$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft File: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft (raw, json) Hash identifier: C2BCoCCukd2W2AS00fIxGeLv+NCoc3k4KGfcVRi3+RQ= Subject key identifier: 3C:FE:1F:34:E6:4C:B9:84:47:EA:8E:03:C0:C9:64:B0:D8:44:CD:59 Authority key identifier: 70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 Certificate issuer: /CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Certificate serial: 302D85AA56CA7531F466054A8180D7CE6829762C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft Manifest number: CE Signing time: Mon 05 Oct 2026 07:08:50 +0000 Manifest this update: Mon 05 Oct 2026 07:03:50 +0000 Manifest next update: Thu 08 Oct 2026 17:17:50 +0000 Files and hashes: 1: 3130332e3136302e33322e302f32332d3233203d3e2030.roa (hash: WylQaiIhxibsdwDrEyIJufkXIHMaWHvFmju0+BGbF1w=) 2: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl (hash: RwLl4zdKZbn2FMyzgsYgYTw8F0mrX58LlUDmynqT5FM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 Oct 2026 17:17:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:2d:85:aa:56:ca:75:31:f4:66:05:4a:81:80:d7:ce:68:29:76:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Validity Not Before: Oct 5 07:03:50 2026 GMT Not After : Oct 8 17:17:50 2026 GMT Subject: CN=3CFE1F34E64CB98447EA8E03C0C964B0D844CD59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:28:01:ba:5e:fb:65:40:08:9f:c7:a8:ea:f2: ff:38:83:41:6e:5f:14:ce:df:77:24:a6:1a:9d:19: 4d:ed:03:8c:8a:a4:53:bc:c8:8d:1f:46:e6:a5:54: 8d:00:4c:02:80:29:53:45:f2:89:35:fb:20:80:f7: 2c:bd:71:95:60:3e:5c:19:e1:53:93:4b:6b:49:b0: 70:91:45:3d:2a:d3:4b:db:7b:1a:3d:19:bf:b0:01: c3:48:95:58:ce:58:2a:51:b2:07:4e:e5:17:98:12: 05:0f:15:9a:82:75:4d:dd:37:a3:24:cf:8c:1b:32: fc:f2:72:e7:29:96:04:78:a6:b7:55:87:9a:6d:8e: 03:7f:7e:0a:de:b7:80:4b:ce:47:58:6b:5a:ce:28: e6:5b:12:89:e9:f2:67:8c:94:d7:19:ed:fb:23:93: 7a:21:f6:3d:ec:01:d5:9b:f2:01:33:c5:2a:74:5c: 60:2d:dd:31:2f:c6:b7:5a:ba:d2:cb:3c:be:d7:38: e3:38:44:46:b3:2f:95:6c:30:8f:ca:5a:05:6d:54: 57:9b:01:82:49:fc:1f:32:85:23:74:87:1e:e4:b5: a1:2e:3f:98:75:5e:52:96:dc:66:0c:20:01:76:19: 40:35:7d:16:68:09:9c:48:4a:82:6b:d9:22:17:2b: 77:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FE:1F:34:E6:4C:B9:84:47:EA:8E:03:C0:C9:64:B0:D8:44:CD:59 X509v3 Authority Key Identifier: keyid:70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:1d:cd:01:34:fc:b5:c2:54:93:28:8b:b3:8a:13:59:15:d5: ee:2d:8d:45:a3:c0:ed:50:f5:b2:77:c8:f1:4a:5c:d2:db:4c: b1:b1:f5:4d:92:0f:36:4b:09:74:e2:23:ac:28:73:1a:89:c6: dd:1c:f7:54:c2:76:90:d2:4a:c9:b4:22:9a:dc:4f:37:0b:f1: ed:59:a5:2f:ec:c6:ff:cd:6e:7b:08:b9:3d:b1:95:da:f9:25: 60:06:85:3d:c1:1b:82:f1:bb:b7:11:0d:3b:ef:06:44:98:92: 6c:93:53:ff:4b:25:81:91:1d:2b:f2:00:72:e9:76:26:d4:a4: 5e:33:81:45:24:91:75:81:af:21:cd:93:7b:c6:a8:d7:c9:04: 4a:4a:bd:55:e5:45:c3:35:20:4b:2f:ad:9b:c4:01:b0:97:22: 22:4e:8c:16:3a:ac:e6:2d:23:e8:35:fd:cd:dd:cb:50:87:c0: 2d:68:14:a1:f9:85:97:3f:a8:2b:a3:65:d5:b9:66:59:d4:5d: 68:67:7a:72:d1:24:c4:36:95:3a:ec:4b:6a:63:bc:b8:8c:db: de:af:64:44:47:8f:90:40:ec:78:cb:e1:cd:4d:6b:db:78:50: 8e:2d:fb:67:d0:3a:ba:4c:c9:d8:83:39:6a:a5:96:11:45:0b: 68:23:b9:59 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMC2FqlbKdTH0ZgVKgYDXzmgpdiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJD MDRGMEVCNjAeFw0yNjEwMDUwNzAzNTBaFw0yNjEwMDgxNzE3NTBaMDMxMTAvBgNV BAMTKDNDRkUxRjM0RTY0Q0I5ODQ0N0VBOEUwM0MwQzk2NEIwRDg0NENENTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyKAG6XvtlQAifx6jq8v84g0Fu XxTO33ckphqdGU3tA4yKpFO8yI0fRualVI0ATAKAKVNF8ok1+yCA9yy9cZVgPlwZ 4VOTS2tJsHCRRT0q00vbexo9Gb+wAcNIlVjOWCpRsgdO5ReYEgUPFZqCdU3dN6Mk z4wbMvzycucplgR4prdVh5ptjgN/fgret4BLzkdYa1rOKOZbEonp8meMlNcZ7fsj k3oh9j3sAdWb8gEzxSp0XGAt3TEvxrdautLLPL7XOOM4REazL5VsMI/KWgVtVFeb AYJJ/B8yhSN0hx7ktaEuP5h1XlKW3GYMIAF2GUA1fRZoCZxISoJr2SIXK3fpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPP4fNOZMuYRH6o4DwMlksNhEzVkwHwYDVR0j BBgwFoAUcJpzEGeK4q3u2dINyM0+YsBPDrYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5NDg0MTI0Mzg5Mzc2MS8wLzcwOUE3MzEwNjc4QUUyQURFRUQ5RDIwREM4Q0Qz RTYyQzA0RjBFQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJDMDRGMEVCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTQ4NDEyNDM4OTM3NjEvMC83MDlBNzMxMDY3OEFF MkFERUVEOUQyMERDOENEM0U2MkMwNEYwRUI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZx3NATT8tcJU kyiLs4oTWRXV7i2NRaPA7VD1snfI8Upc0ttMsbH1TZIPNksJdOIjrChzGonG3Rz3 VMJ2kNJKybQimtxPNwvx7VmlL+zG/81uewi5PbGV2vklYAaFPcEbgvG7txENO+8G RJiSbJNT/0slgZEdK/IAcul2JtSkXjOBRSSRdYGvIc2Te8ao18kESkq9VeVFwzUg Sy+tm8QBsJciIk6MFjqs5i0j6DX9zd3LUIfALWgUofmFlz+oK6Nl1blmWdRdaGd6 ctEkxDaVOuxLamO8uIzb3q9kREePkEDseMvhzU1r23hQji37Z9A6ukzJ2IM5aqWW EUULaCO5WQ== -----END CERTIFICATE-----Generated at Wed Oct 7 06:48:26 2026 by rpki-client