
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft
File: 709E5125176627846677AF908E76CAE21FB95460.mft (raw, json)
Hash identifier: pMonjjoJNa48JOz2/g4LGn2EDa75jTJZaTLUdSeGedo=
Subject key identifier: E8:8D:CB:D0:0F:BA:63:8A:20:4B:D1:85:A6:BA:EC:CA:46:BB:81:4A
Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60
Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460
Certificate serial: 341E12FF6BCDCCC51C09D0243344C6C402B94709
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft
Manifest number: D0
Signing time: Thu 08 Oct 2026 07:12:22 +0000
Manifest this update: Thu 08 Oct 2026 07:07:22 +0000
Manifest next update: Sun 11 Oct 2026 18:39:22 +0000
Files and hashes: 1: 3230332e3133352e3132302e302f32312d3231203d3e203538343631.roa (hash: RGywVuvY0/L3+wg4ACHqETGFImk1flLfvL0SNc861ew=)
2: 3132342e3234382e36342e302f31382d3138203d3e203538343631.roa (hash: 6Kh3kADdLzEQKYiGqBHcfED9YAZb77roeahrAkbO94E=)
3: 3132332e39392e3139332e302f32342d3234203d3e203536303436.roa (hash: mcFdFJaMC4lzHa5DQkzQU384MSLRc9nd1xbM4A6s66U=)
4: 3132332e39392e3230352e302f32342d3234203d3e203536303436.roa (hash: A+JYZYaX7pfDnwPKiZwgf7VueKfY89J+t/cO6gXEw1A=)
5: 3130332e3132302e37322e302f32342d3234203d3e203538343631.roa (hash: LhgzEloXM1//B37y4gExKVofK8riLORDS4SNhrFc0gw=)
6: 3230332e3133352e3130362e302f32342d3234203d3e203536303436.roa (hash: n9hcF/+Tr2NlYM1oUk+MToyoZXtLGqNqAzWKTnB77ZM=)
7: 3130332e3132302e37332e302f32342d3234203d3e203538343631.roa (hash: 0VGwIZybtL6yUvgEvn9GF6XQoKjhTE1ct0cJpkcJzuo=)
8: 3132332e39392e3230322e302f32342d3234203d3e203536303436.roa (hash: FWytSVV3bw6r2i/f+FObRmRvnU9Kn3xZRXkNxwxIrm0=)
9: 3131362e37302e36342e302f31382d3138203d3e203538343631.roa (hash: 4tTQbayWaJ94/APqMkPvrudpPMWZfUh2eRbBIVAxExo=)
10: 3230332e3133352e3131322e302f32312d3231203d3e203538343631.roa (hash: NUO1nMO021I1S5c1sJbtenOhmN0TKvnC956i0tIBsG4=)
11: 709E5125176627846677AF908E76CAE21FB95460.crl (hash: 83MDCrCku3aRcpzzlTh1ffKegAG0XKVySCZs8anutTQ=)
12: 3230332e3133352e3130352e302f32342d3234203d3e203536303436.roa (hash: TBO7Oh9i58dQeUdge/BLgLnPJuK+BHqgb8xkTX7by9A=)
13: 3230332e3133352e3130342e302f32312d3231203d3e203538343631.roa (hash: fM1A18suRK8WzD9z99Lh+YXreBGdtCI+wFi/OQZ2QYY=)
14: 3132332e39392e3230312e302f32342d3234203d3e203536303436.roa (hash: nfBppX/QixBneQV6vk7opgxEhjYTUksoqsdc8OUHvCc=)
15: 3132332e39392e3139322e302f32342d3234203d3e203536303436.roa (hash: xVw3215ouhyRfkrBawXAhYsYuaPozBqOB5JMIF6KvcI=)
16: 3132332e39392e3139392e302f32342d3234203d3e203536303436.roa (hash: z0CNegRcRsFkdUgwpwxZ9nN/Iy9HCXGKT0y4nw1eom4=)
17: 3132332e39392e3230302e302f32342d3234203d3e203536303436.roa (hash: ad/fG94fMIfMdL3XbD+RZEpVQd9HnnPMGe3MotwlNTU=)
18: 3132332e39392e3139382e302f32342d3234203d3e203536303436.roa (hash: eLlkl6s2oq5YaE+V/mrCZDzlPmss69CoPgY65UKenV8=)
19: 3132332e39392e3230362e302f32342d3234203d3e203536303436.roa (hash: rLlTB8afuqz0Jj8a1c3LdLyNwLfwlf2Z8mFieiDedNA=)
20: 3130332e3132302e37352e302f32342d3234203d3e203538343631.roa (hash: DeVvSC0gkXY2pkQtHB+9HU0J0vod+7bYff/EV4+DAFU=)
21: 3130332e3132302e37342e302f32342d3234203d3e203538343631.roa (hash: Pr5NBsNQ4w+2UPeMbxevcNKzNN5WoXYQCMaS/P/zOtg=)
22: 3132332e39392e3139322e302f31382d3138203d3e203538343631.roa (hash: eCLJQ6hVMH0Y1HWI+4+FPraClXX4hypXVvkpKYboMtE=)
23: 3230332e3133352e3131302e302f32342d3234203d3e203536303436.roa (hash: fh9fS78iKTHn8OIFflYokzcy8pnDMzkevRXN0nwYXwc=)
24: 3230332e3133352e39362e302f32312d3231203d3e203538343631.roa (hash: oqeccvPR3+IpAwygIF/oeBAJSb31FyNOolE97M8bnZM=)
25: 3132332e39392e3139372e302f32342d3234203d3e203536303436.roa (hash: giB60RXOqPiHw+WpYG8hkzWkeY9zlK473PnH6rncvNU=)
26: 3132332e39392e3230372e302f32342d3234203d3e203536303436.roa (hash: BMff2BnjPO6TURSDqwS2MmpOFH3VB1OPH2fMelWJ37w=)
27: 3230332e3133352e39362e302f32312d3231203d3e203536303436.roa (hash: ngkUFhfKIFc0bNmMAHJtN3/FFcR4TkGzTWuBHXq/6mo=)
28: 3132332e39392e3230332e302f32342d3234203d3e203536303436.roa (hash: gfAT/QYxqrwRCsOjFxjfR5qS+KNxxqUXfE58ipVOHiA=)
29: 3230332e3133352e3130392e302f32342d3234203d3e203536303436.roa (hash: bAuEotOBWkfK+l0XMBi4UbaQgMPZlvEWFIj/aCt7iIk=)
30: 3230332e3133352e3130342e302f32342d3234203d3e203536303436.roa (hash: GZliXQ1/MKT4kSXUQTbCC3oZd0ZgyhX/v4L01AAk4ZY=)
31: 3230332e3133352e3130382e302f32342d3234203d3e203536303436.roa (hash: 38TgIBqQHAA96dS2lwsMRBNdMfnRErFfNMHETSVGQx4=)
32: 3132332e39392e3139362e302f32342d3234203d3e203536303436.roa (hash: ++Z23h1aqKofV3olaP1zbMjegB3rHSL2+1CwVEKqE5E=)
33: 3230332e3133352e3131312e302f32342d3234203d3e203536303436.roa (hash: +34kw5HV2z2eHoWYV+KhRIwd91Ghwjh0gUsrg/w4kQs=)
34: 3230332e3133352e3130372e302f32342d3234203d3e203536303436.roa (hash: V/wj4NINZBkYbI6ksTEXDQ4vhVi7K1iFwrB6sRiPXCE=)
35: 3132332e39392e3139342e302f32342d3234203d3e203536303436.roa (hash: /LyhXxadlJVq5IFaPmqd8NuURpfRzUDXKVkraXRzuKI=)
36: 3132332e39392e3139352e302f32342d3234203d3e203536303436.roa (hash: p34BhMVqzACE3HYHCwUwUpaatMkPt30PeQFJ7o50hLU=)
37: 3132332e39392e3230342e302f32342d3234203d3e203536303436.roa (hash: qr06oZrQzwpbsNbGvmFz9wUQ4h6tMWVPF4zIxK71ZvY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl
rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 11 Oct 2026 03:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:1e:12:ff:6b:cd:cc:c5:1c:09:d0:24:33:44:c6:c4:02:b9:47:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709E5125176627846677AF908E76CAE21FB95460
Validity
Not Before: Oct 8 07:07:22 2026 GMT
Not After : Oct 11 18:39:22 2026 GMT
Subject: CN=E88DCBD00FBA638A204BD185A6BAECCA46BB814A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:61:b2:b1:84:d5:1a:cf:a6:d1:17:d0:d3:
47:7a:6b:78:09:a8:81:e0:48:98:7e:37:8e:d8:af:
7c:83:a8:f0:5f:c3:5a:31:ec:7b:1d:a0:d0:1d:af:
0b:a4:6a:15:a2:ba:5c:d9:71:fe:2d:33:65:31:06:
61:89:77:c4:da:02:16:ce:d2:b9:4e:09:a9:b4:b0:
9b:d6:37:0d:13:36:ad:fa:b1:bd:8a:30:d9:ea:b4:
00:cc:6f:d2:a6:9e:7b:e5:d0:1d:46:ea:be:38:9c:
e6:5f:2a:da:ca:26:2c:51:3d:8a:4b:b6:47:37:b3:
eb:4f:95:46:60:39:19:20:34:a8:6c:fa:47:6f:50:
92:61:e3:32:93:92:ed:d6:dd:43:90:6a:bc:08:96:
99:60:7d:34:18:1b:62:09:93:7c:23:c4:17:ed:71:
7d:5e:c8:bb:7f:16:82:4e:61:74:e0:f1:7f:c5:a1:
68:30:5c:82:36:5a:97:25:31:27:93:a2:3e:22:a4:
17:7e:18:71:30:db:e3:cd:ea:15:9e:8b:7f:6d:c2:
65:50:11:4e:9f:dd:72:12:90:cc:c9:cd:e1:54:bc:
28:94:a3:bc:c0:8a:6d:4a:fb:9f:8e:1b:eb:e8:9b:
71:42:b2:f6:24:83:65:a4:25:dd:51:84:84:41:0c:
a6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8D:CB:D0:0F:BA:63:8A:20:4B:D1:85:A6:BA:EC:CA:46:BB:81:4A
X509v3 Authority Key Identifier:
keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f6:aa:26:1a:97:db:c3:35:cb:74:d7:88:20:12:74:9d:56:
be:cb:a0:e0:02:f1:1d:d5:e6:76:46:a7:4c:0e:28:a2:6b:b5:
22:3d:d0:fb:ba:51:1f:97:4c:00:6b:f9:34:fc:2b:db:2e:17:
3b:d0:6b:49:b8:9a:ea:a3:fb:72:8d:71:34:18:2a:03:d2:a3:
ff:47:e9:d8:a8:e8:46:45:12:93:f8:6b:8d:c1:5e:65:43:c2:
b4:c8:2e:d8:2d:5d:c9:98:a9:d8:13:dc:58:a6:b5:54:ed:cb:
d9:b7:a2:98:66:0a:1b:bd:eb:d8:d5:36:c2:18:77:19:20:94:
94:74:d2:bc:c1:cf:49:35:76:d6:94:64:ab:5c:17:af:e2:59:
90:a0:88:2d:07:b3:c2:34:0a:68:75:a3:60:a7:00:a0:1b:16:
32:fc:01:e0:b1:ba:a1:b1:7e:2c:b5:e0:52:e6:aa:9e:63:7c:
43:3b:1d:46:c3:38:2d:f4:9e:66:0e:7e:9f:65:25:47:7c:21:
44:49:ee:47:44:cd:ab:46:88:92:5f:fc:53:e6:11:dc:d9:93:
6a:25:a2:31:30:6e:b2:8e:4d:74:33:28:87:bf:43:07:62:65:
ff:48:65:fb:fc:c0:21:03:75:b4:62:81:09:52:34:c3:d2:99:
a2:9a:9d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:50:38 2026 by rpki-client