$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft File: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft (raw, json) Hash identifier: PD2cbQxpbovSOpn+TCB7HcRENiXuWJdduxujmCJoVRo= Subject key identifier: B0:03:5A:F9:08:E9:0C:65:BD:D6:14:0D:5D:D0:7B:0E:7B:43:2F:D2 Authority key identifier: 70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 Certificate issuer: /CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Certificate serial: 29662DF422C4B0AAC99C7C5B431B6FF8B73E6613 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft Manifest number: D2 Signing time: Wed 14 Oct 2026 16:34:22 +0000 Manifest this update: Wed 14 Oct 2026 16:29:22 +0000 Manifest next update: Sat 17 Oct 2026 17:12:22 +0000 Files and hashes: 1: 3130332e3136302e33322e302f32332d3233203d3e2030.roa (hash: WylQaiIhxibsdwDrEyIJufkXIHMaWHvFmju0+BGbF1w=) 2: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl (hash: 3bjY3CMwbuU/uMG3+mEAmeGIYh27DrAO8qdKe6ok6DA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 17:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:66:2d:f4:22:c4:b0:aa:c9:9c:7c:5b:43:1b:6f:f8:b7:3e:66:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Validity Not Before: Oct 14 16:29:22 2026 GMT Not After : Oct 17 17:12:22 2026 GMT Subject: CN=B0035AF908E90C65BDD6140D5DD07B0E7B432FD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f7:3d:0d:4b:e2:c5:90:36:56:a1:56:cf:ae: 1a:34:3e:40:d3:86:ac:91:0e:a5:9e:b5:9a:ae:09: 0a:34:e0:a6:b7:24:20:d5:08:e9:ea:d0:cd:2e:21: 72:05:8c:51:7a:fc:c4:ea:57:99:d3:df:4e:98:c5: 8a:9f:1c:05:a8:7a:02:b9:e4:fe:51:c0:a3:7f:41: fd:ec:a8:77:7d:0e:77:1b:18:c3:3d:4c:3f:81:09: 69:44:fd:8c:ae:ab:bc:bb:d7:49:20:b9:31:3b:4e: 70:57:6f:55:29:3e:ff:49:f9:a0:1c:26:84:4c:74: 85:6c:12:f6:09:15:a2:68:48:87:93:a3:0a:03:bc: 11:11:66:45:42:79:37:12:05:49:be:64:49:e2:6b: f8:34:8d:fe:e4:e6:d7:1c:fe:4b:d7:40:dd:38:b7: c0:2f:c4:6a:21:b5:73:2f:8d:d0:32:c2:24:16:ef: 9d:28:df:6c:ef:d7:23:e0:59:b0:7c:6b:c4:be:7e: 90:ed:98:31:df:d5:88:12:e5:a1:dd:60:29:79:fb: 0f:6e:19:99:26:a2:f1:6a:60:58:52:90:5a:3a:46: ec:18:0e:a9:7e:1a:fe:0c:5c:79:5b:81:8f:7f:87: df:43:7a:3d:5c:1b:8d:fd:25:0b:81:ab:0c:8b:9c: e5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:03:5A:F9:08:E9:0C:65:BD:D6:14:0D:5D:D0:7B:0E:7B:43:2F:D2 X509v3 Authority Key Identifier: keyid:70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:36:2a:44:00:e4:e4:17:ba:70:d3:dc:a3:70:82:f7:b3:cb: 8d:90:73:52:ef:1d:ae:c4:f5:3b:07:20:0c:d4:18:ec:a3:dd: 6d:77:2c:87:c7:ac:5d:f2:61:d4:3f:f9:00:65:7e:81:dc:a6: 7a:6e:fb:ef:0a:c5:99:4d:f7:04:8f:31:14:0c:df:6e:0b:fd: c2:2b:aa:ea:9c:cf:98:c8:2f:2b:c1:91:b6:80:6f:f5:12:77: 2e:38:f6:2c:f5:b1:b5:31:14:9a:20:50:45:67:38:37:ca:54: 4f:59:d0:47:3d:7c:30:d1:fb:2a:0b:f1:03:72:bb:0c:8c:ab: e0:cd:dc:42:63:77:e9:a3:81:ae:ed:13:c0:11:54:b8:55:36: 9e:99:80:e7:63:4c:11:29:ce:be:6e:de:95:31:bf:ad:23:5d: 04:74:9a:b5:e1:d8:43:77:59:7d:24:1d:21:eb:95:6a:68:87: 2a:7f:91:b3:d5:b0:4c:d8:5c:8a:4c:17:ed:8e:4a:93:ef:a7: a2:0a:82:1c:28:72:f1:93:84:ac:36:cd:8f:4a:e1:34:70:04: c7:43:f3:d0:a1:b0:1e:1c:50:33:17:e7:1f:7c:d9:33:1a:c1: 0a:76:01:21:f3:a7:a4:93:14:c2:c3:77:3c:4a:60:8e:39:a7: be:aa:35:40 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKWYt9CLEsKrJnHxbQxtv+Lc+ZhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJD MDRGMEVCNjAeFw0yNjEwMTQxNjI5MjJaFw0yNjEwMTcxNzEyMjJaMDMxMTAvBgNV BAMTKEIwMDM1QUY5MDhFOTBDNjVCREQ2MTQwRDVERDA3QjBFN0I0MzJGRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL9z0NS+LFkDZWoVbPrho0PkDT hqyRDqWetZquCQo04Ka3JCDVCOnq0M0uIXIFjFF6/MTqV5nT306YxYqfHAWoegK5 5P5RwKN/Qf3sqHd9DncbGMM9TD+BCWlE/Yyuq7y710kguTE7TnBXb1UpPv9J+aAc JoRMdIVsEvYJFaJoSIeTowoDvBERZkVCeTcSBUm+ZEnia/g0jf7k5tcc/kvXQN04 t8AvxGohtXMvjdAywiQW750o32zv1yPgWbB8a8S+fpDtmDHf1YgS5aHdYCl5+w9u GZkmovFqYFhSkFo6RuwYDql+Gv4MXHlbgY9/h99Dej1cG439JQuBqwyLnOUrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUsANa+QjpDGW91hQNXdB7DntDL9IwHwYDVR0j BBgwFoAUcJpzEGeK4q3u2dINyM0+YsBPDrYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5NDg0MTI0Mzg5Mzc2MS8wLzcwOUE3MzEwNjc4QUUyQURFRUQ5RDIwREM4Q0Qz RTYyQzA0RjBFQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJDMDRGMEVCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTQ4NDEyNDM4OTM3NjEvMC83MDlBNzMxMDY3OEFF MkFERUVEOUQyMERDOENEM0U2MkMwNEYwRUI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzYqRADk5Be6 cNPco3CC97PLjZBzUu8drsT1OwcgDNQY7KPdbXcsh8esXfJh1D/5AGV+gdymem77 7wrFmU33BI8xFAzfbgv9wiuq6pzPmMgvK8GRtoBv9RJ3Ljj2LPWxtTEUmiBQRWc4 N8pUT1nQRz18MNH7KgvxA3K7DIyr4M3cQmN36aOBru0TwBFUuFU2npmA52NMESnO vm7elTG/rSNdBHSateHYQ3dZfSQdIeuVamiHKn+Rs9WwTNhcikwX7Y5Kk++nogqC HChy8ZOErDbNj0rhNHAEx0Pz0KGwHhxQMxfnH3zZMxrBCnYBIfOnpJMUwsN3PEpg jjmnvqo1QA== -----END CERTIFICATE-----Generated at Thu Oct 15 14:05:39 2026 by rpki-client