$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft File: 17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft (raw, json) Hash identifier: S+Xt7Yn+Q3Tm8VKP2elnCNk7ax/pptVNAnhH7VVIloo= Subject key identifier: 44:82:71:FC:76:13:F1:D8:92:3B:69:9C:F7:DA:35:ED:9A:65:70:F0 Authority key identifier: 17:DD:38:B4:C5:90:46:6D:EE:F7:78:7C:50:E3:FA:39:B0:47:C6:AC Certificate issuer: /CN=17DD38B4C590466DEEF7787C50E3FA39B047C6AC Certificate serial: 4E81C270E17E86D684D7A7F6EDB269DAA802CA7A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft Manifest number: 91 Signing time: Sat 17 Oct 2026 08:08:37 +0000 Manifest this update: Sat 17 Oct 2026 08:03:37 +0000 Manifest next update: Tue 20 Oct 2026 13:04:37 +0000 Files and hashes: 1: 17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl (hash: pWusvy81E0+3N3OrnSl2IAbsSI9vVmtGES6KRuugY7s=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 Oct 2026 20:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:81:c2:70:e1:7e:86:d6:84:d7:a7:f6:ed:b2:69:da:a8:02:ca:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17DD38B4C590466DEEF7787C50E3FA39B047C6AC Validity Not Before: Oct 17 08:03:37 2026 GMT Not After : Oct 20 13:04:37 2026 GMT Subject: CN=448271FC7613F1D8923B699CF7DA35ED9A6570F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:76:23:33:73:c6:5a:6f:f9:65:a5:a0:4a:e7: 1e:34:98:dc:e8:a9:e6:9c:f0:e2:4a:72:79:39:3d: 3a:26:4c:e3:08:90:c1:29:d0:27:17:b0:fe:f6:40: 4f:4b:b0:0c:33:46:bb:c8:5a:a9:3d:f6:22:21:1f: 5e:ce:67:cd:69:a0:e5:f2:d4:90:50:82:21:23:7a: b8:84:b8:11:55:cd:ee:39:18:f6:b9:35:6c:df:d0: cb:66:dc:ae:1c:f6:5d:6e:37:3e:cf:cd:2d:ee:f2: e4:75:96:e4:f5:95:3c:c7:ea:6b:a0:35:fc:de:2f: 76:c8:eb:49:59:cb:38:12:8f:f6:c1:ea:b1:76:3b: 4b:3e:1d:22:c0:7e:cc:83:64:3c:fb:4d:e0:c6:3f: b5:27:dd:75:27:3d:1d:9c:cf:77:e8:34:b7:79:ef: 70:b5:c9:2a:76:8a:63:7d:66:6b:b4:23:a5:3d:9d: 69:36:9c:de:4a:94:5d:12:ea:14:81:43:56:1d:70: a4:d1:eb:6d:b7:b3:33:0a:88:34:7f:5a:7b:70:c7: 15:e9:e1:0f:4f:8a:68:28:e6:f6:32:7a:5f:b2:56: d8:05:b2:e1:c4:22:49:0b:c4:fd:7c:9a:21:67:da: 15:1c:92:05:6c:cb:8b:31:00:11:ea:93:dc:ab:e9: 9a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:82:71:FC:76:13:F1:D8:92:3B:69:9C:F7:DA:35:ED:9A:65:70:F0 X509v3 Authority Key Identifier: keyid:17:DD:38:B4:C5:90:46:6D:EE:F7:78:7C:50:E3:FA:39:B0:47:C6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e0:62:bd:cb:14:ba:7c:76:24:be:f1:cc:74:98:3c:89:68: fd:c7:10:34:83:21:cb:a6:ce:a4:27:e2:ba:b3:d9:c6:ed:00: d9:9e:03:33:dc:cd:4b:df:90:0a:ac:c5:eb:49:0c:58:8f:01: 0d:ea:b0:19:47:83:83:60:8b:ab:37:c9:1b:b1:0e:60:3f:df: 6f:57:32:67:1c:2d:07:d0:65:38:27:c2:fe:8d:a7:f2:8b:eb: cb:6d:d0:00:f9:c0:66:45:15:b0:e9:a9:9b:97:bf:8f:a5:fb: e0:cf:f2:bf:47:52:c0:12:57:0c:1e:34:15:57:56:fe:e9:7b: 82:cf:cd:04:c4:59:5b:40:ff:22:8a:82:6a:24:15:73:cc:c1: ae:91:8f:9b:82:9a:f0:65:6c:95:d0:2a:df:6f:14:ea:8e:ce: 6c:3c:cd:fc:d9:0f:ca:c9:e4:39:31:b9:53:bf:5a:9b:73:78: a9:c4:6a:0c:b4:3a:d0:ea:ac:d0:43:15:8c:64:9f:e7:d5:b4: 06:d7:62:78:96:3b:91:b7:04:3a:63:77:3b:d4:7c:63:de:98: 1c:40:11:fa:85:52:29:39:47:9d:2a:e1:e3:88:96:07:4c:40: bb:cb:15:4b:a8:1f:67:66:b5:45:a1:ba:b2:13:eb:45:67:84: d6:5b:35:de -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUToHCcOF+htaE16f27bJp2qgCynowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdERDM4QjRDNTkwNDY2REVFRjc3ODdDNTBFM0ZBMzlC MDQ3QzZBQzAeFw0yNjEwMTcwODAzMzdaFw0yNjEwMjAxMzA0MzdaMDMxMTAvBgNV BAMTKDQ0ODI3MUZDNzYxM0YxRDg5MjNCNjk5Q0Y3REEzNUVEOUE2NTcwRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGdiMzc8Zab/llpaBK5x40mNzo qeac8OJKcnk5PTomTOMIkMEp0CcXsP72QE9LsAwzRrvIWqk99iIhH17OZ81poOXy 1JBQgiEjeriEuBFVze45GPa5NWzf0Mtm3K4c9l1uNz7PzS3u8uR1luT1lTzH6mug NfzeL3bI60lZyzgSj/bB6rF2O0s+HSLAfsyDZDz7TeDGP7Un3XUnPR2cz3foNLd5 73C1ySp2imN9Zmu0I6U9nWk2nN5KlF0S6hSBQ1YdcKTR6223szMKiDR/WntwxxXp 4Q9Pimgo5vYyel+yVtgFsuHEIkkLxP18miFn2hUckgVsy4sxABHqk9yr6ZqHAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQURIJx/HYT8diSO2mc99o17ZplcPAwHwYDVR0j BBgwFoAUF904tMWQRm3u93h8UOP6ObBHxqwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjI2NjIwNDA1Mjk3OTczMS8wLzE3REQzOEI0QzU5MDQ2NkRFRUY3Nzg3QzUwRTNG QTM5QjA0N0M2QUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTdERDM4QjRDNTkwNDY2REVFRjc3ODdDNTBFM0ZBMzlCMDQ3QzZBQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIyNjYyMDQwNTI5Nzk3MzEvMC8xN0REMzhCNEM1OTA0 NjZERUVGNzc4N0M1MEUzRkEzOUIwNDdDNkFDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfuBivcsUunx2 JL7xzHSYPIlo/ccQNIMhy6bOpCfiurPZxu0A2Z4DM9zNS9+QCqzF60kMWI8BDeqw GUeDg2CLqzfJG7EOYD/fb1cyZxwtB9BlOCfC/o2n8ovry23QAPnAZkUVsOmpm5e/ j6X74M/yv0dSwBJXDB40FVdW/ul7gs/NBMRZW0D/IoqCaiQVc8zBrpGPm4Ka8GVs ldAq328U6o7ObDzN/NkPysnkOTG5U79am3N4qcRqDLQ60Oqs0EMVjGSf59W0Btdi eJY7kbcEOmN3O9R8Y96YHEAR+oVSKTlHnSrh44iWB0xAu8sVS6gfZ2a1RaG6shPr RWeE1ls13g== -----END CERTIFICATE-----Generated at Sun Oct 18 15:40:09 2026 by rpki-client