$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft File: 709E5125176627846677AF908E76CAE21FB95460.mft (raw, json) Hash identifier: x7ZnCO5SINGdH4LZ/AZonYkej7w2cE/kmxVVxw32z44= Subject key identifier: E9:94:C4:CB:FD:E9:28:AC:ED:BA:0A:C6:70:B8:15:5E:79:71:F1:DE Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460 Certificate serial: 6ADC507C207CB33DBE289E18D1DCE0B53ABD847F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft Manifest number: D8 Signing time: Mon 26 Oct 2026 06:08:28 +0000 Manifest this update: Mon 26 Oct 2026 06:03:28 +0000 Manifest next update: Thu 29 Oct 2026 06:45:28 +0000 Files and hashes: 1: 3132332e39392e3139352e302f32342d3234203d3e203536303436.roa (hash: p34BhMVqzACE3HYHCwUwUpaatMkPt30PeQFJ7o50hLU=) 2: 3132332e39392e3139322e302f32342d3234203d3e203536303436.roa (hash: xVw3215ouhyRfkrBawXAhYsYuaPozBqOB5JMIF6KvcI=) 3: 3230332e3133352e3130342e302f32342d3234203d3e203536303436.roa (hash: GZliXQ1/MKT4kSXUQTbCC3oZd0ZgyhX/v4L01AAk4ZY=) 4: 709E5125176627846677AF908E76CAE21FB95460.crl (hash: 78YnL3z/Upe0GMYV0UckbdOvpB4PSudcAIec7vl+QA0=) 5: 3132332e39392e3230302e302f32342d3234203d3e203536303436.roa (hash: ad/fG94fMIfMdL3XbD+RZEpVQd9HnnPMGe3MotwlNTU=) 6: 3230332e3133352e39362e302f32312d3231203d3e203536303436.roa (hash: ngkUFhfKIFc0bNmMAHJtN3/FFcR4TkGzTWuBHXq/6mo=) 7: 3230332e3133352e3130362e302f32342d3234203d3e203536303436.roa (hash: n9hcF/+Tr2NlYM1oUk+MToyoZXtLGqNqAzWKTnB77ZM=) 8: 3132332e39392e3139342e302f32342d3234203d3e203536303436.roa (hash: /LyhXxadlJVq5IFaPmqd8NuURpfRzUDXKVkraXRzuKI=) 9: 3130332e3132302e37332e302f32342d3234203d3e203538343631.roa (hash: 0VGwIZybtL6yUvgEvn9GF6XQoKjhTE1ct0cJpkcJzuo=) 10: 3132332e39392e3230362e302f32342d3234203d3e203536303436.roa (hash: rLlTB8afuqz0Jj8a1c3LdLyNwLfwlf2Z8mFieiDedNA=) 11: 3132332e39392e3139362e302f32342d3234203d3e203536303436.roa (hash: ++Z23h1aqKofV3olaP1zbMjegB3rHSL2+1CwVEKqE5E=) 12: 3132332e39392e3230352e302f32342d3234203d3e203536303436.roa (hash: A+JYZYaX7pfDnwPKiZwgf7VueKfY89J+t/cO6gXEw1A=) 13: 3130332e3132302e37322e302f32342d3234203d3e203538343631.roa (hash: LhgzEloXM1//B37y4gExKVofK8riLORDS4SNhrFc0gw=) 14: 3230332e3133352e3131312e302f32342d3234203d3e203536303436.roa (hash: +34kw5HV2z2eHoWYV+KhRIwd91Ghwjh0gUsrg/w4kQs=) 15: 3132332e39392e3230372e302f32342d3234203d3e203536303436.roa (hash: BMff2BnjPO6TURSDqwS2MmpOFH3VB1OPH2fMelWJ37w=) 16: 3132332e39392e3230332e302f32342d3234203d3e203536303436.roa (hash: gfAT/QYxqrwRCsOjFxjfR5qS+KNxxqUXfE58ipVOHiA=) 17: 3230332e3133352e3130342e302f32312d3231203d3e203538343631.roa (hash: fM1A18suRK8WzD9z99Lh+YXreBGdtCI+wFi/OQZ2QYY=) 18: 3230332e3133352e3130372e302f32342d3234203d3e203536303436.roa (hash: V/wj4NINZBkYbI6ksTEXDQ4vhVi7K1iFwrB6sRiPXCE=) 19: 3132332e39392e3230342e302f32342d3234203d3e203536303436.roa (hash: qr06oZrQzwpbsNbGvmFz9wUQ4h6tMWVPF4zIxK71ZvY=) 20: 3132332e39392e3230312e302f32342d3234203d3e203536303436.roa (hash: nfBppX/QixBneQV6vk7opgxEhjYTUksoqsdc8OUHvCc=) 21: 3230332e3133352e3130382e302f32342d3234203d3e203536303436.roa (hash: 38TgIBqQHAA96dS2lwsMRBNdMfnRErFfNMHETSVGQx4=) 22: 3132342e3234382e36342e302f31382d3138203d3e203538343631.roa (hash: 6Kh3kADdLzEQKYiGqBHcfED9YAZb77roeahrAkbO94E=) 23: 3132332e39392e3139322e302f31382d3138203d3e203538343631.roa (hash: eCLJQ6hVMH0Y1HWI+4+FPraClXX4hypXVvkpKYboMtE=) 24: 3132332e39392e3230322e302f32342d3234203d3e203536303436.roa (hash: FWytSVV3bw6r2i/f+FObRmRvnU9Kn3xZRXkNxwxIrm0=) 25: 3130332e3132302e37342e302f32342d3234203d3e203538343631.roa (hash: Pr5NBsNQ4w+2UPeMbxevcNKzNN5WoXYQCMaS/P/zOtg=) 26: 3230332e3133352e3132302e302f32312d3231203d3e203538343631.roa (hash: RGywVuvY0/L3+wg4ACHqETGFImk1flLfvL0SNc861ew=) 27: 3132332e39392e3139332e302f32342d3234203d3e203536303436.roa (hash: mcFdFJaMC4lzHa5DQkzQU384MSLRc9nd1xbM4A6s66U=) 28: 3230332e3133352e39362e302f32312d3231203d3e203538343631.roa (hash: oqeccvPR3+IpAwygIF/oeBAJSb31FyNOolE97M8bnZM=) 29: 3230332e3133352e3130352e302f32342d3234203d3e203536303436.roa (hash: TBO7Oh9i58dQeUdge/BLgLnPJuK+BHqgb8xkTX7by9A=) 30: 3230332e3133352e3130392e302f32342d3234203d3e203536303436.roa (hash: bAuEotOBWkfK+l0XMBi4UbaQgMPZlvEWFIj/aCt7iIk=) 31: 3131362e37302e36342e302f31382d3138203d3e203538343631.roa (hash: 4tTQbayWaJ94/APqMkPvrudpPMWZfUh2eRbBIVAxExo=) 32: 3230332e3133352e3131322e302f32312d3231203d3e203538343631.roa (hash: NUO1nMO021I1S5c1sJbtenOhmN0TKvnC956i0tIBsG4=) 33: 3132332e39392e3139382e302f32342d3234203d3e203536303436.roa (hash: eLlkl6s2oq5YaE+V/mrCZDzlPmss69CoPgY65UKenV8=) 34: 3132332e39392e3139372e302f32342d3234203d3e203536303436.roa (hash: giB60RXOqPiHw+WpYG8hkzWkeY9zlK473PnH6rncvNU=) 35: 3132332e39392e3139392e302f32342d3234203d3e203536303436.roa (hash: z0CNegRcRsFkdUgwpwxZ9nN/Iy9HCXGKT0y4nw1eom4=) 36: 3230332e3133352e3131302e302f32342d3234203d3e203536303436.roa (hash: fh9fS78iKTHn8OIFflYokzcy8pnDMzkevRXN0nwYXwc=) 37: 3130332e3132302e37352e302f32342d3234203d3e203538343631.roa (hash: DeVvSC0gkXY2pkQtHB+9HU0J0vod+7bYff/EV4+DAFU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 06:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:dc:50:7c:20:7c:b3:3d:be:28:9e:18:d1:dc:e0:b5:3a:bd:84:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709E5125176627846677AF908E76CAE21FB95460 Validity Not Before: Oct 26 06:03:28 2026 GMT Not After : Oct 29 06:45:28 2026 GMT Subject: CN=E994C4CBFDE928ACEDBA0AC670B8155E7971F1DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:24:9c:95:13:f0:27:1b:c7:b0:59:9c:03:49: 60:e0:c0:11:6e:56:01:de:5d:fe:10:ad:ef:e3:75: bd:9c:5f:f4:69:c2:cc:97:06:8a:ea:e9:e6:09:48: 5c:4d:26:02:bd:2f:b5:e9:4c:95:f7:3b:0a:26:0a: 9f:3c:f8:f6:44:9a:bd:01:e1:85:6b:be:73:f0:34: 9f:7b:99:6e:a7:b3:b6:b8:b4:3c:88:a6:3c:01:f4: b0:13:b3:c6:49:25:d2:0f:de:05:c0:86:dd:86:45: da:5a:98:94:d2:77:5f:68:98:d5:58:8b:fb:4d:cb: b3:89:f8:64:91:8b:9e:f2:ff:0d:3c:9d:4a:52:d8: 21:3b:21:2f:18:00:6d:73:37:69:a1:98:40:32:57: f8:de:93:12:2c:fc:41:fe:cb:e0:7e:ae:6c:6d:5e: 67:a0:c3:d8:7b:5d:25:1e:a7:82:3d:a7:60:1a:75: 7a:b4:38:61:3c:37:24:8e:06:cc:2e:aa:7d:a2:a6: 04:a3:f5:e7:c2:6f:be:83:33:46:95:ce:aa:df:22: fd:6e:3f:8c:59:ed:ed:02:bb:c4:7f:1b:84:7d:de: 5a:92:5d:fe:a1:af:18:ab:ec:c1:ed:f3:54:85:94: 11:00:d3:e5:73:82:ae:8c:ed:a2:ec:fe:2c:28:1b: 4d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:94:C4:CB:FD:E9:28:AC:ED:BA:0A:C6:70:B8:15:5E:79:71:F1:DE X509v3 Authority Key Identifier: keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:44:0b:f1:23:40:f0:bf:90:fd:03:5b:31:2d:70:77:1d:62: 68:d8:bc:4e:6e:22:cc:7f:4f:8c:e8:74:32:0a:cf:fc:02:0c: 2d:52:86:13:f8:20:fb:fc:57:4e:ce:b1:01:fb:11:e1:ab:f3: 84:c6:b1:c5:17:e5:9f:45:0a:2a:58:6a:3f:3a:e6:0a:db:b3: 0f:15:5a:fc:e6:52:7a:48:82:27:ed:b5:9d:5b:dd:89:b6:48: 40:c9:46:71:6b:ea:da:55:54:b8:57:0a:7d:73:fd:d5:da:a7: 44:a3:28:fb:af:48:55:f0:14:4a:38:d4:6f:32:d7:30:a4:f6: 15:c7:ae:d8:ff:b7:79:bc:09:72:05:f7:7f:4e:29:c9:19:55: 02:54:ee:de:64:e3:55:82:a7:65:5a:d8:84:38:24:22:cf:f5: ca:f0:d0:60:84:e8:38:05:e0:e5:10:97:81:19:41:e9:ba:07: c1:aa:41:e1:71:8a:e5:83:df:7c:bd:32:20:c5:ae:ff:25:e6: 5c:c5:20:c5:14:a0:41:c7:f9:39:1d:cc:7a:ab:45:4e:17:4d: 66:94:b2:42:3c:5b:95:67:6f:8b:44:08:0e:3e:57:23:83:7b: 5d:ed:cd:0e:4f:84:38:02:f6:4e:71:46:98:53:e9:68:17:37: 3b:f3:37:dd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUatxQfCB8sz2+KJ4Y0dzgtTq9hH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx RkI5NTQ2MDAeFw0yNjEwMjYwNjAzMjhaFw0yNjEwMjkwNjQ1MjhaMDMxMTAvBgNV BAMTKEU5OTRDNENCRkRFOTI4QUNFREJBMEFDNjcwQjgxNTVFNzk3MUYxREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/JJyVE/AnG8ewWZwDSWDgwBFu VgHeXf4Qre/jdb2cX/RpwsyXBorq6eYJSFxNJgK9L7XpTJX3OwomCp88+PZEmr0B 4YVrvnPwNJ97mW6ns7a4tDyIpjwB9LATs8ZJJdIP3gXAht2GRdpamJTSd19omNVY i/tNy7OJ+GSRi57y/w08nUpS2CE7IS8YAG1zN2mhmEAyV/jekxIs/EH+y+B+rmxt Xmegw9h7XSUep4I9p2AadXq0OGE8NySOBswuqn2ipgSj9efCb76DM0aVzqrfIv1u P4xZ7e0Cu8R/G4R93lqSXf6hrxir7MHt81SFlBEA0+Vzgq6M7aLs/iwoG01lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6ZTEy/3pKKztugrGcLgVXnlx8d4wHwYDVR0j BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTIzNzc2MDEvMC83MDlFNTEyNTE3NjYy Nzg0NjY3N0FGOTA4RTc2Q0FFMjFGQjk1NDYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkQL8SNA8L+Q /QNbMS1wdx1iaNi8Tm4izH9PjOh0MgrP/AIMLVKGE/gg+/xXTs6xAfsR4avzhMax xRfln0UKKlhqPzrmCtuzDxVa/OZSekiCJ+21nVvdibZIQMlGcWvq2lVUuFcKfXP9 1dqnRKMo+69IVfAUSjjUbzLXMKT2Fceu2P+3ebwJcgX3f04pyRlVAlTu3mTjVYKn ZVrYhDgkIs/1yvDQYIToOAXg5RCXgRlB6boHwapB4XGK5YPffL0yIMWu/yXmXMUg xRSgQcf5OR3MeqtFThdNZpSyQjxblWdvi0QIDj5XI4N7Xe3NDk+EOAL2TnFGmFPp aBc3O/M33Q== -----END CERTIFICATE-----Generated at Tue Oct 27 13:06:19 2026 by rpki-client