$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft File: 17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft (raw, json) Hash identifier: iNceHU3JyjnPbwpgsHOutBqHsWJ4btwOwCWW5lrdQwY= Subject key identifier: E4:D3:E2:5C:22:3D:1F:E1:44:87:25:16:3C:00:84:5D:6D:09:88:76 Authority key identifier: 17:DD:38:B4:C5:90:46:6D:EE:F7:78:7C:50:E3:FA:39:B0:47:C6:AC Certificate issuer: /CN=17DD38B4C590466DEEF7787C50E3FA39B047C6AC Certificate serial: 36F07D5E3F0621E63AE68A2800394C89FDFA3733 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft Manifest number: 7E Signing time: Thu 03 Sep 2026 22:24:13 +0000 Manifest this update: Thu 03 Sep 2026 22:19:13 +0000 Manifest next update: Mon 07 Sep 2026 07:07:13 +0000 Files and hashes: 1: 17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl (hash: 5aNDpsTrIiMvwjX/8fJrb6Mx93PhCCfSeWnMIsKyReQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Sep 2026 10:41:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f0:7d:5e:3f:06:21:e6:3a:e6:8a:28:00:39:4c:89:fd:fa:37:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17DD38B4C590466DEEF7787C50E3FA39B047C6AC Validity Not Before: Sep 3 22:19:13 2026 GMT Not After : Sep 7 07:07:13 2026 GMT Subject: CN=E4D3E25C223D1FE1448725163C00845D6D098876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ee:d1:65:5b:87:17:3f:c9:34:d3:28:f8:79: af:a3:d1:bf:7d:2e:f3:c0:31:2d:41:56:30:31:94: b7:46:e2:57:4c:0e:34:95:4f:e8:10:ca:e0:9c:24: a7:0b:97:0d:dc:18:f6:90:ee:5f:e6:d4:d8:c4:55: 1c:3f:cf:91:43:3d:f0:0f:72:10:92:88:81:46:9f: b5:d4:b7:fc:82:7f:2e:f0:db:62:e1:9f:f8:91:c2: 5a:70:37:d0:a6:74:c3:23:5c:e1:d0:02:38:ee:b1: bb:b9:e7:d5:ab:99:65:14:94:ad:8a:61:de:fc:ea: 27:3e:5f:f1:80:13:43:81:d1:36:4e:a0:fd:42:29: 82:da:6b:43:7c:ce:8d:3c:81:0a:94:cb:ea:30:71: 72:0d:83:4b:ff:4b:98:8d:39:da:24:f6:9e:9a:e7: eb:90:80:37:db:a1:5a:a3:34:a5:d8:03:bc:e4:bc: d5:68:bd:e8:0b:d3:1d:9c:ba:fb:c9:fd:dc:60:f8: ef:af:ac:84:14:93:ee:33:70:fb:e8:5e:3b:18:f0: 26:9f:3c:39:ac:31:07:a8:7b:86:04:cf:71:9f:a2: cb:b7:8b:14:2e:e6:40:0b:0a:46:7e:59:da:a2:ab: 3e:13:fe:98:8c:04:5c:80:65:5e:01:db:2c:1e:3f: 3b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D3:E2:5C:22:3D:1F:E1:44:87:25:16:3C:00:84:5D:6D:09:88:76 X509v3 Authority Key Identifier: keyid:17:DD:38:B4:C5:90:46:6D:EE:F7:78:7C:50:E3:FA:39:B0:47:C6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:43:a4:ff:db:cf:a3:f3:85:a5:1e:4c:b0:1f:bc:e7:cd:02: f0:0c:e1:ac:8b:8a:11:54:2f:15:3e:84:95:f0:63:6b:78:9f: dc:18:d6:79:fa:fa:17:4b:33:01:e9:4e:91:8f:91:1d:4d:34: e7:16:7f:33:ce:8e:8f:df:11:dd:12:36:35:60:8a:63:61:97: 04:0c:18:63:6a:7a:a6:14:7e:a3:79:39:5c:32:f5:41:1d:7d: 97:11:87:28:b0:99:15:74:e9:35:74:f3:62:87:44:0d:b0:7d: 38:b4:3d:6a:55:3d:bf:98:11:2c:2e:20:2e:a0:93:f9:3e:98: ea:69:1f:b2:88:fe:89:16:e0:09:81:33:a1:2e:ab:21:93:8b: 83:9b:a9:5b:bd:5d:2b:f5:c5:0b:27:0a:f6:09:fa:4d:ea:ea: d5:68:da:fa:14:3e:dd:bd:d9:63:e9:da:9b:e8:de:64:49:5a: 8c:7f:9b:b8:65:87:d1:d0:ac:1a:84:d8:cf:4e:ef:b5:77:7a: 48:13:c8:f3:92:29:0a:e5:75:d1:69:72:7d:f9:c2:0d:31:05: f7:d9:d0:62:1e:8b:24:73:03:ca:49:08:83:e3:62:17:ff:80: 36:ea:8f:46:9b:7c:0e:1c:9e:3c:da:59:32:13:80:23:08:1b: 2a:e1:3b:ee -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNvB9Xj8GIeY65oooADlMif36NzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdERDM4QjRDNTkwNDY2REVFRjc3ODdDNTBFM0ZBMzlC MDQ3QzZBQzAeFw0yNjA5MDMyMjE5MTNaFw0yNjA5MDcwNzA3MTNaMDMxMTAvBgNV BAMTKEU0RDNFMjVDMjIzRDFGRTE0NDg3MjUxNjNDMDA4NDVENkQwOTg4NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc7tFlW4cXP8k00yj4ea+j0b99 LvPAMS1BVjAxlLdG4ldMDjSVT+gQyuCcJKcLlw3cGPaQ7l/m1NjEVRw/z5FDPfAP chCSiIFGn7XUt/yCfy7w22Lhn/iRwlpwN9CmdMMjXOHQAjjusbu559WrmWUUlK2K Yd786ic+X/GAE0OB0TZOoP1CKYLaa0N8zo08gQqUy+owcXINg0v/S5iNOdok9p6a 5+uQgDfboVqjNKXYA7zkvNVovegL0x2cuvvJ/dxg+O+vrIQUk+4zcPvoXjsY8Caf PDmsMQeoe4YEz3Gfosu3ixQu5kALCkZ+Wdqiqz4T/piMBFyAZV4B2ywePzv1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5NPiXCI9H+FEhyUWPACEXW0JiHYwHwYDVR0j BBgwFoAUF904tMWQRm3u93h8UOP6ObBHxqwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjI2NjIwNDA1Mjk3OTczMS8wLzE3REQzOEI0QzU5MDQ2NkRFRUY3Nzg3QzUwRTNG QTM5QjA0N0M2QUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTdERDM4QjRDNTkwNDY2REVFRjc3ODdDNTBFM0ZBMzlCMDQ3QzZBQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIyNjYyMDQwNTI5Nzk3MzEvMC8xN0REMzhCNEM1OTA0 NjZERUVGNzc4N0M1MEUzRkEzOUIwNDdDNkFDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0Ok/9vPo/OF pR5MsB+8580C8AzhrIuKEVQvFT6ElfBja3if3BjWefr6F0szAelOkY+RHU005xZ/ M86Oj98R3RI2NWCKY2GXBAwYY2p6phR+o3k5XDL1QR19lxGHKLCZFXTpNXTzYodE DbB9OLQ9alU9v5gRLC4gLqCT+T6Y6mkfsoj+iRbgCYEzoS6rIZOLg5upW71dK/XF CycK9gn6Terq1Wja+hQ+3b3ZY+nam+jeZElajH+buGWH0dCsGoTYz07vtXd6SBPI 85IpCuV10WlyffnCDTEF99nQYh6LJHMDykkIg+NiF/+ANuqPRpt8DhyePNpZMhOA IwgbKuE77g== -----END CERTIFICATE-----Generated at Sat Sep 5 09:43:26 2026 by rpki-client