$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft File: 917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft (raw, json) Hash identifier: EWyVoHH9GELjmFag3wK2+ieUGHC4UddQegs2U+V8wHA= Subject key identifier: 24:7D:5C:8E:39:1F:64:12:2B:F4:71:F3:52:BF:AF:5E:92:20:FA:66 Authority key identifier: 91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD Certificate issuer: /CN=917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD Certificate serial: 340CE68B3227DB3487D04C41CE693235C2DB029D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft Manifest number: 70 Signing time: Wed 29 Jul 2026 13:39:30 +0000 Manifest this update: Wed 29 Jul 2026 13:34:30 +0000 Manifest next update: Thu 30 Jul 2026 15:18:30 +0000 Files and hashes: 1: 3130332e3138392e39322e302f32342d3234203d3e2034383337.roa (hash: lmstuS/H4fM0u7jxkE0+E7iQGvY13XAH5zME0iKapEY=) 2: 917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl (hash: Vp+0Z1OEkVU0HQWHsJDDw5R0V5q430PZ1XagJQBTIos=) 3: 3130332e3138392e39332e302f32342d3234203d3e2034383337.roa (hash: gkpsLZeTrjGyQq6N61S2DVSjIch7+Hcv8M6Eql6Q6/k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 15:18:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:0c:e6:8b:32:27:db:34:87:d0:4c:41:ce:69:32:35:c2:db:02:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD Validity Not Before: Jul 29 13:34:30 2026 GMT Not After : Jul 30 15:18:30 2026 GMT Subject: CN=247D5C8E391F64122BF471F352BFAF5E9220FA66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fe:c9:47:d1:2c:8b:f2:2b:3b:b3:0b:2f:b6: e0:2f:9c:4e:ae:70:89:98:8a:e5:de:8b:f6:4c:e5: 8c:ea:e8:13:d6:d8:59:38:ff:b3:d5:ff:54:4e:f6: b6:e7:18:c4:1d:15:d8:cc:62:0a:a9:6c:ac:1e:79: 15:53:d1:93:02:4e:ae:a2:d2:04:c8:ff:63:e2:df: 6d:47:cb:c9:6a:b4:a5:ce:d3:b1:41:b5:52:07:d8: f7:0c:9e:c4:2f:e9:44:07:1d:33:9d:13:62:30:95: ea:df:d2:55:44:9b:01:2e:79:bc:63:25:0e:91:64: 4a:34:49:63:f1:2b:91:73:06:be:77:90:de:b8:9e: d3:3f:ad:46:3c:91:cd:e2:74:b6:c2:26:25:1f:d1: 82:d0:63:b7:a9:47:95:9e:c0:63:fb:45:b0:a0:13: 08:eb:5e:34:fa:b4:74:c3:20:c5:27:c6:be:2b:cd: 08:b0:f7:b6:9b:d2:2b:02:8b:1e:fb:ff:dc:a2:d1: cb:34:3a:65:ce:ae:31:f0:b4:e3:50:34:b8:16:22: 45:5c:74:38:c9:b3:2b:a6:5b:e3:00:6d:85:79:11: 39:31:6c:cc:22:df:64:54:a8:8a:bf:0a:02:c6:3e: 41:a1:b2:69:a9:a1:75:5d:67:02:28:6d:ee:d9:37: 6c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7D:5C:8E:39:1F:64:12:2B:F4:71:F3:52:BF:AF:5E:92:20:FA:66 X509v3 Authority Key Identifier: keyid:91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:02:43:33:2f:22:a9:3e:bf:bd:ad:9a:8e:6a:67:e0:be:58: 5d:22:8d:b2:e1:f7:21:37:94:53:ce:c6:22:cd:69:28:19:ce: 77:0f:4b:1c:58:fe:59:c7:50:f1:53:d3:c0:8b:78:5f:0d:47: 64:29:84:ef:8f:c6:87:00:75:9d:81:14:67:84:7b:69:0c:65: 4f:00:df:91:70:b6:a3:79:2b:4c:7d:f1:9a:33:46:c8:87:13: c1:8d:67:55:14:40:44:87:72:1b:3d:ff:e0:bc:9a:8e:dd:3c: 5a:75:c6:fd:40:7f:7b:b9:fb:fc:67:a8:5d:f4:c7:63:3d:47: 6c:b6:a0:b1:f1:ab:dd:cd:25:11:bb:c0:d6:08:4a:b3:a1:18: e5:b4:1e:ac:64:14:63:5e:f1:6d:14:b5:12:4e:1b:1a:d6:27: b0:5b:83:96:27:58:81:dc:e4:d6:78:2d:6c:6e:96:24:a4:65: 2b:05:eb:ad:bf:9a:f9:38:61:9f:cd:05:f5:4e:f3:a8:12:df: 3f:24:2c:ff:b1:93:db:13:94:ea:69:cd:3a:87:1f:6e:03:e5: d6:ac:f1:3d:25:d9:12:01:de:5d:f3:a1:8e:72:d2:77:26:bd: e2:48:b5:99:73:5e:d1:e1:b0:f8:73:7b:c2:2f:77:8b:89:39: 60:12:a4:81 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNAzmizIn2zSH0ExBzmkyNcLbAp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3REYxQkFEOEM1Nzk3NDQyNkFDREM2OTREMzdGQjVG NEIyQ0RBRDAeFw0yNjA3MjkxMzM0MzBaFw0yNjA3MzAxNTE4MzBaMDMxMTAvBgNV BAMTKDI0N0Q1QzhFMzkxRjY0MTIyQkY0NzFGMzUyQkZBRjVFOTIyMEZBNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ/slH0SyL8is7swsvtuAvnE6u cImYiuXei/ZM5Yzq6BPW2Fk4/7PV/1RO9rbnGMQdFdjMYgqpbKweeRVT0ZMCTq6i 0gTI/2Pi321Hy8lqtKXO07FBtVIH2PcMnsQv6UQHHTOdE2Iwlerf0lVEmwEuebxj JQ6RZEo0SWPxK5FzBr53kN64ntM/rUY8kc3idLbCJiUf0YLQY7epR5WewGP7RbCg EwjrXjT6tHTDIMUnxr4rzQiw97ab0isCix77/9yi0cs0OmXOrjHwtONQNLgWIkVc dDjJsyumW+MAbYV5ETkxbMwi32RUqIq/CgLGPkGhsmmpoXVdZwIobe7ZN2w7AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJH1cjjkfZBIr9HHzUr+vXpIg+mYwHwYDVR0j BBgwFoAUkX3xutjFeXRCas3GlNN/tfSyza0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2Njk2NjI4My8wLzkxN0RGMUJBRDhDNTc5NzQ0MjZBQ0RDNjk0RDM3 RkI1RjRCMkNEQUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTE3REYxQkFEOEM1Nzk3NDQyNkFDREM2OTREMzdGQjVGNEIyQ0RBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5NjYyODMvMC85MTdERjFCQUQ4QzU3 OTc0NDI2QUNEQzY5NEQzN0ZCNUY0QjJDREFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawJDMy8iqT6/ va2ajmpn4L5YXSKNsuH3ITeUU87GIs1pKBnOdw9LHFj+WcdQ8VPTwIt4Xw1HZCmE 74/GhwB1nYEUZ4R7aQxlTwDfkXC2o3krTH3xmjNGyIcTwY1nVRRARIdyGz3/4Lya jt08WnXG/UB/e7n7/GeoXfTHYz1HbLagsfGr3c0lEbvA1ghKs6EY5bQerGQUY17x bRS1Ek4bGtYnsFuDlidYgdzk1ngtbG6WJKRlKwXrrb+a+Thhn80F9U7zqBLfPyQs /7GT2xOU6mnNOocfbgPl1qzxPSXZEgHeXfOhjnLSdya94ki1mXNe0eGw+HN7wi93 i4k5YBKkgQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:00:48 2026 by rpki-client