$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft File: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft (raw, json) Hash identifier: gSY4/KNG0rCknKYvw60jLWiOgPlG9pxtvMDzOzVQzDA= Subject key identifier: 09:1A:31:08:61:9F:9D:72:E8:B8:39:A8:9D:34:A6:A4:50:9D:C4:40 Authority key identifier: DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 Certificate issuer: /CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Certificate serial: 40F6EF9D05EB7A04AC54CA5B4F0B3FA864B6E727 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft Manifest number: 0113 Signing time: Fri 28 Aug 2026 06:47:44 +0000 Manifest this update: Fri 28 Aug 2026 06:42:44 +0000 Manifest next update: Mon 31 Aug 2026 11:42:44 +0000 Files and hashes: 1: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl (hash: USm7WeIfooAzWlcHMPEZyStjDMVFE2dQM/lGbc5nUKY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:42:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f6:ef:9d:05:eb:7a:04:ac:54:ca:5b:4f:0b:3f:a8:64:b6:e7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Validity Not Before: Aug 28 06:42:44 2026 GMT Not After : Aug 31 11:42:44 2026 GMT Subject: CN=091A3108619F9D72E8B839A89D34A6A4509DC440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9f:d9:3d:0e:4a:5a:30:18:74:ed:6d:aa:17: e3:bf:3f:bd:da:5e:a6:a8:53:36:6e:a0:b1:0f:8d: 5e:14:31:9a:ef:cd:90:c8:92:48:86:e0:87:2c:90: 41:f6:03:d7:29:c1:34:c3:5f:e5:44:e4:4f:bd:a2: f8:62:21:3d:74:35:40:a6:b9:29:67:c3:3d:3d:c8: 72:a9:d7:fd:b4:4c:f5:b2:06:96:6a:be:06:ba:5c: f9:c0:03:09:66:23:f6:22:2a:15:74:06:d3:a8:c1: 34:16:98:6c:78:d1:94:46:c2:81:e1:d9:bc:4a:71: 41:d2:9b:f0:5e:3a:8e:66:7f:f1:f4:64:28:93:50: d5:25:64:28:c5:59:d7:88:2f:ef:f4:1c:ef:e9:ee: 72:2a:55:8b:50:bc:6f:df:0d:35:64:5d:2d:96:da: ae:e1:c9:cb:24:14:3a:2c:e9:7d:21:fa:9b:b9:a4: d4:23:2c:f2:30:a1:96:05:10:ee:fc:f7:70:a2:5c: a2:99:43:61:61:87:25:2b:6b:72:15:ba:95:d4:c6: 3b:81:3f:3e:84:4d:1d:e2:aa:1e:32:f3:37:27:a8: 20:9e:cd:ee:29:73:0a:42:b5:44:98:c2:f5:69:d0: 3a:c0:51:66:6c:0d:ba:c2:e2:fd:ed:26:67:22:0a: be:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:1A:31:08:61:9F:9D:72:E8:B8:39:A8:9D:34:A6:A4:50:9D:C4:40 X509v3 Authority Key Identifier: keyid:DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:e2:a3:51:a1:bd:e5:a4:d9:f6:78:3b:90:4b:23:40:92:6a: b5:a4:02:84:a0:a0:fb:06:75:7d:45:fc:13:51:84:a8:0c:0f: 93:fc:31:6a:43:84:51:52:8f:03:3b:63:fa:a4:e6:95:78:e6: ac:39:ab:6b:17:0b:1e:e2:92:d8:b0:25:69:14:95:4a:27:77: f6:b9:12:16:a0:d6:d5:e0:7b:af:e6:73:cd:e5:ee:77:d3:bb: 5a:ff:9a:e7:4f:50:5f:1e:74:c5:12:21:2d:ae:67:f6:57:cd: b8:2b:d9:bd:c0:dd:b3:50:42:7e:60:fb:e4:fa:c9:67:3a:d8: d2:df:8f:81:ee:79:3a:a8:ef:2b:31:ed:84:27:28:a5:34:f9: 92:1f:03:a7:7b:eb:7c:ca:5b:a7:77:59:9f:fc:02:50:cf:d4: 70:1f:4a:02:4c:fa:4a:24:38:56:82:42:1f:f8:84:f1:90:63: 6f:a5:88:b3:43:11:7c:e1:93:a5:4c:d6:e1:4e:1c:aa:e9:4b: 96:fd:16:60:60:4d:16:9b:2c:74:73:63:96:1f:af:4f:6a:6d: db:69:b8:07:47:7c:e9:84:d5:32:26:e1:76:3a:8f:4d:cd:3b: 5d:b7:e8:08:81:3c:15:0d:10:94:2d:32:4d:52:49:ef:33:c6: 24:4c:95:dd -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQPbvnQXregSsVMpbTws/qGS25ycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1 RUExMkUwOTAeFw0yNjA4MjgwNjQyNDRaFw0yNjA4MzExMTQyNDRaMDMxMTAvBgNV BAMTKDA5MUEzMTA4NjE5RjlENzJFOEI4MzlBODlEMzRBNkE0NTA5REM0NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWn9k9DkpaMBh07W2qF+O/P73a XqaoUzZuoLEPjV4UMZrvzZDIkkiG4IcskEH2A9cpwTTDX+VE5E+9ovhiIT10NUCm uSlnwz09yHKp1/20TPWyBpZqvga6XPnAAwlmI/YiKhV0BtOowTQWmGx40ZRGwoHh 2bxKcUHSm/BeOo5mf/H0ZCiTUNUlZCjFWdeIL+/0HO/p7nIqVYtQvG/fDTVkXS2W 2q7hycskFDos6X0h+pu5pNQjLPIwoZYFEO7893CiXKKZQ2FhhyUra3IVupXUxjuB Pz6ETR3iqh4y8zcnqCCeze4pcwpCtUSYwvVp0DrAUWZsDbrC4v3tJmciCr5jAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCRoxCGGfnXLouDmonTSmpFCdxEAwHwYDVR0j BBgwFoAU3k5pi+DMoyigAjXF5kT8il6hLgkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MTAwNzAxMDIyNjQzODE0Ni8wL0RFNEU2OThCRTBDQ0EzMjhBMDAyMzVDNUU2NDRG QzhBNUVBMTJFMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1RUExMkUwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzEwMDcwMTAyMjY0MzgxNDYvMC9ERTRFNjk4QkUwQ0NB MzI4QTAwMjM1QzVFNjQ0RkM4QTVFQTEyRTA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOuKjUaG95aTZ 9ng7kEsjQJJqtaQChKCg+wZ1fUX8E1GEqAwPk/wxakOEUVKPAztj+qTmlXjmrDmr axcLHuKS2LAlaRSVSid39rkSFqDW1eB7r+ZzzeXud9O7Wv+a509QXx50xRIhLa5n 9lfNuCvZvcDds1BCfmD75PrJZzrY0t+Pge55OqjvKzHthCcopTT5kh8Dp3vrfMpb p3dZn/wCUM/UcB9KAkz6SiQ4VoJCH/iE8ZBjb6WIs0MRfOGTpUzW4U4cqulLlv0W YGBNFpssdHNjlh+vT2pt22m4B0d86YTVMibhdjqPTc07XbfoCIE8FQ0QlC0yTVJJ 7zPGJEyV3Q== -----END CERTIFICATE-----Generated at Sat Aug 29 07:20:13 2026 by rpki-client