$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft File: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft (raw, json) Hash identifier: d0QUZtGyYcTiKytPmlArDTxiq2jtCSQfwFOklj7infI= Subject key identifier: 38:CE:38:59:F3:7E:34:00:33:1D:D0:D5:F8:00:FF:3B:8D:DE:D9:41 Authority key identifier: 70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 Certificate issuer: /CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Certificate serial: 2AEE0EE853889251DADE60B25E025C5D9DAAA274 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft Manifest number: 95 Signing time: Wed 29 Jul 2026 20:40:12 +0000 Manifest this update: Wed 29 Jul 2026 20:35:12 +0000 Manifest next update: Thu 30 Jul 2026 23:45:12 +0000 Files and hashes: 1: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl (hash: y3M3st2fu5A+/yH4PZZgeOOs8GMWHAJkmaEOEtaKVJQ=) 2: 3130332e3136302e33322e302f32332d3233203d3e2030.roa (hash: WylQaiIhxibsdwDrEyIJufkXIHMaWHvFmju0+BGbF1w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 22:45:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ee:0e:e8:53:88:92:51:da:de:60:b2:5e:02:5c:5d:9d:aa:a2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Validity Not Before: Jul 29 20:35:12 2026 GMT Not After : Jul 30 23:45:12 2026 GMT Subject: CN=38CE3859F37E3400331DD0D5F800FF3B8DDED941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2b:67:d3:64:9d:8d:d5:17:88:41:83:c1:88: 17:3f:1e:4e:d0:a9:10:ee:96:08:30:ed:89:8f:09: 4c:35:b6:69:b7:3e:2d:ce:de:ac:f3:db:80:29:0e: 66:cc:3b:25:0f:15:2b:7e:66:39:54:3e:32:9e:6f: d2:59:94:c0:f9:96:f6:60:bd:02:f0:33:0f:64:5f: e7:e3:66:d4:0b:18:43:44:bc:a7:08:15:49:6a:8f: 4a:11:d3:c6:11:c4:3c:3d:84:f2:6b:8a:64:65:e2: 41:e7:7b:d6:42:07:a0:52:f2:c1:55:18:bb:6b:9f: 95:5d:3c:d6:d1:60:3d:40:c3:d7:66:07:4f:ec:61: b5:77:7d:9d:a0:57:30:58:ce:26:f7:d9:14:cf:42: 84:8f:4b:5b:b2:41:44:81:78:14:f3:26:5c:51:ad: 47:d8:f3:a0:2e:4c:90:0f:08:76:2b:24:cb:7c:3c: 2f:86:d8:e1:da:34:27:ce:26:41:b2:b6:0c:9f:d2: 55:90:11:23:11:c0:0e:e1:20:cb:9a:f6:b7:1e:8f: b1:ed:9d:8e:90:10:98:ed:21:0f:43:66:65:1e:c5: 02:1c:26:9c:eb:02:88:f6:7d:06:7d:88:a0:5f:dc: c1:86:86:3e:aa:ba:cd:57:dd:fa:87:f0:ac:06:b4: a7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CE:38:59:F3:7E:34:00:33:1D:D0:D5:F8:00:FF:3B:8D:DE:D9:41 X509v3 Authority Key Identifier: keyid:70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:87:f3:f0:09:6b:7d:c3:fb:1d:ac:36:59:67:3d:6c:ed:e1: a7:c9:5e:ea:a4:45:9f:ca:94:71:aa:80:1d:e1:a4:ae:76:6e: 20:6b:2d:23:be:b4:fa:c3:ca:04:4c:d1:4f:16:39:5c:33:ce: 81:ca:65:cc:61:13:5d:5f:c4:42:01:da:14:11:86:1f:aa:1f: 8f:b7:30:3b:16:6d:be:07:ac:ef:82:d2:eb:bc:b3:30:4e:b6: ff:e4:ef:9f:b2:f2:c9:30:4a:4e:e2:d4:28:a6:64:42:03:71: 40:57:9b:e6:65:e1:e4:0d:ae:9d:c1:11:58:5c:53:b9:80:97: ae:c9:ad:12:b5:4a:fa:14:0b:fb:0c:88:2f:01:ed:1f:18:2c: 7a:86:dd:fd:cd:3e:a5:1c:fe:69:1b:bd:f6:65:c5:ef:15:9c: e0:bd:04:f7:d2:4d:7c:ac:f7:18:e4:76:19:93:5c:50:d0:49: f4:05:a8:c3:36:ce:66:0a:47:0f:b2:b1:a7:b4:e9:44:fa:2a: 45:f0:29:4c:25:e4:5d:33:ac:02:bc:55:6b:a1:2e:90:61:0e: 03:e4:3c:f3:8b:11:0f:21:42:c9:c1:e5:10:ec:9a:4f:99:7e: 40:02:d9:bc:09:b0:15:b3:b4:06:af:9b:b6:05:96:a6:62:b0: db:86:f8:07 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKu4O6FOIklHa3mCyXgJcXZ2qonQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJD MDRGMEVCNjAeFw0yNjA3MjkyMDM1MTJaFw0yNjA3MzAyMzQ1MTJaMDMxMTAvBgNV BAMTKDM4Q0UzODU5RjM3RTM0MDAzMzFERDBENUY4MDBGRjNCOERERUQ5NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmK2fTZJ2N1ReIQYPBiBc/Hk7Q qRDulggw7YmPCUw1tmm3Pi3O3qzz24ApDmbMOyUPFSt+ZjlUPjKeb9JZlMD5lvZg vQLwMw9kX+fjZtQLGENEvKcIFUlqj0oR08YRxDw9hPJrimRl4kHne9ZCB6BS8sFV GLtrn5VdPNbRYD1Aw9dmB0/sYbV3fZ2gVzBYzib32RTPQoSPS1uyQUSBeBTzJlxR rUfY86AuTJAPCHYrJMt8PC+G2OHaNCfOJkGytgyf0lWQESMRwA7hIMua9rcej7Ht nY6QEJjtIQ9DZmUexQIcJpzrAoj2fQZ9iKBf3MGGhj6qus1X3fqH8KwGtKdXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOM44WfN+NAAzHdDV+AD/O43e2UEwHwYDVR0j BBgwFoAUcJpzEGeK4q3u2dINyM0+YsBPDrYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5NDg0MTI0Mzg5Mzc2MS8wLzcwOUE3MzEwNjc4QUUyQURFRUQ5RDIwREM4Q0Qz RTYyQzA0RjBFQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJDMDRGMEVCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTQ4NDEyNDM4OTM3NjEvMC83MDlBNzMxMDY3OEFF MkFERUVEOUQyMERDOENEM0U2MkMwNEYwRUI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIfz8AlrfcP7 Haw2WWc9bO3hp8le6qRFn8qUcaqAHeGkrnZuIGstI760+sPKBEzRTxY5XDPOgcpl zGETXV/EQgHaFBGGH6ofj7cwOxZtvges74LS67yzME62/+Tvn7LyyTBKTuLUKKZk QgNxQFeb5mXh5A2uncERWFxTuYCXrsmtErVK+hQL+wyILwHtHxgseobd/c0+pRz+ aRu99mXF7xWc4L0E99JNfKz3GOR2GZNcUNBJ9AWowzbOZgpHD7Kxp7TpRPoqRfAp TCXkXTOsArxVa6EukGEOA+Q884sRDyFCycHlEOyaT5l+QALZvAmwFbO0Bq+btgWW pmKw24b4Bw== -----END CERTIFICATE-----Generated at Wed Jul 29 22:59:06 2026 by rpki-client