$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft File: 917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft (raw, json) Hash identifier: Dmac/2hodD+RlKSFtPEV2kGz7UuEHxGzKqCo0iA48F4= Subject key identifier: 82:CF:EF:1D:D3:49:BB:CB:B9:C0:C7:6B:18:45:B6:3B:6E:1B:BE:66 Authority key identifier: 91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD Certificate issuer: /CN=917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD Certificate serial: 243E6846CBEB0FDBAAB800B4359D8183ABD3317E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft Manifest number: AC Signing time: Mon 12 Oct 2026 12:41:57 +0000 Manifest this update: Mon 12 Oct 2026 12:36:57 +0000 Manifest next update: Thu 15 Oct 2026 21:53:57 +0000 Files and hashes: 1: 3130332e3138392e39332e302f32342d3234203d3e2034383337.roa (hash: gkpsLZeTrjGyQq6N61S2DVSjIch7+Hcv8M6Eql6Q6/k=) 2: 917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl (hash: EVgpHdNY37btmHwCugpOR4h4qQjhD5JuuaVvO6bBMjM=) 3: 3130332e3138392e39322e302f32342d3234203d3e2034383337.roa (hash: lmstuS/H4fM0u7jxkE0+E7iQGvY13XAH5zME0iKapEY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:3e:68:46:cb:eb:0f:db:aa:b8:00:b4:35:9d:81:83:ab:d3:31:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD Validity Not Before: Oct 12 12:36:57 2026 GMT Not After : Oct 15 21:53:57 2026 GMT Subject: CN=82CFEF1DD349BBCBB9C0C76B1845B63B6E1BBE66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:71:a5:51:ee:9a:1d:16:c2:76:66:1b:bb: 23:1a:a8:e6:39:33:74:d9:a9:7e:57:c2:ef:d8:53: 4b:ee:42:a1:56:ad:84:33:1c:db:83:72:bc:0d:8b: 02:f7:85:6b:61:d3:07:46:1c:66:c5:f5:3a:53:23: 45:12:d3:46:f0:5c:f9:a7:7d:9b:c9:41:07:d1:72: e6:2b:93:7a:85:e4:19:f5:c6:a1:c5:44:ad:d9:27: 28:ec:87:f5:05:a5:2a:e8:bd:df:da:e3:34:13:75: 40:d1:2d:ea:e5:78:45:93:b7:c4:93:cb:99:11:b9: 29:e1:e1:76:bd:83:bc:27:f1:4e:49:63:bc:5c:e9: f0:49:b6:43:d1:09:69:3f:c8:b5:23:f9:a4:85:dd: b4:8b:f3:bb:8c:97:5e:bd:83:84:4b:da:12:f1:5f: bd:86:4d:1c:2a:eb:48:1a:32:b8:58:79:e3:e8:dc: 6b:8b:60:38:4e:4f:af:c5:ad:38:66:98:0b:17:00: 7f:21:10:86:ed:5f:7b:38:68:48:de:d1:de:f2:f4: 01:70:87:db:03:64:cb:16:84:32:3a:a3:db:ef:f7: 90:52:e0:ff:10:bd:ee:16:e9:10:60:e6:f9:ae:cb: 8d:67:d6:b3:23:e7:f0:35:9f:56:19:34:bc:77:6c: 00:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CF:EF:1D:D3:49:BB:CB:B9:C0:C7:6B:18:45:B6:3B:6E:1B:BE:66 X509v3 Authority Key Identifier: keyid:91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:83:75:5b:68:6f:02:7c:48:2e:1b:ad:61:2d:aa:3f:61:37: ca:7b:03:35:de:e7:d2:c3:11:9f:ad:c9:5b:65:6b:bc:4f:9b: 4f:de:39:17:6a:b2:2d:13:8c:7a:50:6c:7a:9d:e2:22:43:83: 1d:b8:8f:d7:1c:d7:ff:8a:b1:6c:c0:22:43:89:85:b9:ca:f3: eb:a2:7e:e0:db:08:2c:d9:ff:ba:db:07:1d:c7:41:9e:2b:f9: 8e:f3:32:a2:28:0a:8e:a6:eb:92:bd:ba:58:ea:14:02:cb:56: 4b:20:39:1c:4b:db:e7:20:74:db:db:97:bc:f9:81:ef:fe:75: 1c:b1:b6:eb:cb:dd:7f:9e:d3:73:c7:3c:94:af:a5:61:60:1a: b9:61:f5:12:1d:b1:e5:f8:a2:ed:0b:9e:b4:bd:de:ac:e3:9d: 3f:2f:e2:ec:6f:c0:e5:75:8b:e0:16:b2:9d:00:38:04:61:6f: c6:55:6b:8b:ea:0f:14:48:2c:cf:2c:a0:f3:cb:50:d9:83:3b: c4:70:62:6e:10:11:69:38:47:83:ce:0f:e2:c7:11:0d:79:33: 0c:0e:57:6c:a3:76:0d:36:af:ce:8f:7a:da:9c:02:b3:a7:b8: 38:6b:58:18:f1:fc:34:4e:91:ff:17:17:12:7e:e7:e4:3e:5a: a7:d0:d3:c5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJD5oRsvrD9uquAC0NZ2Bg6vTMX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3REYxQkFEOEM1Nzk3NDQyNkFDREM2OTREMzdGQjVG NEIyQ0RBRDAeFw0yNjEwMTIxMjM2NTdaFw0yNjEwMTUyMTUzNTdaMDMxMTAvBgNV BAMTKDgyQ0ZFRjFERDM0OUJCQ0JCOUMwQzc2QjE4NDVCNjNCNkUxQkJFNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2OnGlUe6aHRbCdmYbuyMaqOY5 M3TZqX5Xwu/YU0vuQqFWrYQzHNuDcrwNiwL3hWth0wdGHGbF9TpTI0US00bwXPmn fZvJQQfRcuYrk3qF5Bn1xqHFRK3ZJyjsh/UFpSrovd/a4zQTdUDRLerleEWTt8ST y5kRuSnh4Xa9g7wn8U5JY7xc6fBJtkPRCWk/yLUj+aSF3bSL87uMl169g4RL2hLx X72GTRwq60gaMrhYeePo3GuLYDhOT6/FrThmmAsXAH8hEIbtX3s4aEje0d7y9AFw h9sDZMsWhDI6o9vv95BS4P8Qve4W6RBg5vmuy41n1rMj5/A1n1YZNLx3bADFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUgs/vHdNJu8u5wMdrGEW2O24bvmYwHwYDVR0j BBgwFoAUkX3xutjFeXRCas3GlNN/tfSyza0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2Njk2NjI4My8wLzkxN0RGMUJBRDhDNTc5NzQ0MjZBQ0RDNjk0RDM3 RkI1RjRCMkNEQUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTE3REYxQkFEOEM1Nzk3NDQyNkFDREM2OTREMzdGQjVGNEIyQ0RBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5NjYyODMvMC85MTdERjFCQUQ4QzU3 OTc0NDI2QUNEQzY5NEQzN0ZCNUY0QjJDREFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIN1W2hvAnxI LhutYS2qP2E3ynsDNd7n0sMRn63JW2VrvE+bT945F2qyLROMelBsep3iIkODHbiP 1xzX/4qxbMAiQ4mFucrz66J+4NsILNn/utsHHcdBniv5jvMyoigKjqbrkr26WOoU AstWSyA5HEvb5yB029uXvPmB7/51HLG268vdf57Tc8c8lK+lYWAauWH1Eh2x5fii 7QuetL3erOOdPy/i7G/A5XWL4BaynQA4BGFvxlVri+oPFEgszyyg88tQ2YM7xHBi bhARaThHg84P4scRDXkzDA5XbKN2DTavzo962pwCs6e4OGtYGPH8NE6R/xcXEn7n 5D5ap9DTxQ== -----END CERTIFICATE-----Generated at Tue Oct 13 22:47:33 2026 by rpki-client