$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft File: 17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft (raw, json) Hash identifier: IQGXjWxlVri+8ECxn+jE2MB+oGkuaUhegTAnA/b8CJU= Subject key identifier: 0B:17:FA:D0:66:3F:20:8F:62:F1:A6:84:C1:93:9B:05:89:AD:8C:D2 Authority key identifier: 17:DD:38:B4:C5:90:46:6D:EE:F7:78:7C:50:E3:FA:39:B0:47:C6:AC Certificate issuer: /CN=17DD38B4C590466DEEF7787C50E3FA39B047C6AC Certificate serial: 52B29C1785E0A2FB9B31D7E675C591944CCE0EF6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft Manifest number: 49 Signing time: Tue 21 Jul 2026 14:28:56 +0000 Manifest this update: Tue 21 Jul 2026 14:23:56 +0000 Manifest next update: Wed 22 Jul 2026 16:57:56 +0000 Files and hashes: 1: 17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl (hash: mfIauo+I50z+PZwK15kPh4jcSYjC60C6B3ArSBaiNic=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 16:57:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b2:9c:17:85:e0:a2:fb:9b:31:d7:e6:75:c5:91:94:4c:ce:0e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17DD38B4C590466DEEF7787C50E3FA39B047C6AC Validity Not Before: Jul 21 14:23:56 2026 GMT Not After : Jul 22 16:57:56 2026 GMT Subject: CN=0B17FAD0663F208F62F1A684C1939B0589AD8CD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:33:e1:da:18:1b:bf:24:b9:58:41:ef:d9:fe: 64:73:1b:7b:a8:10:34:3e:d7:f8:d6:fa:4f:57:55: 14:53:2b:47:74:b6:5f:7e:04:08:c0:64:64:f2:e7: dc:e9:1d:ef:25:8c:b7:42:a0:7b:94:da:58:e1:ae: 07:bf:0a:2a:a0:ad:f9:b1:09:74:03:e4:89:3d:e3: d9:c8:00:71:9b:d9:42:33:76:a8:c0:e8:86:c3:2b: 54:9e:f5:3b:6f:27:78:3c:63:a5:b3:36:10:51:8a: 00:df:a1:e9:5a:a9:7a:5e:80:65:18:c7:3b:2a:6d: f4:88:93:62:e5:5c:26:6b:81:31:2e:44:54:f7:8f: 77:a1:c1:4e:14:e3:84:f9:da:4c:cc:b8:31:11:94: 49:ab:2f:27:5b:45:11:14:f2:fa:73:47:bf:de:24: f2:38:8d:de:21:5c:2b:b7:a5:2c:8a:fd:18:5d:e8: 7d:89:cd:32:8c:67:07:10:72:7c:8f:08:f5:61:23: fa:88:05:d3:a1:5a:66:b6:1b:f7:e2:44:c0:42:a3: 05:95:64:e1:84:a8:5a:41:83:d2:e9:d9:12:98:d5: de:4f:c1:4b:8d:e7:f9:f0:64:e8:ec:31:72:ca:05: 28:5b:65:dd:09:db:64:3a:b5:67:78:a8:c0:7f:6c: 04:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:17:FA:D0:66:3F:20:8F:62:F1:A6:84:C1:93:9B:05:89:AD:8C:D2 X509v3 Authority Key Identifier: keyid:17:DD:38:B4:C5:90:46:6D:EE:F7:78:7C:50:E3:FA:39:B0:47:C6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:05:0e:46:16:c2:95:08:e6:43:fa:1a:d4:2b:c2:12:5f:a0: 75:1e:09:79:f5:08:f8:3c:5c:a9:7f:fa:80:21:91:f2:98:d3: b9:62:9f:ba:13:a4:c0:57:bb:88:8c:15:fd:00:c2:a6:2b:0b: b7:7e:12:c9:01:5f:fe:fb:0e:86:a1:6b:ca:b0:46:ff:a7:39: 47:c3:b2:56:ca:14:fd:7c:7b:af:b7:27:ad:4e:7b:94:fb:b5: 0a:d8:9d:bb:1f:2a:f5:bc:6d:31:ff:d4:83:a3:49:54:7c:23: 5c:8c:43:b3:e2:34:06:20:2c:1b:74:f4:ee:db:16:11:09:e4: 66:60:df:41:42:d4:b8:0a:af:76:20:d4:c2:78:e0:21:d7:d5: 75:d8:91:9e:cf:c9:12:a7:75:8d:11:bf:3e:e2:50:e5:17:39: 91:d9:01:86:ae:ae:1b:bc:31:28:6d:8f:d2:b4:32:8f:95:a8: 94:b2:e1:fc:69:0a:f8:9a:ba:4f:e3:d5:65:d7:65:7a:2e:b3: ba:71:29:c0:92:b7:1d:93:3f:8d:57:d9:8b:ac:b6:ce:6e:ac: c0:e8:0f:d0:f0:fb:22:c9:07:aa:13:d1:4d:d9:8f:52:ec:f7: 73:61:ef:d3:fe:28:85:60:cb:3a:74:f4:be:b7:f1:53:37:ee: 24:37:5d:77 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUrKcF4XgovubMdfmdcWRlEzODvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdERDM4QjRDNTkwNDY2REVFRjc3ODdDNTBFM0ZBMzlC MDQ3QzZBQzAeFw0yNjA3MjExNDIzNTZaFw0yNjA3MjIxNjU3NTZaMDMxMTAvBgNV BAMTKDBCMTdGQUQwNjYzRjIwOEY2MkYxQTY4NEMxOTM5QjA1ODlBRDhDRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdM+HaGBu/JLlYQe/Z/mRzG3uo EDQ+1/jW+k9XVRRTK0d0tl9+BAjAZGTy59zpHe8ljLdCoHuU2ljhrge/Ciqgrfmx CXQD5Ik949nIAHGb2UIzdqjA6IbDK1Se9TtvJ3g8Y6WzNhBRigDfoelaqXpegGUY xzsqbfSIk2LlXCZrgTEuRFT3j3ehwU4U44T52kzMuDERlEmrLydbRREU8vpzR7/e JPI4jd4hXCu3pSyK/Rhd6H2JzTKMZwcQcnyPCPVhI/qIBdOhWma2G/fiRMBCowWV ZOGEqFpBg9Lp2RKY1d5PwUuN5/nwZOjsMXLKBShbZd0J22Q6tWd4qMB/bAR5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUCxf60GY/II9i8aaEwZObBYmtjNIwHwYDVR0j BBgwFoAUF904tMWQRm3u93h8UOP6ObBHxqwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjI2NjIwNDA1Mjk3OTczMS8wLzE3REQzOEI0QzU5MDQ2NkRFRUY3Nzg3QzUwRTNG QTM5QjA0N0M2QUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTdERDM4QjRDNTkwNDY2REVFRjc3ODdDNTBFM0ZBMzlCMDQ3QzZBQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIyNjYyMDQwNTI5Nzk3MzEvMC8xN0REMzhCNEM1OTA0 NjZERUVGNzc4N0M1MEUzRkEzOUIwNDdDNkFDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwUORhbClQjm Q/oa1CvCEl+gdR4JefUI+DxcqX/6gCGR8pjTuWKfuhOkwFe7iIwV/QDCpisLt34S yQFf/vsOhqFryrBG/6c5R8OyVsoU/Xx7r7cnrU57lPu1Ctidux8q9bxtMf/Ug6NJ VHwjXIxDs+I0BiAsG3T07tsWEQnkZmDfQULUuAqvdiDUwnjgIdfVddiRns/JEqd1 jRG/PuJQ5Rc5kdkBhq6uG7wxKG2P0rQyj5WolLLh/GkK+Jq6T+PVZddlei6zunEp wJK3HZM/jVfZi6y2zm6swOgP0PD7IskHqhPRTdmPUuz3c2Hv0/4ohWDLOnT0vrfx UzfuJDdddw== -----END CERTIFICATE-----Generated at Tue Jul 21 22:46:53 2026 by rpki-client