$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft File: 17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft (raw, json) Hash identifier: 40PAFfw3QbjoDoTKkyS7bINEyvxq/zl2faw20mA9Sx4= Subject key identifier: FB:5E:24:F2:99:B1:3C:48:04:0A:BE:F6:37:A6:6A:73:1C:33:0C:DC Authority key identifier: 17:DD:38:B4:C5:90:46:6D:EE:F7:78:7C:50:E3:FA:39:B0:47:C6:AC Certificate issuer: /CN=17DD38B4C590466DEEF7787C50E3FA39B047C6AC Certificate serial: 144B7E7A259FDE0646E096390AB249C60936FD7D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft Manifest number: 0A Signing time: Wed 03 Jun 2026 22:03:56 +0000 Manifest this update: Wed 03 Jun 2026 21:58:56 +0000 Manifest next update: Fri 05 Jun 2026 00:59:56 +0000 Files and hashes: 1: 17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl (hash: SjHnvfQlS7k/zqS5ARoliSZv2cwpJsk+AsByvIWXy0k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 00:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:4b:7e:7a:25:9f:de:06:46:e0:96:39:0a:b2:49:c6:09:36:fd:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17DD38B4C590466DEEF7787C50E3FA39B047C6AC Validity Not Before: Jun 3 21:58:56 2026 GMT Not After : Jun 5 00:59:56 2026 GMT Subject: CN=FB5E24F299B13C48040ABEF637A66A731C330CDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3d:86:79:e3:61:07:27:37:ff:3d:f7:9f:3f: cb:3e:4a:8f:a4:b3:1e:25:b4:8e:d1:ea:70:f1:6d: 0d:fb:85:81:06:0f:be:3f:99:f0:d2:f6:da:11:39: 26:0d:47:e8:e3:4c:c5:02:82:cd:20:1f:78:ec:95: 54:1e:e6:fa:78:08:c4:5c:8d:f6:79:2e:25:5b:d3: 35:38:03:d9:bd:b5:fc:6c:76:78:05:b9:96:36:90: a5:87:87:4e:ba:66:2b:9b:87:59:d3:88:6d:11:dc: df:1e:6e:6a:2c:80:4d:45:33:ed:86:5a:d6:8b:84: 8b:ed:50:3a:59:27:0a:9f:1d:ac:05:11:20:ec:84: c9:cf:34:5a:c2:8e:b7:ac:ff:54:05:7c:c1:cb:56: a3:43:7c:4b:02:22:15:a2:52:d2:f9:05:73:bb:97: 1f:4c:50:d2:67:81:31:3a:e5:1a:77:a4:9e:5c:8e: b3:3b:8c:0d:d0:76:74:62:40:d8:71:9a:9f:50:54: ef:bd:e7:e0:64:53:06:96:04:9a:b6:3a:be:f6:f1: eb:4f:70:46:28:fc:e2:29:52:75:22:88:dc:c0:52: fd:fa:a7:0c:2d:d8:a1:33:d1:68:de:f7:52:85:eb: 4c:2c:fc:24:12:69:19:34:4a:75:a6:cc:36:1a:fc: 18:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:5E:24:F2:99:B1:3C:48:04:0A:BE:F6:37:A6:6A:73:1C:33:0C:DC X509v3 Authority Key Identifier: keyid:17:DD:38:B4:C5:90:46:6D:EE:F7:78:7C:50:E3:FA:39:B0:47:C6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:1e:55:00:ef:f2:4b:76:73:a2:a8:79:67:c9:e2:53:51:ab: 5f:a1:9e:b3:5d:0e:d1:65:6c:7a:f5:32:3a:61:df:28:16:32: ae:61:6a:55:36:f3:3f:58:1f:b3:0f:bc:a2:f9:d4:ba:c7:a1: 9f:06:94:07:6d:80:1d:36:b0:cb:6b:f3:31:c6:9e:d2:03:d0: 9d:09:58:c6:89:83:d6:35:42:72:db:c9:9c:a8:df:b1:1e:28: e3:31:6a:0f:3c:02:ba:03:9e:f7:8c:3f:10:fd:3f:08:29:33: 91:36:b4:aa:6c:38:e2:11:05:b9:d4:14:90:6a:c2:83:79:66: 7c:e6:00:5b:79:ab:f5:cd:cd:99:39:0e:5e:56:96:ac:d8:b2: 78:a2:b6:ed:02:0e:88:5d:cb:d3:b4:2a:97:19:14:61:6e:3e: 25:fe:4e:e6:dd:0b:c1:89:33:a8:3f:40:5d:4a:d2:87:a9:cc: 63:e9:ca:d8:c2:1a:68:ea:6a:96:b3:21:01:fc:26:cb:e0:b7: 24:ab:c3:b4:8d:8f:43:31:74:3b:11:9f:17:23:88:2c:f1:fd: 4f:bd:f1:bf:58:87:ba:6f:77:c4:db:0f:0e:96:cb:bb:e3:18: 33:0a:6f:ab:03:06:8a:1a:e5:54:41:0d:0f:6b:a3:86:46:cc: aa:9c:b5:c9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFEt+eiWf3gZG4JY5CrJJxgk2/X0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdERDM4QjRDNTkwNDY2REVFRjc3ODdDNTBFM0ZBMzlC MDQ3QzZBQzAeFw0yNjA2MDMyMTU4NTZaFw0yNjA2MDUwMDU5NTZaMDMxMTAvBgNV BAMTKEZCNUUyNEYyOTlCMTNDNDgwNDBBQkVGNjM3QTY2QTczMUMzMzBDREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3PYZ542EHJzf/PfefP8s+So+k sx4ltI7R6nDxbQ37hYEGD74/mfDS9toROSYNR+jjTMUCgs0gH3jslVQe5vp4CMRc jfZ5LiVb0zU4A9m9tfxsdngFuZY2kKWHh066Ziubh1nTiG0R3N8ebmosgE1FM+2G WtaLhIvtUDpZJwqfHawFESDshMnPNFrCjres/1QFfMHLVqNDfEsCIhWiUtL5BXO7 lx9MUNJngTE65Rp3pJ5cjrM7jA3QdnRiQNhxmp9QVO+95+BkUwaWBJq2Or728etP cEYo/OIpUnUiiNzAUv36pwwt2KEz0Wje91KF60ws/CQSaRk0SnWmzDYa/BirAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU+14k8pmxPEgECr72N6ZqcxwzDNwwHwYDVR0j BBgwFoAUF904tMWQRm3u93h8UOP6ObBHxqwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjI2NjIwNDA1Mjk3OTczMS8wLzE3REQzOEI0QzU5MDQ2NkRFRUY3Nzg3QzUwRTNG QTM5QjA0N0M2QUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTdERDM4QjRDNTkwNDY2REVFRjc3ODdDNTBFM0ZBMzlCMDQ3QzZBQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIyNjYyMDQwNTI5Nzk3MzEvMC8xN0REMzhCNEM1OTA0 NjZERUVGNzc4N0M1MEUzRkEzOUIwNDdDNkFDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKB5VAO/yS3Zz oqh5Z8niU1GrX6Ges10O0WVsevUyOmHfKBYyrmFqVTbzP1gfsw+8ovnUusehnwaU B22AHTawy2vzMcae0gPQnQlYxomD1jVCctvJnKjfsR4o4zFqDzwCugOe94w/EP0/ CCkzkTa0qmw44hEFudQUkGrCg3lmfOYAW3mr9c3NmTkOXlaWrNiyeKK27QIOiF3L 07QqlxkUYW4+Jf5O5t0LwYkzqD9AXUrSh6nMY+nK2MIaaOpqlrMhAfwmy+C3JKvD tI2PQzF0OxGfFyOILPH9T73xv1iHum93xNsPDpbLu+MYMwpvqwMGihrlVEEND2uj hkbMqpy1yQ== -----END CERTIFICATE-----Generated at Thu Jun 4 15:02:43 2026 by rpki-client