$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft File: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft (raw, json) Hash identifier: T1Ktwz+OApiOq3ckKUFh0kYfGU356EmqkZOOzQjKsZg= Subject key identifier: 98:EE:A3:C7:72:82:33:2A:6A:C5:A1:84:2A:42:F2:AC:3F:6E:A1:BF Authority key identifier: 70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 Certificate issuer: /CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Certificate serial: 3253CB6CF080159A888110EB0D04B1C5AAB8B770 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft Manifest number: 81 Signing time: Tue 14 Jul 2026 15:41:34 +0000 Manifest this update: Tue 14 Jul 2026 15:36:34 +0000 Manifest next update: Wed 15 Jul 2026 19:05:34 +0000 Files and hashes: 1: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl (hash: F3n+qWFPssGEZeNLR7t0wORqwdgVA3OCW/JXgeW0QlU=) 2: 3130332e3136302e33322e302f32332d3233203d3e2030.roa (hash: WylQaiIhxibsdwDrEyIJufkXIHMaWHvFmju0+BGbF1w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 19:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:53:cb:6c:f0:80:15:9a:88:81:10:eb:0d:04:b1:c5:aa:b8:b7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Validity Not Before: Jul 14 15:36:34 2026 GMT Not After : Jul 15 19:05:34 2026 GMT Subject: CN=98EEA3C77282332A6AC5A1842A42F2AC3F6EA1BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4f:8f:1c:12:34:29:05:05:8a:c3:a3:b6:d2: 8d:05:ef:00:fd:0a:48:af:0a:be:70:85:e3:d5:dd: 25:7d:25:d4:d6:f4:16:d6:e7:d3:50:36:8e:f7:fa: 9e:6d:62:34:bd:18:ba:97:65:dc:22:f9:8d:3b:a0: 3f:e1:c4:cb:12:a5:5d:64:32:0e:1c:61:2a:c4:8f: 2b:14:68:19:0d:87:df:33:b2:42:ab:ac:53:8f:e7: 1d:c2:2f:b8:68:e8:f3:1e:c2:7d:45:40:c8:5c:88: 72:d2:8a:a1:73:d1:37:60:50:cf:e0:4f:c3:10:d1: 97:08:b9:cb:49:41:e6:50:1d:bb:c8:4b:c7:ac:63: 19:36:8f:7f:c9:7e:f1:2a:75:3e:16:3a:31:36:85: 35:e4:16:ce:a1:1c:ee:ea:8e:18:5a:93:d9:83:9f: f6:51:e7:39:c1:4a:dd:b3:68:0d:4e:ca:95:b1:4b: c6:c8:a7:b2:89:55:0c:25:19:8d:6e:71:84:cb:09: d9:b0:64:18:c1:c1:e7:d9:79:0f:44:cb:5a:c5:f5: da:16:80:9e:7b:16:39:aa:23:51:da:d7:f3:be:14: 88:c3:24:51:23:a0:26:67:e4:95:45:9b:9d:43:ab: c7:67:e0:73:67:7b:d3:d7:9a:01:e0:10:77:ef:15: 0a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:EE:A3:C7:72:82:33:2A:6A:C5:A1:84:2A:42:F2:AC:3F:6E:A1:BF X509v3 Authority Key Identifier: keyid:70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:d4:9c:e6:9a:25:a2:b0:b0:08:0e:0d:3e:4e:69:d6:7e:ec: 64:d2:a7:63:9e:01:b6:6b:f6:b3:08:0a:40:2d:5e:0e:ff:f3: e2:cb:33:c3:a3:0a:7e:43:93:b3:27:7b:80:66:05:72:ec:58: bd:e1:90:41:cd:70:aa:7d:7d:4d:2f:e9:f6:8f:8a:4d:ee:c7: 71:10:66:54:e8:59:9f:b4:f2:96:33:7a:e0:5b:fe:f9:f6:e9: 92:28:c2:e6:d2:27:8b:3b:57:6c:8f:f8:14:35:f7:ce:86:0b: 88:69:60:73:76:90:b8:e1:a6:45:a7:0e:1e:32:d2:93:6c:03: af:58:c9:37:fa:c2:dd:65:07:eb:a5:ac:6d:8d:39:5e:30:78: a3:dc:20:11:d2:5c:db:47:40:b1:15:71:19:80:ae:89:84:7c: 9a:53:b4:98:ba:af:a5:c1:0a:2b:75:21:b6:5b:7b:59:cc:d0: cc:0f:4d:b7:81:64:26:14:e6:28:97:ad:8e:cc:cc:8c:ed:e6: 8c:ed:14:76:43:85:08:3e:b9:ad:31:e0:7b:e3:3c:53:cc:91: a9:ea:a9:58:8d:ad:9a:3f:d0:a1:37:26:17:b9:33:51:b7:da: c8:91:a8:d4:e9:9f:63:84:47:16:d5:33:e9:e3:d1:fe:0f:b5: 9c:03:80:da -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUMlPLbPCAFZqIgRDrDQSxxaq4t3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJD MDRGMEVCNjAeFw0yNjA3MTQxNTM2MzRaFw0yNjA3MTUxOTA1MzRaMDMxMTAvBgNV BAMTKDk4RUVBM0M3NzI4MjMzMkE2QUM1QTE4NDJBNDJGMkFDM0Y2RUExQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdT48cEjQpBQWKw6O20o0F7wD9 CkivCr5whePV3SV9JdTW9BbW59NQNo73+p5tYjS9GLqXZdwi+Y07oD/hxMsSpV1k Mg4cYSrEjysUaBkNh98zskKrrFOP5x3CL7ho6PMewn1FQMhciHLSiqFz0TdgUM/g T8MQ0ZcIuctJQeZQHbvIS8esYxk2j3/JfvEqdT4WOjE2hTXkFs6hHO7qjhhak9mD n/ZR5znBSt2zaA1OypWxS8bIp7KJVQwlGY1ucYTLCdmwZBjBwefZeQ9Ey1rF9doW gJ57FjmqI1Ha1/O+FIjDJFEjoCZn5JVFm51Dq8dn4HNne9PXmgHgEHfvFQpLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmO6jx3KCMypqxaGEKkLyrD9uob8wHwYDVR0j BBgwFoAUcJpzEGeK4q3u2dINyM0+YsBPDrYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5NDg0MTI0Mzg5Mzc2MS8wLzcwOUE3MzEwNjc4QUUyQURFRUQ5RDIwREM4Q0Qz RTYyQzA0RjBFQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJDMDRGMEVCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTQ4NDEyNDM4OTM3NjEvMC83MDlBNzMxMDY3OEFF MkFERUVEOUQyMERDOENEM0U2MkMwNEYwRUI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdSc5polorCw CA4NPk5p1n7sZNKnY54Btmv2swgKQC1eDv/z4sszw6MKfkOTsyd7gGYFcuxYveGQ Qc1wqn19TS/p9o+KTe7HcRBmVOhZn7TyljN64Fv++fbpkijC5tIniztXbI/4FDX3 zoYLiGlgc3aQuOGmRacOHjLSk2wDr1jJN/rC3WUH66WsbY05XjB4o9wgEdJc20dA sRVxGYCuiYR8mlO0mLqvpcEKK3Uhtlt7WczQzA9Nt4FkJhTmKJetjszMjO3mjO0U dkOFCD65rTHge+M8U8yRqeqpWI2tmj/QoTcmF7kzUbfayJGo1OmfY4RHFtUz6ePR /g+1nAOA2g== -----END CERTIFICATE-----Generated at Tue Jul 14 20:03:34 2026 by rpki-client