$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.mft File: 17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.mft (raw, json) Hash identifier: qimthF5gTKsUv+KH4VIgqGxIWP/dFGFH447Nq+4fCTY= Subject key identifier: 61:93:44:7A:88:6E:87:E3:DA:7F:F1:64:C1:64:F8:F7:56:D9:71:15 Authority key identifier: 17:C7:9C:17:39:BA:7F:37:2B:B5:0E:93:2D:B2:EB:D1:1C:E5:AF:F2 Certificate issuer: /CN=17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2 Certificate serial: 50742D49DF675559A5F1E2792E9D5E885691DAEF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.mft Manifest number: 20 Signing time: Fri 28 Aug 2026 06:48:15 +0000 Manifest this update: Fri 28 Aug 2026 06:43:15 +0000 Manifest next update: Mon 31 Aug 2026 11:19:15 +0000 Files and hashes: 1: 17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.crl (hash: mUCRUsCgoUhFsDbGDO2xq+z7JfjzolmyUVAntKHvwio=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.crl rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 11:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:74:2d:49:df:67:55:59:a5:f1:e2:79:2e:9d:5e:88:56:91:da:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2 Validity Not Before: Aug 28 06:43:15 2026 GMT Not After : Aug 31 11:19:15 2026 GMT Subject: CN=6193447A886E87E3DA7FF164C164F8F756D97115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:76:3e:de:6e:e3:f4:4c:e8:c6:9b:07:bd:f1: f5:7c:ab:99:5a:7d:20:ff:6a:48:f4:33:14:6f:91: 13:a8:2e:b9:cc:af:b3:11:84:57:44:f1:9a:7a:a2: d2:4e:a7:c5:e2:d8:51:7d:a2:a0:58:63:1b:81:1b: 55:02:99:18:bb:10:9b:63:9a:b9:d2:ab:d0:6b:2e: ad:fc:0f:56:fa:bd:58:14:4d:bb:50:7d:41:82:aa: 1a:8d:ae:dd:a3:6b:4a:e5:d1:a6:f3:51:c3:3e:6f: 33:3d:40:d4:5d:cc:42:f0:b4:29:01:d0:19:6f:5e: 9c:84:cf:cd:35:69:8c:d8:99:08:74:34:47:87:79: 7b:20:80:37:d6:6a:3a:fe:6a:d8:19:64:5f:e9:85: e7:9f:2a:c0:e1:35:c4:b9:da:3b:0b:62:7b:e4:e2: ad:df:55:e3:ee:9b:ee:8f:ca:4e:71:fa:df:5d:c9: 5a:62:29:64:ca:60:fb:26:b7:ed:d2:24:3a:4c:0e: e2:fe:49:cb:fa:7e:0d:07:7f:f3:a9:6f:c4:03:a0: 4d:0d:06:25:e4:62:c4:1d:72:47:40:c6:a3:87:86: 08:cb:5b:10:2c:8d:ab:a9:3d:95:d4:2b:ca:e9:47: 91:f6:71:cd:c7:55:52:bf:b6:e2:d5:86:d0:32:b6: e0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:93:44:7A:88:6E:87:E3:DA:7F:F1:64:C1:64:F8:F7:56:D9:71:15 X509v3 Authority Key Identifier: keyid:17:C7:9C:17:39:BA:7F:37:2B:B5:0E:93:2D:B2:EB:D1:1C:E5:AF:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:8b:d5:47:8c:df:2f:0f:32:da:80:da:d8:46:96:44:6e:0a: 3e:cd:3a:be:e7:aa:a7:bc:36:c7:dd:cc:d5:df:91:68:66:0b: 98:29:2b:68:6a:8e:d1:07:ff:e7:d2:ab:e4:13:fe:19:2b:b8: 7d:c2:5f:69:28:fa:26:51:ff:ef:19:ea:b6:90:ce:93:8b:3f: 2b:20:06:ca:43:f4:79:1e:78:6a:05:8c:12:1e:dd:a4:a7:79: 93:36:01:70:91:27:57:23:ad:d0:fd:85:aa:10:9e:d9:39:74: 44:11:1d:2d:32:7a:5d:18:3f:c9:95:ee:df:3d:85:c9:29:17: 94:ca:4d:45:29:6c:3a:e8:69:71:48:64:f8:42:52:33:75:ca: 61:ca:ed:76:b6:44:ea:fb:15:34:b6:d8:1d:a1:68:41:7a:74: b6:0d:bf:59:95:d5:08:94:10:e9:28:b4:f8:f7:a3:00:5e:46: ba:1f:74:c9:f8:c9:5a:93:bc:96:2f:54:8b:74:36:89:5e:7d: b2:b0:68:ae:2e:a3:e3:3f:c2:f8:12:23:96:7d:d9:60:3d:b8: 12:c7:79:13:7a:55:df:6e:81:67:9d:c4:57:7d:08:81:04:72: 67:7c:17:64:a5:9c:e8:6b:79:67:8a:05:b1:67:31:5e:eb:b7: a8:d7:72:7c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUHQtSd9nVVml8eJ5Lp1eiFaR2u8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdDNzlDMTczOUJBN0YzNzJCQjUwRTkzMkRCMkVCRDEx Q0U1QUZGMjAeFw0yNjA4MjgwNjQzMTVaFw0yNjA4MzExMTE5MTVaMDMxMTAvBgNV BAMTKDYxOTM0NDdBODg2RTg3RTNEQTdGRjE2NEMxNjRGOEY3NTZEOTcxMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLdj7ebuP0TOjGmwe98fV8q5la fSD/akj0MxRvkROoLrnMr7MRhFdE8Zp6otJOp8Xi2FF9oqBYYxuBG1UCmRi7EJtj mrnSq9BrLq38D1b6vVgUTbtQfUGCqhqNrt2ja0rl0abzUcM+bzM9QNRdzELwtCkB 0BlvXpyEz801aYzYmQh0NEeHeXsggDfWajr+atgZZF/pheefKsDhNcS52jsLYnvk 4q3fVePum+6Pyk5x+t9dyVpiKWTKYPsmt+3SJDpMDuL+Scv6fg0Hf/Opb8QDoE0N BiXkYsQdckdAxqOHhgjLWxAsjaupPZXUK8rpR5H2cc3HVVK/tuLVhtAytuDVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUYZNEeohuh+Paf/FkwWT491bZcRUwHwYDVR0j BBgwFoAUF8ecFzm6fzcrtQ6TLbLr0Rzlr/IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz NzU4MDgxNDQ1MjY1NDEyNS8xLzE3Qzc5QzE3MzlCQTdGMzcyQkI1MEU5MzJEQjJF QkQxMUNFNUFGRjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTdDNzlDMTczOUJBN0YzNzJCQjUwRTkzMkRCMkVCRDExQ0U1QUZGMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzc1ODA4MTQ0NTI2NTQxMjUvMS8xN0M3OUMxNzM5QkE3 RjM3MkJCNTBFOTMyREIyRUJEMTFDRTVBRkYyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuIvVR4zfLw8y 2oDa2EaWRG4KPs06vueqp7w2x93M1d+RaGYLmCkraGqO0Qf/59Kr5BP+GSu4fcJf aSj6JlH/7xnqtpDOk4s/KyAGykP0eR54agWMEh7dpKd5kzYBcJEnVyOt0P2FqhCe 2Tl0RBEdLTJ6XRg/yZXu3z2FySkXlMpNRSlsOuhpcUhk+EJSM3XKYcrtdrZE6vsV NLbYHaFoQXp0tg2/WZXVCJQQ6Si0+PejAF5Guh90yfjJWpO8li9Ui3Q2iV59srBo ri6j4z/C+BIjln3ZYD24Esd5E3pV326BZ53EV30IgQRyZ3wXZKWc6Gt5Z4oFsWcx Xuu3qNdyfA== -----END CERTIFICATE-----Generated at Sat Aug 29 06:23:52 2026 by rpki-client