$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft File: 709E5125176627846677AF908E76CAE21FB95460.mft (raw, json) Hash identifier: KET3DnsdFlmZn/VlE9vRjpRlrw2FmMy0cz37OUiQxN8= Subject key identifier: F7:FD:88:53:76:8B:1E:25:47:D8:23:67:E8:D9:98:DE:89:4A:B0:7A Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460 Certificate serial: 21A2C65DA7B403CBA06A9E6060820F6898E57696 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft Manifest number: 2F Signing time: Tue 12 May 2026 21:35:47 +0000 Manifest this update: Tue 12 May 2026 21:30:47 +0000 Manifest next update: Thu 14 May 2026 00:41:47 +0000 Files and hashes: 1: 3132332e39392e3230332e302f32342d3234203d3e203536303436.roa (hash: gfAT/QYxqrwRCsOjFxjfR5qS+KNxxqUXfE58ipVOHiA=) 2: 3132332e39392e3139382e302f32342d3234203d3e203536303436.roa (hash: eLlkl6s2oq5YaE+V/mrCZDzlPmss69CoPgY65UKenV8=) 3: 3132342e3234382e36342e302f31382d3138203d3e203538343631.roa (hash: 6Kh3kADdLzEQKYiGqBHcfED9YAZb77roeahrAkbO94E=) 4: 3230332e3133352e3130382e302f32342d3234203d3e203536303436.roa (hash: 38TgIBqQHAA96dS2lwsMRBNdMfnRErFfNMHETSVGQx4=) 5: 3230332e3133352e3130342e302f32342d3234203d3e203536303436.roa (hash: GZliXQ1/MKT4kSXUQTbCC3oZd0ZgyhX/v4L01AAk4ZY=) 6: 3132332e39392e3230322e302f32342d3234203d3e203536303436.roa (hash: FWytSVV3bw6r2i/f+FObRmRvnU9Kn3xZRXkNxwxIrm0=) 7: 3230332e3133352e39362e302f32312d3231203d3e203536303436.roa (hash: ngkUFhfKIFc0bNmMAHJtN3/FFcR4TkGzTWuBHXq/6mo=) 8: 3132332e39392e3230312e302f32342d3234203d3e203536303436.roa (hash: nfBppX/QixBneQV6vk7opgxEhjYTUksoqsdc8OUHvCc=) 9: 3132332e39392e3230372e302f32342d3234203d3e203536303436.roa (hash: BMff2BnjPO6TURSDqwS2MmpOFH3VB1OPH2fMelWJ37w=) 10: 3230332e3133352e3130342e302f32312d3231203d3e203538343631.roa (hash: fM1A18suRK8WzD9z99Lh+YXreBGdtCI+wFi/OQZ2QYY=) 11: 3230332e3133352e3130362e302f32342d3234203d3e203536303436.roa (hash: n9hcF/+Tr2NlYM1oUk+MToyoZXtLGqNqAzWKTnB77ZM=) 12: 3132332e39392e3230352e302f32342d3234203d3e203536303436.roa (hash: A+JYZYaX7pfDnwPKiZwgf7VueKfY89J+t/cO6gXEw1A=) 13: 3230332e3133352e3130392e302f32342d3234203d3e203536303436.roa (hash: bAuEotOBWkfK+l0XMBi4UbaQgMPZlvEWFIj/aCt7iIk=) 14: 3132332e39392e3139372e302f32342d3234203d3e203536303436.roa (hash: giB60RXOqPiHw+WpYG8hkzWkeY9zlK473PnH6rncvNU=) 15: 709E5125176627846677AF908E76CAE21FB95460.crl (hash: T/nP+Zp/S0PnR+a7ftXrTnNy9ndWoN7ZN49lqWttLo8=) 16: 3230332e3133352e3132302e302f32312d3231203d3e203538343631.roa (hash: RGywVuvY0/L3+wg4ACHqETGFImk1flLfvL0SNc861ew=) 17: 3130332e3132302e37332e302f32342d3234203d3e203538343631.roa (hash: 0VGwIZybtL6yUvgEvn9GF6XQoKjhTE1ct0cJpkcJzuo=) 18: 3132332e39392e3230302e302f32342d3234203d3e203536303436.roa (hash: ad/fG94fMIfMdL3XbD+RZEpVQd9HnnPMGe3MotwlNTU=) 19: 3131362e37302e36342e302f31382d3138203d3e203538343631.roa (hash: 4tTQbayWaJ94/APqMkPvrudpPMWZfUh2eRbBIVAxExo=) 20: 3230332e3133352e3130372e302f32342d3234203d3e203536303436.roa (hash: V/wj4NINZBkYbI6ksTEXDQ4vhVi7K1iFwrB6sRiPXCE=) 21: 3132332e39392e3230362e302f32342d3234203d3e203536303436.roa (hash: rLlTB8afuqz0Jj8a1c3LdLyNwLfwlf2Z8mFieiDedNA=) 22: 3132332e39392e3139322e302f32342d3234203d3e203536303436.roa (hash: xVw3215ouhyRfkrBawXAhYsYuaPozBqOB5JMIF6KvcI=) 23: 3132332e39392e3139322e302f31382d3138203d3e203538343631.roa (hash: eCLJQ6hVMH0Y1HWI+4+FPraClXX4hypXVvkpKYboMtE=) 24: 3230332e3133352e3130352e302f32342d3234203d3e203536303436.roa (hash: TBO7Oh9i58dQeUdge/BLgLnPJuK+BHqgb8xkTX7by9A=) 25: 3132332e39392e3139392e302f32342d3234203d3e203536303436.roa (hash: z0CNegRcRsFkdUgwpwxZ9nN/Iy9HCXGKT0y4nw1eom4=) 26: 3230332e3133352e3131322e302f32312d3231203d3e203538343631.roa (hash: NUO1nMO021I1S5c1sJbtenOhmN0TKvnC956i0tIBsG4=) 27: 3132332e39392e3139342e302f32342d3234203d3e203536303436.roa (hash: /LyhXxadlJVq5IFaPmqd8NuURpfRzUDXKVkraXRzuKI=) 28: 3130332e3132302e37352e302f32342d3234203d3e203538343631.roa (hash: DeVvSC0gkXY2pkQtHB+9HU0J0vod+7bYff/EV4+DAFU=) 29: 3230332e3133352e3131302e302f32342d3234203d3e203536303436.roa (hash: fh9fS78iKTHn8OIFflYokzcy8pnDMzkevRXN0nwYXwc=) 30: 3130332e3132302e37322e302f32342d3234203d3e203538343631.roa (hash: LhgzEloXM1//B37y4gExKVofK8riLORDS4SNhrFc0gw=) 31: 3132332e39392e3139362e302f32342d3234203d3e203536303436.roa (hash: ++Z23h1aqKofV3olaP1zbMjegB3rHSL2+1CwVEKqE5E=) 32: 3230332e3133352e3131312e302f32342d3234203d3e203536303436.roa (hash: +34kw5HV2z2eHoWYV+KhRIwd91Ghwjh0gUsrg/w4kQs=) 33: 3132332e39392e3230342e302f32342d3234203d3e203536303436.roa (hash: qr06oZrQzwpbsNbGvmFz9wUQ4h6tMWVPF4zIxK71ZvY=) 34: 3132332e39392e3139352e302f32342d3234203d3e203536303436.roa (hash: p34BhMVqzACE3HYHCwUwUpaatMkPt30PeQFJ7o50hLU=) 35: 3130332e3132302e37342e302f32342d3234203d3e203538343631.roa (hash: Pr5NBsNQ4w+2UPeMbxevcNKzNN5WoXYQCMaS/P/zOtg=) 36: 3132332e39392e3139332e302f32342d3234203d3e203536303436.roa (hash: mcFdFJaMC4lzHa5DQkzQU384MSLRc9nd1xbM4A6s66U=) 37: 3230332e3133352e39362e302f32312d3231203d3e203538343631.roa (hash: oqeccvPR3+IpAwygIF/oeBAJSb31FyNOolE97M8bnZM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 00:41:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a2:c6:5d:a7:b4:03:cb:a0:6a:9e:60:60:82:0f:68:98:e5:76:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709E5125176627846677AF908E76CAE21FB95460 Validity Not Before: May 12 21:30:47 2026 GMT Not After : May 14 00:41:47 2026 GMT Subject: CN=F7FD8853768B1E2547D82367E8D998DE894AB07A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:56:7a:bf:45:6b:8c:cc:37:f0:2b:5d:c3:41: b7:ee:0c:7d:75:7b:32:a3:9b:b8:08:fe:72:07:27: f0:32:b2:2c:f2:1e:a7:43:93:03:6e:9e:9d:f6:40: da:1b:c3:db:d0:92:89:b1:68:1d:95:ad:d9:5a:1d: 75:26:d5:86:7a:bb:69:a1:05:a8:6b:8d:b5:fb:09: 79:cd:35:4a:07:b1:d3:fb:f7:ed:44:0a:fd:d9:89: 6a:91:00:13:8c:aa:2c:01:6d:be:f8:0a:22:00:db: 8a:36:03:27:ca:18:b3:a5:bf:0e:4c:61:43:67:2b: 58:13:9d:3a:aa:b4:b1:76:df:93:b3:89:f1:0f:24: df:dc:ad:90:b9:d0:ee:60:8e:e4:62:e9:7c:49:fe: e0:8f:7c:55:a7:6b:0f:f3:fb:e7:f2:e5:10:50:dd: f2:1d:e0:bb:e6:b9:bc:d7:a9:f8:57:b1:ea:2a:07: ee:38:0b:6a:b3:c6:1b:3a:73:5a:eb:2f:3e:ca:a1: 36:2b:2f:02:42:6e:e9:ec:e3:64:2e:8a:1d:80:ef: cf:6c:64:a2:6e:a0:1b:05:b6:ab:82:b5:ce:eb:17: 93:e5:5e:11:ab:df:c8:21:24:24:f7:30:c3:ea:5b: 41:5d:5e:c9:c4:66:d7:86:0c:ee:ee:31:d2:16:7f: d3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FD:88:53:76:8B:1E:25:47:D8:23:67:E8:D9:98:DE:89:4A:B0:7A X509v3 Authority Key Identifier: keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:04:9f:86:90:75:cc:ed:27:40:23:e1:ce:32:88:79:78:1d: e5:bc:79:a9:9c:78:4c:8e:92:21:db:b1:8b:89:01:47:50:38: 72:07:7d:cb:b8:24:d6:8e:94:e8:e4:a6:28:a2:b0:b5:7c:2f: 17:e3:ff:07:26:91:6f:c2:eb:10:79:53:3b:56:37:8f:4c:10: 13:8b:fb:bd:3b:8a:86:8c:45:7e:e2:5b:b8:b4:23:c9:65:75: 3a:64:22:27:43:bd:f5:54:f8:c1:c0:81:c6:d2:70:c1:a5:43: b4:bd:9e:8a:00:71:7a:f9:c3:4f:82:a2:c8:0a:d9:92:ad:b5: 69:90:96:d8:93:f7:d5:e5:94:42:0d:dc:e4:de:6a:f8:83:71: 8b:64:1a:0f:87:c4:4e:ab:57:7a:68:14:8e:3a:07:a3:f4:99: d0:8e:87:0f:98:b9:25:21:c0:7e:30:d1:ca:a1:01:17:d9:7f: 6e:11:9b:59:8e:5e:72:f2:01:2a:68:b8:27:db:b3:dc:48:7e: ed:83:1d:ac:a8:18:43:55:03:e2:f8:32:ed:b6:17:dc:93:8a: 6e:60:ae:8b:6e:78:e1:24:7d:13:8a:ba:70:f4:c2:53:0c:be: 30:35:3c:41:f5:c5:4e:e2:de:5e:a4:39:20:53:dd:60:75:b6: 07:ae:d7:4f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIaLGXae0A8ugap5gYIIPaJjldpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx RkI5NTQ2MDAeFw0yNjA1MTIyMTMwNDdaFw0yNjA1MTQwMDQxNDdaMDMxMTAvBgNV BAMTKEY3RkQ4ODUzNzY4QjFFMjU0N0Q4MjM2N0U4RDk5OERFODk0QUIwN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvVnq/RWuMzDfwK13DQbfuDH11 ezKjm7gI/nIHJ/AysizyHqdDkwNunp32QNobw9vQkomxaB2VrdlaHXUm1YZ6u2mh BahrjbX7CXnNNUoHsdP79+1ECv3ZiWqRABOMqiwBbb74CiIA24o2AyfKGLOlvw5M YUNnK1gTnTqqtLF235OzifEPJN/crZC50O5gjuRi6XxJ/uCPfFWnaw/z++fy5RBQ 3fId4LvmubzXqfhXseoqB+44C2qzxhs6c1rrLz7KoTYrLwJCbuns42Quih2A789s ZKJuoBsFtquCtc7rF5PlXhGr38ghJCT3MMPqW0FdXsnEZteGDO7uMdIWf9N3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9/2IU3aLHiVH2CNn6NmY3olKsHowHwYDVR0j BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTIzNzc2MDEvMC83MDlFNTEyNTE3NjYy Nzg0NjY3N0FGOTA4RTc2Q0FFMjFGQjk1NDYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqwSfhpB1zO0n QCPhzjKIeXgd5bx5qZx4TI6SIduxi4kBR1A4cgd9y7gk1o6U6OSmKKKwtXwvF+P/ ByaRb8LrEHlTO1Y3j0wQE4v7vTuKhoxFfuJbuLQjyWV1OmQiJ0O99VT4wcCBxtJw waVDtL2eigBxevnDT4KiyArZkq21aZCW2JP31eWUQg3c5N5q+INxi2QaD4fETqtX emgUjjoHo/SZ0I6HD5i5JSHAfjDRyqEBF9l/bhGbWY5ecvIBKmi4J9uz3Eh+7YMd rKgYQ1UD4vgy7bYX3JOKbmCui2544SR9E4q6cPTCUwy+MDU8QfXFTuLeXqQ5IFPd YHW2B67XTw== -----END CERTIFICATE-----Generated at Wed May 13 15:57:03 2026 by rpki-client