$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft File: 917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft (raw, json) Hash identifier: RUdqvDE2ftKV86OwWFqeG04huwoiJB0K48ZWUvacArY= Subject key identifier: E7:BF:12:1C:B2:65:8B:45:AE:B8:B6:A4:8F:57:80:02:72:5E:53:90 Authority key identifier: 91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD Certificate issuer: /CN=917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD Certificate serial: 49655738CD75AEC242A128E119F3AB62A4E0AD41 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft Manifest number: 07 Signing time: Wed 13 May 2026 07:01:01 +0000 Manifest this update: Wed 13 May 2026 06:56:01 +0000 Manifest next update: Thu 14 May 2026 09:56:01 +0000 Files and hashes: 1: 917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl (hash: d3x4DbnXYwP4BJ5f+z/rLdmXps+Wwd/gKdr40/zjT/s=) 2: 3130332e3138392e39322e302f32332d3233203d3e2034383337.roa (hash: hKtoAIo2l+wyibKBamCwkOtSCO3d3PmtmFIk+WegxxE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:65:57:38:cd:75:ae:c2:42:a1:28:e1:19:f3:ab:62:a4:e0:ad:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD Validity Not Before: May 13 06:56:01 2026 GMT Not After : May 14 09:56:01 2026 GMT Subject: CN=E7BF121CB2658B45AEB8B6A48F578002725E5390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c4:a8:da:9c:6f:fa:40:2a:0b:4f:53:53:e1: 5d:81:d4:4d:33:1a:b0:a5:c9:84:52:22:51:d8:05: 69:87:ee:dc:03:a0:96:19:f5:a4:88:5a:28:f1:f8: 62:e7:80:0c:f7:80:f6:76:c1:77:13:78:78:e4:c7: 33:9f:36:3b:48:75:a5:af:f3:e9:1d:16:67:85:ce: 4a:72:fa:0a:2d:78:0d:ce:b3:ce:cd:45:09:ce:de: 1d:ef:9b:ac:b6:6c:ee:5c:9e:9a:f2:e7:1b:ba:1f: e4:78:0a:5a:6e:12:51:33:e6:d4:12:d0:a9:20:18: f1:86:62:1b:2c:e8:01:89:d9:bd:d9:1a:76:04:2c: 33:51:8a:1d:25:5b:f6:97:7a:32:9e:9c:11:c5:bd: 0a:48:28:d6:fe:9f:02:3e:a9:16:83:2c:d1:1c:33: 22:12:1e:5a:b0:66:a1:1f:bc:3b:1d:32:c5:0b:7e: e3:4d:6c:1b:7d:90:a0:9f:47:6e:cb:98:a2:da:cd: 35:b3:fb:de:a3:5e:43:08:c7:10:17:30:bd:f9:bd: 21:ac:e9:91:b3:e0:f7:ab:c5:52:49:92:5b:ee:34: c9:58:53:e5:f0:55:a2:a4:82:d7:57:08:15:da:c2: 54:a2:21:88:e4:31:f4:5f:60:ad:72:e2:05:90:12: 9f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BF:12:1C:B2:65:8B:45:AE:B8:B6:A4:8F:57:80:02:72:5E:53:90 X509v3 Authority Key Identifier: keyid:91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:3f:99:e9:f2:30:cc:bb:07:46:e1:6c:6e:39:d4:99:c9:57: f6:59:06:58:3a:a6:54:a2:63:1f:aa:95:4a:b1:7f:1a:82:e6: 4a:7c:ac:40:02:69:74:ea:6c:bd:25:09:b6:e4:d9:29:07:79: d1:ca:61:b2:ec:0d:35:94:ca:58:fe:b8:40:15:18:fc:66:0b: da:fc:59:9d:26:b5:85:be:fc:ed:aa:dd:23:da:8d:cb:72:37: 16:e3:b0:bc:bd:bd:80:70:39:b2:ba:02:ea:26:b5:6c:e7:e3: 30:8f:2e:95:99:c6:56:04:85:a0:05:31:18:20:4a:ea:d4:f2: 7e:23:de:45:b3:a5:78:ac:b7:a1:72:5d:d1:85:8a:bd:ad:6a: bc:af:cd:ab:86:ef:03:10:c3:44:f0:32:45:f7:93:63:9d:be: 98:ea:f8:2b:ae:68:7e:66:a7:9f:ce:30:3e:ad:0c:29:50:e8: 5b:84:ae:d2:11:32:6a:20:68:72:99:83:72:f9:0a:c2:16:99: 02:91:8e:fb:e8:72:66:29:4d:25:8c:07:0d:f8:85:2f:62:8b: 9a:b8:e4:d2:17:ef:86:58:93:0f:8f:56:91:75:86:99:27:29: f3:19:4f:56:9c:f7:96:e5:3c:ff:c1:6f:bc:23:17:6b:c4:69: 73:39:e7:5f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSWVXOM11rsJCoSjhGfOrYqTgrUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3REYxQkFEOEM1Nzk3NDQyNkFDREM2OTREMzdGQjVG NEIyQ0RBRDAeFw0yNjA1MTMwNjU2MDFaFw0yNjA1MTQwOTU2MDFaMDMxMTAvBgNV BAMTKEU3QkYxMjFDQjI2NThCNDVBRUI4QjZBNDhGNTc4MDAyNzI1RTUzOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpxKjanG/6QCoLT1NT4V2B1E0z GrClyYRSIlHYBWmH7twDoJYZ9aSIWijx+GLngAz3gPZ2wXcTeHjkxzOfNjtIdaWv 8+kdFmeFzkpy+goteA3Os87NRQnO3h3vm6y2bO5cnpry5xu6H+R4ClpuElEz5tQS 0KkgGPGGYhss6AGJ2b3ZGnYELDNRih0lW/aXejKenBHFvQpIKNb+nwI+qRaDLNEc MyISHlqwZqEfvDsdMsULfuNNbBt9kKCfR27LmKLazTWz+96jXkMIxxAXML35vSGs 6ZGz4PerxVJJklvuNMlYU+XwVaKkgtdXCBXawlSiIYjkMfRfYK1y4gWQEp9tAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU578SHLJli0WuuLakj1eAAnJeU5AwHwYDVR0j BBgwFoAUkX3xutjFeXRCas3GlNN/tfSyza0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2Njk2NjI4My8wLzkxN0RGMUJBRDhDNTc5NzQ0MjZBQ0RDNjk0RDM3 RkI1RjRCMkNEQUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTE3REYxQkFEOEM1Nzk3NDQyNkFDREM2OTREMzdGQjVGNEIyQ0RBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5NjYyODMvMC85MTdERjFCQUQ4QzU3 OTc0NDI2QUNEQzY5NEQzN0ZCNUY0QjJDREFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhT+Z6fIwzLsH RuFsbjnUmclX9lkGWDqmVKJjH6qVSrF/GoLmSnysQAJpdOpsvSUJtuTZKQd50cph suwNNZTKWP64QBUY/GYL2vxZnSa1hb787ardI9qNy3I3FuOwvL29gHA5sroC6ia1 bOfjMI8ulZnGVgSFoAUxGCBK6tTyfiPeRbOleKy3oXJd0YWKva1qvK/Nq4bvAxDD RPAyRfeTY52+mOr4K65ofmann84wPq0MKVDoW4Su0hEyaiBocpmDcvkKwhaZApGO ++hyZilNJYwHDfiFL2KLmrjk0hfvhliTD49WkXWGmScp8xlPVpz3luU8/8FvvCMX a8RpcznnXw== -----END CERTIFICATE-----Generated at Wed May 13 14:18:00 2026 by rpki-client