$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.mft File: 17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.mft (raw, json) Hash identifier: dk3oBpNDDigPqUuj5lFBfFImKqVogXSGqjMGaiSVrvE= Subject key identifier: 4D:54:5C:EF:48:25:35:3C:9A:67:DC:B3:E5:E1:22:AE:12:B4:C2:D0 Authority key identifier: 17:C7:9C:17:39:BA:7F:37:2B:B5:0E:93:2D:B2:EB:D1:1C:E5:AF:F2 Certificate issuer: /CN=17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2 Certificate serial: 72F82419394BB4E55AAB4433862753635D80AB59 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.mft Manifest number: 33 Signing time: Sat 10 Oct 2026 22:55:04 +0000 Manifest this update: Sat 10 Oct 2026 22:50:04 +0000 Manifest next update: Wed 14 Oct 2026 07:57:04 +0000 Files and hashes: 1: 17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.crl (hash: F4ctihFI72hvWSAk7Df0O3tH2HKlc5+t8aHat1AE2CA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.crl rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 Oct 2026 07:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:f8:24:19:39:4b:b4:e5:5a:ab:44:33:86:27:53:63:5d:80:ab:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2 Validity Not Before: Oct 10 22:50:04 2026 GMT Not After : Oct 14 07:57:04 2026 GMT Subject: CN=4D545CEF4825353C9A67DCB3E5E122AE12B4C2D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:12:ae:d1:d9:a5:85:52:2a:69:cd:6c:50:58: db:be:bf:3e:47:46:bc:ba:40:b8:61:93:d3:e0:6a: 85:00:28:69:1d:d8:16:7a:fd:f3:77:d6:24:63:8b: d1:f0:e8:82:15:35:7d:f2:ee:a1:68:c6:4d:e5:a4: 5e:b2:bb:59:d5:ec:3b:f6:d7:d7:7a:b3:a2:61:8c: cb:1f:89:09:b9:20:b6:24:b7:0a:70:25:48:5b:ba: 9e:c9:cc:24:7a:76:53:ef:03:09:81:88:3a:44:89: 9e:36:4e:09:24:af:09:5f:c6:c2:59:ff:67:ed:75: 00:68:bf:a4:57:3b:0e:ae:84:76:16:07:64:58:6a: b0:90:1e:f4:5f:88:d9:75:0d:f6:39:de:6d:54:1e: a4:4c:2f:d3:56:2f:ed:e5:ee:e7:78:f4:e9:b0:2b: c6:3d:68:31:7e:4b:7b:5e:22:e2:ba:ee:50:13:22: 1c:ca:45:06:6b:b2:89:31:5c:c1:a7:c2:49:ba:0b: 0e:9f:f4:cc:c7:75:8e:ff:3e:dd:8c:b1:9d:05:95: 8f:b9:b0:51:78:bf:b2:b4:fc:d8:88:b2:aa:67:88: 38:26:e7:d2:95:4b:a7:21:c1:99:73:10:8b:a6:f3: 3c:91:72:8b:e9:7a:27:92:b8:b5:97:4f:39:48:0d: 94:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:54:5C:EF:48:25:35:3C:9A:67:DC:B3:E5:E1:22:AE:12:B4:C2:D0 X509v3 Authority Key Identifier: keyid:17:C7:9C:17:39:BA:7F:37:2B:B5:0E:93:2D:B2:EB:D1:1C:E5:AF:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:9d:26:b5:48:74:41:16:b7:ca:63:bf:81:20:28:5f:d6:d4: d4:a7:a3:72:c3:60:46:51:6e:3c:9f:69:5f:e3:d3:96:a5:a8: 26:6a:9e:c7:93:21:10:34:e8:4b:d4:33:68:3b:a1:18:a7:d8: a6:be:7b:5f:1b:5c:ea:2d:b5:3c:95:05:eb:7e:55:3a:4c:22: 23:04:82:2b:fc:67:bc:d7:58:2f:25:91:c5:c8:20:f4:58:0c: f4:68:1a:17:e9:0e:0c:e7:99:d2:9c:27:5f:1f:d3:17:85:30: b8:87:05:15:d2:30:06:d3:e4:31:da:16:bb:b6:e8:d5:39:09: 6d:ad:17:ec:71:22:1a:00:58:85:0f:e3:3a:58:68:99:8a:b4: c8:e1:e2:be:3a:e6:26:58:26:6d:f1:b6:39:e8:7e:83:f9:82: 6e:1a:4f:9f:79:4e:10:31:6c:48:87:06:85:79:97:bc:54:b2: bc:3e:50:f2:f7:61:15:8d:bf:52:37:4e:c4:33:3e:7d:ed:fa: da:b2:3a:1c:6c:69:f8:6a:2c:9e:d7:95:c5:4c:2f:9c:ab:9d: 67:b2:0f:bb:0c:f0:98:14:9c:2a:f2:a7:d3:99:7b:fc:b3:f7: 27:b8:90:70:f3:91:3a:a5:43:2b:af:29:24:48:a2:11:6c:47: 77:a0:04:89 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcvgkGTlLtOVaq0QzhidTY12Aq1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdDNzlDMTczOUJBN0YzNzJCQjUwRTkzMkRCMkVCRDEx Q0U1QUZGMjAeFw0yNjEwMTAyMjUwMDRaFw0yNjEwMTQwNzU3MDRaMDMxMTAvBgNV BAMTKDRENTQ1Q0VGNDgyNTM1M0M5QTY3RENCM0U1RTEyMkFFMTJCNEMyRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjEq7R2aWFUippzWxQWNu+vz5H Rry6QLhhk9PgaoUAKGkd2BZ6/fN31iRji9Hw6IIVNX3y7qFoxk3lpF6yu1nV7Dv2 19d6s6JhjMsfiQm5ILYktwpwJUhbup7JzCR6dlPvAwmBiDpEiZ42TgkkrwlfxsJZ /2ftdQBov6RXOw6uhHYWB2RYarCQHvRfiNl1DfY53m1UHqRML9NWL+3l7ud49Omw K8Y9aDF+S3teIuK67lATIhzKRQZrsokxXMGnwkm6Cw6f9MzHdY7/Pt2MsZ0FlY+5 sFF4v7K0/NiIsqpniDgm59KVS6chwZlzEIum8zyRcovpeieSuLWXTzlIDZRXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTVRc70glNTyaZ9yz5eEirhK0wtAwHwYDVR0j BBgwFoAUF8ecFzm6fzcrtQ6TLbLr0Rzlr/IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz NzU4MDgxNDQ1MjY1NDEyNS8xLzE3Qzc5QzE3MzlCQTdGMzcyQkI1MEU5MzJEQjJF QkQxMUNFNUFGRjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTdDNzlDMTczOUJBN0YzNzJCQjUwRTkzMkRCMkVCRDExQ0U1QUZGMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzc1ODA4MTQ0NTI2NTQxMjUvMS8xN0M3OUMxNzM5QkE3 RjM3MkJCNTBFOTMyREIyRUJEMTFDRTVBRkYyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC50mtUh0QRa3 ymO/gSAoX9bU1KejcsNgRlFuPJ9pX+PTlqWoJmqex5MhEDToS9QzaDuhGKfYpr57 Xxtc6i21PJUF635VOkwiIwSCK/xnvNdYLyWRxcgg9FgM9GgaF+kODOeZ0pwnXx/T F4UwuIcFFdIwBtPkMdoWu7bo1TkJba0X7HEiGgBYhQ/jOlhomYq0yOHivjrmJlgm bfG2Oeh+g/mCbhpPn3lOEDFsSIcGhXmXvFSyvD5Q8vdhFY2/UjdOxDM+fe362rI6 HGxp+GosnteVxUwvnKudZ7IPuwzwmBScKvKn05l7/LP3J7iQcPOROqVDK68pJEii EWxHd6AEiQ== -----END CERTIFICATE-----Generated at Mon Oct 12 12:35:30 2026 by rpki-client