$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft File: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft (raw, json) Hash identifier: ReCBeTX7PiyPI7io9fBMUKkPwqm8LJUDzvUPVoNVSJk= Subject key identifier: CB:5C:D6:E3:08:B2:FC:DB:D4:C1:BD:97:E3:B4:24:C5:39:B9:7F:BD Authority key identifier: DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 Certificate issuer: /CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Certificate serial: 0DFAE996A3ABDE123D52943397B8F555568D6044 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft Manifest number: D8 Signing time: Tue 14 Jul 2026 18:06:50 +0000 Manifest this update: Tue 14 Jul 2026 18:01:50 +0000 Manifest next update: Wed 15 Jul 2026 20:10:50 +0000 Files and hashes: 1: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl (hash: VAEdzhXi+brdxw+8SO5wTBmLeqvwMDV00TPw3aAUWj4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:fa:e9:96:a3:ab:de:12:3d:52:94:33:97:b8:f5:55:56:8d:60:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Validity Not Before: Jul 14 18:01:50 2026 GMT Not After : Jul 15 20:10:50 2026 GMT Subject: CN=CB5CD6E308B2FCDBD4C1BD97E3B424C539B97FBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:99:f0:c5:5a:1b:72:2f:36:9d:db:ef:37:cc: 68:69:51:0f:00:88:84:8a:69:a0:24:2e:5e:b1:a6: a9:46:c6:ba:9a:36:85:9a:1d:16:41:49:3b:d3:c8: 0b:14:b9:0b:93:f4:fc:5a:e5:dc:b2:f3:ae:57:d7: 8e:03:45:90:d1:97:d3:5f:53:6b:db:75:bb:a6:4b: 24:10:6a:f1:3c:90:88:eb:51:e0:a9:b3:f0:24:0b: 99:33:50:a6:fa:4b:7a:97:e3:2e:ae:30:5a:75:2e: 5e:c0:5b:ff:a3:d0:f8:bf:da:66:d8:9f:5b:14:e9: aa:72:04:dc:dc:a2:0b:41:4a:eb:09:12:08:1e:71: 0f:97:c3:87:7f:ea:9e:5d:84:6c:e0:58:d7:98:86: 9f:07:b0:9f:bf:63:ba:79:4f:b7:98:03:5d:e8:de: 65:e7:6a:c6:a6:17:af:af:7e:75:ae:20:03:a5:e2: 81:12:40:18:15:55:be:a4:84:21:58:1c:06:e2:90: 3e:53:61:fd:15:0b:39:ed:f4:11:85:97:5c:25:ff: ca:d7:ae:aa:7b:85:b7:65:d0:08:e7:7e:82:29:6f: b2:1a:43:ba:8e:96:3f:06:1b:25:d8:c3:c7:e6:c2: 02:78:e3:7e:91:29:ef:dd:6a:88:dd:5f:43:1b:8e: 57:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5C:D6:E3:08:B2:FC:DB:D4:C1:BD:97:E3:B4:24:C5:39:B9:7F:BD X509v3 Authority Key Identifier: keyid:DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f7:2d:12:81:12:5d:6f:b7:4a:65:a7:4a:fe:3e:b1:a2:46: ea:d7:7f:2d:e8:46:1c:36:e9:4a:f2:ed:03:aa:20:89:59:5a: f7:b6:ae:f0:4b:93:22:55:01:6d:b1:17:9d:a6:18:3c:0e:33: cf:67:14:ef:c1:47:31:25:d2:b4:0f:08:5b:b7:32:a5:23:f4: ff:ff:4e:65:9d:aa:47:f6:d0:b3:09:23:ce:ec:de:a9:3e:e8: 92:d2:19:dd:43:4b:31:cb:b1:6a:57:6e:24:ff:82:96:f2:4a: 17:25:c1:4d:3c:25:7c:55:96:d1:22:d6:48:73:2c:d4:1b:6d: e2:99:ae:c3:a1:d1:77:1b:29:a5:43:91:8c:5b:7c:01:cf:06: 93:1c:1f:65:d6:1d:e5:e6:14:36:24:9a:3e:2c:e0:46:3c:f8: 1f:a4:f0:54:86:55:28:a7:7f:98:24:19:14:96:99:81:5a:a8: 38:6b:bd:a5:f5:f6:46:61:c4:9f:30:9e:e6:d4:6b:5d:81:23: 7d:fe:2d:c8:ce:09:38:94:e3:49:cb:b6:8a:1e:5b:b2:04:91: 89:1a:01:6a:f8:15:3f:4b:3e:36:36:16:2e:82:c8:5f:b1:18: 50:b4:85:78:48:b0:49:f0:33:6e:a8:7f:db:9b:3f:0d:e2:77: 89:26:34:3b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDfrplqOr3hI9UpQzl7j1VVaNYEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1 RUExMkUwOTAeFw0yNjA3MTQxODAxNTBaFw0yNjA3MTUyMDEwNTBaMDMxMTAvBgNV BAMTKENCNUNENkUzMDhCMkZDREJENEMxQkQ5N0UzQjQyNEM1MzlCOTdGQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjmfDFWhtyLzad2+83zGhpUQ8A iISKaaAkLl6xpqlGxrqaNoWaHRZBSTvTyAsUuQuT9Pxa5dyy865X144DRZDRl9Nf U2vbdbumSyQQavE8kIjrUeCps/AkC5kzUKb6S3qX4y6uMFp1Ll7AW/+j0Pi/2mbY n1sU6apyBNzcogtBSusJEggecQ+Xw4d/6p5dhGzgWNeYhp8HsJ+/Y7p5T7eYA13o 3mXnasamF6+vfnWuIAOl4oESQBgVVb6khCFYHAbikD5TYf0VCznt9BGFl1wl/8rX rqp7hbdl0AjnfoIpb7IaQ7qOlj8GGyXYw8fmwgJ4436RKe/daojdX0Mbjlc/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUy1zW4wiy/NvUwb2X47QkxTm5f70wHwYDVR0j BBgwFoAU3k5pi+DMoyigAjXF5kT8il6hLgkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MTAwNzAxMDIyNjQzODE0Ni8wL0RFNEU2OThCRTBDQ0EzMjhBMDAyMzVDNUU2NDRG QzhBNUVBMTJFMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1RUExMkUwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzEwMDcwMTAyMjY0MzgxNDYvMC9ERTRFNjk4QkUwQ0NB MzI4QTAwMjM1QzVFNjQ0RkM4QTVFQTEyRTA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfctEoESXW+3 SmWnSv4+saJG6td/LehGHDbpSvLtA6ogiVla97au8EuTIlUBbbEXnaYYPA4zz2cU 78FHMSXStA8IW7cypSP0//9OZZ2qR/bQswkjzuzeqT7oktIZ3UNLMcuxalduJP+C lvJKFyXBTTwlfFWW0SLWSHMs1Btt4pmuw6HRdxsppUORjFt8Ac8GkxwfZdYd5eYU NiSaPizgRjz4H6TwVIZVKKd/mCQZFJaZgVqoOGu9pfX2RmHEnzCe5tRrXYEjff4t yM4JOJTjScu2ih5bsgSRiRoBavgVP0s+NjYWLoLIX7EYULSFeEiwSfAzbqh/25s/ DeJ3iSY0Ow== -----END CERTIFICATE-----Generated at Tue Jul 14 20:05:39 2026 by rpki-client