$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft File: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft (raw, json) Hash identifier: Ap6wiNJZWyX4O5DxRunUoJlQhCEu2u+Jic4GfNv/yQM= Subject key identifier: EC:47:2E:3D:DC:9B:7C:7C:17:B1:40:71:4A:43:93:17:54:AC:CC:71 Authority key identifier: DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 Certificate issuer: /CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Certificate serial: 67AB5632EE143C7E9D552567D59F113CE86C0158 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft Manifest number: AF Signing time: Sun 14 Jun 2026 00:37:29 +0000 Manifest this update: Sun 14 Jun 2026 00:32:29 +0000 Manifest next update: Mon 15 Jun 2026 01:10:29 +0000 Files and hashes: 1: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl (hash: r8oyh9dlRvWSI3gqaPMQFXdQSRT4r6p0PVPCzWhQh5E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ab:56:32:ee:14:3c:7e:9d:55:25:67:d5:9f:11:3c:e8:6c:01:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Validity Not Before: Jun 14 00:32:29 2026 GMT Not After : Jun 15 01:10:29 2026 GMT Subject: CN=EC472E3DDC9B7C7C17B140714A43931754ACCC71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a0:a3:cc:96:a2:2b:69:dc:03:f8:c5:22:e8: 53:f7:18:fc:61:e3:c9:bf:44:1f:f2:fc:9a:79:13: 4a:a7:17:a1:e8:13:a2:b7:0c:07:cb:5f:d4:95:cf: 4a:83:80:10:a7:20:70:bb:03:1e:01:f9:e7:f1:fe: 26:ef:1a:11:77:9f:d8:2e:ff:ac:52:15:60:20:3d: be:18:73:ca:73:a7:1f:d2:dc:e5:c8:7d:d7:19:ea: e9:81:56:1b:d1:a5:73:fc:f6:32:ec:77:17:6a:00: 22:48:33:7f:16:e6:fc:c8:c9:0e:0e:88:d1:f6:9b: e2:83:f3:63:06:c2:ec:6b:7a:5a:da:35:c3:e3:b8: 36:96:f9:61:e2:e6:f7:54:46:68:d4:03:17:61:50: bb:8c:e1:29:54:ab:7e:ff:1a:7a:65:07:bd:9c:84: 50:4c:ec:aa:99:ef:ce:fe:d7:2f:91:e0:e1:cd:e8: 5e:75:84:91:7e:70:be:ff:fd:f4:9d:da:c5:ae:6e: 07:ef:a8:f3:96:77:e9:ed:42:4f:63:cd:ca:f5:39: 2d:56:80:5e:95:b0:24:09:e7:55:c8:02:05:cb:39: 27:5f:d1:35:6c:21:94:4c:5c:2e:fb:3c:be:72:34: d3:f2:41:e4:d6:f3:41:f6:7e:72:c2:ab:24:05:12: 36:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:47:2E:3D:DC:9B:7C:7C:17:B1:40:71:4A:43:93:17:54:AC:CC:71 X509v3 Authority Key Identifier: keyid:DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:fe:5a:cf:d7:25:c8:4f:f2:19:89:d6:08:26:df:5f:a3:25: e0:ea:d2:af:22:06:6b:f1:d2:66:18:73:16:14:3f:e8:3a:6a: e6:aa:a4:22:6e:28:01:5e:73:0b:0f:5e:44:ce:97:32:ca:9d: 26:1a:61:1c:80:2e:7a:a1:21:fd:0a:af:2c:87:d3:14:0f:af: d9:ee:9a:74:5e:95:e3:73:b7:b2:39:3d:0d:c9:15:d0:89:5d: 16:5e:01:4d:92:c4:55:60:1f:9c:20:4f:e8:71:fd:4f:88:f0: 20:9f:65:05:a0:52:78:db:7c:75:63:62:15:bf:d0:f8:ee:86: 82:dd:71:c5:39:ae:b3:c0:3b:aa:ec:7c:f6:9a:3b:59:e9:eb: cf:32:80:9a:ec:7c:50:2d:4e:13:c2:e3:94:f9:f7:6e:d1:92: d6:5a:c9:f0:ca:2e:4f:17:df:08:47:30:ae:d8:62:d3:d9:61: e9:dd:e6:43:3a:e2:50:20:c6:10:8c:e8:33:e4:c5:ac:22:dd: 5b:70:ed:bd:6e:9a:f6:d9:a2:92:7e:e7:d4:c7:f8:b8:71:6e: fd:99:74:3d:ad:3c:0d:44:4b:ae:f2:64:0e:a5:8e:fe:fd:93: 4f:1a:57:74:22:3b:5d:a8:5a:9f:81:83:9a:83:53:d2:3e:0d: 70:7b:67:5b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZ6tWMu4UPH6dVSVn1Z8RPOhsAVgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1 RUExMkUwOTAeFw0yNjA2MTQwMDMyMjlaFw0yNjA2MTUwMTEwMjlaMDMxMTAvBgNV BAMTKEVDNDcyRTNEREM5QjdDN0MxN0IxNDA3MTRBNDM5MzE3NTRBQ0NDNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCroKPMlqIradwD+MUi6FP3GPxh 48m/RB/y/Jp5E0qnF6HoE6K3DAfLX9SVz0qDgBCnIHC7Ax4B+efx/ibvGhF3n9gu /6xSFWAgPb4Yc8pzpx/S3OXIfdcZ6umBVhvRpXP89jLsdxdqACJIM38W5vzIyQ4O iNH2m+KD82MGwuxrelraNcPjuDaW+WHi5vdURmjUAxdhULuM4SlUq37/GnplB72c hFBM7KqZ787+1y+R4OHN6F51hJF+cL7//fSd2sWubgfvqPOWd+ntQk9jzcr1OS1W gF6VsCQJ51XIAgXLOSdf0TVsIZRMXC77PL5yNNPyQeTW80H2fnLCqyQFEjbFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7EcuPdybfHwXsUBxSkOTF1SszHEwHwYDVR0j BBgwFoAU3k5pi+DMoyigAjXF5kT8il6hLgkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MTAwNzAxMDIyNjQzODE0Ni8wL0RFNEU2OThCRTBDQ0EzMjhBMDAyMzVDNUU2NDRG QzhBNUVBMTJFMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1RUExMkUwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzEwMDcwMTAyMjY0MzgxNDYvMC9ERTRFNjk4QkUwQ0NB MzI4QTAwMjM1QzVFNjQ0RkM4QTVFQTEyRTA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/5az9clyE/y GYnWCCbfX6Ml4OrSryIGa/HSZhhzFhQ/6Dpq5qqkIm4oAV5zCw9eRM6XMsqdJhph HIAueqEh/QqvLIfTFA+v2e6adF6V43O3sjk9DckV0IldFl4BTZLEVWAfnCBP6HH9 T4jwIJ9lBaBSeNt8dWNiFb/Q+O6Ggt1xxTmus8A7qux89po7WenrzzKAmux8UC1O E8LjlPn3btGS1lrJ8MouTxffCEcwrthi09lh6d3mQzriUCDGEIzoM+TFrCLdW3Dt vW6a9tmikn7n1Mf4uHFu/Zl0Pa08DURLrvJkDqWO/v2TTxpXdCI7Xahan4GDmoNT 0j4NcHtnWw== -----END CERTIFICATE-----Generated at Sun Jun 14 08:49:09 2026 by rpki-client