$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft File: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft (raw, json) Hash identifier: 5fTtuHfDAKQbxPOID5RE618XJmq/fwECtCsDHtoYWQ0= Subject key identifier: F4:DE:15:62:12:47:C3:75:8D:E5:96:DD:5B:69:E4:CE:5C:19:82:C5 Authority key identifier: DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 Certificate issuer: /CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Certificate serial: 624A553377269FE661165B6C1C330A66AFA0EAB2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft Manifest number: 012D Signing time: Mon 26 Oct 2026 08:33:34 +0000 Manifest this update: Mon 26 Oct 2026 08:28:34 +0000 Manifest next update: Thu 29 Oct 2026 19:59:34 +0000 Files and hashes: 1: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl (hash: 2lGTsdOUMdlUqXUL3KaPu11qmqOgikddmiBltVdfQzc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 19:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:4a:55:33:77:26:9f:e6:61:16:5b:6c:1c:33:0a:66:af:a0:ea:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Validity Not Before: Oct 26 08:28:34 2026 GMT Not After : Oct 29 19:59:34 2026 GMT Subject: CN=F4DE15621247C3758DE596DD5B69E4CE5C1982C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d4:73:72:93:8f:a2:a6:35:d1:56:82:3b:49: f5:b1:2d:ee:46:89:f0:bd:da:43:5f:00:06:2c:4d: db:66:a9:37:21:ae:0b:43:fe:b4:94:3e:29:94:45: e1:08:6a:e8:8c:8a:a7:39:51:9d:29:36:93:60:83: 1d:2d:f1:09:d9:86:4d:cf:1e:73:a3:e9:a9:59:46: 50:91:2a:93:28:e9:48:e5:c5:61:45:17:80:22:4b: 24:d0:39:9a:31:39:ef:eb:bc:7f:42:a4:04:ca:76: 81:2d:a1:4e:68:ec:47:47:ee:40:46:cf:02:7e:2c: 16:e7:36:c1:70:e7:f1:5f:5d:09:2b:c9:e8:47:3b: 32:ea:7a:02:65:ce:45:fb:de:51:6a:0b:04:04:fc: 72:53:a1:0c:13:4a:ab:54:b1:8d:51:9f:a5:91:11: ba:32:97:0f:10:24:22:2b:ab:21:86:ca:44:f0:08: b0:18:f8:cd:6d:5e:03:1e:b4:fc:60:a0:2a:90:03: 9b:b1:98:44:28:46:87:01:db:28:e2:90:5f:40:0b: f9:bb:2f:ab:02:26:1f:41:73:30:f3:7f:2e:a6:89: f9:70:0b:8a:2b:46:72:99:28:ca:57:e9:af:d4:b0: 8b:b0:21:93:f6:39:2f:c1:df:9e:6e:a7:da:e6:85: 99:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DE:15:62:12:47:C3:75:8D:E5:96:DD:5B:69:E4:CE:5C:19:82:C5 X509v3 Authority Key Identifier: keyid:DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:36:6b:a9:8e:8d:a1:c1:c7:0b:5c:5e:8f:45:5a:af:b4:08: ed:c3:51:81:ed:6b:97:da:7d:30:90:a4:92:5c:9d:c9:29:75: 98:b1:0e:5e:19:05:d6:6d:61:fe:ae:24:02:0f:a9:d5:6e:18: 2b:51:68:1c:fd:9b:00:11:41:96:a0:19:35:cf:f5:da:78:4f: d3:34:ca:9e:5e:12:1d:23:25:d8:ed:18:2f:3d:98:32:60:75: b7:3b:66:c7:30:14:ea:9a:7e:bf:a2:0e:a6:a6:56:f6:00:fd: 07:a2:95:20:42:aa:c5:ed:a3:f2:b1:2e:c4:a3:3b:b4:d6:3c: 10:73:46:d3:09:0c:06:d8:7f:71:4c:6f:63:f6:d5:00:1d:e0: d9:fa:7d:61:40:50:c2:6a:96:1e:f4:86:1b:d0:e0:70:cd:11: d3:73:89:b3:eb:20:4e:cb:93:5a:75:c5:c4:52:6b:55:1f:c6: 94:b7:29:a8:11:0b:20:be:ca:ea:c4:d1:73:de:c6:84:d2:9e: 1d:52:ee:5b:03:d2:ea:0c:f6:13:42:ef:08:10:45:42:e7:db: c9:19:24:ac:e1:b1:c1:f0:9e:5e:3d:49:8f:19:42:a3:55:65: 68:2f:3e:3f:9e:44:cf:d1:38:80:32:75:76:67:a7:81:24:71: f6:6f:f9:b8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYkpVM3cmn+ZhFltsHDMKZq+g6rIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1 RUExMkUwOTAeFw0yNjEwMjYwODI4MzRaFw0yNjEwMjkxOTU5MzRaMDMxMTAvBgNV BAMTKEY0REUxNTYyMTI0N0MzNzU4REU1OTZERDVCNjlFNENFNUMxOTgyQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD1HNyk4+ipjXRVoI7SfWxLe5G ifC92kNfAAYsTdtmqTchrgtD/rSUPimUReEIauiMiqc5UZ0pNpNggx0t8QnZhk3P HnOj6alZRlCRKpMo6UjlxWFFF4AiSyTQOZoxOe/rvH9CpATKdoEtoU5o7EdH7kBG zwJ+LBbnNsFw5/FfXQkryehHOzLqegJlzkX73lFqCwQE/HJToQwTSqtUsY1Rn6WR Eboylw8QJCIrqyGGykTwCLAY+M1tXgMetPxgoCqQA5uxmEQoRocB2yjikF9AC/m7 L6sCJh9BczDzfy6miflwC4orRnKZKMpX6a/UsIuwIZP2OS/B355up9rmhZm7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9N4VYhJHw3WN5ZbdW2nkzlwZgsUwHwYDVR0j BBgwFoAU3k5pi+DMoyigAjXF5kT8il6hLgkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MTAwNzAxMDIyNjQzODE0Ni8wL0RFNEU2OThCRTBDQ0EzMjhBMDAyMzVDNUU2NDRG QzhBNUVBMTJFMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1RUExMkUwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzEwMDcwMTAyMjY0MzgxNDYvMC9ERTRFNjk4QkUwQ0NB MzI4QTAwMjM1QzVFNjQ0RkM4QTVFQTEyRTA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDZrqY6NocHH C1xej0Var7QI7cNRge1rl9p9MJCkklydySl1mLEOXhkF1m1h/q4kAg+p1W4YK1Fo HP2bABFBlqAZNc/12nhP0zTKnl4SHSMl2O0YLz2YMmB1tztmxzAU6pp+v6IOpqZW 9gD9B6KVIEKqxe2j8rEuxKM7tNY8EHNG0wkMBth/cUxvY/bVAB3g2fp9YUBQwmqW HvSGG9DgcM0R03OJs+sgTsuTWnXFxFJrVR/GlLcpqBELIL7K6sTRc97GhNKeHVLu WwPS6gz2E0LvCBBFQufbyRkkrOGxwfCeXj1JjxlCo1VlaC8+P55Ez9E4gDJ1dmen gSRx9m/5uA== -----END CERTIFICATE-----Generated at Tue Oct 27 23:11:07 2026 by rpki-client