$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft File: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft (raw, json) Hash identifier: yWwBFCV1qSQGbuFT1n6kFl5VhHHgAtgUfw31wN8X7Vk= Subject key identifier: 50:07:1B:83:2F:B0:5C:94:9D:0B:1D:48:3D:04:7B:ED:DB:82:08:E7 Authority key identifier: DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 Certificate issuer: /CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Certificate serial: 3598E683828DD61B3DD9BF27E9455AF141A3993A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft Manifest number: 0127 Signing time: Mon 12 Oct 2026 14:17:02 +0000 Manifest this update: Mon 12 Oct 2026 14:12:02 +0000 Manifest next update: Thu 15 Oct 2026 18:22:02 +0000 Files and hashes: 1: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl (hash: mQvl8j6prujT2e3uq4bxQak5hW70cO9+s5k8uqybDSQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:98:e6:83:82:8d:d6:1b:3d:d9:bf:27:e9:45:5a:f1:41:a3:99:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Validity Not Before: Oct 12 14:12:02 2026 GMT Not After : Oct 15 18:22:02 2026 GMT Subject: CN=50071B832FB05C949D0B1D483D047BEDDB8208E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:03:51:60:57:48:20:7f:88:8c:f0:f8:38:34: ea:a2:de:d2:43:3d:f3:a7:3f:2b:36:59:17:08:4d: c2:66:bc:df:a8:0d:af:40:a3:05:50:fe:f5:f7:09: 53:b0:60:18:d8:43:db:81:da:1e:57:3b:50:ce:49: 9d:dc:20:e4:04:f3:fe:21:40:6c:8f:46:00:c5:81: 05:29:24:cc:b2:60:4a:8a:53:94:a5:8f:1a:b7:af: 58:36:f2:2b:36:f3:70:27:53:25:eb:4f:95:49:f0: ab:18:f0:5e:1a:0d:00:2e:16:aa:44:4f:fe:de:12: 05:0b:b5:49:fe:6f:57:68:a2:ba:14:b9:76:73:8f: c7:13:e0:5d:60:ec:c9:e2:1c:e0:04:70:e5:3d:90: b9:8d:f8:cc:fa:fa:be:69:b5:17:53:c6:35:3e:95: 45:b2:eb:ed:8e:dd:2b:dd:f9:4d:18:02:18:a7:a8: e6:e4:23:20:c5:18:81:c5:79:96:fe:34:d4:f0:59: 30:ff:b5:38:22:44:6a:b0:7f:d1:bb:0f:cc:58:34: c2:68:b6:4a:49:cd:99:5d:8f:b0:b3:f0:9b:57:63: c8:09:d9:f4:c6:1d:8d:27:cf:70:59:d1:49:8b:57: ba:7e:f7:88:c2:94:c5:16:4f:13:55:45:69:42:8f: 88:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:07:1B:83:2F:B0:5C:94:9D:0B:1D:48:3D:04:7B:ED:DB:82:08:E7 X509v3 Authority Key Identifier: keyid:DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:69:7a:ee:cc:2d:49:dd:6f:20:03:b9:f2:ac:cf:9d:64:0d: c8:57:7c:df:04:e2:22:f3:25:31:d9:ef:c8:a9:c3:f1:8b:58: 1d:4f:05:d5:59:13:e5:4c:b7:82:35:98:d7:10:c8:c2:cf:e2: ee:cd:dc:16:c9:b5:0a:c9:af:b8:ad:05:3f:d1:50:7b:eb:d9: f3:40:5c:74:65:b9:c7:c8:cf:59:19:60:f7:28:0e:31:31:89: 59:78:25:07:cb:59:ff:34:41:a1:a2:5e:04:8d:51:5a:c3:77: 80:84:a1:68:a5:12:d2:fc:35:a8:38:40:ab:cf:75:d9:5a:9b: 1f:12:6e:08:44:48:f4:db:46:b6:fd:1a:b1:03:8e:cc:85:f1: 40:ed:9d:ed:6d:5a:3b:9f:3b:45:f1:01:2a:15:db:18:a6:4d: e3:9d:e7:e3:cc:70:96:df:ad:26:84:3c:58:0a:51:d3:6a:ea: a5:e5:3d:7a:0c:06:15:00:5d:87:cd:ed:26:41:89:34:47:c5: d6:9e:44:c9:bb:5c:b5:f8:99:51:2f:3d:d1:26:37:78:82:4c: b0:95:81:50:cb:18:82:5a:8b:a9:4e:51:19:93:22:1d:d5:e5: b7:a2:f7:24:ec:5e:a0:15:7e:50:d8:28:58:06:ae:4a:91:24: 6d:20:ef:9c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNZjmg4KN1hs92b8n6UVa8UGjmTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1 RUExMkUwOTAeFw0yNjEwMTIxNDEyMDJaFw0yNjEwMTUxODIyMDJaMDMxMTAvBgNV BAMTKDUwMDcxQjgzMkZCMDVDOTQ5RDBCMUQ0ODNEMDQ3QkVEREI4MjA4RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOA1FgV0ggf4iM8Pg4NOqi3tJD PfOnPys2WRcITcJmvN+oDa9AowVQ/vX3CVOwYBjYQ9uB2h5XO1DOSZ3cIOQE8/4h QGyPRgDFgQUpJMyyYEqKU5Sljxq3r1g28is283AnUyXrT5VJ8KsY8F4aDQAuFqpE T/7eEgULtUn+b1dooroUuXZzj8cT4F1g7MniHOAEcOU9kLmN+Mz6+r5ptRdTxjU+ lUWy6+2O3Svd+U0YAhinqObkIyDFGIHFeZb+NNTwWTD/tTgiRGqwf9G7D8xYNMJo tkpJzZldj7Cz8JtXY8gJ2fTGHY0nz3BZ0UmLV7p+94jClMUWTxNVRWlCj4ixAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUUAcbgy+wXJSdCx1IPQR77duCCOcwHwYDVR0j BBgwFoAU3k5pi+DMoyigAjXF5kT8il6hLgkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MTAwNzAxMDIyNjQzODE0Ni8wL0RFNEU2OThCRTBDQ0EzMjhBMDAyMzVDNUU2NDRG QzhBNUVBMTJFMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1RUExMkUwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzEwMDcwMTAyMjY0MzgxNDYvMC9ERTRFNjk4QkUwQ0NB MzI4QTAwMjM1QzVFNjQ0RkM4QTVFQTEyRTA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWl67swtSd1v IAO58qzPnWQNyFd83wTiIvMlMdnvyKnD8YtYHU8F1VkT5Uy3gjWY1xDIws/i7s3c Fsm1CsmvuK0FP9FQe+vZ80BcdGW5x8jPWRlg9ygOMTGJWXglB8tZ/zRBoaJeBI1R WsN3gIShaKUS0vw1qDhAq8912VqbHxJuCERI9NtGtv0asQOOzIXxQO2d7W1aO587 RfEBKhXbGKZN453n48xwlt+tJoQ8WApR02rqpeU9egwGFQBdh83tJkGJNEfF1p5E ybtctfiZUS890SY3eIJMsJWBUMsYglqLqU5RGZMiHdXlt6L3JOxeoBV+UNgoWAau SpEkbSDvnA== -----END CERTIFICATE-----Generated at Tue Oct 13 20:58:38 2026 by rpki-client