$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft File: 17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft (raw, json) Hash identifier: A/CRcxsDJnJIdxzSAWZSVFq2CyieCkWFiITd5Ds6dsc= Subject key identifier: 85:6B:EB:A3:3E:1B:EA:E2:71:FB:46:70:B9:0E:F5:91:C9:78:91:23 Authority key identifier: 17:DD:38:B4:C5:90:46:6D:EE:F7:78:7C:50:E3:FA:39:B0:47:C6:AC Certificate issuer: /CN=17DD38B4C590466DEEF7787C50E3FA39B047C6AC Certificate serial: 6A8793A3F592D37B7F461B750D7E03738FCA9365 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft Manifest number: 17 Signing time: Sat 13 Jun 2026 21:57:16 +0000 Manifest this update: Sat 13 Jun 2026 21:52:16 +0000 Manifest next update: Sun 14 Jun 2026 23:19:16 +0000 Files and hashes: 1: 17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl (hash: MZHRpi74di0NbQQJ4gE11Ib3T3lfWzi+yQ62NKQita0=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:87:93:a3:f5:92:d3:7b:7f:46:1b:75:0d:7e:03:73:8f:ca:93:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17DD38B4C590466DEEF7787C50E3FA39B047C6AC Validity Not Before: Jun 13 21:52:16 2026 GMT Not After : Jun 14 23:19:16 2026 GMT Subject: CN=856BEBA33E1BEAE271FB4670B90EF591C9789123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:04:4f:76:54:52:e3:3d:ca:54:5d:bb:ed: e4:7a:bd:15:fd:17:b0:af:78:93:6f:c9:9e:88:b1: cc:a7:a4:cc:d0:7a:80:ce:9b:d6:00:50:89:7a:c3: 3e:9b:0e:fb:93:b6:b4:7d:32:b1:6b:18:96:31:ad: 46:e5:5f:d7:7c:e1:fe:64:55:b8:6e:7c:95:aa:7b: 7f:0f:14:4e:0a:08:ee:99:7b:9b:48:f2:ca:67:0b: 74:e6:0a:ec:0f:38:a3:3a:5f:1d:51:59:d3:ae:07: c3:41:50:da:7f:cd:c1:47:62:d5:07:2a:29:82:fb: b6:07:62:b1:12:e5:7b:35:d8:6b:49:fc:b4:d0:a5: ad:bb:8a:74:c0:2b:09:db:94:77:9b:fd:39:99:a7: 18:8b:2a:e3:9c:63:4c:00:9b:6a:ec:cb:88:c6:82: 98:74:ff:0d:8f:19:5a:e2:c3:db:a2:d0:88:13:c4: e1:71:45:53:4d:97:dd:f8:82:b4:dd:2f:67:45:06: ae:04:cf:e7:55:de:24:b7:2b:c7:60:a3:4f:dc:47: 59:9b:d6:64:a0:57:57:db:50:c0:23:e9:23:c2:e3: f1:2d:7b:69:42:e6:6a:19:60:12:20:f6:6e:70:d7: 22:44:75:c8:4f:66:49:3e:99:86:83:73:d9:b3:ff: f3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6B:EB:A3:3E:1B:EA:E2:71:FB:46:70:B9:0E:F5:91:C9:78:91:23 X509v3 Authority Key Identifier: keyid:17:DD:38:B4:C5:90:46:6D:EE:F7:78:7C:50:E3:FA:39:B0:47:C6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:8d:c0:ad:32:c0:4d:00:9a:ec:ce:26:63:c1:5c:ac:ea:e6: a6:84:e6:28:8e:e7:f0:d2:13:a7:f1:a2:e0:99:a3:19:a3:da: d0:19:a7:9c:6f:9f:27:8f:88:1b:90:33:2e:98:79:c9:d8:98: 20:3c:37:a0:63:3c:7f:4d:e6:cd:1f:7b:10:51:96:c4:97:e0: 9f:72:64:e2:9d:fb:aa:3d:08:1a:68:c2:c6:47:d2:d3:20:4e: 56:18:b1:5e:07:1e:f9:2a:43:15:9f:e8:8e:37:59:1f:bf:74: b3:e7:52:6b:98:b5:89:9d:d0:a0:99:a2:e6:91:a0:ea:0c:bb: 9b:33:8c:20:6a:fd:6c:e7:f3:df:c6:ec:ba:6d:bf:72:1e:ba: 7e:33:6d:02:c2:68:c6:62:e1:9d:d9:b5:26:fd:2c:72:74:a4: 97:b6:dc:75:70:b7:ed:60:6d:f6:0b:08:88:76:1c:08:34:cb: f3:a3:fe:fc:ff:c0:e3:e4:7e:26:1c:da:b0:d1:3f:be:89:81: 17:f5:97:e7:7e:16:a8:80:19:0c:c8:cc:a3:0a:2a:8f:1f:1f: 62:82:6d:98:05:df:20:6b:d7:c3:4e:23:53:31:2e:ea:56:07: d0:61:cb:f5:80:be:4f:5e:32:54:85:b7:4b:c8:e6:ed:e4:ab: 4d:39:01:a6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUaoeTo/WS03t/Rht1DX4Dc4/Kk2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdERDM4QjRDNTkwNDY2REVFRjc3ODdDNTBFM0ZBMzlC MDQ3QzZBQzAeFw0yNjA2MTMyMTUyMTZaFw0yNjA2MTQyMzE5MTZaMDMxMTAvBgNV BAMTKDg1NkJFQkEzM0UxQkVBRTI3MUZCNDY3MEI5MEVGNTkxQzk3ODkxMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpPwRPdlRS4z3KVF277eR6vRX9 F7CveJNvyZ6IscynpMzQeoDOm9YAUIl6wz6bDvuTtrR9MrFrGJYxrUblX9d84f5k VbhufJWqe38PFE4KCO6Ze5tI8spnC3TmCuwPOKM6Xx1RWdOuB8NBUNp/zcFHYtUH KimC+7YHYrES5Xs12GtJ/LTQpa27inTAKwnblHeb/TmZpxiLKuOcY0wAm2rsy4jG gph0/w2PGVriw9ui0IgTxOFxRVNNl934grTdL2dFBq4Ez+dV3iS3K8dgo0/cR1mb 1mSgV1fbUMAj6SPC4/Ete2lC5moZYBIg9m5w1yJEdchPZkk+mYaDc9mz//NPAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUhWvroz4b6uJx+0ZwuQ71kcl4kSMwHwYDVR0j BBgwFoAUF904tMWQRm3u93h8UOP6ObBHxqwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjI2NjIwNDA1Mjk3OTczMS8wLzE3REQzOEI0QzU5MDQ2NkRFRUY3Nzg3QzUwRTNG QTM5QjA0N0M2QUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTdERDM4QjRDNTkwNDY2REVFRjc3ODdDNTBFM0ZBMzlCMDQ3QzZBQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIyNjYyMDQwNTI5Nzk3MzEvMC8xN0REMzhCNEM1OTA0 NjZERUVGNzc4N0M1MEUzRkEzOUIwNDdDNkFDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWI3ArTLATQCa 7M4mY8FcrOrmpoTmKI7n8NITp/Gi4JmjGaPa0BmnnG+fJ4+IG5AzLph5ydiYIDw3 oGM8f03mzR97EFGWxJfgn3Jk4p37qj0IGmjCxkfS0yBOVhixXgce+SpDFZ/ojjdZ H790s+dSa5i1iZ3QoJmi5pGg6gy7mzOMIGr9bOfz38bsum2/ch66fjNtAsJoxmLh ndm1Jv0scnSkl7bcdXC37WBt9gsIiHYcCDTL86P+/P/A4+R+JhzasNE/vomBF/WX 534WqIAZDMjMowoqjx8fYoJtmAXfIGvXw04jUzEu6lYH0GHL9YC+T14yVIW3S8jm 7eSrTTkBpg== -----END CERTIFICATE-----Generated at Sun Jun 14 05:17:57 2026 by rpki-client