$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft File: 17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft (raw, json) Hash identifier: h3i06T0OlDfY5ed7Lpyp46BdPqXvKWzDQ+xmfS+bcaU= Subject key identifier: 07:62:60:0F:EC:7A:93:1B:0B:C3:C0:58:2E:20:61:91:30:78:38:9A Authority key identifier: 17:DD:38:B4:C5:90:46:6D:EE:F7:78:7C:50:E3:FA:39:B0:47:C6:AC Certificate issuer: /CN=17DD38B4C590466DEEF7787C50E3FA39B047C6AC Certificate serial: 7A0928CA094CCDB7FA0B9725108BA37EDE02F980 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft Manifest number: 97 Signing time: Sat 31 Oct 2026 10:54:14 +0000 Manifest this update: Sat 31 Oct 2026 10:49:14 +0000 Manifest next update: Tue 03 Nov 2026 16:17:14 +0000 Files and hashes: 1: 17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl (hash: KIGp33L000j2zrxZ1egXFaXESsPG5sO8f/3DvSat104=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 15:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:09:28:ca:09:4c:cd:b7:fa:0b:97:25:10:8b:a3:7e:de:02:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17DD38B4C590466DEEF7787C50E3FA39B047C6AC Validity Not Before: Oct 31 10:49:14 2026 GMT Not After : Nov 3 16:17:14 2026 GMT Subject: CN=0762600FEC7A931B0BC3C0582E2061913078389A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e6:6a:eb:56:56:4f:fe:62:35:f5:41:ba:86: 7e:8a:4c:aa:75:83:d5:e4:50:c6:1a:a2:81:b6:c7: f0:de:15:f1:0b:8f:35:b1:cf:e9:6e:f8:95:d7:4a: 2a:12:5f:26:4b:01:ea:c4:a1:6b:25:2a:fa:54:80: 74:6b:ad:c4:eb:1c:46:c8:f5:ba:44:3c:be:24:dd: 5e:9c:2f:d5:7f:44:dc:34:79:a7:16:67:16:b8:fe: 0e:ff:7b:e8:39:03:9d:a7:0d:59:a5:fa:a9:09:b1: f5:84:2c:98:fa:b4:29:93:e4:90:b3:54:3b:13:7f: 15:24:52:05:3c:b7:11:a7:9d:b1:73:d1:22:35:82: f5:a8:e2:cc:19:0f:1f:48:59:ae:e2:1f:10:24:7f: aa:96:a8:94:ec:19:18:16:02:ab:ba:09:11:df:ba: 7f:a1:d7:90:92:a5:6a:ba:57:f6:3f:01:55:d9:6b: b5:e5:18:8a:44:1d:13:1f:bb:e2:37:9c:67:39:11: 6d:9a:87:a9:52:e6:86:a0:50:f7:de:12:55:a2:64: b7:e9:27:47:f8:7d:7a:c7:b9:a5:9a:c7:32:d0:ac: 25:2c:c4:02:33:d8:63:89:d7:4d:3c:47:f5:9f:8c: b3:98:1c:a0:b8:69:e3:af:51:b1:6d:b8:e0:d8:42: 0a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:62:60:0F:EC:7A:93:1B:0B:C3:C0:58:2E:20:61:91:30:78:38:9A X509v3 Authority Key Identifier: keyid:17:DD:38:B4:C5:90:46:6D:EE:F7:78:7C:50:E3:FA:39:B0:47:C6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:1d:27:78:9b:09:68:3c:74:6d:a4:c7:43:5d:8c:fc:e5:53: 1c:3a:23:11:27:d3:3e:bb:76:be:8f:84:e4:aa:7d:08:7a:f8: bc:69:67:33:50:bd:fb:7b:16:c1:bf:07:ed:35:7d:e6:72:1a: 0f:15:20:c0:c7:f0:6c:7c:5c:bd:78:bf:d8:68:09:55:04:52: 97:3f:93:fb:2d:71:13:00:5c:ef:65:2a:92:fe:cc:57:f8:7c: 44:56:47:8e:cc:4d:9f:7a:87:cd:39:4b:38:36:7d:48:95:0f: b9:6d:4b:31:60:eb:d4:69:cd:5f:14:04:5b:cd:b5:eb:e9:71: c9:86:24:ce:5f:ad:40:38:74:13:ac:9e:3c:f4:ff:a0:8a:3a: e5:36:a7:f9:01:85:c3:93:0c:99:16:57:c5:20:fb:96:f9:87: cf:42:21:5b:ba:22:65:3b:f0:97:cb:b7:d7:7f:a1:49:06:86: 6d:36:f3:7f:99:39:2e:10:ba:71:26:80:cd:7e:9d:bd:7c:1b: 7c:f0:6d:7f:bd:77:95:93:6d:2f:df:4e:e4:04:88:7e:0e:85: e7:9c:68:74:a4:ae:da:9b:6c:d9:d1:6c:cd:85:6a:08:be:b9: 94:89:a4:62:61:56:54:d5:c8:e3:30:57:6c:fb:d1:c7:68:da: 14:67:35:0a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUegkoyglMzbf6C5clEIujft4C+YAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdERDM4QjRDNTkwNDY2REVFRjc3ODdDNTBFM0ZBMzlC MDQ3QzZBQzAeFw0yNjEwMzExMDQ5MTRaFw0yNjExMDMxNjE3MTRaMDMxMTAvBgNV BAMTKDA3NjI2MDBGRUM3QTkzMUIwQkMzQzA1ODJFMjA2MTkxMzA3ODM4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5mrrVlZP/mI19UG6hn6KTKp1 g9XkUMYaooG2x/DeFfELjzWxz+lu+JXXSioSXyZLAerEoWslKvpUgHRrrcTrHEbI 9bpEPL4k3V6cL9V/RNw0eacWZxa4/g7/e+g5A52nDVml+qkJsfWELJj6tCmT5JCz VDsTfxUkUgU8txGnnbFz0SI1gvWo4swZDx9IWa7iHxAkf6qWqJTsGRgWAqu6CRHf un+h15CSpWq6V/Y/AVXZa7XlGIpEHRMfu+I3nGc5EW2ah6lS5oagUPfeElWiZLfp J0f4fXrHuaWaxzLQrCUsxAIz2GOJ1008R/WfjLOYHKC4aeOvUbFtuODYQgpZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUB2JgD+x6kxsLw8BYLiBhkTB4OJowHwYDVR0j BBgwFoAUF904tMWQRm3u93h8UOP6ObBHxqwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjI2NjIwNDA1Mjk3OTczMS8wLzE3REQzOEI0QzU5MDQ2NkRFRUY3Nzg3QzUwRTNG QTM5QjA0N0M2QUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTdERDM4QjRDNTkwNDY2REVFRjc3ODdDNTBFM0ZBMzlCMDQ3QzZBQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIyNjYyMDQwNTI5Nzk3MzEvMC8xN0REMzhCNEM1OTA0 NjZERUVGNzc4N0M1MEUzRkEzOUIwNDdDNkFDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhR0neJsJaDx0 baTHQ12M/OVTHDojESfTPrt2vo+E5Kp9CHr4vGlnM1C9+3sWwb8H7TV95nIaDxUg wMfwbHxcvXi/2GgJVQRSlz+T+y1xEwBc72Uqkv7MV/h8RFZHjsxNn3qHzTlLODZ9 SJUPuW1LMWDr1GnNXxQEW8216+lxyYYkzl+tQDh0E6yePPT/oIo65Tan+QGFw5MM mRZXxSD7lvmHz0IhW7oiZTvwl8u313+hSQaGbTbzf5k5LhC6cSaAzX6dvXwbfPBt f713lZNtL99O5ASIfg6F55xodKSu2pts2dFszYVqCL65lImkYmFWVNXI4zBXbPvR x2jaFGc1Cg== -----END CERTIFICATE-----Generated at Sat Oct 31 15:49:35 2026 by rpki-client