$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft File: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft (raw, json) Hash identifier: NYyEi3dJeTgePzpgd76Nf9sGbffuarhw01MTfrmivo4= Subject key identifier: C4:BA:36:0F:E9:A8:3B:20:E4:B8:97:63:D2:84:92:89:D2:D5:D5:68 Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 Certificate issuer: /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Certificate serial: 0845475BF90DB1CE1DF9E2EDAEB1BE0AAFDB0577 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft Manifest number: B3 Signing time: Fri 29 May 2026 06:54:44 +0000 Manifest this update: Fri 29 May 2026 06:49:44 +0000 Manifest next update: Sat 30 May 2026 07:36:44 +0000 Files and hashes: 1: 3130332e3132352e3233362e302f32322d3234203d3e203633373031.roa (hash: Yea68duwFifPXnruxUiyJ9UTHYU8mFtMaIPky0bpVBY=) 2: 3130332e3135322e3230382e302f32332d3234203d3e203633373031.roa (hash: AY1Rkv8eWCaCc1IqIqb/hR6fEF7YAcghCDJ1PXekeR4=) 3: 509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl (hash: NEVtRktuyVmtP0uLT+JowNS2GKAR5tx8bBsXhOM70Ws=) 4: 34352e3131362e3230382e302f32322d3234203d3e203633373031.roa (hash: U7pMxSAG3hJgdZF9MfZ18nxXUA9nKKA1bO/qYqQYHtk=) 5: 323430323a396138303a3a2f33322d3438203d3e20313334383130.roa (hash: neAH0hkwEVNAasatgS8ORO4dbxpU7nc7wayFUL20f+M=) 6: 34352e3132332e3132382e302f32322d3234203d3e203633373031.roa (hash: D0DZcEu6aIrrlnKA0LePQ3snnhwXT075mcvbXRTNoSM=) 7: 323430373a333763303a3a2f33322d3438203d3e20313334383130.roa (hash: YB0M9nKNMoHBywOJDf6bSjW4vSlUBOGyW8ueImFl0Ok=) 8: 3130332e38382e39362e302f32322d3234203d3e203633373031.roa (hash: U8zN/uKQkuQOmx94aIzQZAVo1yFMKEWW8+KWrA4wMEU=) 9: 3130332e36332e3234342e302f32322d3234203d3e203633373031.roa (hash: +6y/ZqD3ndBq58wqjIQAYJB+hGKh54Rr52DvmGnGOc0=) 10: 3231382e3234362e34382e302f32322d3234203d3e203633373031.roa (hash: WcmfvhVSIdNuNti1E8ax2jBrWyZNrlupmGu8emD1ulA=) 11: 323430373a343938303a3a2f33322d3438203d3e203633373031.roa (hash: 2xrWqcYAWv5uaJ+UEIXDS5NCV5aUjwlhbOSNrGQlqmA=) 12: 3130332e37352e3130342e302f32322d3234203d3e203633373031.roa (hash: +KXcWOztyLv/Ynmm+FEsOtCGJApsRxgda15t6ILwOjc=) 13: 3130332e35372e31322e302f32322d3234203d3e203633373031.roa (hash: 8UtfI7LTrXwbIubSnHUAr4P3UqzZ1JNFE+rdAk5G7eE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 07:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:45:47:5b:f9:0d:b1:ce:1d:f9:e2:ed:ae:b1:be:0a:af:db:05:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Validity Not Before: May 29 06:49:44 2026 GMT Not After : May 30 07:36:44 2026 GMT Subject: CN=C4BA360FE9A83B20E4B89763D2849289D2D5D568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:af:a3:7f:59:8b:9e:14:19:68:d4:f1:d1:3e: 3d:03:15:84:51:8d:b6:fa:24:9b:4e:17:05:51:4d: bf:d5:9d:db:3e:87:75:19:df:4d:b9:86:8d:57:d9: 83:c8:6a:9c:7e:e3:96:e5:85:27:39:c9:06:59:93: 9b:07:60:d7:30:13:c9:9d:8d:1b:05:05:c9:ff:31: 66:f4:69:05:6c:9a:4d:b9:c5:92:5f:23:f1:3a:ee: 1e:46:c3:65:78:47:21:1b:b5:f1:c0:d9:43:cc:9e: ce:b4:18:5f:11:54:27:cf:89:24:c2:60:6e:2c:a6: 81:7a:8a:8f:b2:46:c5:97:55:a1:6c:7e:56:8d:87: 73:69:1f:4b:b2:b6:9e:c8:35:1e:76:3c:3c:df:13: 70:b6:68:f0:98:db:10:f4:35:e6:7e:a1:9d:c4:cc: 0c:c8:5d:03:70:59:17:af:32:cd:34:35:db:b0:12: 21:15:c9:b4:f8:ac:9d:62:79:b8:07:40:56:ef:fb: aa:76:fa:66:5e:9e:15:ab:0e:ae:f8:ef:f8:29:4f: ee:98:06:0f:2b:17:64:7b:42:10:47:6e:c5:c4:2a: bb:b4:82:b9:77:3b:c3:53:16:d2:7e:02:17:2e:7f: 27:27:67:c7:83:a4:66:95:95:a9:02:7e:7a:53:f2: fc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BA:36:0F:E9:A8:3B:20:E4:B8:97:63:D2:84:92:89:D2:D5:D5:68 X509v3 Authority Key Identifier: keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:2c:6f:62:bf:58:7b:12:cd:16:58:c1:69:f4:eb:54:f1:a7: c2:a0:22:38:60:31:c2:cd:58:fe:f0:55:88:1b:09:6f:e6:ab: 28:e7:ad:56:7a:ca:f9:3d:4f:cb:70:07:c8:d8:c5:d3:ab:17: bf:5a:4f:2f:59:d4:4e:2e:e4:46:84:38:ed:d3:53:42:bf:4f: e4:c2:c5:16:0e:52:0f:93:13:56:f4:64:45:9a:f2:2e:ca:4b: 7e:f0:51:01:cb:bb:89:fc:de:12:e5:6e:eb:22:14:a7:70:72: b9:07:26:83:f5:93:fb:8c:38:90:aa:6a:19:8f:71:d3:f6:53: 47:6d:4f:d7:83:4c:c7:d4:06:cd:39:c4:f6:19:bc:7b:c5:6e: d9:7c:02:af:ab:e1:25:25:2a:45:db:5d:66:49:c2:0a:d8:d3: 32:5c:ed:ee:4f:46:87:b3:13:89:c5:1a:9c:22:7c:f6:3f:ce: 67:52:ba:90:da:44:2c:54:50:68:0b:70:be:29:79:d5:5d:5e: a6:fa:f4:e2:8e:bc:cc:70:ff:40:59:45:d3:e4:85:a0:ea:2a: 66:cc:7b:32:9f:10:97:0e:e5:5b:da:a3:23:d5:74:c8:4d:4b: eb:cf:45:82:ff:ae:bc:ff:39:c6:c4:c5:e1:64:de:4e:17:3a: 78:28:1b:52 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCEVHW/kNsc4d+eLtrrG+Cq/bBXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZE Q0I5NjM1NzAeFw0yNjA1MjkwNjQ5NDRaFw0yNjA1MzAwNzM2NDRaMDMxMTAvBgNV BAMTKEM0QkEzNjBGRTlBODNCMjBFNEI4OTc2M0QyODQ5Mjg5RDJENUQ1NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfr6N/WYueFBlo1PHRPj0DFYRR jbb6JJtOFwVRTb/Vnds+h3UZ3025ho1X2YPIapx+45blhSc5yQZZk5sHYNcwE8md jRsFBcn/MWb0aQVsmk25xZJfI/E67h5Gw2V4RyEbtfHA2UPMns60GF8RVCfPiSTC YG4spoF6io+yRsWXVaFsflaNh3NpH0uytp7INR52PDzfE3C2aPCY2xD0NeZ+oZ3E zAzIXQNwWRevMs00NduwEiEVybT4rJ1iebgHQFbv+6p2+mZenhWrDq747/gpT+6Y Bg8rF2R7QhBHbsXEKru0grl3O8NTFtJ+AhcufycnZ8eDpGaVlakCfnpT8vwtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxLo2D+moOyDkuJdj0oSSidLV1WgwHwYDVR0j BBgwFoAUUJvJ515E20DWkSvD91lxz9y5Y1cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDY4NDQxNy8wLzUwOUJDOUU3NUU0NERCNDBENjkxMkJDM0Y3NTk3 MUNGRENCOTYzNTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZEQ0I5NjM1Ny5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ2ODQ0MTcvMC81MDlCQzlFNzVFNDRE QjQwRDY5MTJCQzNGNzU5NzFDRkRDQjk2MzU3Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXyxvYr9YexLN FljBafTrVPGnwqAiOGAxws1Y/vBViBsJb+arKOetVnrK+T1Py3AHyNjF06sXv1pP L1nUTi7kRoQ47dNTQr9P5MLFFg5SD5MTVvRkRZryLspLfvBRAcu7ifzeEuVu6yIU p3ByuQcmg/WT+4w4kKpqGY9x0/ZTR21P14NMx9QGzTnE9hm8e8Vu2XwCr6vhJSUq RdtdZknCCtjTMlzt7k9Gh7MTicUanCJ89j/OZ1K6kNpELFRQaAtwvil51V1epvr0 4o68zHD/QFlF0+SFoOoqZsx7Mp8Qlw7lW9qjI9V0yE1L689Fgv+uvP85xsTF4WTe Thc6eCgbUg== -----END CERTIFICATE-----Generated at Fri May 29 22:05:25 2026 by rpki-client