$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft File: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft (raw, json) Hash identifier: vNEYkzeJczwlo1B2NPoG0y6ykYx2ogYhDHtPAXuv/fk= Subject key identifier: BE:CA:C4:1B:36:FF:E2:72:BF:C9:8B:F3:7D:97:54:DC:D6:57:0A:43 Authority key identifier: 70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 Certificate issuer: /CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Certificate serial: 6D332449C95A5488595506E44D06CF5500517DF7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft Manifest number: 0A Signing time: Thu 16 Apr 2026 09:49:31 +0000 Manifest this update: Thu 16 Apr 2026 09:44:31 +0000 Manifest next update: Fri 17 Apr 2026 12:30:31 +0000 Files and hashes: 1: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl (hash: TuqgNbr/gl6znPjD4EBGMunI0um92aLMJ1cK3r+k0/k=) 2: 3130332e3136302e33322e302f32332d3233203d3e2030.roa (hash: WylQaiIhxibsdwDrEyIJufkXIHMaWHvFmju0+BGbF1w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 12:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:33:24:49:c9:5a:54:88:59:55:06:e4:4d:06:cf:55:00:51:7d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Validity Not Before: Apr 16 09:44:31 2026 GMT Not After : Apr 17 12:30:31 2026 GMT Subject: CN=BECAC41B36FFE272BFC98BF37D9754DCD6570A43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:57:d7:87:38:cb:b7:3d:d0:f2:70:6b:ba:c0: b7:7e:9e:bd:1c:8b:60:04:a3:69:33:64:91:ec:6d: f9:5f:25:8e:95:f7:68:27:df:05:b0:15:5c:7f:63: bd:1f:6b:95:96:13:08:ba:4a:a9:ba:ad:1c:1b:f8: 52:1f:67:6b:71:9d:24:71:95:1c:81:11:67:77:e5: e3:05:0e:cc:a7:5d:99:c8:1f:45:a7:e6:dd:37:2f: d2:44:9c:42:3d:b2:1a:10:be:6e:35:86:bf:78:86: 63:36:b3:6f:05:1d:c7:2e:11:46:2b:4d:3f:fe:9f: 80:37:63:7e:5a:4e:03:1c:db:5e:a0:53:f4:85:de: 65:fd:9a:93:08:26:76:52:56:fe:8c:5a:11:75:41: 17:c0:6a:99:bd:bf:b7:5c:48:cd:29:eb:29:5a:eb: 6c:b2:04:e7:b7:c4:9e:96:64:2e:67:0a:af:ca:60: 4b:00:3e:df:f5:ac:59:09:03:ef:fc:d8:d0:ff:c3: 99:71:c4:a1:38:9a:eb:57:dd:eb:73:c3:91:8b:1e: d4:c3:9d:37:0a:05:2b:59:d9:b1:2a:40:53:38:16: f4:1b:01:c4:e6:2a:7e:01:c4:d1:30:52:35:b7:b6: ff:a3:2c:90:f9:dc:62:22:71:c6:cd:3a:16:1d:75: c0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CA:C4:1B:36:FF:E2:72:BF:C9:8B:F3:7D:97:54:DC:D6:57:0A:43 X509v3 Authority Key Identifier: keyid:70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:9b:50:b2:0e:b0:f8:5b:83:37:a0:1a:e8:65:c7:d9:81:b7: 45:f4:e4:fb:03:28:31:15:f1:d9:15:2d:97:75:a9:0c:a7:d3: 66:8c:8d:84:10:67:60:fb:d0:e7:a4:12:07:ca:01:88:26:19: ec:be:94:71:ee:6f:51:47:ba:6f:31:be:b6:38:92:2c:e0:1e: 5e:2f:aa:7c:d6:18:ef:2b:94:b3:76:a6:d8:53:ec:42:b3:55: e8:56:4f:89:4e:70:ee:d4:e2:94:6e:17:d2:a0:3b:d9:f5:87: 3a:7c:8b:b0:ed:22:6c:f2:19:b8:f1:89:3f:0e:e0:4e:7e:13: af:35:87:35:06:0f:09:dc:ef:21:f4:1e:6b:b4:cd:05:41:a0: ba:08:22:f4:b6:ad:bb:85:62:e5:1f:de:b4:28:b4:8d:01:dd: 67:dd:1d:c2:6c:e5:96:8b:8e:b8:ed:b1:ee:c7:89:c7:ef:99: 05:2e:99:f4:96:e7:0c:5a:37:ae:3d:1a:b1:fa:e9:8c:e3:5c: bb:ae:64:7e:42:11:68:9f:dd:b2:c9:fd:4c:61:03:15:57:6b: 2e:99:e8:7f:f9:5f:04:76:b6:5e:a6:84:9a:d3:68:a7:93:74: 2d:0a:d1:f3:a4:a7:7e:b4:e0:7f:3e:d9:e9:0b:f6:54:eb:6f: 8b:a2:a0:c8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbTMkSclaVIhZVQbkTQbPVQBRffcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJD MDRGMEVCNjAeFw0yNjA0MTYwOTQ0MzFaFw0yNjA0MTcxMjMwMzFaMDMxMTAvBgNV BAMTKEJFQ0FDNDFCMzZGRkUyNzJCRkM5OEJGMzdEOTc1NERDRDY1NzBBNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0V9eHOMu3PdDycGu6wLd+nr0c i2AEo2kzZJHsbflfJY6V92gn3wWwFVx/Y70fa5WWEwi6Sqm6rRwb+FIfZ2txnSRx lRyBEWd35eMFDsynXZnIH0Wn5t03L9JEnEI9shoQvm41hr94hmM2s28FHccuEUYr TT/+n4A3Y35aTgMc216gU/SF3mX9mpMIJnZSVv6MWhF1QRfAapm9v7dcSM0p6yla 62yyBOe3xJ6WZC5nCq/KYEsAPt/1rFkJA+/82ND/w5lxxKE4mutX3etzw5GLHtTD nTcKBStZ2bEqQFM4FvQbAcTmKn4BxNEwUjW3tv+jLJD53GIiccbNOhYddcBvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUvsrEGzb/4nK/yYvzfZdU3NZXCkMwHwYDVR0j BBgwFoAUcJpzEGeK4q3u2dINyM0+YsBPDrYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5NDg0MTI0Mzg5Mzc2MS8wLzcwOUE3MzEwNjc4QUUyQURFRUQ5RDIwREM4Q0Qz RTYyQzA0RjBFQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJDMDRGMEVCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTQ4NDEyNDM4OTM3NjEvMC83MDlBNzMxMDY3OEFF MkFERUVEOUQyMERDOENEM0U2MkMwNEYwRUI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5tQsg6w+FuD N6Aa6GXH2YG3RfTk+wMoMRXx2RUtl3WpDKfTZoyNhBBnYPvQ56QSB8oBiCYZ7L6U ce5vUUe6bzG+tjiSLOAeXi+qfNYY7yuUs3am2FPsQrNV6FZPiU5w7tTilG4X0qA7 2fWHOnyLsO0ibPIZuPGJPw7gTn4TrzWHNQYPCdzvIfQea7TNBUGguggi9Latu4Vi 5R/etCi0jQHdZ90dwmzllouOuO2x7seJx++ZBS6Z9JbnDFo3rj0asfrpjONcu65k fkIRaJ/dssn9TGEDFVdrLpnof/lfBHa2XqaEmtNop5N0LQrR86SnfrTgfz7Z6Qv2 VOtvi6KgyA== -----END CERTIFICATE-----Generated at Thu Apr 16 23:52:16 2026 by rpki-client