$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft File: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft (raw, json) Hash identifier: LpSNQNQY1nHeV1TcUJK9Z6m4o7X/2kdQXsu5rpms7mc= Subject key identifier: 9C:2E:B6:C5:22:28:88:4A:4F:32:D3:2F:B1:DB:8E:76:56:FD:E0:40 Authority key identifier: DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 Certificate issuer: /CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Certificate serial: 1DBE8DBE369182641E37265DA094745E13F649B4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft Manifest number: 9A Signing time: Fri 29 May 2026 05:47:40 +0000 Manifest this update: Fri 29 May 2026 05:42:40 +0000 Manifest next update: Sat 30 May 2026 08:10:40 +0000 Files and hashes: 1: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl (hash: f6sv/1SF7TFqViBYFg2iZtbvtSyEEGlUK6S0XVP7yeM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:be:8d:be:36:91:82:64:1e:37:26:5d:a0:94:74:5e:13:f6:49:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Validity Not Before: May 29 05:42:40 2026 GMT Not After : May 30 08:10:40 2026 GMT Subject: CN=9C2EB6C52228884A4F32D32FB1DB8E7656FDE040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e2:2e:2a:d4:53:c1:a4:b9:39:74:df:a5:6c: 3f:0c:5c:8e:45:bf:2e:d3:0c:3d:8f:32:a8:70:b3: ff:58:26:21:72:71:13:9e:03:14:af:02:92:14:97: 57:a6:d3:ce:18:11:0d:6a:51:93:bd:50:10:f9:b6: 1f:bd:86:62:df:f4:04:b6:2b:0f:0d:d0:69:19:00: 85:14:27:dd:24:65:cc:4c:9a:83:a7:67:21:ee:71: ed:90:92:4a:cc:ba:35:77:a6:fe:65:90:0e:dd:42: 00:71:da:4d:d0:cb:b7:6e:08:40:1a:df:85:66:25: 97:6f:aa:40:4a:21:d5:4c:da:39:af:fc:37:81:e4: 00:e7:08:8d:79:27:a5:9b:a3:df:e6:af:00:7f:66: fa:9c:b1:d5:94:29:56:2e:47:23:4d:84:8f:a0:c6: c1:8d:8f:5e:f9:e2:54:bc:97:7f:59:8c:17:0b:07: 37:e2:e0:3d:f4:8b:a7:a5:3d:71:96:5f:50:c4:c9: 56:32:cd:bf:d0:27:35:57:5e:63:24:d2:09:23:23: eb:de:1e:f5:61:f9:23:53:1e:f6:4c:04:87:9e:63: de:d1:66:81:50:aa:fc:e2:9b:7e:94:bd:5a:dc:8b: d8:d2:c5:6c:c6:7f:80:56:1e:f5:5e:ff:55:d9:71: 95:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:2E:B6:C5:22:28:88:4A:4F:32:D3:2F:B1:DB:8E:76:56:FD:E0:40 X509v3 Authority Key Identifier: keyid:DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:0f:5c:f0:34:95:50:3d:7c:ce:6b:1a:94:9c:a8:10:8b:d2: fc:5c:32:67:8e:86:03:ca:27:74:99:0c:e5:f4:f6:1c:f9:e4: 08:ae:bd:78:43:ff:5c:eb:83:f7:3f:3e:4a:92:a3:23:2b:b0: f4:e0:9c:74:0c:f5:c4:cb:b6:32:de:97:ee:b4:98:c5:df:a6: 75:83:54:a2:17:62:64:3f:44:da:93:6a:c1:e9:fe:dd:93:85: 09:f3:b9:7d:62:d8:26:0f:e6:80:3d:bb:75:c8:20:f3:80:ef: b0:08:44:5c:8b:51:d7:62:e3:a6:31:b8:a8:ee:08:1a:88:43: c1:2f:8a:0c:ae:8c:a1:9d:f9:69:fd:30:69:ef:e0:27:c0:72: fd:4a:3c:92:f0:9c:6d:fc:e8:d3:dd:41:6f:b0:b2:ca:40:81: 31:de:d1:c7:77:17:a8:58:be:dd:e2:da:94:ae:71:08:75:6d: 07:13:a0:9d:83:5f:8c:4d:c1:29:f6:ab:f4:5c:52:5f:04:8a: 7b:67:53:30:50:61:43:67:2b:bc:44:80:2b:33:53:2d:7e:12: dc:ab:fd:e1:17:33:60:34:96:bb:ca:60:55:ca:75:c2:f3:18: c9:8d:3e:30:d1:3a:ba:ef:94:0f:80:af:c1:00:2f:64:9a:4e: cc:cb:91:6a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHb6NvjaRgmQeNyZdoJR0XhP2SbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1 RUExMkUwOTAeFw0yNjA1MjkwNTQyNDBaFw0yNjA1MzAwODEwNDBaMDMxMTAvBgNV BAMTKDlDMkVCNkM1MjIyODg4NEE0RjMyRDMyRkIxREI4RTc2NTZGREUwNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC14i4q1FPBpLk5dN+lbD8MXI5F vy7TDD2PMqhws/9YJiFycROeAxSvApIUl1em084YEQ1qUZO9UBD5th+9hmLf9AS2 Kw8N0GkZAIUUJ90kZcxMmoOnZyHuce2QkkrMujV3pv5lkA7dQgBx2k3Qy7duCEAa 34VmJZdvqkBKIdVM2jmv/DeB5ADnCI15J6Wbo9/mrwB/ZvqcsdWUKVYuRyNNhI+g xsGNj1754lS8l39ZjBcLBzfi4D30i6elPXGWX1DEyVYyzb/QJzVXXmMk0gkjI+ve HvVh+SNTHvZMBIeeY97RZoFQqvzim36UvVrci9jSxWzGf4BWHvVe/1XZcZWZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUnC62xSIoiEpPMtMvsduOdlb94EAwHwYDVR0j BBgwFoAU3k5pi+DMoyigAjXF5kT8il6hLgkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MTAwNzAxMDIyNjQzODE0Ni8wL0RFNEU2OThCRTBDQ0EzMjhBMDAyMzVDNUU2NDRG QzhBNUVBMTJFMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1RUExMkUwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzEwMDcwMTAyMjY0MzgxNDYvMC9ERTRFNjk4QkUwQ0NB MzI4QTAwMjM1QzVFNjQ0RkM4QTVFQTEyRTA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQ9c8DSVUD18 zmsalJyoEIvS/FwyZ46GA8ondJkM5fT2HPnkCK69eEP/XOuD9z8+SpKjIyuw9OCc dAz1xMu2Mt6X7rSYxd+mdYNUohdiZD9E2pNqwen+3ZOFCfO5fWLYJg/mgD27dcgg 84DvsAhEXItR12LjpjG4qO4IGohDwS+KDK6MoZ35af0wae/gJ8By/Uo8kvCcbfzo 091Bb7CyykCBMd7Rx3cXqFi+3eLalK5xCHVtBxOgnYNfjE3BKfar9FxSXwSKe2dT MFBhQ2crvESAKzNTLX4S3Kv94RczYDSWu8pgVcp1wvMYyY0+MNE6uu+UD4CvwQAv ZJpOzMuRag== -----END CERTIFICATE-----Generated at Fri May 29 22:05:28 2026 by rpki-client