$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft File: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft (raw, json) Hash identifier: b0bo4uThVds26JzQfqHYgNmUR9QPVKrOGswNVN0+WD4= Subject key identifier: 41:4C:5A:25:DB:2C:C4:90:C1:77:38:59:E0:0D:4B:61:FB:F7:08:79 Authority key identifier: 70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 Certificate issuer: /CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Certificate serial: 185949653243562C306F3722053A0F413DF18B7D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft Manifest number: 8D Signing time: Thu 23 Jul 2026 19:34:23 +0000 Manifest this update: Thu 23 Jul 2026 19:29:23 +0000 Manifest next update: Fri 24 Jul 2026 23:12:23 +0000 Files and hashes: 1: 3130332e3136302e33322e302f32332d3233203d3e2030.roa (hash: WylQaiIhxibsdwDrEyIJufkXIHMaWHvFmju0+BGbF1w=) 2: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl (hash: VeNdf10IG5jOpc6DPnKozeOy202ApFmivbU/QVeGQiY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:59:49:65:32:43:56:2c:30:6f:37:22:05:3a:0f:41:3d:f1:8b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Validity Not Before: Jul 23 19:29:23 2026 GMT Not After : Jul 24 23:12:23 2026 GMT Subject: CN=414C5A25DB2CC490C1773859E00D4B61FBF70879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bc:c8:f7:b5:9a:aa:0e:a2:e2:50:b1:45:5f: 4b:d7:30:d4:f4:5d:02:b7:22:2b:78:ca:51:9f:3f: 36:6e:ac:24:1b:d7:03:f7:97:42:00:49:c2:ad:00: 36:ec:16:72:1a:5b:95:42:fa:49:74:4d:ca:ab:ed: 83:9f:6e:f4:4f:31:50:a5:81:05:36:43:23:c9:78: b0:9c:6d:ca:7e:7e:f4:4a:73:bd:5e:0b:32:c3:d3: 3f:40:74:2f:3b:49:04:26:95:2c:85:f7:85:55:e5: a3:00:c1:a7:3a:ff:4e:73:c2:a6:f4:9b:d4:47:eb: f0:92:77:81:05:72:a0:41:22:94:81:7b:a1:71:8c: 60:65:c3:ad:7d:2f:e9:a4:b7:0c:57:20:de:ed:bf: 40:a8:b4:7a:43:98:ba:eb:ec:11:4a:8b:10:17:7d: 0f:72:f4:d8:2d:00:ca:7e:c9:7b:f0:ac:17:e9:c8: 0a:fc:ab:4a:cd:e4:63:b0:36:3d:fc:28:43:57:68: 5c:b6:3b:7d:42:1e:f6:e0:48:9a:0d:07:f6:a6:13: ab:98:67:ae:88:d8:e8:d6:25:66:c5:98:f6:42:9d: 5b:95:65:2e:18:7d:c3:ca:d6:3d:29:af:7c:d6:0d: 91:d4:10:32:e8:f0:be:b3:03:b6:84:5d:19:af:a9: e4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:4C:5A:25:DB:2C:C4:90:C1:77:38:59:E0:0D:4B:61:FB:F7:08:79 X509v3 Authority Key Identifier: keyid:70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:b9:90:57:3f:28:2c:2e:82:41:45:b6:89:23:75:90:fe:19: 07:db:43:29:11:c2:ae:a4:c1:9b:44:2d:9f:d1:7e:81:99:44: 64:e6:e9:61:da:fe:c2:0c:b6:ba:b2:88:7a:58:65:43:0d:b2: 36:e4:99:46:d1:6d:2b:ab:2f:72:bd:a2:7d:97:7f:db:1a:25: 85:1e:ca:50:d1:da:ad:a2:ce:83:01:d8:31:93:24:ba:50:e2: 7a:8b:5a:9e:f6:75:38:26:1a:5e:53:e7:ea:db:46:95:64:d6: 0d:00:76:59:1c:ee:32:fd:80:e4:27:89:46:11:2e:e6:14:97: e2:c6:f0:3a:1c:93:8f:31:b0:ae:16:ac:4a:a2:8f:f8:0d:8b: 5f:ee:05:78:02:a9:27:5b:a1:a4:00:d6:8d:32:85:af:f8:91: eb:89:7b:f8:d4:63:01:d9:ff:f6:12:61:01:4b:e9:29:4a:82: fe:e2:de:1a:cd:cc:c5:24:4b:67:e7:7a:b5:b8:70:93:29:74: b8:e6:89:cd:db:f1:c3:de:60:ee:5b:6a:be:5f:f1:c5:3e:bc: f2:bb:54:80:26:d6:28:1e:05:9a:91:53:bc:97:a1:9a:19:11: c0:2f:89:61:3f:48:c3:17:ea:ba:a9:6e:48:9e:b2:5a:a2:d1: 5a:4d:f2:c2 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGFlJZTJDViwwbzciBToPQT3xi30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJD MDRGMEVCNjAeFw0yNjA3MjMxOTI5MjNaFw0yNjA3MjQyMzEyMjNaMDMxMTAvBgNV BAMTKDQxNEM1QTI1REIyQ0M0OTBDMTc3Mzg1OUUwMEQ0QjYxRkJGNzA4NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPvMj3tZqqDqLiULFFX0vXMNT0 XQK3Iit4ylGfPzZurCQb1wP3l0IAScKtADbsFnIaW5VC+kl0Tcqr7YOfbvRPMVCl gQU2QyPJeLCcbcp+fvRKc71eCzLD0z9AdC87SQQmlSyF94VV5aMAwac6/05zwqb0 m9RH6/CSd4EFcqBBIpSBe6FxjGBlw619L+mktwxXIN7tv0CotHpDmLrr7BFKixAX fQ9y9NgtAMp+yXvwrBfpyAr8q0rN5GOwNj38KENXaFy2O31CHvbgSJoNB/amE6uY Z66I2OjWJWbFmPZCnVuVZS4YfcPK1j0pr3zWDZHUEDLo8L6zA7aEXRmvqeRjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQUxaJdssxJDBdzhZ4A1LYfv3CHkwHwYDVR0j BBgwFoAUcJpzEGeK4q3u2dINyM0+YsBPDrYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5NDg0MTI0Mzg5Mzc2MS8wLzcwOUE3MzEwNjc4QUUyQURFRUQ5RDIwREM4Q0Qz RTYyQzA0RjBFQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJDMDRGMEVCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTQ4NDEyNDM4OTM3NjEvMC83MDlBNzMxMDY3OEFF MkFERUVEOUQyMERDOENEM0U2MkMwNEYwRUI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAurmQVz8oLC6C QUW2iSN1kP4ZB9tDKRHCrqTBm0Qtn9F+gZlEZObpYdr+wgy2urKIelhlQw2yNuSZ RtFtK6svcr2ifZd/2xolhR7KUNHaraLOgwHYMZMkulDieotanvZ1OCYaXlPn6ttG lWTWDQB2WRzuMv2A5CeJRhEu5hSX4sbwOhyTjzGwrhasSqKP+A2LX+4FeAKpJ1uh pADWjTKFr/iR64l7+NRjAdn/9hJhAUvpKUqC/uLeGs3MxSRLZ+d6tbhwkyl0uOaJ zdvxw95g7ltqvl/xxT688rtUgCbWKB4FmpFTvJehmhkRwC+JYT9IwxfquqluSJ6y WqLRWk3ywg== -----END CERTIFICATE-----Generated at Fri Jul 24 12:34:59 2026 by rpki-client