$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.mft File: 17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.mft (raw, json) Hash identifier: F32TrtRzvQQ1mpYkX9jUWw67YiBwv7FsQQVCJ+CcOVI= Subject key identifier: F7:55:A1:23:49:36:B6:FF:EC:FB:E5:A2:1E:2C:85:28:64:9F:2F:59 Authority key identifier: 17:C7:9C:17:39:BA:7F:37:2B:B5:0E:93:2D:B2:EB:D1:1C:E5:AF:F2 Certificate issuer: /CN=17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2 Certificate serial: 4102677B7C76C157B4D3BFDA0739688C02CB3377 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.mft Manifest number: 35 Signing time: Thu 15 Oct 2026 17:36:53 +0000 Manifest this update: Thu 15 Oct 2026 17:31:53 +0000 Manifest next update: Mon 19 Oct 2026 03:48:53 +0000 Files and hashes: 1: 17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.crl (hash: dO5EzRoTCLae/S+ghs0Yz6N2TwM5/yxmRVvKfG92IIQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.crl rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 03:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:02:67:7b:7c:76:c1:57:b4:d3:bf:da:07:39:68:8c:02:cb:33:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2 Validity Not Before: Oct 15 17:31:53 2026 GMT Not After : Oct 19 03:48:53 2026 GMT Subject: CN=F755A1234936B6FFECFBE5A21E2C8528649F2F59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1a:0b:10:50:36:4e:69:a0:5e:90:73:b5:cb: d8:0c:98:bc:ce:f9:95:57:fd:e1:76:1b:45:97:92: fc:8c:dc:76:30:40:71:50:38:ee:b8:40:22:1b:a7: 5a:ce:d1:1f:77:3e:98:1c:ec:3f:45:b0:e0:67:05: c0:03:89:41:ed:4d:3d:32:a6:d0:a7:3a:73:cc:a4: dd:1c:33:d9:c2:e5:17:f2:fc:bd:ea:fa:b6:3d:b4: ec:fe:21:b2:e9:0f:e9:8d:b9:52:b0:27:cc:77:81: 1d:81:d8:57:49:39:6f:a1:9e:3d:d8:84:9d:2a:13: fb:2e:55:09:34:e7:8d:7b:b7:53:99:55:1a:e6:c3: 31:83:91:42:6b:3a:41:31:37:4d:3e:c0:c0:e8:38: d2:28:87:06:5c:22:8e:d6:4d:ae:e2:6b:82:6a:5a: c2:c3:b4:49:38:46:74:52:71:6e:44:cc:df:0f:e7: 5f:85:64:1b:c8:9b:3a:3d:22:8d:28:5f:dd:dd:08: d4:f3:06:f1:2a:a3:65:dd:bf:80:12:31:08:dc:71: da:ba:11:b9:0c:44:b1:c0:b9:1a:04:23:34:7c:37: ca:9b:a2:62:2f:a8:90:78:7f:f8:85:89:a5:96:17: 01:1c:30:a9:5c:de:c3:c7:6a:89:b2:9b:e7:17:be: 67:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:55:A1:23:49:36:B6:FF:EC:FB:E5:A2:1E:2C:85:28:64:9F:2F:59 X509v3 Authority Key Identifier: keyid:17:C7:9C:17:39:BA:7F:37:2B:B5:0E:93:2D:B2:EB:D1:1C:E5:AF:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9f:8c:10:1f:13:9d:fd:80:42:49:c4:7b:e1:9d:57:df:25: 37:1e:d4:ac:23:69:f9:34:33:a2:35:e0:9f:a1:45:87:2c:f1: 4e:7b:fe:c4:64:57:a5:00:d2:8d:45:7f:36:87:ef:bb:f2:4f: e0:69:80:aa:3c:9a:e1:61:73:45:35:2e:6e:70:fc:0a:45:37: a7:d3:49:f8:7b:13:76:ef:df:d8:bf:57:bf:9b:1b:08:1a:1d: 9d:f1:e9:57:6a:6b:cc:72:a4:2d:51:79:63:92:4a:30:4a:ab: 95:af:2b:ef:0d:cf:b1:98:fa:ee:b7:3b:11:76:54:34:b2:34: b5:86:ed:f0:14:20:12:1b:95:2c:d4:51:28:e8:55:75:1b:eb: 62:88:fb:b7:40:21:28:a8:cb:54:de:9a:38:e1:82:df:dc:e1: a5:ec:2f:c4:d4:d7:16:3c:ff:0a:09:9e:2a:dd:02:13:ae:32: 65:55:0e:47:7e:65:5b:09:76:c7:ac:d7:b7:fe:28:cd:66:20: 67:57:ff:ba:37:79:00:1c:8a:e2:9b:cd:ab:8b:22:03:c1:ac: fb:54:9b:f3:a0:7b:85:ff:25:28:7a:d4:27:07:cf:13:aa:7b: d6:72:79:24:70:69:7d:7b:d6:5e:93:39:22:c4:4f:5e:aa:4c: c0:68:ef:30 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQQJne3x2wVe007/aBzlojALLM3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdDNzlDMTczOUJBN0YzNzJCQjUwRTkzMkRCMkVCRDEx Q0U1QUZGMjAeFw0yNjEwMTUxNzMxNTNaFw0yNjEwMTkwMzQ4NTNaMDMxMTAvBgNV BAMTKEY3NTVBMTIzNDkzNkI2RkZFQ0ZCRTVBMjFFMkM4NTI4NjQ5RjJGNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQGgsQUDZOaaBekHO1y9gMmLzO +ZVX/eF2G0WXkvyM3HYwQHFQOO64QCIbp1rO0R93Ppgc7D9FsOBnBcADiUHtTT0y ptCnOnPMpN0cM9nC5Rfy/L3q+rY9tOz+IbLpD+mNuVKwJ8x3gR2B2FdJOW+hnj3Y hJ0qE/suVQk05417t1OZVRrmwzGDkUJrOkExN00+wMDoONIohwZcIo7WTa7ia4Jq WsLDtEk4RnRScW5EzN8P51+FZBvImzo9Io0oX93dCNTzBvEqo2Xdv4ASMQjccdq6 EbkMRLHAuRoEIzR8N8qbomIvqJB4f/iFiaWWFwEcMKlc3sPHaomym+cXvmehAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU91WhI0k2tv/s++WiHiyFKGSfL1kwHwYDVR0j BBgwFoAUF8ecFzm6fzcrtQ6TLbLr0Rzlr/IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz NzU4MDgxNDQ1MjY1NDEyNS8xLzE3Qzc5QzE3MzlCQTdGMzcyQkI1MEU5MzJEQjJF QkQxMUNFNUFGRjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTdDNzlDMTczOUJBN0YzNzJCQjUwRTkzMkRCMkVCRDExQ0U1QUZGMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzc1ODA4MTQ0NTI2NTQxMjUvMS8xN0M3OUMxNzM5QkE3 RjM3MkJCNTBFOTMyREIyRUJEMTFDRTVBRkYyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXp+MEB8Tnf2A QknEe+GdV98lNx7UrCNp+TQzojXgn6FFhyzxTnv+xGRXpQDSjUV/Nofvu/JP4GmA qjya4WFzRTUubnD8CkU3p9NJ+HsTdu/f2L9Xv5sbCBodnfHpV2przHKkLVF5Y5JK MEqrla8r7w3PsZj67rc7EXZUNLI0tYbt8BQgEhuVLNRRKOhVdRvrYoj7t0AhKKjL VN6aOOGC39zhpewvxNTXFjz/CgmeKt0CE64yZVUOR35lWwl2x6zXt/4ozWYgZ1f/ ujd5AByK4pvNq4siA8Gs+1Sb86B7hf8lKHrUJwfPE6p71nJ5JHBpfXvWXpM5IsRP XqpMwGjvMA== -----END CERTIFICATE-----Generated at Fri Oct 16 21:32:48 2026 by rpki-client