$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft File: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft (raw, json) Hash identifier: U0YGKwo9PSZt8q4QgKXfRmhPkZZhOPOPpSTo71b9hyg= Subject key identifier: BF:B7:EB:AE:23:08:87:7E:BD:1A:11:0A:6C:6B:C6:BD:E2:5A:BE:D1 Authority key identifier: 70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 Certificate issuer: /CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Certificate serial: 24B4F604DC31E0471FF55E5343ECF5DB37A59D41 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft Manifest number: C8 Signing time: Mon 21 Sep 2026 19:13:27 +0000 Manifest this update: Mon 21 Sep 2026 19:08:27 +0000 Manifest next update: Thu 24 Sep 2026 21:17:27 +0000 Files and hashes: 1: 709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl (hash: oQWr1D6EjofVhO73tb5eijGa/1jmzmOTyRgyqqMZ76c=) 2: 3130332e3136302e33322e302f32332d3233203d3e2030.roa (hash: WylQaiIhxibsdwDrEyIJufkXIHMaWHvFmju0+BGbF1w=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 21:17:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b4:f6:04:dc:31:e0:47:1f:f5:5e:53:43:ec:f5:db:37:a5:9d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6 Validity Not Before: Sep 21 19:08:27 2026 GMT Not After : Sep 24 21:17:27 2026 GMT Subject: CN=BFB7EBAE2308877EBD1A110A6C6BC6BDE25ABED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:58:e0:9f:e6:b3:60:99:08:a7:d0:72:18:83: d9:81:1e:e6:44:b8:c8:2a:c7:4d:49:4c:69:50:fe: 6a:3c:d5:9c:bc:9f:25:a1:6e:89:f0:7a:e0:f8:52: 21:0a:df:d7:dc:17:1e:cb:de:09:b2:17:9e:64:9c: 5a:96:40:71:65:8a:26:7b:1d:0f:c7:fa:e6:e0:92: 7e:dd:74:8d:44:be:a9:ad:e5:a1:6d:de:04:78:e5: 58:97:5d:c5:8d:96:6e:f9:8d:c8:45:bb:af:93:f2: 6b:5c:94:50:8d:b2:d0:11:2b:b8:86:0f:ec:71:a6: 63:2d:cd:d5:cd:3d:55:06:28:bf:79:25:ea:c3:32: 0e:e0:05:f0:8b:81:22:e8:58:71:53:29:95:2e:17: a9:c0:22:a8:2a:25:c5:70:78:e9:47:ec:04:46:d2: 67:6d:a4:44:ce:f1:50:1d:93:9b:56:38:50:28:9d: 8d:24:4e:94:56:3d:b6:c5:f8:3a:8e:f7:28:23:88: db:e6:12:36:be:c4:55:0c:72:b4:26:f1:b6:6f:05: 3b:fb:e8:a6:f6:98:be:1c:b1:d0:8a:70:bb:2f:aa: 80:f3:93:a0:6a:b9:50:99:45:9c:a0:5e:be:ce:6f: 04:92:20:b1:b2:82:38:09:19:f3:e6:4b:14:dd:d6: 54:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B7:EB:AE:23:08:87:7E:BD:1A:11:0A:6C:6B:C6:BD:E2:5A:BE:D1 X509v3 Authority Key Identifier: keyid:70:9A:73:10:67:8A:E2:AD:EE:D9:D2:0D:C8:CD:3E:62:C0:4F:0E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094894841243893761/0/709A7310678AE2ADEED9D20DC8CD3E62C04F0EB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:9e:b5:41:04:36:6c:c7:6a:6c:e3:86:c0:ad:7f:7f:21:e9: 2e:24:42:04:e1:31:9d:0e:c4:1a:b9:3f:20:76:88:dd:d2:bf: 9b:fd:ca:ab:59:f1:36:65:6f:20:a4:9c:a1:0f:fa:14:8c:5e: e5:8f:b6:14:ba:eb:d1:a2:56:bb:6d:0c:19:a0:f6:44:67:5f: d2:84:44:f1:7a:d5:ab:82:ca:20:f2:7b:9b:b8:db:c1:fd:6b: b4:84:f3:26:2d:e1:c8:d4:7e:2b:1f:1e:a0:ea:bd:e2:4a:a9: 05:27:6e:52:a1:34:58:91:14:40:61:a8:e0:11:07:76:7d:e2: 5f:71:43:ce:d6:98:af:ef:cd:fa:75:3a:85:58:e2:50:de:69: 0c:a2:c4:c5:83:a0:e1:cd:17:f3:5f:ca:bd:e7:88:bf:7e:88: 53:88:49:e6:0e:b2:f2:fc:4b:56:8f:28:bc:b2:40:d7:29:39: 8a:32:ad:15:5f:d2:3b:65:6f:b5:e7:dc:24:d6:fd:6d:42:32: 5e:92:64:3b:74:f8:61:19:91:2a:bd:b1:ff:8e:b6:18:65:0c: f1:6c:ac:75:f8:58:dd:d2:a4:02:21:6d:19:d9:b3:07:fe:9d: 43:01:3d:71:19:d2:4f:1f:2c:08:3e:ce:9a:80:0e:9e:70:8c: d2:4a:6a:99 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJLT2BNwx4Ecf9V5TQ+z12zelnUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJD MDRGMEVCNjAeFw0yNjA5MjExOTA4MjdaFw0yNjA5MjQyMTE3MjdaMDMxMTAvBgNV BAMTKEJGQjdFQkFFMjMwODg3N0VCRDFBMTEwQTZDNkJDNkJERTI1QUJFRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiWOCf5rNgmQin0HIYg9mBHuZE uMgqx01JTGlQ/mo81Zy8nyWhbonweuD4UiEK39fcFx7L3gmyF55knFqWQHFliiZ7 HQ/H+ubgkn7ddI1Evqmt5aFt3gR45ViXXcWNlm75jchFu6+T8mtclFCNstARK7iG D+xxpmMtzdXNPVUGKL95JerDMg7gBfCLgSLoWHFTKZUuF6nAIqgqJcVweOlH7ARG 0mdtpETO8VAdk5tWOFAonY0kTpRWPbbF+DqO9ygjiNvmEja+xFUMcrQm8bZvBTv7 6Kb2mL4csdCKcLsvqoDzk6BquVCZRZygXr7ObwSSILGygjgJGfPmSxTd1lQrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUv7frriMIh369GhEKbGvGveJavtEwHwYDVR0j BBgwFoAUcJpzEGeK4q3u2dINyM0+YsBPDrYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg5NDg0MTI0Mzg5Mzc2MS8wLzcwOUE3MzEwNjc4QUUyQURFRUQ5RDIwREM4Q0Qz RTYyQzA0RjBFQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5QTczMTA2NzhBRTJBREVFRDlEMjBEQzhDRDNFNjJDMDRGMEVCNi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ4OTQ4NDEyNDM4OTM3NjEvMC83MDlBNzMxMDY3OEFF MkFERUVEOUQyMERDOENEM0U2MkMwNEYwRUI2Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH561QQQ2bMdq bOOGwK1/fyHpLiRCBOExnQ7EGrk/IHaI3dK/m/3Kq1nxNmVvIKScoQ/6FIxe5Y+2 FLrr0aJWu20MGaD2RGdf0oRE8XrVq4LKIPJ7m7jbwf1rtITzJi3hyNR+Kx8eoOq9 4kqpBSduUqE0WJEUQGGo4BEHdn3iX3FDztaYr+/N+nU6hVjiUN5pDKLExYOg4c0X 81/KveeIv36IU4hJ5g6y8vxLVo8ovLJA1yk5ijKtFV/SO2VvtefcJNb9bUIyXpJk O3T4YRmRKr2x/462GGUM8WysdfhY3dKkAiFtGdmzB/6dQwE9cRnSTx8sCD7OmoAO nnCM0kpqmQ== -----END CERTIFICATE-----Generated at Tue Sep 22 18:08:18 2026 by rpki-client