$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft File: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft (raw, json) Hash identifier: ytDjWc4zVeXCw0vIJcOAocSJb/1YYOisNeS0BX0Dxyw= Subject key identifier: 7E:76:71:E0:18:81:49:8A:AB:00:C0:A2:E6:99:AB:55:9A:10:50:1C Authority key identifier: DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 Certificate issuer: /CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Certificate serial: 7832D6175DB7E28F21A217FBBFD1B3BCCE3F4804 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft Manifest number: EC Signing time: Wed 29 Jul 2026 18:09:54 +0000 Manifest this update: Wed 29 Jul 2026 18:04:54 +0000 Manifest next update: Thu 30 Jul 2026 19:02:54 +0000 Files and hashes: 1: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl (hash: nLa2PKuvs/Z9hMsBc+ZPxkS8sP4513BuH1oz9Nk3GR4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 19:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:32:d6:17:5d:b7:e2:8f:21:a2:17:fb:bf:d1:b3:bc:ce:3f:48:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Validity Not Before: Jul 29 18:04:54 2026 GMT Not After : Jul 30 19:02:54 2026 GMT Subject: CN=7E7671E01881498AAB00C0A2E699AB559A10501C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:86:24:9d:91:0f:8c:84:9c:58:4f:9f:49:03: b6:01:17:05:bb:08:b7:29:1b:97:c4:91:87:5b:0f: 8a:d2:b5:71:8f:3f:fb:fe:44:d9:8b:07:9e:2a:d9: 87:51:eb:70:f4:86:9e:ec:e5:d4:f1:b2:e1:fd:64: 5a:e4:dc:22:f5:2d:86:4f:f9:96:01:fd:db:81:00: 33:d7:d6:12:21:10:3d:db:cc:35:9a:34:78:12:35: 47:2a:97:46:6d:ce:ae:96:bc:bd:6f:8c:1a:77:dc: ce:a2:d2:2c:83:ca:2b:76:90:8c:fd:cf:71:22:6a: a0:d3:80:1a:67:ce:f6:3c:f7:73:4a:5a:c7:36:36: 72:b2:2a:4c:e5:b8:5b:24:4d:80:de:0f:05:ca:10: a0:70:b5:14:b4:11:a5:66:25:fa:00:ec:b9:e6:4b: 1e:db:aa:96:3a:e3:d7:0a:9c:f1:03:14:9c:80:44: be:96:b3:c5:30:df:1d:8d:ef:85:7b:56:a3:30:d6: ed:ed:87:d2:36:37:eb:2c:75:3e:92:1e:27:f1:b9: 0c:2b:96:1e:ff:d9:6e:bf:4a:a5:e2:c3:d3:db:17: 70:06:08:7c:c9:fd:50:46:4d:36:78:53:e2:a9:e3: 53:74:71:08:0b:0a:39:0c:90:b9:cf:1e:78:e4:2c: e7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:76:71:E0:18:81:49:8A:AB:00:C0:A2:E6:99:AB:55:9A:10:50:1C X509v3 Authority Key Identifier: keyid:DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:c3:29:27:bb:5e:a2:42:09:73:d5:91:97:c9:49:fd:2a:f6: a2:e7:c9:36:35:d3:47:3a:68:c1:a3:b5:93:59:72:36:88:d0: e5:e4:bb:63:ed:bd:03:54:69:e6:47:08:38:12:f5:82:70:05: 72:4d:e6:06:16:d2:8b:50:e2:dd:94:07:8c:91:7a:ec:dc:fe: 6f:95:4b:8f:fe:67:4b:db:f7:bf:34:6b:6e:79:79:63:00:44: de:fb:db:e4:1f:af:ff:6d:28:dc:58:5b:ed:ee:1b:7f:f9:63: 45:83:a7:be:4b:7f:36:cc:5a:ec:b4:25:0f:fa:1e:31:fa:6b: e3:cd:21:2e:7c:e7:c6:5e:d9:56:3c:17:88:1f:30:f5:1a:88: bb:be:70:fc:51:86:29:2e:90:0a:93:a6:14:e7:b5:41:a2:19: b9:02:4f:88:67:78:66:bd:e6:2e:ff:8c:e3:90:7a:59:b5:f3: e6:3c:10:e7:a6:17:22:f9:3d:1f:16:7a:23:56:e2:89:44:e1: 9c:12:e2:ef:9c:d4:3c:07:87:17:3b:c3:27:24:ea:ca:21:cd: 49:59:20:d6:15:b5:53:21:74:70:ab:f4:2b:c0:5d:79:4f:45: e3:25:91:1e:05:30:23:db:31:30:3d:99:17:00:10:05:1f:0d: 04:f7:03:4a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeDLWF1234o8hohf7v9GzvM4/SAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1 RUExMkUwOTAeFw0yNjA3MjkxODA0NTRaFw0yNjA3MzAxOTAyNTRaMDMxMTAvBgNV BAMTKDdFNzY3MUUwMTg4MTQ5OEFBQjAwQzBBMkU2OTlBQjU1OUExMDUwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdhiSdkQ+MhJxYT59JA7YBFwW7 CLcpG5fEkYdbD4rStXGPP/v+RNmLB54q2YdR63D0hp7s5dTxsuH9ZFrk3CL1LYZP +ZYB/duBADPX1hIhED3bzDWaNHgSNUcql0Ztzq6WvL1vjBp33M6i0iyDyit2kIz9 z3EiaqDTgBpnzvY893NKWsc2NnKyKkzluFskTYDeDwXKEKBwtRS0EaVmJfoA7Lnm Sx7bqpY649cKnPEDFJyARL6Ws8Uw3x2N74V7VqMw1u3th9I2N+ssdT6SHifxuQwr lh7/2W6/SqXiw9PbF3AGCHzJ/VBGTTZ4U+Kp41N0cQgLCjkMkLnPHnjkLOfxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUfnZx4BiBSYqrAMCi5pmrVZoQUBwwHwYDVR0j BBgwFoAU3k5pi+DMoyigAjXF5kT8il6hLgkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MTAwNzAxMDIyNjQzODE0Ni8wL0RFNEU2OThCRTBDQ0EzMjhBMDAyMzVDNUU2NDRG QzhBNUVBMTJFMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1RUExMkUwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzEwMDcwMTAyMjY0MzgxNDYvMC9ERTRFNjk4QkUwQ0NB MzI4QTAwMjM1QzVFNjQ0RkM4QTVFQTEyRTA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmMMpJ7teokIJ c9WRl8lJ/Sr2oufJNjXTRzpowaO1k1lyNojQ5eS7Y+29A1Rp5kcIOBL1gnAFck3m BhbSi1Di3ZQHjJF67Nz+b5VLj/5nS9v3vzRrbnl5YwBE3vvb5B+v/20o3Fhb7e4b f/ljRYOnvkt/Nsxa7LQlD/oeMfpr480hLnznxl7ZVjwXiB8w9RqIu75w/FGGKS6Q CpOmFOe1QaIZuQJPiGd4Zr3mLv+M45B6WbXz5jwQ56YXIvk9HxZ6I1biiUThnBLi 75zUPAeHFzvDJyTqyiHNSVkg1hW1UyF0cKv0K8BdeU9F4yWRHgUwI9sxMD2ZFwAQ BR8NBPcDSg== -----END CERTIFICATE-----Generated at Wed Jul 29 23:09:20 2026 by rpki-client