$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft File: 17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft (raw, json) Hash identifier: K/+e3ciAN/Y2E0lzxywFEHwfcOZjtApUb1H4iywOfYU= Subject key identifier: 97:50:8C:A0:0F:AB:54:DE:8D:08:9E:9C:19:08:8E:02:FA:68:C3:EF Authority key identifier: 17:DD:38:B4:C5:90:46:6D:EE:F7:78:7C:50:E3:FA:39:B0:47:C6:AC Certificate issuer: /CN=17DD38B4C590466DEEF7787C50E3FA39B047C6AC Certificate serial: 5278FA13E05AA19FA24A11ABE8B3C47C9499D114 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft Manifest number: 4D Signing time: Fri 24 Jul 2026 16:26:36 +0000 Manifest this update: Fri 24 Jul 2026 16:21:36 +0000 Manifest next update: Sat 25 Jul 2026 17:49:36 +0000 Files and hashes: 1: 17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl (hash: qJL900nNUqujTWNh6uC3tRk3h7WMo12zEGg5f5SCWLA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 17:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:78:fa:13:e0:5a:a1:9f:a2:4a:11:ab:e8:b3:c4:7c:94:99:d1:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17DD38B4C590466DEEF7787C50E3FA39B047C6AC Validity Not Before: Jul 24 16:21:36 2026 GMT Not After : Jul 25 17:49:36 2026 GMT Subject: CN=97508CA00FAB54DE8D089E9C19088E02FA68C3EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c8:e7:ed:67:ec:ce:17:5b:ae:de:6f:91:b3: c9:b8:0f:98:9a:91:fd:9a:0a:5f:6c:7a:76:8d:2a: 80:81:55:b8:ac:25:cd:5e:aa:6a:be:22:41:28:57: 4b:7a:34:c2:6a:81:10:c0:91:53:cd:c1:96:b7:f1: 8d:05:b2:08:5a:22:e9:f9:cd:87:43:d0:e5:2a:f4: 4a:26:37:a2:fe:9b:9a:6c:0c:42:21:f1:a8:c9:c8: 4e:fb:aa:3f:e0:2a:83:fa:bb:b2:a8:55:1c:c2:43: 8e:b0:ff:a6:c6:d3:a0:5b:2f:5e:6c:d4:82:99:09: 6b:06:22:26:d3:6a:d9:4c:9c:fc:db:4f:16:5a:f1: b3:f5:19:4d:d6:6e:3c:38:06:7b:1b:25:f9:18:b9: fb:38:9d:a4:1f:e2:ae:7c:7e:0b:6a:88:ee:3a:99: 27:8b:ec:b5:d3:d6:89:96:f4:30:17:ca:f6:75:00: a2:22:60:d2:c8:41:e6:0d:4e:43:a8:21:dc:3d:21: 8b:da:29:a6:0b:18:2f:29:b6:c0:f9:0d:13:d7:40: ae:ef:ea:a7:1e:03:f5:58:5e:53:cc:11:5c:59:17: d3:cd:cb:d8:7e:bc:5a:1c:be:fe:ce:13:32:97:b5: 87:31:58:b9:59:2a:03:ec:46:1c:7a:9d:89:eb:45: 1e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:50:8C:A0:0F:AB:54:DE:8D:08:9E:9C:19:08:8E:02:FA:68:C3:EF X509v3 Authority Key Identifier: keyid:17:DD:38:B4:C5:90:46:6D:EE:F7:78:7C:50:E3:FA:39:B0:47:C6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:3c:82:56:82:55:f5:3e:8f:74:c5:7a:90:66:c7:c3:14:be: 7d:cc:ee:b8:53:b0:c5:cc:4b:35:ae:7f:55:3e:58:97:7a:5e: ff:03:b1:78:c4:4f:0c:37:9a:4d:73:a5:b3:6f:eb:19:a7:eb: ef:f8:68:76:5a:8c:12:62:e1:55:89:a1:ec:17:56:d9:43:48: d2:ee:da:3c:9f:d3:7f:8b:cd:48:6f:62:8e:38:c1:cd:be:07: 40:10:42:0f:88:9b:63:e4:01:9c:71:b3:0a:be:01:bd:3a:f5: b9:64:30:da:29:40:aa:00:1b:17:b5:15:ab:83:6e:ed:f8:2c: 31:ed:59:10:18:14:fb:8e:aa:2e:c4:f3:8e:19:a1:94:c2:d5: e4:ee:3e:81:96:2a:6e:fc:89:6a:5b:60:4c:d9:fc:57:ff:42: 42:10:fb:c5:06:dc:9e:c7:e7:0c:15:13:e8:ef:11:5e:e9:ec: dc:eb:c2:8f:5f:10:e6:8b:cb:34:37:76:4d:70:95:51:6b:48: 1d:49:71:24:ae:35:cb:63:90:c8:d1:c5:d2:b9:c0:50:4c:a6: 59:12:47:0c:41:72:2d:85:5d:20:6a:f3:80:17:c2:78:94:7b: b5:f9:9d:d9:15:c8:4f:04:b4:3d:32:f7:b6:cf:6f:5b:78:45: c8:4b:9e:19 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUnj6E+BaoZ+iShGr6LPEfJSZ0RQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdERDM4QjRDNTkwNDY2REVFRjc3ODdDNTBFM0ZBMzlC MDQ3QzZBQzAeFw0yNjA3MjQxNjIxMzZaFw0yNjA3MjUxNzQ5MzZaMDMxMTAvBgNV BAMTKDk3NTA4Q0EwMEZBQjU0REU4RDA4OUU5QzE5MDg4RTAyRkE2OEMzRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpyOftZ+zOF1uu3m+Rs8m4D5ia kf2aCl9senaNKoCBVbisJc1eqmq+IkEoV0t6NMJqgRDAkVPNwZa38Y0FsghaIun5 zYdD0OUq9EomN6L+m5psDEIh8ajJyE77qj/gKoP6u7KoVRzCQ46w/6bG06BbL15s 1IKZCWsGIibTatlMnPzbTxZa8bP1GU3Wbjw4BnsbJfkYufs4naQf4q58fgtqiO46 mSeL7LXT1omW9DAXyvZ1AKIiYNLIQeYNTkOoIdw9IYvaKaYLGC8ptsD5DRPXQK7v 6qceA/VYXlPMEVxZF9PNy9h+vFocvv7OEzKXtYcxWLlZKgPsRhx6nYnrRR6ZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUl1CMoA+rVN6NCJ6cGQiOAvpow+8wHwYDVR0j BBgwFoAUF904tMWQRm3u93h8UOP6ObBHxqwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjI2NjIwNDA1Mjk3OTczMS8wLzE3REQzOEI0QzU5MDQ2NkRFRUY3Nzg3QzUwRTNG QTM5QjA0N0M2QUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTdERDM4QjRDNTkwNDY2REVFRjc3ODdDNTBFM0ZBMzlCMDQ3QzZBQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIyNjYyMDQwNTI5Nzk3MzEvMC8xN0REMzhCNEM1OTA0 NjZERUVGNzc4N0M1MEUzRkEzOUIwNDdDNkFDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDyCVoJV9T6P dMV6kGbHwxS+fczuuFOwxcxLNa5/VT5Yl3pe/wOxeMRPDDeaTXOls2/rGafr7/ho dlqMEmLhVYmh7BdW2UNI0u7aPJ/Tf4vNSG9ijjjBzb4HQBBCD4ibY+QBnHGzCr4B vTr1uWQw2ilAqgAbF7UVq4Nu7fgsMe1ZEBgU+46qLsTzjhmhlMLV5O4+gZYqbvyJ altgTNn8V/9CQhD7xQbcnsfnDBUT6O8RXuns3OvCj18Q5ovLNDd2TXCVUWtIHUlx JK41y2OQyNHF0rnAUEymWRJHDEFyLYVdIGrzgBfCeJR7tfmd2RXITwS0PTL3ts9v W3hFyEueGQ== -----END CERTIFICATE-----Generated at Sat Jul 25 02:09:27 2026 by rpki-client