$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft File: 917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft (raw, json) Hash identifier: 5I9OBI/wFBWP2+xIx4XcTpaTb33kiaNsscGINmMl7RI= Subject key identifier: 56:2B:2B:10:B2:48:B9:B3:79:B6:12:51:53:1A:68:61:59:A2:B6:96 Authority key identifier: 91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD Certificate issuer: /CN=917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD Certificate serial: 07B2345E4534CB2C8B43E7A731D08CFDBE829CA0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft Manifest number: 69 Signing time: Fri 24 Jul 2026 07:25:36 +0000 Manifest this update: Fri 24 Jul 2026 07:20:36 +0000 Manifest next update: Sat 25 Jul 2026 09:53:36 +0000 Files and hashes: 1: 917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl (hash: VjV3bm4uie+IHZH9OBcbMmjdswFLjRYXkA4Co0TPmfw=) 2: 3130332e3138392e39332e302f32342d3234203d3e2034383337.roa (hash: gkpsLZeTrjGyQq6N61S2DVSjIch7+Hcv8M6Eql6Q6/k=) 3: 3130332e3138392e39322e302f32342d3234203d3e2034383337.roa (hash: lmstuS/H4fM0u7jxkE0+E7iQGvY13XAH5zME0iKapEY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:b2:34:5e:45:34:cb:2c:8b:43:e7:a7:31:d0:8c:fd:be:82:9c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD Validity Not Before: Jul 24 07:20:36 2026 GMT Not After : Jul 25 09:53:36 2026 GMT Subject: CN=562B2B10B248B9B379B61251531A686159A2B696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e6:a7:31:ba:23:93:93:d6:71:df:cb:df:1c: 91:ff:36:3e:1a:4b:4f:96:c8:65:b2:fe:50:30:10: 1e:48:aa:dc:af:d0:54:51:1b:57:8f:c8:44:42:92: 5c:e5:09:a8:44:29:8e:f9:e1:6b:66:30:e7:34:19: 58:3d:fd:bd:9b:0e:4f:62:5c:fa:a5:4a:7f:25:f9: a4:f7:4e:bc:d5:17:eb:eb:6a:8f:34:78:f3:bc:47: d0:91:a7:37:8a:4f:06:38:96:6e:54:94:a4:5b:82: 3f:e1:ac:10:47:3a:a6:a3:44:6d:25:50:49:11:06: 6b:82:97:91:f5:e1:55:61:d6:3c:e5:e3:3d:75:ed: 6c:ac:8b:fe:17:c5:97:21:b6:62:ce:75:81:4c:ae: 0d:04:e7:57:47:1b:40:17:9c:9d:37:6b:b3:06:ce: 95:56:cc:0d:4a:16:d5:24:5a:c7:14:39:6b:ad:fe: bb:ae:9d:3e:db:ca:98:cc:50:fc:fc:f2:56:e8:1a: ef:fa:0e:88:cf:a6:47:99:d3:52:48:96:16:30:98: 5a:0b:1d:74:ac:97:e7:06:b7:f8:94:b0:2d:e9:0d: d4:df:2f:80:1c:59:b5:43:f6:9b:bb:04:05:48:e9: 43:9f:b1:0c:91:5b:86:5e:80:ab:38:4e:0b:ec:72: 33:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2B:2B:10:B2:48:B9:B3:79:B6:12:51:53:1A:68:61:59:A2:B6:96 X509v3 Authority Key Identifier: keyid:91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:2e:95:2c:99:08:7f:27:6e:db:83:a9:39:cc:b4:28:d2:d2: 78:c7:8c:de:e0:86:1e:c9:9c:e5:ad:be:d1:39:b6:82:d5:19: 1c:80:0c:92:de:30:b2:e9:84:55:90:8b:61:e0:bb:81:88:26: 3e:01:a1:60:e4:4b:d0:0e:ec:b7:73:f5:cf:ec:ce:2b:cc:8c: 78:22:66:6f:e7:d5:74:d3:8d:45:75:8c:bc:87:a2:5d:70:08: 25:6a:d2:68:60:b9:07:b7:6f:d0:cc:af:45:89:05:3f:4a:79: 2a:9b:e1:ad:58:29:a4:0c:ec:5b:00:8f:91:e3:45:05:24:19: 9d:50:7a:37:6d:6d:b9:78:72:84:59:44:2c:12:ee:c9:70:e9: 42:35:02:eb:75:a8:a8:6a:84:17:fb:84:e0:1e:04:23:da:61: ca:9a:43:20:37:2c:24:c1:45:c2:71:3e:59:15:fc:3a:5c:4b: 2b:cf:1c:94:bc:52:ab:44:a0:2e:79:54:04:4e:0b:14:40:b5: bd:c6:57:03:74:d0:9e:cf:90:d0:55:2d:e2:79:ba:48:cc:47: d4:a4:a5:65:ac:06:a8:2c:ce:e0:b5:bc:16:86:9d:45:14:ed: fd:0d:e0:b1:f1:bf:58:c9:de:86:2c:c7:18:20:a6:44:29:cf: b4:af:4e:a3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUB7I0XkU0yyyLQ+enMdCM/b6CnKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3REYxQkFEOEM1Nzk3NDQyNkFDREM2OTREMzdGQjVG NEIyQ0RBRDAeFw0yNjA3MjQwNzIwMzZaFw0yNjA3MjUwOTUzMzZaMDMxMTAvBgNV BAMTKDU2MkIyQjEwQjI0OEI5QjM3OUI2MTI1MTUzMUE2ODYxNTlBMkI2OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65qcxuiOTk9Zx38vfHJH/Nj4a S0+WyGWy/lAwEB5Iqtyv0FRRG1ePyERCklzlCahEKY754WtmMOc0GVg9/b2bDk9i XPqlSn8l+aT3TrzVF+vrao80ePO8R9CRpzeKTwY4lm5UlKRbgj/hrBBHOqajRG0l UEkRBmuCl5H14VVh1jzl4z117Wysi/4XxZchtmLOdYFMrg0E51dHG0AXnJ03a7MG zpVWzA1KFtUkWscUOWut/ruunT7bypjMUPz88lboGu/6DojPpkeZ01JIlhYwmFoL HXSsl+cGt/iUsC3pDdTfL4AcWbVD9pu7BAVI6UOfsQyRW4ZegKs4TgvscjONAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVisrELJIubN5thJRUxpoYVmitpYwHwYDVR0j BBgwFoAUkX3xutjFeXRCas3GlNN/tfSyza0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2Njk2NjI4My8wLzkxN0RGMUJBRDhDNTc5NzQ0MjZBQ0RDNjk0RDM3 RkI1RjRCMkNEQUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTE3REYxQkFEOEM1Nzk3NDQyNkFDREM2OTREMzdGQjVGNEIyQ0RBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5NjYyODMvMC85MTdERjFCQUQ4QzU3 OTc0NDI2QUNEQzY5NEQzN0ZCNUY0QjJDREFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGC6VLJkIfydu 24OpOcy0KNLSeMeM3uCGHsmc5a2+0Tm2gtUZHIAMkt4wsumEVZCLYeC7gYgmPgGh YORL0A7st3P1z+zOK8yMeCJmb+fVdNONRXWMvIeiXXAIJWrSaGC5B7dv0MyvRYkF P0p5KpvhrVgppAzsWwCPkeNFBSQZnVB6N21tuXhyhFlELBLuyXDpQjUC63WoqGqE F/uE4B4EI9phyppDIDcsJMFFwnE+WRX8OlxLK88clLxSq0SgLnlUBE4LFEC1vcZX A3TQns+Q0FUt4nm6SMxH1KSlZawGqCzO4LW8FoadRRTt/Q3gsfG/WMnehizHGCCm RCnPtK9Oow== -----END CERTIFICATE-----Generated at Fri Jul 24 11:22:51 2026 by rpki-client