$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft File: 917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft (raw, json) Hash identifier: PPOAsYGNYtvkFvro/TSRui0QygRdthRBEbuo2kvuaoY= Subject key identifier: 8C:B4:81:A1:1D:27:D5:9E:54:95:C4:A3:68:02:75:E1:C5:8D:D0:FA Authority key identifier: 91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD Certificate issuer: /CN=917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD Certificate serial: 137DA92721D89408DE7127489F0079A302F06F45 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft Manifest number: 33 Signing time: Sat 13 Jun 2026 19:17:08 +0000 Manifest this update: Sat 13 Jun 2026 19:12:08 +0000 Manifest next update: Sun 14 Jun 2026 22:25:08 +0000 Files and hashes: 1: 917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl (hash: Z2GrfkCrsBKnKqvxjkb0qbEJ20ZwokccQfxzM5PcuaM=) 2: 3130332e3138392e39332e302f32342d3234203d3e2034383337.roa (hash: gkpsLZeTrjGyQq6N61S2DVSjIch7+Hcv8M6Eql6Q6/k=) 3: 3130332e3138392e39322e302f32342d3234203d3e2034383337.roa (hash: lmstuS/H4fM0u7jxkE0+E7iQGvY13XAH5zME0iKapEY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:7d:a9:27:21:d8:94:08:de:71:27:48:9f:00:79:a3:02:f0:6f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD Validity Not Before: Jun 13 19:12:08 2026 GMT Not After : Jun 14 22:25:08 2026 GMT Subject: CN=8CB481A11D27D59E5495C4A3680275E1C58DD0FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d0:61:1b:31:d1:6c:2e:0f:e2:ca:ee:c1:f6: 31:f1:88:e9:2e:f1:4a:35:72:15:36:3f:f7:23:6a: 98:55:b9:6f:e8:61:7d:92:d7:f5:8b:49:03:5f:3d: 77:28:1f:ab:82:95:80:c4:85:8b:ee:a3:40:44:34: a2:76:9d:0f:11:91:80:36:39:3b:ac:67:a2:a4:96: 8d:95:fb:94:fc:4a:91:25:a0:eb:98:5e:8c:89:7a: ed:92:e8:65:cf:34:7a:04:ee:bc:46:cc:b5:8f:4e: 9c:71:8f:52:96:16:81:18:90:44:8c:46:dd:10:ae: f7:ee:44:1c:04:c6:1c:24:bd:2c:c1:64:4d:19:78: 63:08:e0:7d:55:e5:e8:6e:fc:1e:b0:4b:06:e6:93: 6f:50:c9:57:04:b5:c5:a9:ae:20:cc:2f:f7:c5:e7: 80:49:83:38:69:41:17:6c:e1:05:7e:dc:25:99:8a: 88:15:eb:c3:98:c5:9b:83:f4:d1:14:a8:de:55:ca: bb:49:87:c0:ee:b3:a7:35:e5:63:50:84:df:46:2c: 99:67:a7:b8:96:54:63:c9:18:a2:f1:8a:7f:a6:23: 22:29:eb:56:a2:c5:e6:6c:c6:66:81:8c:26:5f:f9: 52:5d:bc:25:7e:02:c6:d7:7b:2a:00:b4:92:12:94: 9b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B4:81:A1:1D:27:D5:9E:54:95:C4:A3:68:02:75:E1:C5:8D:D0:FA X509v3 Authority Key Identifier: keyid:91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:97:07:0d:37:70:2a:c0:54:a7:04:a6:aa:b5:32:58:f0:e7: 77:99:ca:0f:d1:69:4b:b5:49:e2:69:0d:c0:ca:f8:5b:fc:93: d2:60:48:3f:0c:ef:f2:da:b7:c2:09:64:d6:b4:9f:60:89:0c: 8e:00:9c:c4:53:06:11:56:6e:87:98:d8:81:71:6a:73:94:b6: ad:d5:20:ab:10:03:a4:0a:2f:56:e6:ec:6f:e5:c7:e7:94:93: 29:94:6b:fb:8b:69:ff:5e:20:8f:c0:42:00:1c:4c:6e:86:08: b7:f0:ca:79:b5:b9:3f:28:cf:ac:7a:88:51:24:77:64:b0:a7: 79:08:5a:bc:bb:57:36:40:a8:09:db:b2:f1:c7:9b:9f:2b:f4: 53:6e:3d:f2:a4:98:d3:15:fa:b1:0a:4d:f7:fa:f9:c0:b0:66: d3:da:1c:bb:53:ed:2d:13:76:7b:58:7e:6c:5b:cb:95:5b:19: bb:8a:79:8b:98:dd:91:f3:50:9a:51:4f:3b:6a:2e:16:83:5e: ea:86:22:d8:08:2c:ce:f1:da:74:f9:6d:50:41:1c:c1:9e:ae: 0b:b9:ed:93:f0:b8:72:4b:ce:30:e2:82:c1:c2:c5:84:68:14: a3:ec:d6:b7:95:2d:b5:4f:a7:6e:cc:4f:8e:f3:08:62:57:de: ae:3a:c1:9c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE32pJyHYlAjecSdInwB5owLwb0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3REYxQkFEOEM1Nzk3NDQyNkFDREM2OTREMzdGQjVG NEIyQ0RBRDAeFw0yNjA2MTMxOTEyMDhaFw0yNjA2MTQyMjI1MDhaMDMxMTAvBgNV BAMTKDhDQjQ4MUExMUQyN0Q1OUU1NDk1QzRBMzY4MDI3NUUxQzU4REQwRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr0GEbMdFsLg/iyu7B9jHxiOku 8Uo1chU2P/cjaphVuW/oYX2S1/WLSQNfPXcoH6uClYDEhYvuo0BENKJ2nQ8RkYA2 OTusZ6Kklo2V+5T8SpEloOuYXoyJeu2S6GXPNHoE7rxGzLWPTpxxj1KWFoEYkESM Rt0QrvfuRBwExhwkvSzBZE0ZeGMI4H1V5ehu/B6wSwbmk29QyVcEtcWpriDML/fF 54BJgzhpQRds4QV+3CWZiogV68OYxZuD9NEUqN5VyrtJh8Dus6c15WNQhN9GLJln p7iWVGPJGKLxin+mIyIp61aixeZsxmaBjCZf+VJdvCV+AsbXeyoAtJISlJstAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjLSBoR0n1Z5UlcSjaAJ14cWN0PowHwYDVR0j BBgwFoAUkX3xutjFeXRCas3GlNN/tfSyza0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2Njk2NjI4My8wLzkxN0RGMUJBRDhDNTc5NzQ0MjZBQ0RDNjk0RDM3 RkI1RjRCMkNEQUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTE3REYxQkFEOEM1Nzk3NDQyNkFDREM2OTREMzdGQjVGNEIyQ0RBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5NjYyODMvMC85MTdERjFCQUQ4QzU3 OTc0NDI2QUNEQzY5NEQzN0ZCNUY0QjJDREFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5cHDTdwKsBU pwSmqrUyWPDnd5nKD9FpS7VJ4mkNwMr4W/yT0mBIPwzv8tq3wglk1rSfYIkMjgCc xFMGEVZuh5jYgXFqc5S2rdUgqxADpAovVubsb+XH55STKZRr+4tp/14gj8BCABxM boYIt/DKebW5PyjPrHqIUSR3ZLCneQhavLtXNkCoCduy8cebnyv0U2498qSY0xX6 sQpN9/r5wLBm09ocu1PtLRN2e1h+bFvLlVsZu4p5i5jdkfNQmlFPO2ouFoNe6oYi 2AgszvHadPltUEEcwZ6uC7ntk/C4ckvOMOKCwcLFhGgUo+zWt5UttU+nbsxPjvMI YlferjrBnA== -----END CERTIFICATE-----Generated at Sun Jun 14 07:06:08 2026 by rpki-client