$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft File: 917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft (raw, json) Hash identifier: rAS93/goc1UA7QtiL8SgCMdZK+lGqAhkzgr9DMXIHqA= Subject key identifier: 5D:FD:C1:AF:6B:CD:8C:8A:93:94:F6:42:ED:0E:77:2C:0B:D5:EE:62 Authority key identifier: 91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD Certificate issuer: /CN=917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD Certificate serial: 7695AE9253C4D946B0BBD08A4894035CB0058989 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft Manifest number: A6 Signing time: Mon 28 Sep 2026 05:10:24 +0000 Manifest this update: Mon 28 Sep 2026 05:05:24 +0000 Manifest next update: Thu 01 Oct 2026 15:48:24 +0000 Files and hashes: 1: 3130332e3138392e39322e302f32342d3234203d3e2034383337.roa (hash: lmstuS/H4fM0u7jxkE0+E7iQGvY13XAH5zME0iKapEY=) 2: 917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl (hash: wK4BRnN5UWQWfHhfOcQcKDyT/Ub1XNqhnsfmspzEqkI=) 3: 3130332e3138392e39332e302f32342d3234203d3e2034383337.roa (hash: gkpsLZeTrjGyQq6N61S2DVSjIch7+Hcv8M6Eql6Q6/k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 15:48:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:95:ae:92:53:c4:d9:46:b0:bb:d0:8a:48:94:03:5c:b0:05:89:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD Validity Not Before: Sep 28 05:05:24 2026 GMT Not After : Oct 1 15:48:24 2026 GMT Subject: CN=5DFDC1AF6BCD8C8A9394F642ED0E772C0BD5EE62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5d:0a:ca:f6:2f:4d:8b:16:7b:c5:32:7a:11: 7b:92:c8:43:09:9d:22:36:f8:5d:b6:39:79:93:97: 44:c3:7c:72:2f:34:c6:00:5c:80:00:88:1e:99:75: 9b:7d:67:77:77:42:e3:95:88:2d:72:53:33:03:04: ae:d1:05:39:b0:23:57:79:75:53:fb:c7:c0:58:38: 9e:29:7f:2b:60:cc:98:bc:b3:84:9b:b6:59:38:d5: d1:bf:19:d9:fd:35:a2:95:16:6f:bd:ba:bb:9b:e2: 80:ec:16:00:be:3e:43:0c:fd:e3:b9:99:d0:44:b6: 91:68:5d:81:ee:87:03:ad:6d:5e:a8:42:dd:4c:da: 34:02:12:8b:cf:74:e8:c4:60:94:04:c9:85:ef:76: 4b:6e:4d:68:24:1a:ef:a7:d4:b8:32:4a:82:37:98: 17:4c:94:74:48:dc:19:4f:d1:2c:3d:00:40:d2:e2: b3:5c:65:73:44:50:e1:f9:ab:5e:b4:d0:f7:3d:74: f4:90:40:f7:6c:d1:8e:e8:71:74:fc:8f:0e:cc:6c: d0:21:6f:2c:d1:5d:c3:03:15:47:68:1b:e4:53:7a: 54:26:84:6a:6c:b4:72:0f:e6:f7:2c:3c:d2:76:e7: 9e:40:a9:89:29:3b:96:8e:d6:01:a9:16:6b:3d:36: a4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FD:C1:AF:6B:CD:8C:8A:93:94:F6:42:ED:0E:77:2C:0B:D5:EE:62 X509v3 Authority Key Identifier: keyid:91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:10:4c:ca:cb:78:59:e2:5c:b9:2d:11:80:30:1f:44:f4:f9: 09:f4:c3:a9:26:30:ba:30:08:13:98:48:f1:75:07:82:b7:04: 31:6b:21:e2:68:5e:99:7a:62:87:c1:1f:2a:91:e2:0c:88:fc: 7e:47:6c:ce:27:9a:46:fa:e0:b6:f8:13:10:f2:6a:35:6c:49: f4:ab:71:25:a4:1d:79:32:bd:1d:7f:4d:db:04:44:1b:d9:48: a1:a7:c0:69:f3:d9:d3:6a:d2:85:2d:45:43:91:8e:5a:c0:b1: be:16:5e:43:2b:41:e0:ba:b2:36:65:66:9b:35:34:a1:c0:be: b3:cc:e0:c7:fd:8e:d8:34:f1:7a:17:71:7a:6d:2d:0b:a7:b0: e0:01:ff:e2:38:7e:f6:43:95:dc:e3:db:ab:50:15:40:30:d3: 02:e0:a4:c9:37:a2:40:87:44:59:6b:dc:81:40:52:7a:c3:d9: 86:5a:ba:f5:ec:b7:19:71:c2:8a:cd:41:07:3c:ab:b7:82:dc: f2:08:dc:59:62:9c:a4:fa:cc:3f:5b:5f:65:69:fb:3a:93:4c: da:84:95:dc:af:0d:79:5d:7f:05:69:2d:f5:86:e3:fb:d9:c5: ae:39:38:82:55:be:19:71:3a:a8:a3:a0:d1:29:e7:11:5d:ac: 96:41:7b:a6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdpWuklPE2Uawu9CKSJQDXLAFiYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3REYxQkFEOEM1Nzk3NDQyNkFDREM2OTREMzdGQjVG NEIyQ0RBRDAeFw0yNjA5MjgwNTA1MjRaFw0yNjEwMDExNTQ4MjRaMDMxMTAvBgNV BAMTKDVERkRDMUFGNkJDRDhDOEE5Mzk0RjY0MkVEMEU3NzJDMEJENUVFNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJXQrK9i9NixZ7xTJ6EXuSyEMJ nSI2+F22OXmTl0TDfHIvNMYAXIAAiB6ZdZt9Z3d3QuOViC1yUzMDBK7RBTmwI1d5 dVP7x8BYOJ4pfytgzJi8s4Sbtlk41dG/Gdn9NaKVFm+9urub4oDsFgC+PkMM/eO5 mdBEtpFoXYHuhwOtbV6oQt1M2jQCEovPdOjEYJQEyYXvdktuTWgkGu+n1LgySoI3 mBdMlHRI3BlP0Sw9AEDS4rNcZXNEUOH5q1600Pc9dPSQQPds0Y7ocXT8jw7MbNAh byzRXcMDFUdoG+RTelQmhGpstHIP5vcsPNJ2555AqYkpO5aO1gGpFms9NqS9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXf3Br2vNjIqTlPZC7Q53LAvV7mIwHwYDVR0j BBgwFoAUkX3xutjFeXRCas3GlNN/tfSyza0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2Njk2NjI4My8wLzkxN0RGMUJBRDhDNTc5NzQ0MjZBQ0RDNjk0RDM3 RkI1RjRCMkNEQUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTE3REYxQkFEOEM1Nzk3NDQyNkFDREM2OTREMzdGQjVGNEIyQ0RBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5NjYyODMvMC85MTdERjFCQUQ4QzU3 OTc0NDI2QUNEQzY5NEQzN0ZCNUY0QjJDREFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhBMyst4WeJc uS0RgDAfRPT5CfTDqSYwujAIE5hI8XUHgrcEMWsh4mhemXpih8EfKpHiDIj8fkds zieaRvrgtvgTEPJqNWxJ9KtxJaQdeTK9HX9N2wREG9lIoafAafPZ02rShS1FQ5GO WsCxvhZeQytB4LqyNmVmmzU0ocC+s8zgx/2O2DTxehdxem0tC6ew4AH/4jh+9kOV 3OPbq1AVQDDTAuCkyTeiQIdEWWvcgUBSesPZhlq69ey3GXHCis1BBzyrt4Lc8gjc WWKcpPrMP1tfZWn7OpNM2oSV3K8NeV1/BWkt9Ybj+9nFrjk4glW+GXE6qKOg0Snn EV2slkF7pg== -----END CERTIFICATE-----Generated at Wed Sep 30 12:25:41 2026 by rpki-client