$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft File: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft (raw, json) Hash identifier: m4n/84NGLU+O2OAArvi+RWAkGW3WzofPIK6PyfrdkUE= Subject key identifier: 7B:83:50:C0:E4:AD:31:B0:DC:06:AA:C9:C0:46:C1:DD:3A:09:7F:3D Authority key identifier: DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 Certificate issuer: /CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Certificate serial: 47F7A40062A524D32078C7052ED0F4C27CDF58D3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft Manifest number: 5D Signing time: Mon 13 Apr 2026 07:24:17 +0000 Manifest this update: Mon 13 Apr 2026 07:19:17 +0000 Manifest next update: Tue 14 Apr 2026 10:20:17 +0000 Files and hashes: 1: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl (hash: /gjsCYQvasSIjrphBBDa0RXAUmBQGAoqc+q0lTYGYcQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f7:a4:00:62:a5:24:d3:20:78:c7:05:2e:d0:f4:c2:7c:df:58:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Validity Not Before: Apr 13 07:19:17 2026 GMT Not After : Apr 14 10:20:17 2026 GMT Subject: CN=7B8350C0E4AD31B0DC06AAC9C046C1DD3A097F3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f6:25:c8:16:7c:8f:fa:4f:bd:7d:d5:bb:3b: 63:51:8b:72:0f:42:2e:f3:f7:d4:20:ca:57:5a:45: fa:d4:34:b3:b4:6e:22:3a:2f:62:c9:34:c8:57:43: e5:04:25:2a:78:09:3a:64:ab:fb:b7:76:0b:8e:47: 67:24:df:fd:90:ed:1e:6d:55:28:33:84:58:c4:31: b9:2e:6e:be:0d:6d:55:00:1e:0b:fc:a6:6b:82:1c: e7:bf:c9:8e:3f:7f:63:9f:54:4b:8e:3b:b2:0a:70: 12:8a:a3:61:c0:f1:ff:83:51:a0:64:8a:88:9f:82: 8c:e9:89:92:a9:03:ec:81:c9:e9:e2:d0:15:f2:4a: 29:3d:0f:98:ca:e5:8b:7a:ce:96:2f:ed:9a:c4:23: b4:dd:6e:4b:eb:ee:ab:2d:88:0e:f6:f3:cd:7d:e6: 13:a9:90:3d:2a:d0:d1:b1:10:b4:8c:0e:11:92:be: cc:c1:76:f2:30:46:3f:5e:e7:db:e9:51:0a:5b:38: f4:15:a3:c3:6f:43:1f:a7:ee:52:c2:87:14:e1:00: ca:18:24:e4:8d:8c:74:71:f0:a6:05:e2:86:65:2e: 08:34:74:e2:f2:a7:38:3b:c0:76:c1:6d:92:02:c1: dd:49:6b:ee:d0:1c:b3:8a:78:11:cf:89:67:47:28: 76:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:83:50:C0:E4:AD:31:B0:DC:06:AA:C9:C0:46:C1:DD:3A:09:7F:3D X509v3 Authority Key Identifier: keyid:DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:8a:09:21:c3:8a:91:db:2d:34:25:e4:76:ac:90:72:1e:86: 35:93:01:9d:c6:3a:5f:2c:99:82:59:09:cd:42:d1:ee:44:2c: 1c:f1:17:73:30:8e:c5:7b:bd:bf:70:8b:82:4a:d9:6d:64:85: d5:c1:18:65:68:de:ed:f2:30:75:22:e3:80:ab:02:6a:99:ec: 90:e0:1d:76:ec:55:3f:00:80:68:45:be:fe:a1:df:ca:85:ed: f0:cc:21:44:77:df:61:1f:3b:9d:96:40:72:35:49:b5:e4:ef: 5d:3c:e8:44:a9:1a:2f:0e:7c:ca:95:8f:52:1e:77:ff:f2:88: 7d:64:31:6e:75:4c:d9:c4:c6:e5:2c:27:3d:7b:7f:42:32:41: a7:4a:8f:56:28:8a:42:b7:aa:fe:df:6d:4c:2e:27:c9:b4:43: 56:80:f4:55:21:bc:07:1f:8a:59:bc:19:76:95:90:f8:ee:d8: cb:b8:55:a0:6c:94:a8:08:e6:f1:9b:ac:04:de:ec:0b:e2:42: 08:a4:40:d1:cd:27:61:77:bf:4e:2c:fa:3d:d2:9b:80:9b:9e: cf:53:64:c3:9a:0a:22:6e:43:84:88:9e:24:63:d9:a4:24:fc: 91:27:70:6e:93:ec:c9:8f:31:08:5b:dc:c9:54:cf:b7:9d:13: 9d:bd:d9:e5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUR/ekAGKlJNMgeMcFLtD0wnzfWNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1 RUExMkUwOTAeFw0yNjA0MTMwNzE5MTdaFw0yNjA0MTQxMDIwMTdaMDMxMTAvBgNV BAMTKDdCODM1MEMwRTRBRDMxQjBEQzA2QUFDOUMwNDZDMUREM0EwOTdGM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk9iXIFnyP+k+9fdW7O2NRi3IP Qi7z99QgyldaRfrUNLO0biI6L2LJNMhXQ+UEJSp4CTpkq/u3dguOR2ck3/2Q7R5t VSgzhFjEMbkubr4NbVUAHgv8pmuCHOe/yY4/f2OfVEuOO7IKcBKKo2HA8f+DUaBk ioifgozpiZKpA+yByeni0BXySik9D5jK5Yt6zpYv7ZrEI7Tdbkvr7qstiA728819 5hOpkD0q0NGxELSMDhGSvszBdvIwRj9e59vpUQpbOPQVo8NvQx+n7lLChxThAMoY JOSNjHRx8KYF4oZlLgg0dOLypzg7wHbBbZICwd1Ja+7QHLOKeBHPiWdHKHbfAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUe4NQwOStMbDcBqrJwEbB3ToJfz0wHwYDVR0j BBgwFoAU3k5pi+DMoyigAjXF5kT8il6hLgkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MTAwNzAxMDIyNjQzODE0Ni8wL0RFNEU2OThCRTBDQ0EzMjhBMDAyMzVDNUU2NDRG QzhBNUVBMTJFMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1RUExMkUwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzEwMDcwMTAyMjY0MzgxNDYvMC9ERTRFNjk4QkUwQ0NB MzI4QTAwMjM1QzVFNjQ0RkM4QTVFQTEyRTA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4oJIcOKkdst NCXkdqyQch6GNZMBncY6XyyZglkJzULR7kQsHPEXczCOxXu9v3CLgkrZbWSF1cEY ZWje7fIwdSLjgKsCapnskOAdduxVPwCAaEW+/qHfyoXt8MwhRHffYR87nZZAcjVJ teTvXTzoRKkaLw58ypWPUh53//KIfWQxbnVM2cTG5SwnPXt/QjJBp0qPViiKQreq /t9tTC4nybRDVoD0VSG8Bx+KWbwZdpWQ+O7Yy7hVoGyUqAjm8ZusBN7sC+JCCKRA 0c0nYXe/Tiz6PdKbgJuez1Nkw5oKIm5DhIieJGPZpCT8kSdwbpPsyY8xCFvcyVTP t50Tnb3Z5Q== -----END CERTIFICATE-----Generated at Mon Apr 13 12:30:16 2026 by rpki-client