$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft File: 917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft (raw, json) Hash identifier: 5SpUgNDWLAhg8CsodWL2hVD5AS0dp3usalLKOq/7PgQ= Subject key identifier: E5:97:96:68:9F:8B:35:09:46:2B:39:41:5D:A4:C1:D7:C5:35:9D:00 Authority key identifier: 91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD Certificate issuer: /CN=917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD Certificate serial: 4F9430BF6A39ACB4E976A5AE338050A96CDEA0E2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft Manifest number: 98 Signing time: Fri 28 Aug 2026 06:47:53 +0000 Manifest this update: Fri 28 Aug 2026 06:42:53 +0000 Manifest next update: Mon 31 Aug 2026 14:19:53 +0000 Files and hashes: 1: 3130332e3138392e39332e302f32342d3234203d3e2034383337.roa (hash: gkpsLZeTrjGyQq6N61S2DVSjIch7+Hcv8M6Eql6Q6/k=) 2: 3130332e3138392e39322e302f32342d3234203d3e2034383337.roa (hash: lmstuS/H4fM0u7jxkE0+E7iQGvY13XAH5zME0iKapEY=) 3: 917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl (hash: F7CLVATS2BIxI5sjoeGJ8yGNB8EkH4LebeQMynqKRqM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 14:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:94:30:bf:6a:39:ac:b4:e9:76:a5:ae:33:80:50:a9:6c:de:a0:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD Validity Not Before: Aug 28 06:42:53 2026 GMT Not After : Aug 31 14:19:53 2026 GMT Subject: CN=E59796689F8B3509462B39415DA4C1D7C5359D00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:28:08:5f:c1:1a:3e:5d:99:3d:03:ea:cb:76: 73:b0:67:d9:4c:af:e8:a7:bb:c1:c8:de:79:f6:16: d8:5f:a6:e8:8e:9d:88:2a:8b:54:59:4c:96:6e:52: 5f:48:f4:e6:70:15:34:a4:75:04:4a:8c:c2:2f:81: 05:22:2a:c5:92:dd:bf:b2:e5:3c:ab:5f:83:20:d6: 52:bc:fe:02:69:12:96:f7:4e:c5:63:9d:b8:79:25: 14:f2:63:26:b3:be:7f:9d:48:c6:06:61:0f:ad:9a: 82:11:14:83:52:86:a1:0b:cd:6d:09:e3:4f:2c:7b: fa:4f:10:d7:dd:8f:54:34:06:a5:3c:35:b2:f8:84: b8:93:36:ea:5f:89:92:b8:83:ff:8f:46:01:0f:dc: 60:2b:18:b6:23:5a:f5:59:e6:af:b2:a1:df:0e:95: 0e:35:7f:ca:ed:20:82:7c:c9:b7:a5:d7:22:e5:ee: b5:d6:88:c6:d7:39:df:b6:9d:53:c5:75:e9:1b:51: ce:ca:f4:77:f9:04:ca:07:31:71:5a:c2:bf:52:77: 57:fd:58:a6:60:b0:05:36:e2:8d:4f:09:e5:88:b3: 2c:87:ef:42:c1:b6:48:ea:ef:1d:25:6e:2a:7e:10: b8:c3:f5:5a:31:56:e0:11:7f:3f:d8:d3:1a:ac:40: 0b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:97:96:68:9F:8B:35:09:46:2B:39:41:5D:A4:C1:D7:C5:35:9D:00 X509v3 Authority Key Identifier: keyid:91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a6:1a:c9:d3:02:4f:28:04:a1:a8:f6:78:d8:83:dc:7f:6f: 6f:3a:bd:4f:9b:66:f3:24:da:53:03:ea:fa:65:b6:0d:d2:4a: 1c:c4:ca:fd:c0:bd:89:3c:e5:a1:2b:ea:f3:a8:61:9f:01:8e: 5e:aa:72:2e:d2:4b:a7:8f:9d:f0:f7:6a:24:a3:19:9c:dc:7d: 7f:b8:60:49:58:2f:5f:67:f6:a4:2e:77:8b:7e:a3:e9:5e:d5: b2:3f:df:c8:2e:24:9a:7d:f4:64:3d:52:5a:55:5d:19:e4:ee: 17:e5:9a:05:c8:09:37:25:65:ab:89:b2:bb:3c:0e:c1:51:a3: fd:ce:91:58:47:be:cd:47:1b:5c:64:81:1c:d4:ed:3b:f6:76: 9a:2b:37:e5:29:5b:49:53:4d:7c:60:c1:7d:61:e7:1c:f8:11: ce:ee:8a:c3:53:af:2a:82:d8:e3:e2:1e:ef:a0:9d:2b:70:44: 21:cd:b7:1a:d2:0b:9d:6f:2e:78:5b:22:c1:68:07:56:4c:15: 01:01:c1:c3:81:15:d0:14:8f:a0:76:b7:e0:8b:af:9b:0f:de: 20:ea:e9:c5:6d:18:37:f7:de:9d:e8:9f:bc:13:3e:31:64:09: cb:25:56:82:52:f0:2a:0d:72:ef:f7:29:5f:6d:b9:58:ad:27: b5:b0:d5:0f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUT5Qwv2o5rLTpdqWuM4BQqWzeoOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3REYxQkFEOEM1Nzk3NDQyNkFDREM2OTREMzdGQjVG NEIyQ0RBRDAeFw0yNjA4MjgwNjQyNTNaFw0yNjA4MzExNDE5NTNaMDMxMTAvBgNV BAMTKEU1OTc5NjY4OUY4QjM1MDk0NjJCMzk0MTVEQTRDMUQ3QzUzNTlEMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoKAhfwRo+XZk9A+rLdnOwZ9lM r+inu8HI3nn2FthfpuiOnYgqi1RZTJZuUl9I9OZwFTSkdQRKjMIvgQUiKsWS3b+y 5TyrX4Mg1lK8/gJpEpb3TsVjnbh5JRTyYyazvn+dSMYGYQ+tmoIRFINShqELzW0J 408se/pPENfdj1Q0BqU8NbL4hLiTNupfiZK4g/+PRgEP3GArGLYjWvVZ5q+yod8O lQ41f8rtIIJ8ybel1yLl7rXWiMbXOd+2nVPFdekbUc7K9Hf5BMoHMXFawr9Sd1f9 WKZgsAU24o1PCeWIsyyH70LBtkjq7x0lbip+ELjD9VoxVuARfz/Y0xqsQAv3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5ZeWaJ+LNQlGKzlBXaTB18U1nQAwHwYDVR0j BBgwFoAUkX3xutjFeXRCas3GlNN/tfSyza0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2Njk2NjI4My8wLzkxN0RGMUJBRDhDNTc5NzQ0MjZBQ0RDNjk0RDM3 RkI1RjRCMkNEQUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTE3REYxQkFEOEM1Nzk3NDQyNkFDREM2OTREMzdGQjVGNEIyQ0RBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5NjYyODMvMC85MTdERjFCQUQ4QzU3 OTc0NDI2QUNEQzY5NEQzN0ZCNUY0QjJDREFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqYaydMCTygE oaj2eNiD3H9vbzq9T5tm8yTaUwPq+mW2DdJKHMTK/cC9iTzloSvq86hhnwGOXqpy LtJLp4+d8PdqJKMZnNx9f7hgSVgvX2f2pC53i36j6V7Vsj/fyC4kmn30ZD1SWlVd GeTuF+WaBcgJNyVlq4myuzwOwVGj/c6RWEe+zUcbXGSBHNTtO/Z2mis35SlbSVNN fGDBfWHnHPgRzu6Kw1OvKoLY4+Ie76CdK3BEIc23GtILnW8ueFsiwWgHVkwVAQHB w4EV0BSPoHa34Iuvmw/eIOrpxW0YN/feneifvBM+MWQJyyVWglLwKg1y7/cpX225 WK0ntbDVDw== -----END CERTIFICATE-----Generated at Sat Aug 29 06:58:14 2026 by rpki-client