$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.mft File: 2C17316B7F43D4949633C8E9473373FAB42B7312.mft (raw, json) Hash identifier: YkBDmFaTyfQauhBTO/anyc6CiAra3mwejtyUe7qGKG0= Subject key identifier: 8A:04:AE:94:7F:12:28:A5:8B:0E:F6:3A:2E:EE:CD:35:C8:80:A8:0C Authority key identifier: 2C:17:31:6B:7F:43:D4:94:96:33:C8:E9:47:33:73:FA:B4:2B:73:12 Certificate issuer: /CN=A91B10180000/serialNumber=2C17316B7F43D4949633C8E9473373FAB42B7312 Certificate serial: 1026B11EC34F27D69B1D2B39DBEC8018AD8AD0A3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LBcxa39D1JSWM8jpRzNz-rQrcxI.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.mft Manifest number: 1D Signing time: Sun 18 Oct 2026 21:43:56 +0000 Manifest this update: Sun 18 Oct 2026 21:38:56 +0000 Manifest next update: Thu 22 Oct 2026 09:06:56 +0000 Files and hashes: 1: 3133342e34392e3234302e302f32322d3234203d3e20313331353632.roa (hash: 43geaqjpTOxkcmIT2KJclGaVNFKcxR+7BHayTCyYSPk=) 2: 2C17316B7F43D4949633C8E9473373FAB42B7312.crl (hash: pshQBB0ybDsgtlsxXyskbQrq2V6u/xhgivYXbbVyPfE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.crl rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LBcxa39D1JSWM8jpRzNz-rQrcxI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 09:06:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:26:b1:1e:c3:4f:27:d6:9b:1d:2b:39:db:ec:80:18:ad:8a:d0:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B10180000, serialNumber=2C17316B7F43D4949633C8E9473373FAB42B7312 Validity Not Before: Oct 18 21:38:56 2026 GMT Not After : Oct 22 09:06:56 2026 GMT Subject: CN=8A04AE947F1228A58B0EF63A2EEECD35C880A80C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ff:9a:50:f5:4d:d4:7d:b5:00:32:f7:85:75: 82:32:a8:cd:06:5e:04:f6:75:e1:d9:a9:be:39:6d: fc:60:a2:ae:99:53:3b:b3:8b:c0:a4:48:31:c4:ab: 52:90:cf:11:af:32:63:c9:14:38:88:72:a7:f9:e4: fd:94:99:30:f4:bb:83:dd:97:d2:2b:ce:04:91:3d: f9:bc:b6:d4:af:cc:75:45:ff:36:f0:03:63:50:d8: 85:dd:36:68:3a:fa:d8:5c:bc:fa:20:4f:33:9a:04: dd:eb:c8:3d:5e:a9:27:82:64:15:41:f2:3a:74:53: 88:1f:5d:f6:d7:94:88:5f:f7:1b:08:8d:fe:ff:40: 80:d9:cd:2d:fb:39:34:63:e5:a5:04:ba:ff:76:96: 39:78:03:c6:db:2d:42:1a:3f:ce:88:48:fc:d6:66: b0:6a:cc:d3:92:88:81:16:2a:d8:a8:58:96:cc:dc: 14:72:b9:4f:34:9f:72:73:f1:6c:b2:37:58:66:70: c1:9e:01:f7:59:9c:00:54:7d:4b:cf:a3:0a:f5:89: d4:72:a7:05:84:15:7a:df:3b:7f:c9:1e:aa:0f:d8: b4:4c:14:8a:6a:d0:d5:1d:fa:ff:90:33:28:81:88: c5:18:8a:eb:6c:ad:2c:c2:88:6f:0c:47:f0:e4:a8: ce:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:04:AE:94:7F:12:28:A5:8B:0E:F6:3A:2E:EE:CD:35:C8:80:A8:0C X509v3 Authority Key Identifier: keyid:2C:17:31:6B:7F:43:D4:94:96:33:C8:E9:47:33:73:FA:B4:2B:73:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LBcxa39D1JSWM8jpRzNz-rQrcxI.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:91:a3:f8:cb:86:81:a5:84:85:59:14:22:b7:6e:ff:08:5b: 34:ce:56:d7:32:f8:d7:05:e2:80:a9:3d:a2:06:65:2e:45:05: 1e:23:d0:13:5b:6e:04:28:6b:86:f4:e7:84:3a:44:7c:3a:78: 3e:3d:f5:4a:7b:d5:cd:8c:20:e5:dc:cf:96:fc:36:5b:9c:21: 23:1f:7b:d4:64:3e:80:e4:5f:f6:a3:6a:23:67:ab:c1:22:c9: 68:c5:00:53:c5:b4:ff:c6:9d:99:1c:e5:7a:9a:11:14:ff:d1: 43:ec:51:b9:23:0b:a4:65:06:54:20:5e:ad:ee:fc:04:15:57: 6f:f2:02:6d:11:53:e7:d5:43:4a:c2:fb:ec:ad:c7:a2:05:c2: 93:fa:f2:f2:1d:e1:99:c3:25:e2:81:fb:2e:42:57:8e:22:76: 50:96:2d:e1:5f:d2:88:c7:39:b3:5b:e7:0b:0e:31:ca:d6:75: 1b:a0:7d:86:79:47:47:e3:5e:3c:93:79:9d:45:52:96:60:21: 93:8d:d8:70:3c:24:8f:eb:32:03:16:aa:c0:53:b1:06:b2:c2: cc:4f:70:4f:29:08:73:ed:dc:18:be:1d:c5:64:ee:27:5a:ce: 08:91:c5:12:ce:23:4f:40:04:46:09:6a:2e:b8:d0:27:5e:c2: 78:60:91:f8 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUECaxHsNPJ9abHSs52+yAGK2K0KMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQjEwMTgwMDAwMTEwLwYDVQQFEygyQzE3MzE2QjdG NDNENDk0OTYzM0M4RTk0NzMzNzNGQUI0MkI3MzEyMB4XDTI2MTAxODIxMzg1NloX DTI2MTAyMjA5MDY1NlowMzExMC8GA1UEAxMoOEEwNEFFOTQ3RjEyMjhBNThCMEVG NjNBMkVFRUNEMzVDODgwQTgwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANL/mlD1TdR9tQAy94V1gjKozQZeBPZ14dmpvjlt/GCirplTO7OLwKRIMcSr UpDPEa8yY8kUOIhyp/nk/ZSZMPS7g92X0ivOBJE9+by21K/MdUX/NvADY1DYhd02 aDr62Fy8+iBPM5oE3evIPV6pJ4JkFUHyOnRTiB9d9teUiF/3GwiN/v9AgNnNLfs5 NGPlpQS6/3aWOXgDxtstQho/zohI/NZmsGrM05KIgRYq2KhYlszcFHK5TzSfcnPx bLI3WGZwwZ4B91mcAFR9S8+jCvWJ1HKnBYQVet87f8keqg/YtEwUimrQ1R36/5Az KIGIxRiK62ytLMKIbwxH8OSozkUCAwEAAaOCAh0wggIZMB0GA1UdDgQWBBSKBK6U fxIopYsO9jou7s01yICoDDAfBgNVHSMEGDAWgBQsFzFrf0PUlJYzyOlHM3P6tCtz EjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyMzYwMzEyMTIxNjU1MzEzLzEvMkMxNzMx NkI3RjQzRDQ5NDk2MzNDOEU5NDczMzczRkFCNDJCNzMxMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTEJjeGEzOUQx SlNXTThqcFJ6TnotclFyY3hJLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMjM2MDMxMjEy MTY1NTMxMy8xLzJDMTczMTZCN0Y0M0Q0OTQ5NjMzQzhFOTQ3MzM3M0ZBQjQyQjcz MTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQAYkaP4y4aBpYSFWRQit27/CFs0zlbXMvjXBeKAqT2iBmUu RQUeI9ATW24EKGuG9OeEOkR8Ong+PfVKe9XNjCDl3M+W/DZbnCEjH3vUZD6A5F/2 o2ojZ6vBIsloxQBTxbT/xp2ZHOV6mhEU/9FD7FG5IwukZQZUIF6t7vwEFVdv8gJt EVPn1UNKwvvsrceiBcKT+vLyHeGZwyXigfsuQleOInZQli3hX9KIxzmzW+cLDjHK 1nUboH2GeUdH4148k3mdRVKWYCGTjdhwPCSP6zIDFqrAU7EGssLMT3BPKQhz7dwY vh3FZO4nWs4IkcUSziNPQARGCWouuNAnXsJ4YJH4 -----END CERTIFICATE-----Generated at Mon Oct 19 04:44:41 2026 by rpki-client