a3a2f33322d3634203d3e203633373031.roa (hash: CuuyXA+IJwrsdMG9YeKOw9FnS+PivOHbUtLiBmIwuXM=)
10: 3130332e3135322e3230382e302f32332d3234203d3e203633373031.roa (hash: AY1Rkv8eWCaCc1IqIqb/hR6fEF7YAcghCDJ1PXekeR4=)
11: 34352e3132332e3132382e302f32322d3234203d3e203633373031.roa (hash: D0DZcEu6aIrrlnKA0LePQ3snnhwXT075mcvbXRTNoSM=)
12: 3130332e36332e3234342e302f32322d3234203d3e203633373031.roa (hash: +6y/ZqD3ndBq58wqjIQAYJB+hGKh54Rr52DvmGnGOc0=)
13: 3130332e35372e31322e302f32322d3234203d3e203633373031.roa (hash: 8UtfI7LTrXwbIubSnHUAr4P3UqzZ1JNFE+rdAk5G7eE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 07:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:f7:1e:49:fa:3c:18:9e:9c:4a:76:a6:0f:6d:37:da:93:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357
Validity
Not Before: Apr 13 05:39:17 2026 GMT
Not After : Apr 14 07:40:17 2026 GMT
Subject: CN=6120E927CD2C40612330328273083DCB33E68CB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:cb:7b:62:aa:9e:dc:6f:fd:93:ef:05:7a:
0f:a5:b1:59:4e:1c:41:36:07:10:a3:ca:68:28:fc:
59:8c:2e:92:b0:ed:78:f5:8b:76:90:2f:55:e3:22:
a2:2c:61:7c:a0:75:8c:6e:01:d8:45:d9:be:14:4f:
1a:23:4d:89:ad:ca:ac:db:d9:a9:1e:41:67:dc:f2:
7c:92:53:7a:27:e5:b5:18:74:e0:a6:e1:db:c9:80:
36:63:09:1b:d6:fe:fc:4d:5e:f4:b0:61:08:89:94:
e0:5b:67:99:05:07:e6:b0:e0:89:64:72:af:80:19:
4e:a8:90:e3:a6:bf:a3:aa:68:12:0e:9c:8d:cd:b8:
9b:12:11:d0:32:a0:63:3e:eb:dd:1c:b7:95:0b:15:
65:87:5e:b5:f3:2a:e7:46:19:d5:f1:ac:5c:b4:0c:
88:86:fa:19:05:da:71:83:00:ff:89:b6:1e:13:ff:
e8:b3:3d:6b:a0:da:b1:03:e7:ed:b3:05:16:5a:0d:
21:b8:76:d3:b3:f1:2d:89:43:a1:59:57:ae:38:70:
80:b9:00:7d:19:b1:bb:74:b1:51:6d:15:89:5e:91:
d0:ee:46:72:c2:95:93:7c:aa:ce:47:67:88:98:e5:
2e:33:f1:c6:98:62:4c:94:da:50:ce:39:f5:6d:14:
e4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:20:E9:27:CD:2C:40:61:23:30:32:82:73:08:3D:CB:33:E6:8C:B9
X509v3 Authority Key Identifier:
keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:84:1b:e7:02:79:3a:75:9a:3e:f2:e7:dd:23:82:c0:89:3d:
49:6a:e9:69:4a:eb:94:d0:cf:0f:67:5f:5d:01:03:a4:40:13:
2a:d3:7b:2d:2e:05:4f:a0:f1:d5:77:42:47:88:55:aa:87:41:
89:b0:80:f7:3e:83:ce:f0:5a:83:65:03:7d:9d:ca:6a:b3:c9:
a8:80:b4:24:c2:52:42:d9:24:91:a9:f6:e1:60:26:0f:6f:0b:
c1:fc:53:48:cf:55:9b:d5:43:f2:7e:ea:a7:72:70:52:bc:bc:
2b:33:1b:e0:6f:e8:18:de:93:9e:c1:91:2d:51:5c:99:c9:21:
38:3b:a1:1c:e5:6b:3a:27:7b:bd:37:2f:2a:f5:5b:f2:f5:5a:
da:fa:df:7b:28:cc:50:05:c5:e3:da:31:90:e6:fc:86:75:39:
7f:7c:8d:37:da:ac:38:72:6e:38:18:e2:91:ef:e8:2f:fa:23:
97:c4:85:4c:a7:0b:21:44:05:6a:ee:c5:77:53:f3:c3:ac:ba:
ba:a6:73:9a:ce:24:a7:17:4f:ac:2d:bd:b3:17:b1:ef:78:2d:
d2:6f:6c:5c:51:61:4c:89:22:91:1a:1f:cc:fe:bb:f8:06:74:
c5:f0:77:d8:71:ad:f2:58:82:00:30:e6:0d:bd:29:66:27:5d:
bd:8f:61:c3
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUAZhS9x5J+jwYnpxKdqYPbTfakwowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZE
Q0I5NjM1NzAeFw0yNjA0MTMwNTM5MTdaFw0yNjA0MTQwNzQwMTdaMDMxMTAvBgNV
BAMTKDYxMjBFOTI3Q0QyQzQwNjEyMzMwMzI4MjczMDgzRENCMzNFNjhDQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs5Mt7Yqqe3G/9k+8Feg+lsVlO
HEE2BxCjymgo/FmMLpKw7Xj1i3aQL1XjIqIsYXygdYxuAdhF2b4UTxojTYmtyqzb
2akeQWfc8nySU3on5bUYdOCm4dvJgDZjCRvW/vxNXvSwYQiJlOBbZ5kFB+aw4Ilk
cq+AGU6okOOmv6OqaBIOnI3NuJsSEdAyoGM+690ct5ULFWWHXrXzKudGGdXxrFy0
DIiG+hkF2nGDAP+Jth4T/+izPWug2rED5+2zBRZaDSG4dtOz8S2JQ6FZV644cIC5
AH0Zsbt0sVFtFYlekdDuRnLClZN8qs5HZ4iY5S4z8caYYkyU2lDOOfVtFOR7AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUYSDpJ80sQGEjMDKCcwg9yzPmjLkwHwYDVR0j
BBgwFoAUUJvJ515E20DWkSvD91lxz9y5Y1cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDY4NDQxNy8wLzUwOUJDOUU3NUU0NERCNDBENjkxMkJDM0Y3NTk3
MUNGRENCOTYzNTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZEQ0I5NjM1Ny5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ2ODQ0MTcvMC81MDlCQzlFNzVFNDRE
QjQwRDY5MTJCQzNGNzU5NzFDRkRDQjk2MzU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4Qb5wJ5OnWa
PvLn3SOCwIk9SWrpaUrrlNDPD2dfXQEDpEATKtN7LS4FT6Dx1XdCR4hVqodBibCA
9z6DzvBag2UDfZ3KarPJqIC0JMJSQtkkkan24WAmD28LwfxTSM9Vm9VD8n7qp3Jw
Ury8KzMb4G/oGN6TnsGRLVFcmckhODuhHOVrOid7vTcvKvVb8vVa2vrfeyjMUAXF
49oxkOb8hnU5f3yNN9qsOHJuOBjike/oL/ojl8SFTKcLIUQFau7Fd1Pzw6y6uqZz
ms4kpxdPrC29sxex73gt0m9sXFFhTIkikRofzP67+AZ0xfB32HGt8liCADDmDb0p
ZiddvY9hww==
-----END CERTIFICATE-----
Generated at Mon Apr 13 11:03:40 2026 by rpki-client