$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft File: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft (raw, json) Hash identifier: vc8cVxqWA3uPFzua3bWAuSYH4rJsVXJHhCe2KEgzW5I= Subject key identifier: DC:6D:E9:24:59:42:9A:E1:94:1C:E7:6E:8F:D5:AF:72:99:B6:34:2C Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 Certificate issuer: /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Certificate serial: 216CB259062E6F4901E9E8BCE3D9F35C47551BB2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft Manifest number: 2F Signing time: Sun 22 Feb 2026 21:27:30 +0000 Manifest this update: Sun 22 Feb 2026 21:22:30 +0000 Manifest next update: Mon 23 Feb 2026 22:53:30 +0000 Files and hashes: 1: 34352e3132332e3132382e302f32322d3234203d3e203633373031.roa (hash: D0DZcEu6aIrrlnKA0LePQ3snnhwXT075mcvbXRTNoSM=) 2: 3130332e38382e39362e302f32322d3234203d3e203633373031.roa (hash: U8zN/uKQkuQOmx94aIzQZAVo1yFMKEWW8+KWrA4wMEU=) 3: 3130332e36332e3234342e302f32322d3234203d3e203633373031.roa (hash: +6y/ZqD3ndBq58wqjIQAYJB+hGKh54Rr52DvmGnGOc0=) 4: 34352e3131362e3230382e302f32322d3234203d3e203633373031.roa (hash: U7pMxSAG3hJgdZF9MfZ18nxXUA9nKKA1bO/qYqQYHtk=) 5: 3130332e35372e31322e302f32322d3234203d3e203633373031.roa (hash: 8UtfI7LTrXwbIubSnHUAr4P3UqzZ1JNFE+rdAk5G7eE=) 6: 3231382e3234362e34382e302f32322d3234203d3e203633373031.roa (hash: WcmfvhVSIdNuNti1E8ax2jBrWyZNrlupmGu8emD1ulA=) 7: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl (hash: a3AArdlyNTjC+tkSBOvUEDzh5AY0wBVwfPiB76wqkgE=) 8: 323430373a343938303a3a2f33322d3438203d3e203633373031.roa (hash: 2xrWqcYAWv5uaJ+UEIXDS5NCV5aUjwlhbOSNrGQlqmA=) 9: 3130332e3132352e3233362e302f32322d3234203d3e203633373031.roa (hash: Yea68duwFifPXnruxUiyJ9UTHYU8mFtMaIPky0bpVBY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6c:b2:59:06:2e:6f:49:01:e9:e8:bc:e3:d9:f3:5c:47:55:1b:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Validity Not Before: Feb 22 21:22:30 2026 GMT Not After : Feb 23 22:53:30 2026 GMT Subject: CN=DC6DE92459429AE1941CE76E8FD5AF7299B6342C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bf:62:12:2a:b6:8a:6a:82:87:bc:60:68:01: 56:0a:e2:de:f9:b0:e8:3e:12:6e:ab:39:84:a0:1d: c2:ae:45:d0:90:7c:a1:69:9c:3f:a3:aa:07:67:36: 7f:74:1c:81:38:6e:ee:9f:15:93:cd:38:09:79:0c: fc:2a:dd:ae:27:ee:81:e1:a9:2a:14:af:f9:61:66: 5f:5e:76:10:b5:2e:c2:f5:83:4d:fc:0e:8c:c6:28: 65:6e:78:d4:c3:f8:e2:70:c7:2e:14:83:b1:00:63: 52:98:99:58:ee:56:32:41:6e:7f:4f:bb:f5:14:87: af:d8:c3:44:f4:e1:12:4f:a0:d9:c1:be:f5:85:00: 34:1c:4c:c1:eb:77:92:82:51:cf:4a:bf:7c:11:63: c0:cb:8c:88:35:e7:ba:b4:ec:eb:02:37:4a:9e:94: 95:62:24:9f:5b:fb:5a:a1:04:b6:aa:f9:6d:b0:56: a6:ab:5e:19:d3:27:b1:d2:fc:36:66:1d:76:ff:81: d6:37:c8:5a:55:77:aa:17:d8:bd:c7:df:bd:34:c6: 8a:be:46:42:e4:2c:44:2f:ac:96:f5:8d:6d:94:cf: 03:21:79:f2:5f:93:bb:af:10:07:25:ed:d6:b6:16: 7a:76:f1:06:be:0c:e0:67:76:43:bf:0f:22:7b:3b: b4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6D:E9:24:59:42:9A:E1:94:1C:E7:6E:8F:D5:AF:72:99:B6:34:2C X509v3 Authority Key Identifier: keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:e8:2f:d9:0d:12:e3:10:3c:b2:df:38:7c:9b:87:b4:c4:d3: c3:2f:87:09:cc:52:c9:1c:88:ec:c9:ae:1f:7e:5c:ce:23:d5: 4f:16:de:c6:cc:04:05:44:fa:7d:1e:8f:75:8d:36:a7:39:35: a8:81:6e:96:2e:05:e4:fa:d6:7c:95:a8:29:17:83:6b:d4:2a: b7:d5:b9:05:a0:f2:4a:3a:5e:6d:d4:79:56:41:8a:74:ec:2b: 49:67:db:e5:44:28:c4:d8:4e:93:bf:6f:33:20:52:03:f9:53: 3b:73:d7:70:67:eb:b4:0e:8f:aa:a2:cb:41:4b:a3:39:06:f8: 19:0e:29:f6:48:97:c7:88:e3:58:53:f6:c6:60:df:e5:be:06: 66:fd:5f:05:70:12:d8:19:71:b2:bf:3e:84:b6:5d:33:37:d2: c7:a3:89:f9:ce:55:23:66:87:6c:1a:40:dd:a0:e3:f8:bc:8a: c8:5b:32:5d:95:62:d1:7f:c2:26:e7:bb:2b:97:8b:3f:b1:e9: c4:c6:d7:75:32:2e:76:ea:73:82:d3:11:ec:2b:57:42:8b:da: 2a:6c:72:41:0f:9d:cd:8f:af:06:c4:b5:0d:82:09:ab:22:7b: 2a:2d:85:fc:07:fa:3b:a1:08:40:33:ae:42:7e:71:13:e6:2b: 16:33:e7:cc -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIWyyWQYub0kB6ei849nzXEdVG7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZE Q0I5NjM1NzAeFw0yNjAyMjIyMTIyMzBaFw0yNjAyMjMyMjUzMzBaMDMxMTAvBgNV BAMTKERDNkRFOTI0NTk0MjlBRTE5NDFDRTc2RThGRDVBRjcyOTlCNjM0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCev2ISKraKaoKHvGBoAVYK4t75 sOg+Em6rOYSgHcKuRdCQfKFpnD+jqgdnNn90HIE4bu6fFZPNOAl5DPwq3a4n7oHh qSoUr/lhZl9edhC1LsL1g038DozGKGVueNTD+OJwxy4Ug7EAY1KYmVjuVjJBbn9P u/UUh6/Yw0T04RJPoNnBvvWFADQcTMHrd5KCUc9Kv3wRY8DLjIg157q07OsCN0qe lJViJJ9b+1qhBLaq+W2wVqarXhnTJ7HS/DZmHXb/gdY3yFpVd6oX2L3H3700xoq+ RkLkLEQvrJb1jW2UzwMhefJfk7uvEAcl7da2Fnp28Qa+DOBndkO/DyJ7O7TFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3G3pJFlCmuGUHOduj9Wvcpm2NCwwHwYDVR0j BBgwFoAUUJvJ515E20DWkSvD91lxz9y5Y1cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDY4NDQxNy8wLzUwOUJDOUU3NUU0NERCNDBENjkxMkJDM0Y3NTk3 MUNGRENCOTYzNTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZEQ0I5NjM1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ2ODQ0MTcvMC81MDlCQzlFNzVFNDRE QjQwRDY5MTJCQzNGNzU5NzFDRkRDQjk2MzU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOgv2Q0S4xA8 st84fJuHtMTTwy+HCcxSyRyI7MmuH35cziPVTxbexswEBUT6fR6PdY02pzk1qIFu li4F5PrWfJWoKReDa9Qqt9W5BaDySjpebdR5VkGKdOwrSWfb5UQoxNhOk79vMyBS A/lTO3PXcGfrtA6PqqLLQUujOQb4GQ4p9kiXx4jjWFP2xmDf5b4GZv1fBXAS2Blx sr8+hLZdMzfSx6OJ+c5VI2aHbBpA3aDj+LyKyFsyXZVi0X/CJue7K5eLP7HpxMbX dTIudupzgtMR7CtXQovaKmxyQQ+dzY+vBsS1DYIJqyJ7Ki2F/Af6O6EIQDOuQn5x E+YrFjPnzA== -----END CERTIFICATE-----Generated at Mon Feb 23 02:14:09 2026 by rpki-client