$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft File: 709E5125176627846677AF908E76CAE21FB95460.mft (raw, json) Hash identifier: P+Ob0SNQ47u9ORtm55zvcmxMyj7HA9/KNyqb0vs2wag= Subject key identifier: 36:6A:28:E7:7B:C7:55:EF:1B:CA:BF:00:F7:6A:7B:25:CE:EF:09:D2 Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460 Certificate serial: 694CF42D670889CE27BEAEE5FD3006D2008E571D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft Manifest number: D2 Signing time: Mon 12 Oct 2026 21:47:26 +0000 Manifest this update: Mon 12 Oct 2026 21:42:26 +0000 Manifest next update: Thu 15 Oct 2026 22:55:26 +0000 Files and hashes: 1: 3130332e3132302e37342e302f32342d3234203d3e203538343631.roa (hash: Pr5NBsNQ4w+2UPeMbxevcNKzNN5WoXYQCMaS/P/zOtg=) 2: 3230332e3133352e39362e302f32312d3231203d3e203538343631.roa (hash: oqeccvPR3+IpAwygIF/oeBAJSb31FyNOolE97M8bnZM=) 3: 3230332e3133352e3130342e302f32342d3234203d3e203536303436.roa (hash: GZliXQ1/MKT4kSXUQTbCC3oZd0ZgyhX/v4L01AAk4ZY=) 4: 3230332e3133352e39362e302f32312d3231203d3e203536303436.roa (hash: ngkUFhfKIFc0bNmMAHJtN3/FFcR4TkGzTWuBHXq/6mo=) 5: 3132332e39392e3139382e302f32342d3234203d3e203536303436.roa (hash: eLlkl6s2oq5YaE+V/mrCZDzlPmss69CoPgY65UKenV8=) 6: 3132332e39392e3230372e302f32342d3234203d3e203536303436.roa (hash: BMff2BnjPO6TURSDqwS2MmpOFH3VB1OPH2fMelWJ37w=) 7: 3132332e39392e3139342e302f32342d3234203d3e203536303436.roa (hash: /LyhXxadlJVq5IFaPmqd8NuURpfRzUDXKVkraXRzuKI=) 8: 3132332e39392e3230362e302f32342d3234203d3e203536303436.roa (hash: rLlTB8afuqz0Jj8a1c3LdLyNwLfwlf2Z8mFieiDedNA=) 9: 3230332e3133352e3130382e302f32342d3234203d3e203536303436.roa (hash: 38TgIBqQHAA96dS2lwsMRBNdMfnRErFfNMHETSVGQx4=) 10: 3132332e39392e3230312e302f32342d3234203d3e203536303436.roa (hash: nfBppX/QixBneQV6vk7opgxEhjYTUksoqsdc8OUHvCc=) 11: 3132332e39392e3139362e302f32342d3234203d3e203536303436.roa (hash: ++Z23h1aqKofV3olaP1zbMjegB3rHSL2+1CwVEKqE5E=) 12: 3132342e3234382e36342e302f31382d3138203d3e203538343631.roa (hash: 6Kh3kADdLzEQKYiGqBHcfED9YAZb77roeahrAkbO94E=) 13: 3132332e39392e3139392e302f32342d3234203d3e203536303436.roa (hash: z0CNegRcRsFkdUgwpwxZ9nN/Iy9HCXGKT0y4nw1eom4=) 14: 709E5125176627846677AF908E76CAE21FB95460.crl (hash: LWjDOfrFHRLykqBAWaxcirX8EW08Rk+CNZYuLUOaWUA=) 15: 3230332e3133352e3132302e302f32312d3231203d3e203538343631.roa (hash: RGywVuvY0/L3+wg4ACHqETGFImk1flLfvL0SNc861ew=) 16: 3230332e3133352e3130342e302f32312d3231203d3e203538343631.roa (hash: fM1A18suRK8WzD9z99Lh+YXreBGdtCI+wFi/OQZ2QYY=) 17: 3132332e39392e3139352e302f32342d3234203d3e203536303436.roa (hash: p34BhMVqzACE3HYHCwUwUpaatMkPt30PeQFJ7o50hLU=) 18: 3132332e39392e3139322e302f31382d3138203d3e203538343631.roa (hash: eCLJQ6hVMH0Y1HWI+4+FPraClXX4hypXVvkpKYboMtE=) 19: 3130332e3132302e37322e302f32342d3234203d3e203538343631.roa (hash: LhgzEloXM1//B37y4gExKVofK8riLORDS4SNhrFc0gw=) 20: 3132332e39392e3230342e302f32342d3234203d3e203536303436.roa (hash: qr06oZrQzwpbsNbGvmFz9wUQ4h6tMWVPF4zIxK71ZvY=) 21: 3131362e37302e36342e302f31382d3138203d3e203538343631.roa (hash: 4tTQbayWaJ94/APqMkPvrudpPMWZfUh2eRbBIVAxExo=) 22: 3230332e3133352e3130392e302f32342d3234203d3e203536303436.roa (hash: bAuEotOBWkfK+l0XMBi4UbaQgMPZlvEWFIj/aCt7iIk=) 23: 3132332e39392e3139322e302f32342d3234203d3e203536303436.roa (hash: xVw3215ouhyRfkrBawXAhYsYuaPozBqOB5JMIF6KvcI=) 24: 3230332e3133352e3130362e302f32342d3234203d3e203536303436.roa (hash: n9hcF/+Tr2NlYM1oUk+MToyoZXtLGqNqAzWKTnB77ZM=) 25: 3132332e39392e3230332e302f32342d3234203d3e203536303436.roa (hash: gfAT/QYxqrwRCsOjFxjfR5qS+KNxxqUXfE58ipVOHiA=) 26: 3230332e3133352e3131312e302f32342d3234203d3e203536303436.roa (hash: +34kw5HV2z2eHoWYV+KhRIwd91Ghwjh0gUsrg/w4kQs=) 27: 3130332e3132302e37352e302f32342d3234203d3e203538343631.roa (hash: DeVvSC0gkXY2pkQtHB+9HU0J0vod+7bYff/EV4+DAFU=) 28: 3132332e39392e3139372e302f32342d3234203d3e203536303436.roa (hash: giB60RXOqPiHw+WpYG8hkzWkeY9zlK473PnH6rncvNU=) 29: 3230332e3133352e3131322e302f32312d3231203d3e203538343631.roa (hash: NUO1nMO021I1S5c1sJbtenOhmN0TKvnC956i0tIBsG4=) 30: 3132332e39392e3230352e302f32342d3234203d3e203536303436.roa (hash: A+JYZYaX7pfDnwPKiZwgf7VueKfY89J+t/cO6gXEw1A=) 31: 3132332e39392e3230322e302f32342d3234203d3e203536303436.roa (hash: FWytSVV3bw6r2i/f+FObRmRvnU9Kn3xZRXkNxwxIrm0=) 32: 3132332e39392e3139332e302f32342d3234203d3e203536303436.roa (hash: mcFdFJaMC4lzHa5DQkzQU384MSLRc9nd1xbM4A6s66U=) 33: 3132332e39392e3230302e302f32342d3234203d3e203536303436.roa (hash: ad/fG94fMIfMdL3XbD+RZEpVQd9HnnPMGe3MotwlNTU=) 34: 3230332e3133352e3130372e302f32342d3234203d3e203536303436.roa (hash: V/wj4NINZBkYbI6ksTEXDQ4vhVi7K1iFwrB6sRiPXCE=) 35: 3130332e3132302e37332e302f32342d3234203d3e203538343631.roa (hash: 0VGwIZybtL6yUvgEvn9GF6XQoKjhTE1ct0cJpkcJzuo=) 36: 3230332e3133352e3130352e302f32342d3234203d3e203536303436.roa (hash: TBO7Oh9i58dQeUdge/BLgLnPJuK+BHqgb8xkTX7by9A=) 37: 3230332e3133352e3131302e302f32342d3234203d3e203536303436.roa (hash: fh9fS78iKTHn8OIFflYokzcy8pnDMzkevRXN0nwYXwc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 22:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:4c:f4:2d:67:08:89:ce:27:be:ae:e5:fd:30:06:d2:00:8e:57:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709E5125176627846677AF908E76CAE21FB95460 Validity Not Before: Oct 12 21:42:26 2026 GMT Not After : Oct 15 22:55:26 2026 GMT Subject: CN=366A28E77BC755EF1BCABF00F76A7B25CEEF09D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:85:5c:c1:87:ad:4d:d4:9e:49:a3:b7:75: 13:da:fb:f8:4f:74:4a:bb:4c:f6:c6:70:e7:61:3d: db:fd:38:96:41:87:82:f5:dc:81:23:d5:c4:7e:8f: 64:fc:6e:8f:af:91:06:80:fb:cd:50:52:4e:e5:6e: 42:af:4f:85:29:22:37:2e:a5:10:44:3e:e0:82:f5: 41:05:90:87:a0:6e:1e:de:06:80:8a:d5:61:58:1f: fb:bb:46:69:29:c0:f1:29:90:b1:5b:2b:24:fc:09: 75:a0:ce:f3:8d:57:b2:26:5b:aa:54:c3:d9:b6:5a: 70:3c:41:ba:dc:a2:61:10:54:a7:4f:3d:de:88:25: 32:0b:4a:3a:31:2a:0c:42:e5:1a:2d:5a:fd:62:b2: f9:1f:cb:26:96:05:a8:8a:2c:79:94:60:83:0a:83: 62:de:2c:24:f9:90:81:16:ac:d5:34:e3:ff:ef:c5: 96:a3:6d:a1:20:0c:e2:0d:a0:d7:44:48:d5:39:c1: 39:53:6f:55:d4:4e:21:93:97:c7:82:f2:0b:cd:7e: a8:11:a2:5e:e9:2f:bc:dc:f5:dc:53:3f:b4:a7:e0: a7:83:09:a7:d4:48:50:ae:c4:92:94:41:89:d9:99: cd:f9:90:07:bc:81:53:96:8e:b0:ac:d5:e3:4e:23: f9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6A:28:E7:7B:C7:55:EF:1B:CA:BF:00:F7:6A:7B:25:CE:EF:09:D2 X509v3 Authority Key Identifier: keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:2c:73:80:56:d8:61:d3:fd:89:87:d0:40:f2:98:9e:0c:80: df:74:f2:10:e6:54:7e:d8:01:e1:c7:5c:93:68:07:f7:d8:99: 91:a1:02:12:2f:21:a3:be:79:6f:53:8e:9b:a7:20:cf:e3:16: f3:98:52:08:c2:ee:f7:68:5b:7b:6a:53:d5:41:8d:ec:50:0c: 09:6c:e1:b8:75:b4:57:6d:22:7c:29:a3:42:de:f5:9e:a1:f4: f3:bc:dd:b8:3c:48:59:1f:52:5c:bd:91:6a:de:04:2c:a6:39: da:a1:b5:3f:5f:98:98:3d:9c:6c:b2:b2:a7:54:c7:88:a6:93: 88:49:f5:48:97:7b:ea:be:86:b1:0c:66:70:d8:c4:39:16:13: f1:7b:05:12:57:1d:93:7e:d5:49:15:cb:08:f2:c4:74:89:d5: c5:f3:e0:2f:fe:5f:50:c6:54:c2:f1:c9:7a:e2:f7:20:cc:db: 8e:66:08:d7:68:57:89:84:71:6d:5c:96:77:05:83:49:85:bf: b0:db:6c:d7:a1:4f:f6:87:4d:77:c3:36:75:dd:6b:18:f8:92: ff:a3:c3:8d:6e:e2:a8:23:bb:b9:68:aa:62:33:f6:26:97:a5: 1b:b4:15:35:21:5f:7c:d4:53:09:77:be:f1:80:e7:b9:11:2d: 3b:af:4b:4b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaUz0LWcIic4nvq7l/TAG0gCOVx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx RkI5NTQ2MDAeFw0yNjEwMTIyMTQyMjZaFw0yNjEwMTUyMjU1MjZaMDMxMTAvBgNV BAMTKDM2NkEyOEU3N0JDNzU1RUYxQkNBQkYwMEY3NkE3QjI1Q0VFRjA5RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE54VcwYetTdSeSaO3dRPa+/hP dEq7TPbGcOdhPdv9OJZBh4L13IEj1cR+j2T8bo+vkQaA+81QUk7lbkKvT4UpIjcu pRBEPuCC9UEFkIegbh7eBoCK1WFYH/u7RmkpwPEpkLFbKyT8CXWgzvONV7ImW6pU w9m2WnA8QbrcomEQVKdPPd6IJTILSjoxKgxC5RotWv1isvkfyyaWBaiKLHmUYIMK g2LeLCT5kIEWrNU04//vxZajbaEgDOINoNdESNU5wTlTb1XUTiGTl8eC8gvNfqgR ol7pL7zc9dxTP7Sn4KeDCafUSFCuxJKUQYnZmc35kAe8gVOWjrCs1eNOI/nXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNmoo53vHVe8byr8A92p7Jc7vCdIwHwYDVR0j BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTIzNzc2MDEvMC83MDlFNTEyNTE3NjYy Nzg0NjY3N0FGOTA4RTc2Q0FFMjFGQjk1NDYwLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnyxzgFbYYdP9 iYfQQPKYngyA33TyEOZUftgB4cdck2gH99iZkaECEi8ho755b1OOm6cgz+MW85hS CMLu92hbe2pT1UGN7FAMCWzhuHW0V20ifCmjQt71nqH087zduDxIWR9SXL2Rat4E LKY52qG1P1+YmD2cbLKyp1THiKaTiEn1SJd76r6GsQxmcNjEORYT8XsFElcdk37V SRXLCPLEdInVxfPgL/5fUMZUwvHJeuL3IMzbjmYI12hXiYRxbVyWdwWDSYW/sNts 16FP9odNd8M2dd1rGPiS/6PDjW7iqCO7uWiqYjP2JpelG7QVNSFffNRTCXe+8YDn uREtO69LSw== -----END CERTIFICATE-----Generated at Wed Oct 14 10:33:43 2026 by rpki-client