$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft File: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft (raw, json) Hash identifier: 2rdHvRPL/rQETrpoFQuxmPKjU2o3NbHqJlJ65+uo2KI= Subject key identifier: 86:C5:30:A4:62:38:D3:29:08:02:6C:B0:7B:D2:DD:56:6B:1B:08:84 Authority key identifier: 70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 Certificate issuer: /CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Certificate serial: 49F0065ACB9E98277863330463FE440A06F379B5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft Manifest number: BD Signing time: Fri 28 Aug 2026 06:48:02 +0000 Manifest this update: Fri 28 Aug 2026 06:43:02 +0000 Manifest next update: Mon 31 Aug 2026 08:11:02 +0000 Files and hashes: 1: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl (hash: FIzoLfL9E7AZ2QWvmvOTxgKqFanLOc8nBxa7X9fLL4Y=) 2: 3130332e3136302e33322e302f32332d3233203d3e2030.roa (hash: WylQaiIhxibsdwDrEyIJufkXIHMaWHvFmju0+BGbF1w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 08:11:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:f0:06:5a:cb:9e:98:27:78:63:33:04:63:fe:44:0a:06:f3:79:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Validity Not Before: Aug 28 06:43:02 2026 GMT Not After : Aug 31 08:11:02 2026 GMT Subject: CN=86C530A46238D32908026CB07BD2DD566B1B0884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9b:f9:56:48:0f:22:bc:72:4a:bd:53:15:a8: 52:90:bb:5a:5f:14:bd:1b:2f:fe:8c:78:fa:6d:ad: 70:e4:35:da:aa:e0:eb:93:29:c4:40:b2:99:21:7f: 03:3d:22:8d:7c:bb:a0:13:3c:7d:0c:f8:c9:30:8b: ac:47:cd:a5:dd:74:81:ec:98:4b:a3:b1:d7:c5:28: b3:6e:51:ec:40:21:1d:e9:7e:ee:d9:7c:c1:eb:58: 1f:7c:23:13:04:f2:e5:e6:26:04:5d:36:5a:97:5c: ea:34:a7:f2:d5:8b:95:b1:e4:4b:cd:6e:0c:b5:20: dd:9e:68:78:e5:0d:a0:b7:6b:9f:ea:67:7a:14:ff: 95:8b:4d:7b:df:05:2f:99:83:07:09:6a:d4:9c:d0: d0:16:27:c9:ec:09:50:34:4e:5a:eb:a7:1c:04:95: 30:f2:b8:93:1a:03:4f:5d:8b:80:60:24:b5:0e:96: 8f:31:29:5c:2f:37:7e:80:40:ac:ce:1d:64:c4:d7: 43:39:05:77:b3:4f:bd:f7:34:51:22:04:85:4b:9f: 89:00:ef:3e:7c:99:32:ab:5f:68:ac:1e:9d:14:48: 9f:ad:9d:be:43:b5:98:e6:5c:cb:78:04:c2:a9:50: c9:d2:f8:34:76:1f:0d:46:d7:5b:e4:dd:6f:40:83: ac:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C5:30:A4:62:38:D3:29:08:02:6C:B0:7B:D2:DD:56:6B:1B:08:84 X509v3 Authority Key Identifier: keyid:70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:a1:cb:19:6c:56:44:e9:90:83:48:ff:0b:5f:8e:4f:a5:2a: a2:3c:72:ce:b8:7e:fa:a3:f4:a5:c6:59:9f:83:be:3a:fe:ed: 27:83:9a:7a:54:89:85:b3:d9:16:8f:7d:46:43:32:31:b6:32: 56:48:9d:df:4e:35:37:17:1f:ca:dd:f8:28:5b:ab:34:29:f9: 0e:2a:da:0d:15:b9:c4:ee:46:c5:4e:80:d8:0b:79:57:e0:ae: c0:1a:fb:a4:74:dd:64:36:de:b0:ee:3e:76:6c:fa:66:bd:66: 04:f6:72:01:1d:c4:04:aa:9b:31:a4:5a:06:4b:ec:d2:78:33: 1b:5a:75:bd:f4:64:66:fe:91:df:d2:58:2b:e4:ef:2a:cb:c1: 30:90:93:2d:22:cf:54:cf:ea:e5:e6:59:cc:bd:a2:7c:a1:f4: a1:96:f4:04:f0:50:a0:f9:dd:53:43:42:0d:50:af:ec:53:0e: 93:5c:ed:c0:f3:d0:9a:61:60:76:af:a7:b8:01:ce:51:4d:61: 2f:e2:7e:87:23:03:13:43:bd:67:49:b8:e0:4b:9b:ce:1e:ea: 22:dd:cf:d0:e7:41:f8:52:7f:65:8f:e7:a7:8b:5b:fc:2b:4d: 82:be:e0:c5:bc:31:79:92:80:36:a2:2d:f3:05:e4:a4:fb:6d: 99:b6:40:4a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSfAGWsuemCd4YzMEY/5ECgbzebUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJD MDRGMEVCNjAeFw0yNjA4MjgwNjQzMDJaFw0yNjA4MzEwODExMDJaMDMxMTAvBgNV BAMTKDg2QzUzMEE0NjIzOEQzMjkwODAyNkNCMDdCRDJERDU2NkIxQjA4ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNm/lWSA8ivHJKvVMVqFKQu1pf FL0bL/6MePptrXDkNdqq4OuTKcRAspkhfwM9Io18u6ATPH0M+Mkwi6xHzaXddIHs mEujsdfFKLNuUexAIR3pfu7ZfMHrWB98IxME8uXmJgRdNlqXXOo0p/LVi5Wx5EvN bgy1IN2eaHjlDaC3a5/qZ3oU/5WLTXvfBS+ZgwcJatSc0NAWJ8nsCVA0TlrrpxwE lTDyuJMaA09di4BgJLUOlo8xKVwvN36AQKzOHWTE10M5BXezT733NFEiBIVLn4kA 7z58mTKrX2isHp0USJ+tnb5DtZjmXMt4BMKpUMnS+DR2Hw1G11vk3W9Ag6zPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhsUwpGI40ykIAmywe9LdVmsbCIQwHwYDVR0j BBgwFoAUcJpzEGeK4q3u2dINyM0+YsBPDrYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5NDg0MTI0Mzg5Mzc2MS8wLzcwOUE3MzEwNjc4QUUyQURFRUQ5RDIwREM4Q0Qz RTYyQzA0RjBFQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJDMDRGMEVCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTQ4NDEyNDM4OTM3NjEvMC83MDlBNzMxMDY3OEFF MkFERUVEOUQyMERDOENEM0U2MkMwNEYwRUI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKHLGWxWROmQ g0j/C1+OT6Uqojxyzrh++qP0pcZZn4O+Ov7tJ4OaelSJhbPZFo99RkMyMbYyVkid 3041Nxcfyt34KFurNCn5DiraDRW5xO5GxU6A2At5V+CuwBr7pHTdZDbesO4+dmz6 Zr1mBPZyAR3EBKqbMaRaBkvs0ngzG1p1vfRkZv6R39JYK+TvKsvBMJCTLSLPVM/q 5eZZzL2ifKH0oZb0BPBQoPndU0NCDVCv7FMOk1ztwPPQmmFgdq+nuAHOUU1hL+J+ hyMDE0O9Z0m44Eubzh7qIt3P0OdB+FJ/ZY/np4tb/CtNgr7gxbwxeZKANqIt8wXk pPttmbZASg== -----END CERTIFICATE-----Generated at Sat Aug 29 06:39:57 2026 by rpki-client