$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft File: 917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft (raw, json) Hash identifier: kwAYd18so1GYdriEs6+kbOQZ5zgn/Ll5uI0pG/DAmOE= Subject key identifier: 48:41:AD:27:10:31:B6:12:9B:81:68:9B:39:21:79:54:3E:AD:AF:CE Authority key identifier: 91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD Certificate issuer: /CN=917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD Certificate serial: 4E8C6001F17455C84952B62E7DE37DF9447218CD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft Manifest number: AB Signing time: Sat 10 Oct 2026 01:34:02 +0000 Manifest this update: Sat 10 Oct 2026 01:29:02 +0000 Manifest next update: Tue 13 Oct 2026 12:37:02 +0000 Files and hashes: 1: 917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl (hash: ednevi8SNfu+BbGJVi1wjh0CV/AE1V7dClXamgGrdFE=) 2: 3130332e3138392e39322e302f32342d3234203d3e2034383337.roa (hash: lmstuS/H4fM0u7jxkE0+E7iQGvY13XAH5zME0iKapEY=) 3: 3130332e3138392e39332e302f32342d3234203d3e2034383337.roa (hash: gkpsLZeTrjGyQq6N61S2DVSjIch7+Hcv8M6Eql6Q6/k=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 09:52:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8c:60:01:f1:74:55:c8:49:52:b6:2e:7d:e3:7d:f9:44:72:18:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD Validity Not Before: Oct 10 01:29:02 2026 GMT Not After : Oct 13 12:37:02 2026 GMT Subject: CN=4841AD271031B6129B81689B392179543EADAFCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:43:db:af:1d:72:32:72:c8:99:9e:66:d4:69: 99:16:e4:f5:b2:7d:af:d9:c9:a0:4b:96:0f:16:b9: dc:5b:37:13:aa:3b:8c:2c:92:77:93:29:53:b3:8b: 3e:47:ad:93:17:a7:14:ba:93:69:38:24:3d:74:c6: b9:f1:f3:38:a3:58:d7:db:fc:03:a0:15:82:e5:c6: 99:20:61:ff:b2:8e:28:42:87:8d:57:35:c5:aa:e4: 88:b3:61:76:08:fe:f1:f6:0f:e0:5f:0f:74:e1:1d: bd:4f:29:c1:e7:f5:9c:f6:cb:95:57:5e:f9:09:fe: 47:36:d7:b5:08:ee:81:80:95:1f:f6:ce:2a:6a:3c: c9:0c:85:94:05:fe:f3:81:8d:2e:98:79:3f:3a:59: fd:87:8b:53:bb:cb:8f:7b:e9:18:7d:2c:85:03:ef: 20:eb:85:28:ba:27:35:e7:cc:c2:f6:00:60:6b:49: 7f:93:ae:cd:73:12:82:ff:8c:0d:92:43:ee:5b:5e: fc:2c:99:e2:75:ca:3c:be:1d:7b:bd:48:6e:d9:1a: b8:17:fa:58:fb:ef:4d:37:8a:9d:63:24:e8:c8:2a: 56:70:e8:4d:d6:c6:63:bc:81:ae:0c:5d:b0:ad:3f: 80:23:8f:65:35:3d:b0:ba:39:82:30:e4:6c:eb:e8: a5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:41:AD:27:10:31:B6:12:9B:81:68:9B:39:21:79:54:3E:AD:AF:CE X509v3 Authority Key Identifier: keyid:91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e4:7d:5d:c3:60:89:1e:8a:d6:62:1a:5b:2c:f6:ba:2d:3c: 80:bc:0a:54:a7:6c:e8:c5:86:5d:e2:4e:6a:a3:2c:eb:bc:7d: 9f:52:49:a0:34:fe:00:27:c7:05:b1:9a:41:d1:50:9b:1e:42: 31:e2:eb:22:32:ad:de:99:29:7f:80:35:24:f5:9d:53:dc:85: fb:79:c9:13:28:ce:20:a7:c4:bf:69:4f:b6:f9:04:25:38:45: a5:e6:06:fe:c7:4c:6a:fc:9e:2d:a7:18:8a:9b:9c:e0:b1:19: ad:4e:5b:23:62:b7:0f:25:54:67:51:69:86:4f:f1:85:53:2a: ef:01:11:19:66:9b:12:73:4b:50:fa:4f:75:d5:6d:03:6b:78: 3c:92:ab:34:d0:1f:84:e6:5e:70:36:3b:7c:a7:2e:ef:7a:d0: b9:fc:0c:e3:8a:43:24:3e:c2:3b:a9:4b:40:13:9c:d5:84:40: c9:73:ab:a7:3a:f0:8a:f6:c8:9d:1b:47:c6:30:38:41:74:b9: ee:cb:95:b9:46:e8:13:b7:d5:17:5e:35:05:a7:14:a7:1c:58: dc:fa:6a:ca:73:98:73:31:a3:b4:40:af:7b:ef:2b:b5:97:bc: b4:09:1d:78:f2:be:01:8a:8e:06:5b:9a:4f:7b:db:79:d3:16: a1:77:aa:f4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUToxgAfF0VchJUrYufeN9+URyGM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3REYxQkFEOEM1Nzk3NDQyNkFDREM2OTREMzdGQjVG NEIyQ0RBRDAeFw0yNjEwMTAwMTI5MDJaFw0yNjEwMTMxMjM3MDJaMDMxMTAvBgNV BAMTKDQ4NDFBRDI3MTAzMUI2MTI5QjgxNjg5QjM5MjE3OTU0M0VBREFGQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQ9uvHXIycsiZnmbUaZkW5PWy fa/ZyaBLlg8WudxbNxOqO4wskneTKVOziz5HrZMXpxS6k2k4JD10xrnx8zijWNfb /AOgFYLlxpkgYf+yjihCh41XNcWq5IizYXYI/vH2D+BfD3ThHb1PKcHn9Zz2y5VX XvkJ/kc217UI7oGAlR/2zipqPMkMhZQF/vOBjS6YeT86Wf2Hi1O7y4976Rh9LIUD 7yDrhSi6JzXnzML2AGBrSX+Trs1zEoL/jA2SQ+5bXvwsmeJ1yjy+HXu9SG7ZGrgX +lj77003ip1jJOjIKlZw6E3WxmO8ga4MXbCtP4Ajj2U1PbC6OYIw5Gzr6KV9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSEGtJxAxthKbgWibOSF5VD6tr84wHwYDVR0j BBgwFoAUkX3xutjFeXRCas3GlNN/tfSyza0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2Njk2NjI4My8wLzkxN0RGMUJBRDhDNTc5NzQ0MjZBQ0RDNjk0RDM3 RkI1RjRCMkNEQUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTE3REYxQkFEOEM1Nzk3NDQyNkFDREM2OTREMzdGQjVGNEIyQ0RBRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDUzMDQ3NTAxNjY5NjYyODMvMC85MTdERjFCQUQ4QzU3 OTc0NDI2QUNEQzY5NEQzN0ZCNUY0QjJDREFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnuR9XcNgiR6K 1mIaWyz2ui08gLwKVKds6MWGXeJOaqMs67x9n1JJoDT+ACfHBbGaQdFQmx5CMeLr IjKt3pkpf4A1JPWdU9yF+3nJEyjOIKfEv2lPtvkEJThFpeYG/sdMavyeLacYipuc 4LEZrU5bI2K3DyVUZ1Fphk/xhVMq7wERGWabEnNLUPpPddVtA2t4PJKrNNAfhOZe cDY7fKcu73rQufwM44pDJD7CO6lLQBOc1YRAyXOrpzrwivbInRtHxjA4QXS57suV uUboE7fVF141BacUpxxY3PpqynOYczGjtECve+8rtZe8tAkdePK+AYqOBluaT3vb edMWoXeq9A== -----END CERTIFICATE-----Generated at Sun Oct 11 11:19:36 2026 by rpki-client