$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft File: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft (raw, json) Hash identifier: jsioAc0l220eurnw6UnyIfBU6022Dm7g3YurxYqiwrk= Subject key identifier: F0:70:44:C1:5B:20:6C:D1:1D:3D:A2:2E:5E:71:7B:80:A2:E3:F6:FB Authority key identifier: 70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 Certificate issuer: /CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Certificate serial: 69BE4B2838358119373F343BE453B8BBACF24A92 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft Manifest number: 05 Signing time: Sun 12 Apr 2026 16:04:16 +0000 Manifest this update: Sun 12 Apr 2026 15:59:16 +0000 Manifest next update: Mon 13 Apr 2026 17:28:16 +0000 Files and hashes: 1: 3130332e3136302e33322e302f32332d3233203d3e2030.roa (hash: WylQaiIhxibsdwDrEyIJufkXIHMaWHvFmju0+BGbF1w=) 2: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl (hash: GAAZWy4592okO8HlC+jCEqODW2UrXJ3DFwdQRzUmsSI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 17:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:be:4b:28:38:35:81:19:37:3f:34:3b:e4:53:b8:bb:ac:f2:4a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Validity Not Before: Apr 12 15:59:16 2026 GMT Not After : Apr 13 17:28:16 2026 GMT Subject: CN=F07044C15B206CD11D3DA22E5E717B80A2E3F6FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b3:37:26:50:6c:7a:8f:76:da:d3:94:fe:0a: d6:fd:fe:fd:52:12:e0:a9:57:72:18:a4:a7:07:9c: 2d:5f:84:88:98:1a:84:e5:65:a9:0b:a2:04:19:52: 2e:25:97:fa:67:a1:c0:9f:2e:3c:b5:e0:32:52:e7: 16:31:37:e0:2f:60:b4:90:d0:28:9f:9d:2d:40:25: f0:2b:2f:76:cf:4a:0c:67:a6:ee:19:28:e9:88:72: 54:73:1b:5a:b5:7c:ee:32:84:1f:b2:51:7f:a2:da: 0d:43:cf:5b:11:6a:9a:4c:75:cd:3f:2a:27:51:4a: 41:6e:cc:c0:a5:f6:85:83:c9:c4:59:bc:cb:24:74: 6f:d5:7e:be:0f:51:60:e0:8f:07:de:b7:cf:88:8a: 8f:bd:7b:3c:f8:2e:af:3b:21:6d:fb:6b:40:d2:aa: d4:6b:ab:72:4a:9a:c6:87:da:3d:2d:4f:9c:63:39: a1:32:56:eb:b7:18:d8:a3:fb:80:20:45:52:26:a7: c9:42:79:43:12:1f:69:43:ef:a5:70:1a:3b:40:19: a4:bc:5c:32:94:71:ae:50:74:d8:63:d5:d3:4a:d7: 86:0e:b3:31:11:6f:a2:bf:9f:3f:64:bc:2a:df:b2: a4:c7:3d:db:11:7e:49:8c:f3:8b:a5:a3:74:86:46: 57:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:70:44:C1:5B:20:6C:D1:1D:3D:A2:2E:5E:71:7B:80:A2:E3:F6:FB X509v3 Authority Key Identifier: keyid:70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:ab:e2:e5:3c:2e:52:55:e3:30:76:d7:45:2a:f9:4f:1a:2c: df:76:d0:99:52:c5:e4:6b:34:30:c2:34:08:74:25:91:6d:31: 22:b6:19:e6:b6:d7:f4:b2:f2:df:79:0a:fc:ae:1e:20:b6:c8: fb:cf:bb:b6:f8:3a:41:9a:8a:c3:75:54:db:0e:5d:81:a6:b3: db:b5:78:47:38:d4:e1:d7:8b:d5:79:7a:a0:64:1d:c4:db:db: 1f:92:88:f6:23:a2:53:01:54:84:90:7a:b3:af:48:02:90:92: 83:e8:52:ce:8d:b0:85:a8:33:cb:fa:22:23:52:36:0e:ba:0f: 1d:9f:7f:0b:97:f6:08:df:30:27:e4:87:ee:0c:79:2f:48:56: 8d:32:8a:41:8d:f8:17:42:0a:67:1c:75:f8:e4:83:c2:a3:b7: 0c:f9:dc:f9:e8:9a:e3:a5:6f:9f:07:3b:ca:41:05:ee:87:cd: 41:58:b2:75:a5:c5:30:eb:9f:d5:05:49:b8:2e:1d:da:f4:cc: 25:f3:9d:cd:fa:fe:ad:6f:26:3d:fd:ab:84:06:eb:68:47:7d: ef:a3:a8:73:51:25:bf:04:d6:67:93:6c:4e:9c:26:29:d4:27: a3:a0:54:8a:5e:53:be:ae:ad:6a:25:fe:0a:4d:21:a4:cb:bf: ba:73:7a:a9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUab5LKDg1gRk3PzQ75FO4u6zySpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJD MDRGMEVCNjAeFw0yNjA0MTIxNTU5MTZaFw0yNjA0MTMxNzI4MTZaMDMxMTAvBgNV BAMTKEYwNzA0NEMxNUIyMDZDRDExRDNEQTIyRTVFNzE3QjgwQTJFM0Y2RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/szcmUGx6j3ba05T+Ctb9/v1S EuCpV3IYpKcHnC1fhIiYGoTlZakLogQZUi4ll/pnocCfLjy14DJS5xYxN+AvYLSQ 0CifnS1AJfArL3bPSgxnpu4ZKOmIclRzG1q1fO4yhB+yUX+i2g1Dz1sRappMdc0/ KidRSkFuzMCl9oWDycRZvMskdG/Vfr4PUWDgjwfet8+Iio+9ezz4Lq87IW37a0DS qtRrq3JKmsaH2j0tT5xjOaEyVuu3GNij+4AgRVImp8lCeUMSH2lD76VwGjtAGaS8 XDKUca5QdNhj1dNK14YOszERb6K/nz9kvCrfsqTHPdsRfkmM84ulo3SGRldtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8HBEwVsgbNEdPaIuXnF7gKLj9vswHwYDVR0j BBgwFoAUcJpzEGeK4q3u2dINyM0+YsBPDrYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5NDg0MTI0Mzg5Mzc2MS8wLzcwOUE3MzEwNjc4QUUyQURFRUQ5RDIwREM4Q0Qz RTYyQzA0RjBFQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJDMDRGMEVCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTQ4NDEyNDM4OTM3NjEvMC83MDlBNzMxMDY3OEFF MkFERUVEOUQyMERDOENEM0U2MkMwNEYwRUI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuavi5TwuUlXj MHbXRSr5Txos33bQmVLF5Gs0MMI0CHQlkW0xIrYZ5rbX9LLy33kK/K4eILbI+8+7 tvg6QZqKw3VU2w5dgaaz27V4RzjU4deL1Xl6oGQdxNvbH5KI9iOiUwFUhJB6s69I ApCSg+hSzo2whagzy/oiI1I2DroPHZ9/C5f2CN8wJ+SH7gx5L0hWjTKKQY34F0IK Zxx1+OSDwqO3DPnc+eia46Vvnwc7ykEF7ofNQViydaXFMOuf1QVJuC4d2vTMJfOd zfr+rW8mPf2rhAbraEd976Ooc1ElvwTWZ5NsTpwmKdQno6BUil5Tvq6taiX+Ck0h pMu/unN6qQ== -----END CERTIFICATE-----Generated at Mon Apr 13 11:05:54 2026 by rpki-client