$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft File: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft (raw, json) Hash identifier: yocJknh1mmfDgU5r9J57WPSAno1rCYFLV8/F8IdKsrE= Subject key identifier: D5:B9:54:56:36:47:44:13:4F:EF:44:D9:80:28:11:11:FC:14:9D:6B Authority key identifier: DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 Certificate issuer: /CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Certificate serial: 57649EA4B3A0C02552F94C52003BA48E01A3FB8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft Manifest number: 46 Signing time: Fri 27 Mar 2026 00:33:28 +0000 Manifest this update: Fri 27 Mar 2026 00:28:28 +0000 Manifest next update: Sat 28 Mar 2026 01:24:28 +0000 Files and hashes: 1: DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl (hash: vjpZvshl8d1G2g6z1P3lmUGk6PtbxCob9l0c7YVz2EA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:64:9e:a4:b3:a0:c0:25:52:f9:4c:52:00:3b:a4:8e:01:a3:fb:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4E698BE0CCA328A00235C5E644FC8A5EA12E09 Validity Not Before: Mar 27 00:28:28 2026 GMT Not After : Mar 28 01:24:28 2026 GMT Subject: CN=D5B95456364744134FEF44D980281111FC149D6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:89:fc:11:49:be:d1:eb:9d:02:96:f7:89:b0: 1b:a1:a8:b2:99:44:6f:9c:b1:ce:ad:f5:95:e3:ec: aa:11:4f:c4:88:69:17:dd:c0:f6:bd:2a:84:8b:6b: cd:0a:f7:b2:15:a3:20:8c:3b:8d:ae:4f:82:15:6f: e9:88:44:8b:e5:1e:7b:72:4d:80:cd:38:03:fd:c2: 53:c4:78:7e:fc:d6:22:72:8b:80:30:89:e4:bf:08: 70:57:2e:88:95:bd:30:66:a4:44:45:1f:54:09:f1: a3:c2:dd:79:1b:0d:2a:2c:8e:da:c5:09:9b:32:b8: f4:19:25:15:63:cc:4e:aa:6a:38:d5:8e:31:77:d5: d9:82:f8:80:b6:40:cb:97:38:3e:0b:73:99:19:17: 93:8d:22:bb:2c:14:74:d5:56:51:fe:39:96:7c:83: 5d:3c:5d:ff:45:90:6a:46:32:77:5a:2c:f2:56:09: bd:91:36:1b:47:8b:37:cb:d7:88:bd:71:de:5f:99: 7f:8f:05:f6:ff:77:67:a9:45:f0:44:4f:74:ac:aa: 5d:56:bb:55:6b:97:c8:d5:db:68:c4:a8:ed:4e:5c: 75:1a:68:d1:34:80:39:29:a1:72:1a:64:67:fa:80: ea:10:fb:c4:86:e8:35:c0:3e:7f:1b:4a:d8:1b:f3: 1f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B9:54:56:36:47:44:13:4F:EF:44:D9:80:28:11:11:FC:14:9D:6B X509v3 Authority Key Identifier: keyid:DE:4E:69:8B:E0:CC:A3:28:A0:02:35:C5:E6:44:FC:8A:5E:A1:2E:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1071007010226438146/0/DE4E698BE0CCA328A00235C5E644FC8A5EA12E09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:e4:6f:69:22:5e:68:2a:c7:8f:bb:bb:4d:60:a3:ae:7e:3b: e8:91:f9:40:00:ca:7b:a9:79:f3:bb:7b:ec:82:d8:c1:dd:10: e6:f7:c8:52:a0:0f:ce:92:d2:e0:18:ab:09:6f:39:09:32:5e: 1a:9a:7f:19:73:dc:7d:ee:61:04:a2:3e:3b:76:0b:57:88:64: d5:79:19:0f:3f:48:4c:4c:cc:1e:89:b0:96:ea:c0:a5:4d:62: 5f:a5:89:4b:33:8b:c2:9e:21:11:8c:2f:8b:61:7a:f5:ed:33: a8:99:fa:8f:75:90:3a:27:74:31:e4:57:70:29:7f:16:91:fa: 2b:fc:8e:62:d7:8c:73:b6:41:86:5c:ed:39:08:e9:e6:21:57: a4:ae:80:15:32:5c:c7:26:af:3c:43:7b:91:c0:e4:2a:6e:2e: c4:dd:21:86:e7:c1:7e:e7:61:84:d2:3e:10:95:b3:2f:f6:1a: 85:55:54:d3:10:01:3b:42:98:95:91:8b:94:e8:7a:d4:15:d7: c1:2b:7e:36:58:6c:f3:08:53:12:b9:3f:01:23:e2:6b:00:e1: ac:33:aa:63:fd:1c:86:bb:9c:8a:84:75:ac:b3:16:46:c6:8f: f8:76:1d:1f:8c:44:6a:66:c4:45:13:39:5f:d1:b9:ff:63:e7: 60:2b:39:2e -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUV2SepLOgwCVS+UxSADukjgGj+48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1 RUExMkUwOTAeFw0yNjAzMjcwMDI4MjhaFw0yNjAzMjgwMTI0MjhaMDMxMTAvBgNV BAMTKEQ1Qjk1NDU2MzY0NzQ0MTM0RkVGNDREOTgwMjgxMTExRkMxNDlENkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFifwRSb7R650ClveJsBuhqLKZ RG+csc6t9ZXj7KoRT8SIaRfdwPa9KoSLa80K97IVoyCMO42uT4IVb+mIRIvlHnty TYDNOAP9wlPEeH781iJyi4AwieS/CHBXLoiVvTBmpERFH1QJ8aPC3XkbDSosjtrF CZsyuPQZJRVjzE6qajjVjjF31dmC+IC2QMuXOD4Lc5kZF5ONIrssFHTVVlH+OZZ8 g108Xf9FkGpGMndaLPJWCb2RNhtHizfL14i9cd5fmX+PBfb/d2epRfBET3Ssql1W u1Vrl8jV22jEqO1OXHUaaNE0gDkpoXIaZGf6gOoQ+8SG6DXAPn8bStgb8x9VAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1blUVjZHRBNP70TZgCgREfwUnWswHwYDVR0j BBgwFoAU3k5pi+DMoyigAjXF5kT8il6hLgkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3 MTAwNzAxMDIyNjQzODE0Ni8wL0RFNEU2OThCRTBDQ0EzMjhBMDAyMzVDNUU2NDRG QzhBNUVBMTJFMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvREU0RTY5OEJFMENDQTMyOEEwMDIzNUM1RTY0NEZDOEE1RUExMkUwOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNzEwMDcwMTAyMjY0MzgxNDYvMC9ERTRFNjk4QkUwQ0NB MzI4QTAwMjM1QzVFNjQ0RkM4QTVFQTEyRTA5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdORvaSJeaCrH j7u7TWCjrn476JH5QADKe6l587t77ILYwd0Q5vfIUqAPzpLS4BirCW85CTJeGpp/ GXPcfe5hBKI+O3YLV4hk1XkZDz9ITEzMHomwlurApU1iX6WJSzOLwp4hEYwvi2F6 9e0zqJn6j3WQOid0MeRXcCl/FpH6K/yOYteMc7ZBhlztOQjp5iFXpK6AFTJcxyav PEN7kcDkKm4uxN0hhufBfudhhNI+EJWzL/YahVVU0xABO0KYlZGLlOh61BXXwSt+ Nlhs8whTErk/ASPiawDhrDOqY/0chrucioR1rLMWRsaP+HYdH4xEambERRM5X9G5 /2PnYCs5Lg== -----END CERTIFICATE-----Generated at Fri Mar 27 03:21:46 2026 by rpki-client