
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft
File: 709E5125176627846677AF908E76CAE21FB95460.mft (raw, json)
Hash identifier: VhhrmSaSzC8ljP0E0jCz2kPNhDc1wgXh/hK7Z8JvflI=
Subject key identifier: E9:5F:C4:EE:53:AF:62:58:E0:A4:D1:85:37:18:E3:B2:9E:3E:21:19
Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60
Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460
Certificate serial: 4E9BA1259807B847DDABA51DC09997661743481E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft
Manifest number: 0D
Signing time: Fri 17 Apr 2026 16:19:43 +0000
Manifest this update: Fri 17 Apr 2026 16:14:43 +0000
Manifest next update: Sat 18 Apr 2026 17:53:43 +0000
Files and hashes: 1: 3230332e3133352e3130392e302f32342d3234203d3e203536303436.roa (hash: bAuEotOBWkfK+l0XMBi4UbaQgMPZlvEWFIj/aCt7iIk=)
2: 3132332e39392e3139322e302f32342d3234203d3e203536303436.roa (hash: xVw3215ouhyRfkrBawXAhYsYuaPozBqOB5JMIF6KvcI=)
3: 709E5125176627846677AF908E76CAE21FB95460.crl (hash: UqeGR+0C6y0eaX6w7CGoZn/6NXaL7zv25xZICNEDHCU=)
4: 3132332e39392e3230322e302f32342d3234203d3e203536303436.roa (hash: FWytSVV3bw6r2i/f+FObRmRvnU9Kn3xZRXkNxwxIrm0=)
5: 3230332e3133352e3131312e302f32342d3234203d3e203536303436.roa (hash: +34kw5HV2z2eHoWYV+KhRIwd91Ghwjh0gUsrg/w4kQs=)
6: 3131362e37302e36342e302f31382d3138203d3e203538343631.roa (hash: 4tTQbayWaJ94/APqMkPvrudpPMWZfUh2eRbBIVAxExo=)
7: 3132332e39392e3139342e302f32342d3234203d3e203536303436.roa (hash: /LyhXxadlJVq5IFaPmqd8NuURpfRzUDXKVkraXRzuKI=)
8: 3132332e39392e3139392e302f32342d3234203d3e203536303436.roa (hash: z0CNegRcRsFkdUgwpwxZ9nN/Iy9HCXGKT0y4nw1eom4=)
9: 3230332e3133352e3130342e302f32312d3231203d3e203538343631.roa (hash: fM1A18suRK8WzD9z99Lh+YXreBGdtCI+wFi/OQZ2QYY=)
10: 3132332e39392e3230372e302f32342d3234203d3e203536303436.roa (hash: BMff2BnjPO6TURSDqwS2MmpOFH3VB1OPH2fMelWJ37w=)
11: 3230332e3133352e3130382e302f32342d3234203d3e203536303436.roa (hash: 38TgIBqQHAA96dS2lwsMRBNdMfnRErFfNMHETSVGQx4=)
12: 3132332e39392e3139352e302f32342d3234203d3e203536303436.roa (hash: p34BhMVqzACE3HYHCwUwUpaatMkPt30PeQFJ7o50hLU=)
13: 3132332e39392e3139332e302f32342d3234203d3e203536303436.roa (hash: mcFdFJaMC4lzHa5DQkzQU384MSLRc9nd1xbM4A6s66U=)
14: 3230332e3133352e3130362e302f32342d3234203d3e203536303436.roa (hash: n9hcF/+Tr2NlYM1oUk+MToyoZXtLGqNqAzWKTnB77ZM=)
15: 3132332e39392e3139372e302f32342d3234203d3e203536303436.roa (hash: giB60RXOqPiHw+WpYG8hkzWkeY9zlK473PnH6rncvNU=)
16: 3230332e3133352e3130352e302f32342d3234203d3e203536303436.roa (hash: TBO7Oh9i58dQeUdge/BLgLnPJuK+BHqgb8xkTX7by9A=)
17: 3230332e3133352e39362e302f32312d3231203d3e203538343631.roa (hash: oqeccvPR3+IpAwygIF/oeBAJSb31FyNOolE97M8bnZM=)
18: 3132332e39392e3230342e302f32342d3234203d3e203536303436.roa (hash: qr06oZrQzwpbsNbGvmFz9wUQ4h6tMWVPF4zIxK71ZvY=)
19: 3132332e39392e3230352e302f32342d3234203d3e203536303436.roa (hash: A+JYZYaX7pfDnwPKiZwgf7VueKfY89J+t/cO6gXEw1A=)
20: 3130332e3132302e37322e302f32342d3234203d3e203538343631.roa (hash: LhgzEloXM1//B37y4gExKVofK8riLORDS4SNhrFc0gw=)
21: 3132332e39392e3139382e302f32342d3234203d3e203536303436.roa (hash: eLlkl6s2oq5YaE+V/mrCZDzlPmss69CoPgY65UKenV8=)
22: 3132342e3234382e36342e302f31382d3138203d3e203538343631.roa (hash: 6Kh3kADdLzEQKYiGqBHcfED9YAZb77roeahrAkbO94E=)
23: 3230332e3133352e3132302e302f32312d3231203d3e203538343631.roa (hash: RGywVuvY0/L3+wg4ACHqETGFImk1flLfvL0SNc861ew=)
24: 3132332e39392e3139322e302f31382d3138203d3e203538343631.roa (hash: eCLJQ6hVMH0Y1HWI+4+FPraClXX4hypXVvkpKYboMtE=)
25: 3230332e3133352e39362e302f32312d3231203d3e203536303436.roa (hash: ngkUFhfKIFc0bNmMAHJtN3/FFcR4TkGzTWuBHXq/6mo=)
26: 3130332e3132302e37332e302f32342d3234203d3e203538343631.roa (hash: 0VGwIZybtL6yUvgEvn9GF6XQoKjhTE1ct0cJpkcJzuo=)
27: 3130332e3132302e37342e302f32342d3234203d3e203538343631.roa (hash: Pr5NBsNQ4w+2UPeMbxevcNKzNN5WoXYQCMaS/P/zOtg=)
28: 3230332e3133352e3131302e302f32342d3234203d3e203536303436.roa (hash: fh9fS78iKTHn8OIFflYokzcy8pnDMzkevRXN0nwYXwc=)
29: 3132332e39392e3230302e302f32342d3234203d3e203536303436.roa (hash: ad/fG94fMIfMdL3XbD+RZEpVQd9HnnPMGe3MotwlNTU=)
30: 3230332e3133352e3131322e302f32312d3231203d3e203538343631.roa (hash: NUO1nMO021I1S5c1sJbtenOhmN0TKvnC956i0tIBsG4=)
31: 3230332e3133352e3130372e302f32342d3234203d3e203536303436.roa (hash: V/wj4NINZBkYbI6ksTEXDQ4vhVi7K1iFwrB6sRiPXCE=)
32: 3132332e39392e3139362e302f32342d3234203d3e203536303436.roa (hash: ++Z23h1aqKofV3olaP1zbMjegB3rHSL2+1CwVEKqE5E=)
33: 3130332e3132302e37352e302f32342d3234203d3e203538343631.roa (hash: DeVvSC0gkXY2pkQtHB+9HU0J0vod+7bYff/EV4+DAFU=)
34: 3132332e39392e3230312e302f32342d3234203d3e203536303436.roa (hash: nfBppX/QixBneQV6vk7opgxEhjYTUksoqsdc8OUHvCc=)
35: 3132332e39392e3230332e302f32342d3234203d3e203536303436.roa (hash: gfAT/QYxqrwRCsOjFxjfR5qS+KNxxqUXfE58ipVOHiA=)
36: 3132332e39392e3230362e302f32342d3234203d3e203536303436.roa (hash: rLlTB8afuqz0Jj8a1c3LdLyNwLfwlf2Z8mFieiDedNA=)
37: 3230332e3133352e3130342e302f32342d3234203d3e203536303436.roa (hash: GZliXQ1/MKT4kSXUQTbCC3oZd0ZgyhX/v4L01AAk4ZY=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl
rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:9b:a1:25:98:07:b8:47:dd:ab:a5:1d:c0:99:97:66:17:43:48:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=709E5125176627846677AF908E76CAE21FB95460
Validity
Not Before: Apr 17 16:14:43 2026 GMT
Not After : Apr 18 17:53:43 2026 GMT
Subject: CN=E95FC4EE53AF6258E0A4D1853718E3B29E3E2119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:e2:a8:1d:df:13:bb:dd:6d:50:d4:ff:2d:
dc:eb:1e:40:7d:8e:5c:dd:f6:2f:17:22:f9:23:f3:
5e:5e:b7:48:d2:58:39:f1:37:b9:39:11:27:fe:93:
06:1b:47:ca:70:a6:bb:65:05:5a:5b:ee:e8:05:cb:
ba:d8:cb:22:2e:bc:5f:3f:04:5d:e2:86:8a:01:6d:
92:27:a3:32:ee:db:b7:1b:4a:aa:45:e0:1c:3d:64:
cb:1d:b9:b0:ee:26:53:8d:da:18:91:5f:9b:22:16:
7a:46:fd:a5:07:9e:aa:c2:80:e5:8c:4a:6d:2f:25:
9c:76:2a:ee:7b:fe:3a:6a:1b:46:04:e5:10:4d:78:
ac:72:32:93:6c:5c:8f:dd:3f:2c:bf:e4:77:68:c5:
be:ab:b1:3f:76:94:40:86:1c:4b:77:62:35:8b:9f:
1b:aa:ea:a0:1d:ca:4d:55:76:87:e6:d3:df:d2:07:
4c:34:f5:b7:c4:cf:0d:ef:7e:17:96:c9:35:b9:03:
0f:4a:ac:4b:21:ab:fa:3c:8f:aa:df:de:a6:40:58:
2d:55:6c:bd:78:8a:00:fd:ce:97:73:76:84:be:ad:
e6:db:45:ba:30:ce:6d:1b:3b:ea:e8:dd:54:5f:17:
56:5d:a4:f1:88:b0:d4:80:2a:eb:08:9e:00:03:a0:
7f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5F:C4:EE:53:AF:62:58:E0:A4:D1:85:37:18:E3:B2:9E:3E:21:19
X509v3 Authority Key Identifier:
keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:05:a8:a3:cc:2d:da:65:d3:ac:80:e7:db:92:62:61:e4:e3:
c9:2a:46:18:58:5d:6a:31:33:84:9d:01:6b:ea:09:c3:be:29:
08:c4:d2:53:16:4f:78:76:bf:68:dd:0c:65:7f:61:b3:a5:75:
c2:4c:98:fe:c8:77:8b:24:6d:57:d2:54:0b:d9:9d:a7:27:d3:
e2:32:98:ec:ef:da:a9:e2:b3:c4:c7:d5:d1:b0:5c:da:51:d2:
a9:02:3b:a9:ff:36:0c:2f:62:28:0f:45:c2:22:30:89:0a:22:
8d:72:20:b9:84:46:ae:4b:9d:44:22:97:fc:c5:52:cf:bb:20:
8f:5f:73:0a:66:ac:77:d3:b6:69:c5:e1:2c:af:ad:54:c1:8f:
ac:17:f5:20:d5:14:eb:73:4b:29:c6:d9:42:a9:6b:64:48:8f:
c9:15:ab:72:a7:cd:90:55:34:14:30:5c:b0:b5:ed:8e:69:05:
91:d0:b2:aa:b8:ed:78:c3:e4:00:6b:4c:85:21:dd:b6:c2:c3:
cf:56:3f:a2:e3:0d:7d:5b:ca:e4:64:db:35:c5:14:44:b2:ab:
09:8e:4d:d5:66:6b:80:07:29:80:62:0a:b3:39:0a:9b:37:1c:
eb:68:5c:13:af:cc:03:b4:9a:2a:b2:9d:92:6b:be:14:58:23:
56:15:74:23
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUTpuhJZgHuEfdq6UdwJmXZhdDSB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx
RkI5NTQ2MDAeFw0yNjA0MTcxNjE0NDNaFw0yNjA0MTgxNzUzNDNaMDMxMTAvBgNV
BAMTKEU5NUZDNEVFNTNBRjYyNThFMEE0RDE4NTM3MThFM0IyOUUzRTIxMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDBuKoHd8Tu91tUNT/LdzrHkB9
jlzd9i8XIvkj815et0jSWDnxN7k5ESf+kwYbR8pwprtlBVpb7ugFy7rYyyIuvF8/
BF3ihooBbZInozLu27cbSqpF4Bw9ZMsdubDuJlON2hiRX5siFnpG/aUHnqrCgOWM
Sm0vJZx2Ku57/jpqG0YE5RBNeKxyMpNsXI/dPyy/5Hdoxb6rsT92lECGHEt3YjWL
nxuq6qAdyk1Vdofm09/SB0w09bfEzw3vfheWyTW5Aw9KrEshq/o8j6rf3qZAWC1V
bL14igD9zpdzdoS+rebbRbowzm0bO+ro3VRfF1ZdpPGIsNSAKusIngADoH/pAgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQU6V/E7lOvYljgpNGFNxjjsp4+IRkwHwYDVR0j
BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD
QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwOTYzMzA4NTkwOTIzNzc2MDEvMC83MDlFNTEyNTE3NjYy
Nzg0NjY3N0FGOTA4RTc2Q0FFMjFGQjk1NDYwLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbwWoo8wt2mXT
rIDn25JiYeTjySpGGFhdajEzhJ0Ba+oJw74pCMTSUxZPeHa/aN0MZX9hs6V1wkyY
/sh3iyRtV9JUC9mdpyfT4jKY7O/aqeKzxMfV0bBc2lHSqQI7qf82DC9iKA9FwiIw
iQoijXIguYRGrkudRCKX/MVSz7sgj19zCmasd9O2acXhLK+tVMGPrBf1INUU63NL
KcbZQqlrZEiPyRWrcqfNkFU0FDBcsLXtjmkFkdCyqrjteMPkAGtMhSHdtsLDz1Y/
ouMNfVvK5GTbNcUURLKrCY5N1WZrgAcpgGIKszkKmzcc62hcE6/MA7SaKrKdkmu+
FFgjVhV0Iw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:26:13 2026 by rpki-client