$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft File: 709E5125176627846677AF908E76CAE21FB95460.mft (raw, json) Hash identifier: qMj2jmZDBzIbhzaaOcFZyvrKilhb+8O43dcCovTiWpQ= Subject key identifier: 3A:78:1A:F1:64:F3:B1:76:EA:3A:16:2B:4F:42:C1:52:4E:D0:8F:E1 Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460 Certificate serial: 3653AC47169AC567E2551F6DC473EFBD16F70C32 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft Manifest number: 12 Signing time: Tue 21 Apr 2026 10:40:15 +0000 Manifest this update: Tue 21 Apr 2026 10:35:15 +0000 Manifest next update: Wed 22 Apr 2026 11:46:15 +0000 Files and hashes: 1: 3230332e3133352e3131302e302f32342d3234203d3e203536303436.roa (hash: fh9fS78iKTHn8OIFflYokzcy8pnDMzkevRXN0nwYXwc=) 2: 3132332e39392e3230362e302f32342d3234203d3e203536303436.roa (hash: rLlTB8afuqz0Jj8a1c3LdLyNwLfwlf2Z8mFieiDedNA=) 3: 3130332e3132302e37342e302f32342d3234203d3e203538343631.roa (hash: Pr5NBsNQ4w+2UPeMbxevcNKzNN5WoXYQCMaS/P/zOtg=) 4: 3132332e39392e3139332e302f32342d3234203d3e203536303436.roa (hash: mcFdFJaMC4lzHa5DQkzQU384MSLRc9nd1xbM4A6s66U=) 5: 3132332e39392e3230332e302f32342d3234203d3e203536303436.roa (hash: gfAT/QYxqrwRCsOjFxjfR5qS+KNxxqUXfE58ipVOHiA=) 6: 3230332e3133352e3130342e302f32342d3234203d3e203536303436.roa (hash: GZliXQ1/MKT4kSXUQTbCC3oZd0ZgyhX/v4L01AAk4ZY=) 7: 3230332e3133352e3130352e302f32342d3234203d3e203536303436.roa (hash: TBO7Oh9i58dQeUdge/BLgLnPJuK+BHqgb8xkTX7by9A=) 8: 3130332e3132302e37322e302f32342d3234203d3e203538343631.roa (hash: LhgzEloXM1//B37y4gExKVofK8riLORDS4SNhrFc0gw=) 9: 3230332e3133352e3131322e302f32312d3231203d3e203538343631.roa (hash: NUO1nMO021I1S5c1sJbtenOhmN0TKvnC956i0tIBsG4=) 10: 3230332e3133352e3130362e302f32342d3234203d3e203536303436.roa (hash: n9hcF/+Tr2NlYM1oUk+MToyoZXtLGqNqAzWKTnB77ZM=) 11: 3132342e3234382e36342e302f31382d3138203d3e203538343631.roa (hash: 6Kh3kADdLzEQKYiGqBHcfED9YAZb77roeahrAkbO94E=) 12: 3132332e39392e3230322e302f32342d3234203d3e203536303436.roa (hash: FWytSVV3bw6r2i/f+FObRmRvnU9Kn3xZRXkNxwxIrm0=) 13: 3132332e39392e3139372e302f32342d3234203d3e203536303436.roa (hash: giB60RXOqPiHw+WpYG8hkzWkeY9zlK473PnH6rncvNU=) 14: 3230332e3133352e39362e302f32312d3231203d3e203538343631.roa (hash: oqeccvPR3+IpAwygIF/oeBAJSb31FyNOolE97M8bnZM=) 15: 709E5125176627846677AF908E76CAE21FB95460.crl (hash: aIhH0npoPz5GcwppX2NeNq7DaB+Ff0F5gNsgdj5iuOc=) 16: 3132332e39392e3230302e302f32342d3234203d3e203536303436.roa (hash: ad/fG94fMIfMdL3XbD+RZEpVQd9HnnPMGe3MotwlNTU=) 17: 3132332e39392e3230342e302f32342d3234203d3e203536303436.roa (hash: qr06oZrQzwpbsNbGvmFz9wUQ4h6tMWVPF4zIxK71ZvY=) 18: 3230332e3133352e39362e302f32312d3231203d3e203536303436.roa (hash: ngkUFhfKIFc0bNmMAHJtN3/FFcR4TkGzTWuBHXq/6mo=) 19: 3230332e3133352e3131312e302f32342d3234203d3e203536303436.roa (hash: +34kw5HV2z2eHoWYV+KhRIwd91Ghwjh0gUsrg/w4kQs=) 20: 3130332e3132302e37352e302f32342d3234203d3e203538343631.roa (hash: DeVvSC0gkXY2pkQtHB+9HU0J0vod+7bYff/EV4+DAFU=) 21: 3130332e3132302e37332e302f32342d3234203d3e203538343631.roa (hash: 0VGwIZybtL6yUvgEvn9GF6XQoKjhTE1ct0cJpkcJzuo=) 22: 3230332e3133352e3130342e302f32312d3231203d3e203538343631.roa (hash: fM1A18suRK8WzD9z99Lh+YXreBGdtCI+wFi/OQZ2QYY=) 23: 3230332e3133352e3130372e302f32342d3234203d3e203536303436.roa (hash: V/wj4NINZBkYbI6ksTEXDQ4vhVi7K1iFwrB6sRiPXCE=) 24: 3132332e39392e3139392e302f32342d3234203d3e203536303436.roa (hash: z0CNegRcRsFkdUgwpwxZ9nN/Iy9HCXGKT0y4nw1eom4=) 25: 3230332e3133352e3130382e302f32342d3234203d3e203536303436.roa (hash: 38TgIBqQHAA96dS2lwsMRBNdMfnRErFfNMHETSVGQx4=) 26: 3132332e39392e3139322e302f32342d3234203d3e203536303436.roa (hash: xVw3215ouhyRfkrBawXAhYsYuaPozBqOB5JMIF6KvcI=) 27: 3132332e39392e3139382e302f32342d3234203d3e203536303436.roa (hash: eLlkl6s2oq5YaE+V/mrCZDzlPmss69CoPgY65UKenV8=) 28: 3132332e39392e3139342e302f32342d3234203d3e203536303436.roa (hash: /LyhXxadlJVq5IFaPmqd8NuURpfRzUDXKVkraXRzuKI=) 29: 3230332e3133352e3132302e302f32312d3231203d3e203538343631.roa (hash: RGywVuvY0/L3+wg4ACHqETGFImk1flLfvL0SNc861ew=) 30: 3230332e3133352e3130392e302f32342d3234203d3e203536303436.roa (hash: bAuEotOBWkfK+l0XMBi4UbaQgMPZlvEWFIj/aCt7iIk=) 31: 3132332e39392e3230352e302f32342d3234203d3e203536303436.roa (hash: A+JYZYaX7pfDnwPKiZwgf7VueKfY89J+t/cO6gXEw1A=) 32: 3132332e39392e3139322e302f31382d3138203d3e203538343631.roa (hash: eCLJQ6hVMH0Y1HWI+4+FPraClXX4hypXVvkpKYboMtE=) 33: 3132332e39392e3230312e302f32342d3234203d3e203536303436.roa (hash: nfBppX/QixBneQV6vk7opgxEhjYTUksoqsdc8OUHvCc=) 34: 3131362e37302e36342e302f31382d3138203d3e203538343631.roa (hash: 4tTQbayWaJ94/APqMkPvrudpPMWZfUh2eRbBIVAxExo=) 35: 3132332e39392e3139362e302f32342d3234203d3e203536303436.roa (hash: ++Z23h1aqKofV3olaP1zbMjegB3rHSL2+1CwVEKqE5E=) 36: 3132332e39392e3230372e302f32342d3234203d3e203536303436.roa (hash: BMff2BnjPO6TURSDqwS2MmpOFH3VB1OPH2fMelWJ37w=) 37: 3132332e39392e3139352e302f32342d3234203d3e203536303436.roa (hash: p34BhMVqzACE3HYHCwUwUpaatMkPt30PeQFJ7o50hLU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 11:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:53:ac:47:16:9a:c5:67:e2:55:1f:6d:c4:73:ef:bd:16:f7:0c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709E5125176627846677AF908E76CAE21FB95460 Validity Not Before: Apr 21 10:35:15 2026 GMT Not After : Apr 22 11:46:15 2026 GMT Subject: CN=3A781AF164F3B176EA3A162B4F42C1524ED08FE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c7:9d:6a:3e:7c:3d:8a:bb:82:0b:6e:a0:38: e4:2b:ad:7d:52:18:a3:8f:6e:f0:46:a9:a7:c9:1f: 98:ef:50:8a:f2:07:e6:81:4d:87:77:d6:d4:bc:da: 8c:d6:78:02:71:d6:6c:04:14:6c:2d:8e:14:80:21: de:a7:91:45:33:c2:18:9b:3b:8c:dc:ef:82:95:92: 48:f4:06:1d:70:1b:c6:cc:c4:69:88:8b:9b:73:d9: bb:28:96:9d:f8:1c:d3:54:80:20:cd:48:3b:0c:ea: 2a:b6:97:13:6f:5d:4a:88:2e:8d:fa:d2:56:54:79: 90:3b:fa:ae:42:1c:aa:42:2f:9b:6d:c4:d3:a0:2d: 71:09:b3:9a:15:48:4e:74:78:07:a9:06:f3:2b:67: cd:53:93:b0:b5:9c:bb:bc:44:4c:7e:1c:aa:37:30: d7:d9:15:7c:e3:ef:be:08:79:45:64:e5:29:7d:14: 24:e2:3b:37:00:cb:d9:16:f2:2b:7b:6a:a0:be:12: bf:1b:df:6f:58:b9:48:0c:74:17:78:f9:fc:d6:9f: 66:1b:75:62:6d:a5:22:21:a3:8b:55:ea:5a:74:cb: ef:40:b6:f5:3c:d4:f7:a6:04:8e:b1:e7:3f:6d:61: 0b:3b:04:1d:11:d8:e9:2b:a3:58:00:43:2f:4b:cc: 93:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:78:1A:F1:64:F3:B1:76:EA:3A:16:2B:4F:42:C1:52:4E:D0:8F:E1 X509v3 Authority Key Identifier: keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:98:9b:f2:c8:b7:8e:ca:d7:1a:fe:9b:45:1a:f4:02:df:33: aa:19:66:a3:4f:e1:dd:e3:2a:38:8c:cf:05:18:cc:9f:ea:a0: a7:75:20:42:91:7d:d3:e0:0a:a5:38:19:01:61:6e:a4:0f:ad: b2:5c:a0:a8:89:c7:8b:e6:50:70:34:e7:0d:f9:fc:ae:76:1c: 5d:9e:43:0b:d2:26:d7:4d:c0:bd:5a:30:68:91:16:f1:0e:20: 08:4c:73:c8:5a:f5:08:f2:c8:95:12:77:9c:36:d5:34:cb:52: 5e:d3:01:0a:a2:1c:6b:b8:58:2a:1a:ab:e2:bf:62:ba:48:2d: e5:42:a3:6b:7b:e1:3d:ef:e5:43:4e:cd:fc:27:03:72:7f:19: 9e:3e:a7:4d:ae:3d:16:9c:aa:be:29:dd:10:e1:27:b2:0d:a6: ac:bd:68:8a:4d:08:d2:c8:16:77:00:dc:f7:58:e8:e4:20:63: ad:b0:b6:34:70:b1:1e:08:70:8a:f3:7d:79:1e:2f:19:cd:41: c4:99:6b:0d:d2:10:4f:20:a9:a9:96:5d:df:d4:36:1e:a2:f2: 3f:9e:2e:7d:98:ce:52:1a:43:95:47:f2:14:34:f4:13:44:53: 40:d5:ab:4c:34:bf:10:4b:74:d0:89:2b:71:70:42:9f:40:e6: c0:97:55:96 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNlOsRxaaxWfiVR9txHPvvRb3DDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx RkI5NTQ2MDAeFw0yNjA0MjExMDM1MTVaFw0yNjA0MjIxMTQ2MTVaMDMxMTAvBgNV BAMTKDNBNzgxQUYxNjRGM0IxNzZFQTNBMTYyQjRGNDJDMTUyNEVEMDhGRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBx51qPnw9iruCC26gOOQrrX1S GKOPbvBGqafJH5jvUIryB+aBTYd31tS82ozWeAJx1mwEFGwtjhSAId6nkUUzwhib O4zc74KVkkj0Bh1wG8bMxGmIi5tz2bsolp34HNNUgCDNSDsM6iq2lxNvXUqILo36 0lZUeZA7+q5CHKpCL5ttxNOgLXEJs5oVSE50eAepBvMrZ81Tk7C1nLu8REx+HKo3 MNfZFXzj774IeUVk5Sl9FCTiOzcAy9kW8it7aqC+Er8b329YuUgMdBd4+fzWn2Yb dWJtpSIho4tV6lp0y+9AtvU81PemBI6x5z9tYQs7BB0R2Okro1gAQy9LzJOLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOnga8WTzsXbqOhYrT0LBUk7Qj+EwHwYDVR0j BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTIzNzc2MDEvMC83MDlFNTEyNTE3NjYy Nzg0NjY3N0FGOTA4RTc2Q0FFMjFGQjk1NDYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5ib8si3jsrX Gv6bRRr0At8zqhlmo0/h3eMqOIzPBRjMn+qgp3UgQpF90+AKpTgZAWFupA+tslyg qInHi+ZQcDTnDfn8rnYcXZ5DC9Im103AvVowaJEW8Q4gCExzyFr1CPLIlRJ3nDbV NMtSXtMBCqIca7hYKhqr4r9iukgt5UKja3vhPe/lQ07N/CcDcn8Znj6nTa49Fpyq vindEOEnsg2mrL1oik0I0sgWdwDc91jo5CBjrbC2NHCxHghwivN9eR4vGc1BxJlr DdIQTyCpqZZd39Q2HqLyP54ufZjOUhpDlUfyFDT0E0RTQNWrTDS/EEt00IkrcXBC n0DmwJdVlg== -----END CERTIFICATE-----Generated at Wed Apr 22 00:07:23 2026 by rpki-client