$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.mft File: 2C17316B7F43D4949633C8E9473373FAB42B7312.mft (raw, json) Hash identifier: 9z3ofiX1bBebHN03wcoGFwGfHkJpdaYWwonu2PUWvG8= Subject key identifier: 2A:BB:91:34:D6:B2:33:F1:5A:45:A4:06:DD:A6:BA:8C:33:CF:CF:48 Authority key identifier: 2C:17:31:6B:7F:43:D4:94:96:33:C8:E9:47:33:73:FA:B4:2B:73:12 Certificate issuer: /CN=A91B10180000/serialNumber=2C17316B7F43D4949633C8E9473373FAB42B7312 Certificate serial: 2D3159B3E570758C9D06FD4DB748637ACFBC0B1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LBcxa39D1JSWM8jpRzNz-rQrcxI.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.mft Manifest number: 12 Signing time: Thu 24 Sep 2026 22:18:07 +0000 Manifest this update: Thu 24 Sep 2026 22:13:07 +0000 Manifest next update: Mon 28 Sep 2026 05:06:07 +0000 Files and hashes: 1: 2C17316B7F43D4949633C8E9473373FAB42B7312.crl (hash: ke1pX1w+FPe6CsvIq7npSRZCrkYvwWnifLpqIQ0nwlM=) 2: 3133342e34392e3234302e302f32322d3234203d3e20313331353632.roa (hash: 43geaqjpTOxkcmIT2KJclGaVNFKcxR+7BHayTCyYSPk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.crl rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LBcxa39D1JSWM8jpRzNz-rQrcxI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:31:59:b3:e5:70:75:8c:9d:06:fd:4d:b7:48:63:7a:cf:bc:0b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B10180000, serialNumber=2C17316B7F43D4949633C8E9473373FAB42B7312 Validity Not Before: Sep 24 22:13:07 2026 GMT Not After : Sep 28 05:06:07 2026 GMT Subject: CN=2ABB9134D6B233F15A45A406DDA6BA8C33CFCF48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:d2:8c:93:d9:7f:36:0c:b6:8c:f5:77:84: 1f:00:8e:25:46:41:05:6c:c2:12:d6:00:61:08:a6: 54:14:eb:bd:98:3c:22:6e:d7:dc:5c:43:5e:22:6a: a7:bc:39:57:27:55:e4:4f:cb:6c:1d:58:53:a9:66: 6d:83:77:11:f1:8c:77:79:d0:a6:be:e0:17:c2:a4: 37:41:ca:b1:15:a7:a6:18:35:79:05:43:89:7f:5d: 34:bd:62:c5:dd:a7:94:48:9c:7c:c0:9f:ba:d1:71: d2:6b:a5:88:09:bc:7d:53:46:65:01:d9:e5:4f:9e: 28:fb:a0:c0:9a:05:08:1b:d5:c9:03:71:b7:aa:7f: ce:8f:94:a3:c4:02:30:72:82:25:ff:bd:96:8a:1e: 31:0b:49:49:a0:a8:3f:59:32:61:ef:05:a1:83:e0: 60:37:1b:93:de:b6:dc:78:eb:be:13:07:c4:22:e5: 68:12:f3:94:a9:73:55:db:76:5b:4f:e5:dc:d6:47: 87:1b:1f:cf:f5:b1:84:34:19:4c:6f:74:1e:17:b0: f1:30:8d:c5:52:28:75:2c:a7:7f:a9:41:a2:22:1e: 7d:10:d7:f3:56:79:89:5f:a3:48:97:e5:f6:94:4a: f5:0e:e4:0e:f8:55:d0:92:e8:04:05:16:2e:49:17: 2c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BB:91:34:D6:B2:33:F1:5A:45:A4:06:DD:A6:BA:8C:33:CF:CF:48 X509v3 Authority Key Identifier: keyid:2C:17:31:6B:7F:43:D4:94:96:33:C8:E9:47:33:73:FA:B4:2B:73:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LBcxa39D1JSWM8jpRzNz-rQrcxI.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:5c:af:3b:3c:2b:d4:1c:b2:4a:41:2a:36:df:56:96:e0:c0: 6a:ab:b6:a2:bc:d9:e3:d8:06:49:bf:14:14:b5:63:66:22:81: 38:68:64:85:af:42:bd:a5:0e:9f:b0:25:cb:2b:24:08:42:94: be:fe:67:15:98:ba:96:9a:0c:82:e9:d6:98:0d:f7:35:ca:60: d1:44:36:ac:c1:ce:69:6e:f3:94:f7:5a:94:58:d1:d7:d1:50: b8:a2:9e:46:18:dc:e9:f6:97:de:95:e9:90:be:f3:46:a9:0e: 29:6f:d8:7e:1e:d6:6f:d4:80:39:0a:78:dc:fe:0d:0d:3c:75: 3f:6b:65:49:f4:d7:7a:4c:ed:50:e5:7e:8c:d5:d9:d4:c4:72: be:41:a4:bd:c0:49:99:ae:8f:ce:d5:9e:37:a2:31:dd:da:d6: 1b:94:5f:a7:b4:cf:39:22:ff:7f:73:76:84:76:c1:81:1d:b6: 84:16:f7:4e:cf:a6:8f:50:f5:04:c4:fd:7b:c3:a8:15:2e:0a: 1b:d1:6f:4f:f3:c0:d4:c9:41:52:0a:ec:ba:4d:89:a6:84:fe: d1:db:11:69:86:b9:57:69:ea:66:97:3f:c8:6b:c5:5c:a0:96: 70:f5:9b:9b:51:97:fa:97:26:ed:29:70:2f:d1:44:76:cb:d5: 51:1b:1f:b3 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIULTFZs+VwdYydBv1Nt0hjes+8Cx0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQjEwMTgwMDAwMTEwLwYDVQQFEygyQzE3MzE2QjdG NDNENDk0OTYzM0M4RTk0NzMzNzNGQUI0MkI3MzEyMB4XDTI2MDkyNDIyMTMwN1oX DTI2MDkyODA1MDYwN1owMzExMC8GA1UEAxMoMkFCQjkxMzRENkIyMzNGMTVBNDVB NDA2RERBNkJBOEMzM0NGQ0Y0ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALt00oyT2X82DLaM9XeEHwCOJUZBBWzCEtYAYQimVBTrvZg8Im7X3FxDXiJq p7w5VydV5E/LbB1YU6lmbYN3EfGMd3nQpr7gF8KkN0HKsRWnphg1eQVDiX9dNL1i xd2nlEicfMCfutFx0muliAm8fVNGZQHZ5U+eKPugwJoFCBvVyQNxt6p/zo+Uo8QC MHKCJf+9looeMQtJSaCoP1kyYe8FoYPgYDcbk9623HjrvhMHxCLlaBLzlKlzVdt2 W0/l3NZHhxsfz/WxhDQZTG90Hhew8TCNxVIodSynf6lBoiIefRDX81Z5iV+jSJfl 9pRK9Q7kDvhV0JLoBAUWLkkXLLECAwEAAaOCAh0wggIZMB0GA1UdDgQWBBQqu5E0 1rIz8VpFpAbdprqMM8/PSDAfBgNVHSMEGDAWgBQsFzFrf0PUlJYzyOlHM3P6tCtz EjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyMzYwMzEyMTIxNjU1MzEzLzEvMkMxNzMx NkI3RjQzRDQ5NDk2MzNDOEU5NDczMzczRkFCNDJCNzMxMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTEJjeGEzOUQx SlNXTThqcFJ6TnotclFyY3hJLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMjM2MDMxMjEy MTY1NTMxMy8xLzJDMTczMTZCN0Y0M0Q0OTQ5NjMzQzhFOTQ3MzM3M0ZBQjQyQjcz MTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQCUXK87PCvUHLJKQSo231aW4MBqq7aivNnj2AZJvxQUtWNm IoE4aGSFr0K9pQ6fsCXLKyQIQpS+/mcVmLqWmgyC6daYDfc1ymDRRDaswc5pbvOU 91qUWNHX0VC4op5GGNzp9pfelemQvvNGqQ4pb9h+HtZv1IA5Cnjc/g0NPHU/a2VJ 9Nd6TO1Q5X6M1dnUxHK+QaS9wEmZro/O1Z43ojHd2tYblF+ntM85Iv9/c3aEdsGB HbaEFvdOz6aPUPUExP17w6gVLgob0W9P88DUyUFSCuy6TYmmhP7R2xFphrlXaepm lz/Ia8VcoJZw9ZubUZf6lybtKXAv0UR2y9VRGx+z -----END CERTIFICATE-----Generated at Sat Sep 26 15:29:23 2026 by rpki-client