
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft
File: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft (raw, json)
Hash identifier: XvUGUs0+5gJNNw7a2O0amWo+OoSKOkQLM4TUtM5/EQk=
Subject key identifier: 67:AC:81:BD:F6:F9:22:88:02:76:BF:7B:2D:20:94:7F:FF:38:35:06
Authority key identifier: DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09
Certificate issuer: /CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09
Certificate serial: 7CB56D352E4F34D57961B2EF297B9183B2036874
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft
Manifest number: 1B
Signing time: Sun 22 Feb 2026 20:22:30 +0000
Manifest this update: Sun 22 Feb 2026 20:17:30 +0000
Manifest next update: Mon 23 Feb 2026 21:11:30 +0000
Files and hashes: 1: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl (hash: s2BIMXrxHBMVojV4ALdlQgKbZS4wOea2uWBxOsO1ikE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl
rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:b5:6d:35:2e:4f:34:d5:79:61:b2:ef:29:7b:91:83:b2:03:68:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09
Validity
Not Before: Feb 22 20:17:30 2026 GMT
Not After : Feb 23 21:11:30 2026 GMT
Subject: CN=67AC81BDF6F922880276BF7B2D20947FFF383506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:17:b4:4f:bd:3e:22:4a:cb:d4:de:41:ea:5b:
b1:1d:31:7f:f8:2e:13:8f:73:61:45:4c:e4:07:62:
02:5a:26:d9:a8:02:40:26:7c:fb:87:61:48:62:0f:
37:00:78:d3:7b:a5:44:0a:eb:de:0e:5f:a0:1f:6b:
13:5f:8a:51:90:9c:9c:d2:34:27:ef:07:9b:2d:4c:
1f:14:3d:d9:7a:63:e0:e2:b2:9b:4b:22:e4:4c:7b:
4e:e4:21:27:05:84:57:af:11:8e:e9:f7:59:ee:28:
b0:4e:0d:81:95:05:f8:e0:67:66:9a:5a:ce:cd:86:
90:dd:2f:c9:ce:5e:91:02:f0:ea:ec:18:f0:f1:fe:
c6:65:96:e4:d6:2d:13:5e:f2:b1:8c:ca:7e:bb:6a:
ce:d6:a9:72:39:1c:cb:d2:5f:ad:9f:e5:a7:4e:47:
b2:05:8a:7c:7c:87:6e:8d:fa:2e:67:47:5f:a5:46:
ee:fe:9d:80:75:09:22:ab:22:0c:33:25:5d:6e:62:
70:5d:1c:cd:a2:98:c6:97:f7:98:5c:9c:88:c9:02:
21:c9:48:70:b1:a8:77:43:fa:7d:77:c4:30:c3:f3:
54:16:cc:62:be:bd:68:09:78:20:62:99:c0:d6:de:
b2:c7:9d:fb:0e:32:0a:d8:a4:59:d4:fa:0f:7b:25:
5e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AC:81:BD:F6:F9:22:88:02:76:BF:7B:2D:20:94:7F:FF:38:35:06
X509v3 Authority Key Identifier:
keyid:DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:55:53:01:9b:4d:64:d8:b4:01:91:c7:a7:7c:4a:2c:2f:ca:
ee:32:3e:0f:45:78:7c:dc:04:dc:a8:2b:e6:76:fb:f2:2a:cc:
be:db:c8:24:3e:d2:b0:bd:79:57:ae:b8:c6:c0:15:2d:8d:54:
91:8f:c0:ae:7c:8e:d0:76:53:a2:bb:19:a1:25:20:7f:35:11:
e3:83:02:b6:9e:d7:8d:05:10:ad:b7:d7:4c:28:7b:95:d8:44:
88:65:55:98:fd:1a:4b:e7:8f:91:fd:6b:db:d9:1d:41:d0:f9:
42:e6:3b:ca:1e:aa:b2:25:0d:11:5c:0f:b8:c0:7e:e2:d8:f1:
de:80:03:a3:a4:81:22:6e:23:26:cd:52:e8:ac:27:b3:70:34:
6f:e7:b6:c3:a0:55:a4:3a:a1:e8:4a:4a:9e:53:32:bf:86:10:
0e:69:46:f4:e2:64:26:d2:e8:40:60:5d:aa:70:c3:fd:0c:64:
7c:8c:f6:e6:ca:a0:12:5f:93:34:8d:95:1b:58:80:a8:13:c7:
0f:8e:77:e1:2d:ba:61:b0:20:56:36:b7:8d:95:5b:2c:df:89:
74:2c:69:80:d5:cb:9a:17:69:85:da:e5:74:91:59:16:2e:da:
da:bd:24:4c:ca:45:c5:64:99:69:40:40:bc:7a:00:61:3f:f9:
b2:b1:ac:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:11:16 2026 by rpki-client