$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft File: 709E5125176627846677AF908E76CAE21FB95460.mft (raw, json) Hash identifier: sSv75cl8Jd+GtnCbE47dS4deJk0I1O8fKkQTZCGTCzU= Subject key identifier: 0A:B9:AF:92:6A:2C:B2:BD:61:23:C9:70:7C:1E:2D:C5:1A:8C:7B:D8 Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460 Certificate serial: 419535896856608DDADD070388F24FD92E415748 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft Manifest number: 8C Signing time: Tue 21 Jul 2026 16:39:07 +0000 Manifest this update: Tue 21 Jul 2026 16:34:07 +0000 Manifest next update: Wed 22 Jul 2026 20:06:07 +0000 Files and hashes: 1: 3230332e3133352e3130392e302f32342d3234203d3e203536303436.roa (hash: bAuEotOBWkfK+l0XMBi4UbaQgMPZlvEWFIj/aCt7iIk=) 2: 3132332e39392e3230322e302f32342d3234203d3e203536303436.roa (hash: FWytSVV3bw6r2i/f+FObRmRvnU9Kn3xZRXkNxwxIrm0=) 3: 3230332e3133352e3130372e302f32342d3234203d3e203536303436.roa (hash: V/wj4NINZBkYbI6ksTEXDQ4vhVi7K1iFwrB6sRiPXCE=) 4: 3230332e3133352e39362e302f32312d3231203d3e203538343631.roa (hash: oqeccvPR3+IpAwygIF/oeBAJSb31FyNOolE97M8bnZM=) 5: 3132332e39392e3139352e302f32342d3234203d3e203536303436.roa (hash: p34BhMVqzACE3HYHCwUwUpaatMkPt30PeQFJ7o50hLU=) 6: 3132332e39392e3139342e302f32342d3234203d3e203536303436.roa (hash: /LyhXxadlJVq5IFaPmqd8NuURpfRzUDXKVkraXRzuKI=) 7: 3230332e3133352e3130342e302f32312d3231203d3e203538343631.roa (hash: fM1A18suRK8WzD9z99Lh+YXreBGdtCI+wFi/OQZ2QYY=) 8: 3131362e37302e36342e302f31382d3138203d3e203538343631.roa (hash: 4tTQbayWaJ94/APqMkPvrudpPMWZfUh2eRbBIVAxExo=) 9: 3132332e39392e3230332e302f32342d3234203d3e203536303436.roa (hash: gfAT/QYxqrwRCsOjFxjfR5qS+KNxxqUXfE58ipVOHiA=) 10: 3132332e39392e3139332e302f32342d3234203d3e203536303436.roa (hash: mcFdFJaMC4lzHa5DQkzQU384MSLRc9nd1xbM4A6s66U=) 11: 3230332e3133352e3130362e302f32342d3234203d3e203536303436.roa (hash: n9hcF/+Tr2NlYM1oUk+MToyoZXtLGqNqAzWKTnB77ZM=) 12: 3132342e3234382e36342e302f31382d3138203d3e203538343631.roa (hash: 6Kh3kADdLzEQKYiGqBHcfED9YAZb77roeahrAkbO94E=) 13: 3132332e39392e3139382e302f32342d3234203d3e203536303436.roa (hash: eLlkl6s2oq5YaE+V/mrCZDzlPmss69CoPgY65UKenV8=) 14: 3230332e3133352e3130352e302f32342d3234203d3e203536303436.roa (hash: TBO7Oh9i58dQeUdge/BLgLnPJuK+BHqgb8xkTX7by9A=) 15: 3230332e3133352e3132302e302f32312d3231203d3e203538343631.roa (hash: RGywVuvY0/L3+wg4ACHqETGFImk1flLfvL0SNc861ew=) 16: 3132332e39392e3230342e302f32342d3234203d3e203536303436.roa (hash: qr06oZrQzwpbsNbGvmFz9wUQ4h6tMWVPF4zIxK71ZvY=) 17: 3132332e39392e3230352e302f32342d3234203d3e203536303436.roa (hash: A+JYZYaX7pfDnwPKiZwgf7VueKfY89J+t/cO6gXEw1A=) 18: 3132332e39392e3230302e302f32342d3234203d3e203536303436.roa (hash: ad/fG94fMIfMdL3XbD+RZEpVQd9HnnPMGe3MotwlNTU=) 19: 3130332e3132302e37322e302f32342d3234203d3e203538343631.roa (hash: LhgzEloXM1//B37y4gExKVofK8riLORDS4SNhrFc0gw=) 20: 3132332e39392e3139362e302f32342d3234203d3e203536303436.roa (hash: ++Z23h1aqKofV3olaP1zbMjegB3rHSL2+1CwVEKqE5E=) 21: 3132332e39392e3230372e302f32342d3234203d3e203536303436.roa (hash: BMff2BnjPO6TURSDqwS2MmpOFH3VB1OPH2fMelWJ37w=) 22: 3230332e3133352e3131302e302f32342d3234203d3e203536303436.roa (hash: fh9fS78iKTHn8OIFflYokzcy8pnDMzkevRXN0nwYXwc=) 23: 3130332e3132302e37342e302f32342d3234203d3e203538343631.roa (hash: Pr5NBsNQ4w+2UPeMbxevcNKzNN5WoXYQCMaS/P/zOtg=) 24: 3230332e3133352e3130342e302f32342d3234203d3e203536303436.roa (hash: GZliXQ1/MKT4kSXUQTbCC3oZd0ZgyhX/v4L01AAk4ZY=) 25: 3132332e39392e3230362e302f32342d3234203d3e203536303436.roa (hash: rLlTB8afuqz0Jj8a1c3LdLyNwLfwlf2Z8mFieiDedNA=) 26: 3132332e39392e3230312e302f32342d3234203d3e203536303436.roa (hash: nfBppX/QixBneQV6vk7opgxEhjYTUksoqsdc8OUHvCc=) 27: 3230332e3133352e3130382e302f32342d3234203d3e203536303436.roa (hash: 38TgIBqQHAA96dS2lwsMRBNdMfnRErFfNMHETSVGQx4=) 28: 3132332e39392e3139322e302f32342d3234203d3e203536303436.roa (hash: xVw3215ouhyRfkrBawXAhYsYuaPozBqOB5JMIF6KvcI=) 29: 3132332e39392e3139322e302f31382d3138203d3e203538343631.roa (hash: eCLJQ6hVMH0Y1HWI+4+FPraClXX4hypXVvkpKYboMtE=) 30: 3132332e39392e3139392e302f32342d3234203d3e203536303436.roa (hash: z0CNegRcRsFkdUgwpwxZ9nN/Iy9HCXGKT0y4nw1eom4=) 31: 709E5125176627846677AF908E76CAE21FB95460.crl (hash: FIVWaotfHz1G08pf375I0MOhAp9tATXwIvczZi+1i/g=) 32: 3230332e3133352e39362e302f32312d3231203d3e203536303436.roa (hash: ngkUFhfKIFc0bNmMAHJtN3/FFcR4TkGzTWuBHXq/6mo=) 33: 3132332e39392e3139372e302f32342d3234203d3e203536303436.roa (hash: giB60RXOqPiHw+WpYG8hkzWkeY9zlK473PnH6rncvNU=) 34: 3230332e3133352e3131312e302f32342d3234203d3e203536303436.roa (hash: +34kw5HV2z2eHoWYV+KhRIwd91Ghwjh0gUsrg/w4kQs=) 35: 3130332e3132302e37332e302f32342d3234203d3e203538343631.roa (hash: 0VGwIZybtL6yUvgEvn9GF6XQoKjhTE1ct0cJpkcJzuo=) 36: 3130332e3132302e37352e302f32342d3234203d3e203538343631.roa (hash: DeVvSC0gkXY2pkQtHB+9HU0J0vod+7bYff/EV4+DAFU=) 37: 3230332e3133352e3131322e302f32312d3231203d3e203538343631.roa (hash: NUO1nMO021I1S5c1sJbtenOhmN0TKvnC956i0tIBsG4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 20:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:95:35:89:68:56:60:8d:da:dd:07:03:88:f2:4f:d9:2e:41:57:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709E5125176627846677AF908E76CAE21FB95460 Validity Not Before: Jul 21 16:34:07 2026 GMT Not After : Jul 22 20:06:07 2026 GMT Subject: CN=0AB9AF926A2CB2BD6123C9707C1E2DC51A8C7BD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:96:90:8d:7e:d3:3a:e7:dd:fc:f0:e7:1c:24: 07:83:02:a5:fc:ad:39:5c:62:f3:04:1e:1d:8d:30: f3:86:98:b0:b6:35:ce:fa:09:3b:30:5e:4a:59:89: 0b:4d:6f:2e:ef:a4:db:08:99:1d:d7:c8:e4:bd:d3: 04:c6:d4:36:29:80:6d:39:0c:f8:80:ae:14:68:24: b9:f3:2a:b3:5a:15:df:94:69:af:6e:a4:65:74:1a: 75:d3:ec:14:37:05:0b:50:7e:85:4d:03:42:e1:64: e8:d9:4e:cf:9c:40:09:f1:72:ac:aa:5c:d6:b9:f8: 1d:bd:d4:35:10:f1:e8:89:eb:e2:8c:c2:94:e6:4c: 2d:4b:5f:f2:7f:e0:1a:80:27:1a:86:12:a9:8b:e3: aa:b4:49:71:4c:f6:93:ba:2e:99:2c:35:94:77:ce: 7f:f3:04:f2:a7:98:24:5d:e0:54:35:0f:c3:3e:75: 0f:1b:f8:7d:c3:b3:37:78:bb:fd:19:cf:76:cf:d0: ae:b0:48:5f:12:67:18:f9:55:5b:ad:1e:81:ab:6c: e5:bc:7d:66:37:ad:a3:57:7c:3e:32:6c:39:c8:e3: 44:cf:52:a1:1b:59:b1:54:0a:fb:be:52:ee:6c:a3: 35:e0:f2:5e:60:b0:6e:43:c1:27:81:08:cb:e5:4e: 82:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B9:AF:92:6A:2C:B2:BD:61:23:C9:70:7C:1E:2D:C5:1A:8C:7B:D8 X509v3 Authority Key Identifier: keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:b5:a5:d5:d7:60:17:0c:2d:82:5d:c6:85:d1:cb:22:de:fa: 10:cb:76:de:43:12:a5:45:4c:f5:d5:bb:1a:2a:53:cf:60:4d: c5:65:fd:76:9f:9c:f5:a2:0f:86:5b:14:04:ae:8b:99:37:1d: 56:5e:41:10:80:c0:b9:dc:4c:4c:a0:54:12:de:e2:3b:0e:74: 18:2d:b1:8d:78:9d:8b:2f:70:10:41:39:30:06:52:07:aa:83: 2e:70:b2:0d:d4:12:64:bd:9f:be:71:bc:13:9f:d7:79:a5:33: 1d:27:92:f9:30:4a:ce:58:c5:e7:a4:49:15:de:58:a4:1d:42: df:7c:b2:69:6a:c6:dc:60:7b:40:5e:f2:73:73:cf:81:de:0e: d2:fa:64:a4:55:f9:ab:19:36:54:d9:d2:15:d6:96:9b:19:b2: 51:7b:70:bc:79:e7:c1:49:95:06:33:ae:9e:6e:75:3d:c2:ad: 54:d1:3e:2c:64:da:64:7f:10:9d:cb:ae:6c:14:5f:17:d5:bb: 87:5d:81:2a:79:eb:24:96:7a:5c:56:12:19:e1:e9:b6:4f:fc: b3:fa:ce:f8:65:c9:4b:f7:4a:aa:a3:7e:a6:56:70:af:68:49: 48:6f:0f:df:45:82:98:03:02:76:12:ff:25:06:05:42:cf:ec: 5e:3e:92:f1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQZU1iWhWYI3a3QcDiPJP2S5BV0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx RkI5NTQ2MDAeFw0yNjA3MjExNjM0MDdaFw0yNjA3MjIyMDA2MDdaMDMxMTAvBgNV BAMTKDBBQjlBRjkyNkEyQ0IyQkQ2MTIzQzk3MDdDMUUyREM1MUE4QzdCRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAlpCNftM659388OccJAeDAqX8 rTlcYvMEHh2NMPOGmLC2Nc76CTswXkpZiQtNby7vpNsImR3XyOS90wTG1DYpgG05 DPiArhRoJLnzKrNaFd+Uaa9upGV0GnXT7BQ3BQtQfoVNA0LhZOjZTs+cQAnxcqyq XNa5+B291DUQ8eiJ6+KMwpTmTC1LX/J/4BqAJxqGEqmL46q0SXFM9pO6LpksNZR3 zn/zBPKnmCRd4FQ1D8M+dQ8b+H3Dszd4u/0Zz3bP0K6wSF8SZxj5VVutHoGrbOW8 fWY3raNXfD4ybDnI40TPUqEbWbFUCvu+Uu5sozXg8l5gsG5DwSeBCMvlToIdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCrmvkmossr1hI8lwfB4txRqMe9gwHwYDVR0j BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTIzNzc2MDEvMC83MDlFNTEyNTE3NjYy Nzg0NjY3N0FGOTA4RTc2Q0FFMjFGQjk1NDYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbWl1ddgFwwt gl3GhdHLIt76EMt23kMSpUVM9dW7GipTz2BNxWX9dp+c9aIPhlsUBK6LmTcdVl5B EIDAudxMTKBUEt7iOw50GC2xjXidiy9wEEE5MAZSB6qDLnCyDdQSZL2fvnG8E5/X eaUzHSeS+TBKzljF56RJFd5YpB1C33yyaWrG3GB7QF7yc3PPgd4O0vpkpFX5qxk2 VNnSFdaWmxmyUXtwvHnnwUmVBjOunm51PcKtVNE+LGTaZH8QncuubBRfF9W7h12B KnnrJJZ6XFYSGeHptk/8s/rO+GXJS/dKqqN+plZwr2hJSG8P30WCmAMCdhL/JQYF Qs/sXj6S8Q== -----END CERTIFICATE-----Generated at Wed Jul 22 02:44:28 2026 by rpki-client