$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft File: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft (raw, json) Hash identifier: jFKLnPqh41dPVmycSrgjeYH9fWRy18BosgsvmFvoXT4= Subject key identifier: D9:4B:4B:EB:5A:24:C7:27:09:C6:1E:49:DC:9F:F1:7D:11:27:1A:DA Authority key identifier: 70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 Certificate issuer: /CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Certificate serial: 0DF1B31F5474D738C83FBA31B7E1AB0B75AA36A8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft Manifest number: 57 Signing time: Sat 13 Jun 2026 09:06:38 +0000 Manifest this update: Sat 13 Jun 2026 09:01:38 +0000 Manifest next update: Sun 14 Jun 2026 09:39:38 +0000 Files and hashes: 1: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl (hash: 4D/Rrx5wQalin0GOisYGs5werugOQwXkIJ8a5pnPwdE=) 2: 3130332e3136302e33322e302f32332d3233203d3e2030.roa (hash: WylQaiIhxibsdwDrEyIJufkXIHMaWHvFmju0+BGbF1w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 09:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f1:b3:1f:54:74:d7:38:c8:3f:ba:31:b7:e1:ab:0b:75:aa:36:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Validity Not Before: Jun 13 09:01:38 2026 GMT Not After : Jun 14 09:39:38 2026 GMT Subject: CN=D94B4BEB5A24C72709C61E49DC9FF17D11271ADA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3f:ff:0a:9b:22:a9:cf:99:47:16:a1:24:37: 11:54:1d:dc:ea:ce:c0:46:3f:ee:13:98:4a:30:2b: 00:44:77:83:33:e7:69:98:38:9f:41:1b:ad:05:31: 73:57:f2:0e:b1:82:1b:09:4b:40:99:fa:77:c9:37: 28:c3:c9:60:fb:74:3d:e3:d3:6d:da:57:12:c2:47: 81:26:47:c6:38:58:82:51:e0:70:76:a4:74:ab:80: f0:c6:78:24:42:f1:08:cb:9d:a8:67:f8:9a:fd:70: e1:cc:43:fc:ce:3c:21:48:ee:0a:54:3f:5c:9a:9a: 68:91:55:c8:53:a5:e8:b8:2f:56:b5:a9:22:4e:30: 48:e5:e1:0f:25:8a:4a:d6:2f:58:a4:69:cd:ab:a8: 5d:5b:d3:e1:de:a6:18:ef:8c:39:b2:15:ed:37:ed: 24:84:c0:71:b0:4b:5e:8e:cb:08:39:cc:c4:46:de: f4:53:83:cf:3b:cf:48:41:d7:9e:ad:41:a8:3b:f8: 25:b5:42:b0:50:fa:77:f9:48:5f:18:5d:f7:35:48: dc:bf:54:7c:81:90:b3:7e:39:8d:2c:47:8a:85:61: 0c:f9:51:25:d1:19:fe:38:a6:7d:0d:c8:5e:50:ef: f9:ae:9d:19:50:45:c0:c7:03:89:ac:2d:b9:13:96: 0d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4B:4B:EB:5A:24:C7:27:09:C6:1E:49:DC:9F:F1:7D:11:27:1A:DA X509v3 Authority Key Identifier: keyid:70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:5e:bd:f2:45:02:73:13:a8:16:84:82:21:13:80:ca:e6:e8: 5c:d2:6e:0d:b9:30:b4:4a:07:83:63:e9:44:45:85:b0:01:39: 90:a6:26:b8:10:22:d0:ac:f2:c8:96:2a:c7:72:73:b0:c9:05: 86:49:6b:73:f3:4f:61:c1:e9:7d:38:46:7d:99:5b:7b:6d:a6: 60:aa:b7:e2:ed:83:7c:7b:8e:13:04:b2:f0:ae:cf:a4:e8:e9: 29:96:13:f7:31:b2:68:8e:3e:1c:1b:df:71:65:b1:a0:2a:af: 51:1d:ef:44:2f:5f:2f:a0:75:22:05:c0:3e:a9:71:78:ad:66: af:73:a0:1b:03:df:35:24:5f:c0:ef:96:77:d7:b1:ef:40:8c: 90:f1:a7:78:5d:8a:97:2f:cd:f8:c8:e4:06:34:b4:bf:c0:a5: 43:04:a9:c6:7d:8a:68:29:36:43:0e:58:e2:d0:ea:25:49:82: d3:91:3b:b6:5b:cb:1f:a4:6c:50:d6:61:3f:25:9e:3e:c9:66: 76:b6:1a:68:5a:a4:62:07:d5:b4:a8:24:fe:12:47:5e:76:f6: a1:58:6f:97:53:ef:5c:2b:cb:21:9d:4a:96:b6:6e:01:c6:28: 2c:e2:90:34:42:90:38:ea:93:c0:de:5d:7f:3c:1a:1f:8e:7b: 57:08:47:7e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDfGzH1R01zjIP7oxt+GrC3WqNqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJD MDRGMEVCNjAeFw0yNjA2MTMwOTAxMzhaFw0yNjA2MTQwOTM5MzhaMDMxMTAvBgNV BAMTKEQ5NEI0QkVCNUEyNEM3MjcwOUM2MUU0OURDOUZGMTdEMTEyNzFBREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHP/8KmyKpz5lHFqEkNxFUHdzq zsBGP+4TmEowKwBEd4Mz52mYOJ9BG60FMXNX8g6xghsJS0CZ+nfJNyjDyWD7dD3j 023aVxLCR4EmR8Y4WIJR4HB2pHSrgPDGeCRC8QjLnahn+Jr9cOHMQ/zOPCFI7gpU P1yammiRVchTpei4L1a1qSJOMEjl4Q8likrWL1ikac2rqF1b0+HephjvjDmyFe03 7SSEwHGwS16Oywg5zMRG3vRTg887z0hB156tQag7+CW1QrBQ+nf5SF8YXfc1SNy/ VHyBkLN+OY0sR4qFYQz5USXRGf44pn0NyF5Q7/munRlQRcDHA4msLbkTlg0jAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2UtL61okxycJxh5J3J/xfREnGtowHwYDVR0j BBgwFoAUcJpzEGeK4q3u2dINyM0+YsBPDrYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5NDg0MTI0Mzg5Mzc2MS8wLzcwOUE3MzEwNjc4QUUyQURFRUQ5RDIwREM4Q0Qz RTYyQzA0RjBFQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJDMDRGMEVCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTQ4NDEyNDM4OTM3NjEvMC83MDlBNzMxMDY3OEFF MkFERUVEOUQyMERDOENEM0U2MkMwNEYwRUI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAV698kUCcxOo FoSCIROAyuboXNJuDbkwtEoHg2PpREWFsAE5kKYmuBAi0KzyyJYqx3JzsMkFhklr c/NPYcHpfThGfZlbe22mYKq34u2DfHuOEwSy8K7PpOjpKZYT9zGyaI4+HBvfcWWx oCqvUR3vRC9fL6B1IgXAPqlxeK1mr3OgGwPfNSRfwO+Wd9ex70CMkPGneF2Kly/N +MjkBjS0v8ClQwSpxn2KaCk2Qw5Y4tDqJUmC05E7tlvLH6RsUNZhPyWePslmdrYa aFqkYgfVtKgk/hJHXnb2oVhvl1PvXCvLIZ1KlrZuAcYoLOKQNEKQOOqTwN5dfzwa H457VwhHfg== -----END CERTIFICATE-----Generated at Sun Jun 14 01:17:44 2026 by rpki-client