$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft File: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft (raw, json) Hash identifier: lbFTz7nyGKpxO/mXBCqzvbUZ5GOHeenJiS1T6RZlMtY= Subject key identifier: AD:8C:EC:61:B4:2D:67:71:6C:33:27:3E:30:6F:85:53:DF:68:C7:A5 Authority key identifier: 70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 Certificate issuer: /CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Certificate serial: 44BAD1CDE1CDC8089ECA8AEB7CB2FF1BB2CB9230 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft Manifest number: 43 Signing time: Fri 29 May 2026 10:17:46 +0000 Manifest this update: Fri 29 May 2026 10:12:46 +0000 Manifest next update: Sat 30 May 2026 11:31:46 +0000 Files and hashes: 1: 3130332e3136302e33322e302f32332d3233203d3e2030.roa (hash: WylQaiIhxibsdwDrEyIJufkXIHMaWHvFmju0+BGbF1w=) 2: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl (hash: oqpT9d7WkOEnhONaWXbv/P0o7irmKt2PjWVEwOBBgyY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 11:31:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ba:d1:cd:e1:cd:c8:08:9e:ca:8a:eb:7c:b2:ff:1b:b2:cb:92:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Validity Not Before: May 29 10:12:46 2026 GMT Not After : May 30 11:31:46 2026 GMT Subject: CN=AD8CEC61B42D67716C33273E306F8553DF68C7A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e8:d8:e5:ed:04:59:4f:c8:a7:33:c0:71:82: 51:69:7b:4d:0f:a5:64:2d:fd:af:5c:7b:2e:1e:f9: 0e:b8:02:47:dc:1c:3d:9f:4e:99:49:27:e0:da:ee: 35:81:65:c8:ed:9b:31:ae:ce:49:fc:bd:8b:f3:66: 58:78:5d:06:d1:e4:c2:cb:e6:55:be:18:92:2b:50: 70:7c:6c:eb:1f:c5:09:a6:55:00:4f:80:c2:6d:4e: c2:8b:ec:8e:7b:5a:7f:ae:2a:4d:ce:6d:29:e4:83: c7:d0:84:49:9f:dc:c2:28:29:46:85:ba:89:e5:7f: b9:e3:52:e6:9f:c2:a3:29:3d:0b:b0:0b:97:35:c1: 9b:8d:29:99:41:73:15:ea:9c:58:9a:73:56:82:75: 85:1e:8f:95:db:b4:56:8a:b1:24:9e:7d:ed:21:8d: ef:99:c3:36:d9:5a:f9:50:75:6f:5c:02:7b:7f:40: 27:d5:9f:57:dc:33:1f:87:7b:2f:ad:db:74:0e:e4: 85:d1:e6:3a:ef:ea:b7:06:96:ea:b7:b1:4a:9f:cd: 2b:a2:ee:4d:9e:49:bd:07:24:95:21:56:12:e1:8c: d9:53:4d:4f:72:2c:b6:01:72:26:58:a2:7d:b6:a2: 66:b0:77:9f:1a:eb:23:92:65:13:af:fe:43:4b:89: e9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8C:EC:61:B4:2D:67:71:6C:33:27:3E:30:6F:85:53:DF:68:C7:A5 X509v3 Authority Key Identifier: keyid:70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:b4:53:97:a9:a3:4d:35:5b:f6:44:8b:6f:d6:0f:59:18:8f: 71:88:ba:02:95:98:25:b0:73:9a:42:66:16:7a:5f:0a:9b:14: fa:fb:0a:67:8b:e1:86:11:34:3b:af:38:ec:dc:85:b5:fb:9f: a8:04:d7:db:df:49:5f:9c:a1:f7:60:2d:39:69:04:f5:24:41: 4c:98:60:8f:25:4d:30:49:42:6f:f0:4d:c5:91:be:4c:ce:52: 55:c1:a4:4b:ec:7d:ca:1a:37:61:09:5a:3d:b1:75:94:7b:85: d3:a6:6e:18:67:71:51:0a:09:d0:2b:98:45:80:88:ba:34:6a: af:5b:22:e7:60:49:b2:0e:b2:96:65:03:11:97:31:42:25:10: ce:45:26:91:02:26:90:7c:e6:28:97:af:3f:c0:39:0a:8b:65: 76:6a:bd:66:bd:a0:9d:9a:b2:4c:64:f8:24:11:b9:60:b7:fc: a9:d8:40:3c:5a:49:76:e9:18:d2:f4:da:99:1b:93:a6:17:b6: f4:c6:fe:21:93:7e:a9:c6:78:b1:72:df:e3:fc:a0:5d:0f:37: d0:9d:94:fa:9c:42:7a:61:18:17:f7:25:c1:c7:f5:92:49:7e: 82:ff:77:e5:7e:51:6c:b4:52:06:67:2e:d9:74:b0:76:7e:07: 04:53:ff:5e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIURLrRzeHNyAieyorrfLL/G7LLkjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJD MDRGMEVCNjAeFw0yNjA1MjkxMDEyNDZaFw0yNjA1MzAxMTMxNDZaMDMxMTAvBgNV BAMTKEFEOENFQzYxQjQyRDY3NzE2QzMzMjczRTMwNkY4NTUzREY2OEM3QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn6Njl7QRZT8inM8BxglFpe00P pWQt/a9cey4e+Q64AkfcHD2fTplJJ+Da7jWBZcjtmzGuzkn8vYvzZlh4XQbR5MLL 5lW+GJIrUHB8bOsfxQmmVQBPgMJtTsKL7I57Wn+uKk3ObSnkg8fQhEmf3MIoKUaF uonlf7njUuafwqMpPQuwC5c1wZuNKZlBcxXqnFiac1aCdYUej5XbtFaKsSSefe0h je+ZwzbZWvlQdW9cAnt/QCfVn1fcMx+Hey+t23QO5IXR5jrv6rcGluq3sUqfzSui 7k2eSb0HJJUhVhLhjNlTTU9yLLYBciZYon22omawd58a6yOSZROv/kNLiekzAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrYzsYbQtZ3FsMyc+MG+FU99ox6UwHwYDVR0j BBgwFoAUcJpzEGeK4q3u2dINyM0+YsBPDrYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5NDg0MTI0Mzg5Mzc2MS8wLzcwOUE3MzEwNjc4QUUyQURFRUQ5RDIwREM4Q0Qz RTYyQzA0RjBFQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJDMDRGMEVCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTQ4NDEyNDM4OTM3NjEvMC83MDlBNzMxMDY3OEFF MkFERUVEOUQyMERDOENEM0U2MkMwNEYwRUI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu7RTl6mjTTVb 9kSLb9YPWRiPcYi6ApWYJbBzmkJmFnpfCpsU+vsKZ4vhhhE0O6847NyFtfufqATX 299JX5yh92AtOWkE9SRBTJhgjyVNMElCb/BNxZG+TM5SVcGkS+x9yho3YQlaPbF1 lHuF06ZuGGdxUQoJ0CuYRYCIujRqr1si52BJsg6ylmUDEZcxQiUQzkUmkQImkHzm KJevP8A5Cotldmq9Zr2gnZqyTGT4JBG5YLf8qdhAPFpJdukY0vTamRuTphe29Mb+ IZN+qcZ4sXLf4/ygXQ830J2U+pxCemEYF/clwcf1kkl+gv935X5RbLRSBmcu2XSw dn4HBFP/Xg== -----END CERTIFICATE-----Generated at Fri May 29 22:04:41 2026 by rpki-client