$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft File: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft (raw, json) Hash identifier: 5XZKHQcRXga4deR7wxLcu2/VhyOyxsMyEHVONsbct54= Subject key identifier: CF:36:2F:B0:69:99:18:2F:C7:EB:C5:91:61:88:AB:8C:5A:2D:C8:65 Authority key identifier: DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 Certificate issuer: /CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Certificate serial: 3528BBA1F4B88020A38D089BF11E7A56B51816AC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft Manifest number: 62 Signing time: Fri 17 Apr 2026 06:19:40 +0000 Manifest this update: Fri 17 Apr 2026 06:14:40 +0000 Manifest next update: Sat 18 Apr 2026 10:14:40 +0000 Files and hashes: 1: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl (hash: pYFwzxxKkGJ8Ua+KK5SyuLOWvzH2g7omGoXfjWpzWew=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 10:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:28:bb:a1:f4:b8:80:20:a3:8d:08:9b:f1:1e:7a:56:b5:18:16:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Validity Not Before: Apr 17 06:14:40 2026 GMT Not After : Apr 18 10:14:40 2026 GMT Subject: CN=CF362FB06999182FC7EBC5916188AB8C5A2DC865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2f:e5:92:6d:c5:33:2e:34:e7:49:e6:68:06: 12:f4:5f:92:42:03:65:5d:88:57:60:31:c0:fb:84: 12:b3:05:7d:67:76:53:fc:68:c3:81:36:46:b9:41: 3e:3e:ad:28:0b:a5:d3:6c:94:ff:da:2c:7b:62:ed: 30:ef:6d:67:7a:68:2a:f7:cd:79:27:86:ff:67:35: e1:cc:ee:0c:66:8c:52:af:29:3c:5d:78:d6:96:2d: 1f:74:cd:fb:4f:b3:97:22:73:63:49:71:d9:e6:73: 1e:c1:8b:69:73:d6:f3:2b:27:b4:81:d3:b1:ce:d0: 28:d7:9d:08:d3:05:8d:d9:16:60:43:79:ff:8c:84: ec:97:d4:fb:bf:e5:27:a5:2b:0b:7b:9f:f7:1c:51: 8a:04:5d:34:b3:6d:85:70:fb:2f:0a:69:38:5c:25: 1b:3a:37:cd:05:a4:52:12:58:ef:5b:fd:48:e3:99: 68:87:a5:87:58:0f:24:88:cf:44:6f:fd:28:c3:39: 87:48:97:17:44:5e:ca:fc:b7:80:f3:af:8c:cc:f2: 33:ee:97:d8:3e:59:43:73:b5:13:3e:2b:24:09:d0: 0c:4d:49:2d:53:7d:88:e3:c4:45:1b:5d:74:c0:be: d6:38:36:11:a6:4c:04:6b:af:41:3c:80:23:e3:c5: e1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:36:2F:B0:69:99:18:2F:C7:EB:C5:91:61:88:AB:8C:5A:2D:C8:65 X509v3 Authority Key Identifier: keyid:DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:37:80:a5:72:3d:71:5b:0f:5c:31:00:ec:b1:1a:78:8d:83: c8:49:45:0f:88:7d:94:5f:33:2c:0b:87:79:08:82:e0:fb:12: 44:86:a5:01:d6:7e:49:a1:9c:a9:ab:92:ec:cd:c4:f7:62:dd: 9d:57:e3:61:8b:b8:df:a4:81:be:4c:23:de:70:33:27:6b:7b: 89:61:c1:fc:41:b9:1c:08:12:1e:49:24:d1:27:28:80:7d:03: e6:be:3b:74:60:16:63:54:fb:88:e2:bd:4a:cd:aa:ea:f1:ed: 46:94:00:90:ca:9a:60:32:07:27:af:a1:2d:92:be:c6:e1:95: f1:4a:c2:eb:e8:aa:36:23:27:2a:3a:0b:76:bd:80:d1:dd:10: db:b3:b1:57:90:5b:58:31:9a:5a:54:11:e8:50:50:d0:00:37: 71:37:7c:8a:1b:f8:63:53:bd:54:8a:f1:4f:32:4a:41:b3:f6: e2:65:0f:59:ed:63:fa:bb:e5:0d:35:62:76:9d:2c:d2:63:59: 52:10:80:71:42:3f:48:37:ef:3d:b2:be:3e:f8:d2:0a:dd:77: 97:44:c3:74:06:b4:71:d7:78:ba:a3:ad:de:5d:75:77:10:bc: c4:6d:04:90:75:6c:ee:6d:e0:e7:f1:07:6a:7e:b7:e6:30:0a: a7:c7:0e:5c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNSi7ofS4gCCjjQib8R56VrUYFqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1 RUExMkUwOTAeFw0yNjA0MTcwNjE0NDBaFw0yNjA0MTgxMDE0NDBaMDMxMTAvBgNV BAMTKENGMzYyRkIwNjk5OTE4MkZDN0VCQzU5MTYxODhBQjhDNUEyREM4NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiL+WSbcUzLjTnSeZoBhL0X5JC A2VdiFdgMcD7hBKzBX1ndlP8aMOBNka5QT4+rSgLpdNslP/aLHti7TDvbWd6aCr3 zXknhv9nNeHM7gxmjFKvKTxdeNaWLR90zftPs5cic2NJcdnmcx7Bi2lz1vMrJ7SB 07HO0CjXnQjTBY3ZFmBDef+MhOyX1Pu/5SelKwt7n/ccUYoEXTSzbYVw+y8KaThc JRs6N80FpFISWO9b/UjjmWiHpYdYDySIz0Rv/SjDOYdIlxdEXsr8t4Dzr4zM8jPu l9g+WUNztRM+KyQJ0AxNSS1TfYjjxEUbXXTAvtY4NhGmTARrr0E8gCPjxeH7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzzYvsGmZGC/H68WRYYirjFotyGUwHwYDVR0j BBgwFoAU3k5pi+DMoyigAjXF5kT8il6hLgkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MTAwNzAxMDIyNjQzODE0Ni8wL0RFNEU2OThCRTBDQ0EzMjhBMDAyMzVDNUU2NDRG QzhBNUVBMTJFMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1RUExMkUwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzEwMDcwMTAyMjY0MzgxNDYvMC9ERTRFNjk4QkUwQ0NB MzI4QTAwMjM1QzVFNjQ0RkM4QTVFQTEyRTA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTeApXI9cVsP XDEA7LEaeI2DyElFD4h9lF8zLAuHeQiC4PsSRIalAdZ+SaGcqauS7M3E92LdnVfj YYu436SBvkwj3nAzJ2t7iWHB/EG5HAgSHkkk0ScogH0D5r47dGAWY1T7iOK9Ss2q 6vHtRpQAkMqaYDIHJ6+hLZK+xuGV8UrC6+iqNiMnKjoLdr2A0d0Q27OxV5BbWDGa WlQR6FBQ0AA3cTd8ihv4Y1O9VIrxTzJKQbP24mUPWe1j+rvlDTVidp0s0mNZUhCA cUI/SDfvPbK+PvjSCt13l0TDdAa0cdd4uqOt3l11dxC8xG0EkHVs7m3g5/EHan63 5jAKp8cOXA== -----END CERTIFICATE-----Generated at Sat Apr 18 00:25:57 2026 by rpki-client