$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft File: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft (raw, json) Hash identifier: oLNtojfT8+Wqb76V3pd6jlQRvNSKfv+T86mS1aq1RVs= Subject key identifier: 3B:3F:34:9B:B8:21:97:72:56:E9:84:DD:82:A7:06:25:86:F1:FF:3F Authority key identifier: DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 Certificate issuer: /CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Certificate serial: 3DB5AE33A03DE2AC73C0F4B8A99417B44E7488E7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft Manifest number: 0128 Signing time: Wed 14 Oct 2026 18:24:24 +0000 Manifest this update: Wed 14 Oct 2026 18:19:24 +0000 Manifest next update: Sun 18 Oct 2026 02:28:24 +0000 Files and hashes: 1: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl (hash: VyI9caVR0F1ryOb8cFPJdy1d7cBurzewlP/eFviTAQU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b5:ae:33:a0:3d:e2:ac:73:c0:f4:b8:a9:94:17:b4:4e:74:88:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Validity Not Before: Oct 14 18:19:24 2026 GMT Not After : Oct 18 02:28:24 2026 GMT Subject: CN=3B3F349BB821977256E984DD82A7062586F1FF3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:49:99:41:cb:36:aa:b2:71:6d:b5:89:00:d5: 7d:3f:3d:2d:8a:50:8b:9a:4e:2c:d6:04:ea:4a:5a: 73:2d:ec:2e:ec:c8:e0:ee:32:7f:66:2a:67:19:7a: 05:7c:c2:9d:87:18:be:e8:ad:50:9b:80:d1:21:17: a9:41:a5:30:f8:41:e8:a6:12:fe:a7:6a:62:1f:78: b8:04:8a:8e:5d:76:0a:36:01:a4:51:5e:0e:5e:1a: 65:95:18:67:f9:96:d7:95:1c:53:f8:e8:c8:59:64: 43:a6:18:46:d4:85:9b:6c:f9:93:c8:bf:e8:35:74: 7e:f6:cf:fa:e8:a4:50:50:9b:95:da:bf:b3:58:a5: 8a:50:35:b8:61:94:74:40:09:92:43:b6:36:28:3f: 17:ee:4a:66:0d:42:a4:21:4e:c2:1a:d1:11:47:cf: 0e:ae:f7:1f:7d:b7:ab:71:97:9b:71:0d:d9:a5:31: 72:94:9b:6a:52:83:74:ea:5e:47:84:e8:3f:97:ac: 3f:9d:4b:72:be:f6:5a:1f:da:6c:b5:c2:b9:01:76: 97:ec:fc:e2:29:7c:f9:44:4e:b7:ba:3a:55:a9:99: 72:48:8d:a2:60:09:bb:eb:0d:a9:f0:cd:c2:a7:3e: 74:17:d8:b9:cf:47:08:ef:86:cc:8b:a5:8c:35:f7: a6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3F:34:9B:B8:21:97:72:56:E9:84:DD:82:A7:06:25:86:F1:FF:3F X509v3 Authority Key Identifier: keyid:DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:8e:dd:ad:4b:9e:2b:eb:76:a5:ee:fc:59:02:21:ed:96:9f: 2e:8b:48:d2:ae:c5:04:57:7c:20:6e:25:55:f1:ff:9a:48:64: 52:ec:1c:73:ee:13:5f:87:13:bd:f9:a8:5e:38:a2:be:9b:f1: a9:6b:fb:7c:f8:69:bc:21:9c:41:f5:ca:2b:5c:84:ad:27:b9: d8:a8:1b:f1:41:86:26:3e:88:49:00:1c:9b:1e:b5:bf:9a:3f: 86:72:d8:ea:8d:bf:73:22:40:ea:5e:b3:7c:2e:4f:eb:4f:16: 12:b1:64:d8:07:3c:d0:64:66:00:3f:c2:61:38:a0:df:21:55: da:5a:9c:36:8a:d0:92:94:98:1c:b2:6d:a8:91:bd:2a:a3:63: 80:41:91:1f:75:83:37:9b:ea:7a:f5:98:f5:cf:84:22:45:28: ad:50:6a:85:0e:50:fd:79:68:67:fa:5a:f7:d8:ed:e3:18:5f: 62:88:c9:c1:19:49:db:14:6d:75:70:30:0f:77:d6:34:cd:96: 61:77:cb:9d:f7:54:f8:78:5f:f7:fd:bc:f6:44:18:c9:bf:0d: ed:43:9f:21:1c:12:f5:4d:b0:5e:2e:e4:29:ac:41:bb:db:43: e1:a7:d8:d2:5b:c2:d9:ba:7e:f6:5c:34:70:a0:6a:93:69:e9: 99:35:94:85 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPbWuM6A94qxzwPS4qZQXtE50iOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1 RUExMkUwOTAeFw0yNjEwMTQxODE5MjRaFw0yNjEwMTgwMjI4MjRaMDMxMTAvBgNV BAMTKDNCM0YzNDlCQjgyMTk3NzI1NkU5ODRERDgyQTcwNjI1ODZGMUZGM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYSZlByzaqsnFttYkA1X0/PS2K UIuaTizWBOpKWnMt7C7syODuMn9mKmcZegV8wp2HGL7orVCbgNEhF6lBpTD4Qeim Ev6namIfeLgEio5ddgo2AaRRXg5eGmWVGGf5lteVHFP46MhZZEOmGEbUhZts+ZPI v+g1dH72z/ropFBQm5Xav7NYpYpQNbhhlHRACZJDtjYoPxfuSmYNQqQhTsIa0RFH zw6u9x99t6txl5txDdmlMXKUm2pSg3TqXkeE6D+XrD+dS3K+9lof2my1wrkBdpfs /OIpfPlETre6OlWpmXJIjaJgCbvrDanwzcKnPnQX2LnPRwjvhsyLpYw196bLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOz80m7ghl3JW6YTdgqcGJYbx/z8wHwYDVR0j BBgwFoAU3k5pi+DMoyigAjXF5kT8il6hLgkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MTAwNzAxMDIyNjQzODE0Ni8wL0RFNEU2OThCRTBDQ0EzMjhBMDAyMzVDNUU2NDRG QzhBNUVBMTJFMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1RUExMkUwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzEwMDcwMTAyMjY0MzgxNDYvMC9ERTRFNjk4QkUwQ0NB MzI4QTAwMjM1QzVFNjQ0RkM4QTVFQTEyRTA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANI7drUueK+t2 pe78WQIh7ZafLotI0q7FBFd8IG4lVfH/mkhkUuwcc+4TX4cTvfmoXjiivpvxqWv7 fPhpvCGcQfXKK1yErSe52Kgb8UGGJj6ISQAcmx61v5o/hnLY6o2/cyJA6l6zfC5P 608WErFk2Ac80GRmAD/CYTig3yFV2lqcNorQkpSYHLJtqJG9KqNjgEGRH3WDN5vq evWY9c+EIkUorVBqhQ5Q/XloZ/pa99jt4xhfYojJwRlJ2xRtdXAwD3fWNM2WYXfL nfdU+Hhf9/289kQYyb8N7UOfIRwS9U2wXi7kKaxBu9tD4afY0lvC2bp+9lw0cKBq k2npmTWUhQ== -----END CERTIFICATE-----Generated at Thu Oct 15 05:27:30 2026 by rpki-client