$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft File: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft (raw, json) Hash identifier: 1dIcYMLkwGM6WPi7jWeXQ+CYWnXGM3tGUJdBXS23USk= Subject key identifier: 28:3E:AF:F2:9D:8D:2D:D6:A2:EA:1F:AB:77:58:10:C1:C7:FC:BB:9E Authority key identifier: 70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 Certificate issuer: /CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Certificate serial: 303CE0C4AEA7CA5FD0B341A980ABA81E3F8FFA7F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft Manifest number: 2D Signing time: Tue 12 May 2026 22:30:48 +0000 Manifest this update: Tue 12 May 2026 22:25:48 +0000 Manifest next update: Thu 14 May 2026 01:33:48 +0000 Files and hashes: 1: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl (hash: X5rMrbKzSuUaoKZVuWd1gq98x3Irrpy2bk5gjsdq4C0=) 2: 3130332e3136302e33322e302f32332d3233203d3e2030.roa (hash: WylQaiIhxibsdwDrEyIJufkXIHMaWHvFmju0+BGbF1w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:3c:e0:c4:ae:a7:ca:5f:d0:b3:41:a9:80:ab:a8:1e:3f:8f:fa:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Validity Not Before: May 12 22:25:48 2026 GMT Not After : May 14 01:33:48 2026 GMT Subject: CN=283EAFF29D8D2DD6A2EA1FAB775810C1C7FCBB9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ab:80:25:6f:8a:fd:3b:d7:84:71:cd:8c:8b: ae:ff:d4:03:a5:00:7a:4d:72:e0:db:99:e0:f4:72: d4:8b:77:39:23:c0:c3:61:16:74:b5:fc:41:b7:5c: 1f:76:d7:4b:e2:81:55:0e:1b:b0:37:5a:f5:06:f0: 67:1b:9d:07:69:b3:40:2c:67:1d:a4:91:4c:79:a5: 16:d4:e0:6a:22:8c:94:18:18:cc:62:77:80:26:b1: 38:91:22:98:3a:8e:29:51:55:a3:db:1b:60:e9:1f: 59:1f:6b:46:a3:7a:81:26:0f:16:72:69:79:ad:45: 4d:1e:74:51:07:d4:0b:fe:c9:6e:47:2b:11:df:a5: 78:7f:d4:e5:aa:ed:17:f7:2e:c5:36:27:45:94:60: 6b:27:61:25:09:2a:5f:77:4f:06:b7:59:dd:fe:dd: 7b:0c:39:ec:36:e7:fc:e1:96:b5:5b:14:4b:c3:c9: 14:30:ea:e2:51:f2:02:3b:59:99:30:88:5a:e2:75: 29:55:fc:1a:23:f7:80:bc:c6:b0:a7:e4:11:2d:f0: 2a:ae:84:34:42:da:9d:c8:c9:c2:cf:e6:55:86:c3: 74:74:b2:46:cb:0d:3a:98:69:e9:e3:36:22:b4:10: f8:d2:26:17:10:ed:7e:82:15:2b:7b:f8:37:61:f1: c7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3E:AF:F2:9D:8D:2D:D6:A2:EA:1F:AB:77:58:10:C1:C7:FC:BB:9E X509v3 Authority Key Identifier: keyid:70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ec:e1:e6:50:da:87:5b:e0:eb:07:07:9b:44:d2:b6:4e:21: 03:bc:38:1c:1c:e8:df:78:40:9b:8c:4f:0c:f2:46:8c:16:ab: ab:75:ce:52:56:f8:6a:d0:5a:dc:8b:fa:fa:af:7b:27:5e:67: ae:e9:a8:60:e1:24:07:ae:01:4a:30:ff:f3:9c:92:ac:84:4c: d8:b1:ca:c4:9b:f4:4c:5d:0a:6d:72:cf:20:dd:56:66:87:8a: d8:8c:15:82:55:62:f3:ca:75:8c:9c:bb:66:e9:ff:4f:9b:99: 71:d7:a0:70:9c:56:0f:d8:38:34:18:35:7c:a2:0a:b1:35:63: 9a:61:81:74:ee:54:08:b2:5e:0d:d9:06:4a:c4:4b:8b:3c:8f: e8:d8:84:ba:8f:f1:e9:3b:a5:94:9c:16:32:c5:46:61:63:a8: f3:1a:5a:a1:54:17:8f:9d:17:a4:b7:12:5b:99:61:82:f7:77: 20:c3:30:65:fa:a8:8c:74:81:94:0e:37:a7:ce:38:d0:6a:31: 29:ed:24:9a:ff:4e:6a:1c:a9:ae:87:ca:f9:39:60:8d:78:0c: 2c:fe:ed:06:4d:88:b2:0c:4d:c9:31:5b:f2:af:3f:7c:9e:51: 07:dc:91:99:52:4a:1a:9c:3a:13:23:6a:e0:32:fb:41:97:56: c6:32:d4:18 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMDzgxK6nyl/Qs0GpgKuoHj+P+n8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJD MDRGMEVCNjAeFw0yNjA1MTIyMjI1NDhaFw0yNjA1MTQwMTMzNDhaMDMxMTAvBgNV BAMTKDI4M0VBRkYyOUQ4RDJERDZBMkVBMUZBQjc3NTgxMEMxQzdGQ0JCOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvq4Alb4r9O9eEcc2Mi67/1AOl AHpNcuDbmeD0ctSLdzkjwMNhFnS1/EG3XB9210vigVUOG7A3WvUG8GcbnQdps0As Zx2kkUx5pRbU4GoijJQYGMxid4AmsTiRIpg6jilRVaPbG2DpH1kfa0ajeoEmDxZy aXmtRU0edFEH1Av+yW5HKxHfpXh/1OWq7Rf3LsU2J0WUYGsnYSUJKl93Twa3Wd3+ 3XsMOew25/zhlrVbFEvDyRQw6uJR8gI7WZkwiFridSlV/Boj94C8xrCn5BEt8Cqu hDRC2p3IycLP5lWGw3R0skbLDTqYaenjNiK0EPjSJhcQ7X6CFSt7+Ddh8ccbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUKD6v8p2NLdai6h+rd1gQwcf8u54wHwYDVR0j BBgwFoAUcJpzEGeK4q3u2dINyM0+YsBPDrYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5NDg0MTI0Mzg5Mzc2MS8wLzcwOUE3MzEwNjc4QUUyQURFRUQ5RDIwREM4Q0Qz RTYyQzA0RjBFQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJDMDRGMEVCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTQ4NDEyNDM4OTM3NjEvMC83MDlBNzMxMDY3OEFF MkFERUVEOUQyMERDOENEM0U2MkMwNEYwRUI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOzh5lDah1vg 6wcHm0TStk4hA7w4HBzo33hAm4xPDPJGjBarq3XOUlb4atBa3Iv6+q97J15nrumo YOEkB64BSjD/85ySrIRM2LHKxJv0TF0KbXLPIN1WZoeK2IwVglVi88p1jJy7Zun/ T5uZcdegcJxWD9g4NBg1fKIKsTVjmmGBdO5UCLJeDdkGSsRLizyP6NiEuo/x6Tul lJwWMsVGYWOo8xpaoVQXj50XpLcSW5lhgvd3IMMwZfqojHSBlA43p8440GoxKe0k mv9OahyprofK+TlgjXgMLP7tBk2IsgxNyTFb8q8/fJ5RB9yRmVJKGpw6EyNq4DL7 QZdWxjLUGA== -----END CERTIFICATE-----Generated at Wed May 13 09:15:24 2026 by rpki-client