$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft File: 17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft (raw, json) Hash identifier: Z3DYMD3WnyqYK8jcD/CeshYMyAyguKKs9MrPI5IKrwo= Subject key identifier: 70:45:C5:42:5B:CB:44:4E:33:BA:89:55:A4:31:8A:D9:6C:37:8D:1F Authority key identifier: 17:DD:38:B4:C5:90:46:6D:EE:F7:78:7C:50:E3:FA:39:B0:47:C6:AC Certificate issuer: /CN=17DD38B4C590466DEEF7787C50E3FA39B047C6AC Certificate serial: 49889325E18B49DD8378E64959B4EDE4AF04F4A6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft Manifest number: 90 Signing time: Thu 15 Oct 2026 04:36:17 +0000 Manifest this update: Thu 15 Oct 2026 04:31:17 +0000 Manifest next update: Sun 18 Oct 2026 08:05:17 +0000 Files and hashes: 1: 17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl (hash: HjdSYBuMR9ux8rukM5gha7eVywOXuZsfVu+ViUygG1E=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 08:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:88:93:25:e1:8b:49:dd:83:78:e6:49:59:b4:ed:e4:af:04:f4:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17DD38B4C590466DEEF7787C50E3FA39B047C6AC Validity Not Before: Oct 15 04:31:17 2026 GMT Not After : Oct 18 08:05:17 2026 GMT Subject: CN=7045C5425BCB444E33BA8955A4318AD96C378D1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:53:31:67:92:3a:61:b5:38:63:6d:72:d7: 93:f0:0b:57:7c:51:1f:39:7d:69:ae:d3:10:08:ce: c0:e6:38:bc:9a:f9:82:c0:ca:4e:ae:f5:f3:c5:da: 86:8f:6b:24:8d:5b:9d:82:66:46:0f:01:53:68:b8: b1:b4:70:1d:7f:dc:71:9c:6d:c6:d1:43:fd:3a:bf: a5:25:75:45:23:21:9f:31:a9:59:d4:2c:fd:b9:cf: 94:33:4e:34:c1:75:44:da:01:40:a6:11:29:c2:ad: f1:fc:cf:52:58:f9:1c:9e:7e:9f:07:c5:d8:4b:9e: 4c:af:4a:41:c9:55:41:1f:d0:fd:1a:0a:cf:04:41: 8e:8c:d3:b0:f1:35:1f:a9:89:e7:c0:97:34:8e:cc: a3:46:9c:4e:42:fd:8f:b2:bd:bb:92:b5:52:72:bf: 61:97:a2:a5:bd:1d:2b:67:71:60:e2:b3:24:f8:cd: db:77:2a:74:44:ad:eb:1d:80:e7:32:b2:9f:5f:b8: d0:2d:87:25:6b:a5:91:9c:e0:52:6e:0e:8a:29:7d: bf:33:3f:ce:8f:e6:9b:8c:20:42:74:22:36:37:05: b1:56:08:14:71:87:bf:2a:1f:b3:f4:48:86:cb:c0: 3a:e4:89:8f:32:c7:48:3f:4f:cf:d4:6d:7c:45:5f: ef:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:45:C5:42:5B:CB:44:4E:33:BA:89:55:A4:31:8A:D9:6C:37:8D:1F X509v3 Authority Key Identifier: keyid:17:DD:38:B4:C5:90:46:6D:EE:F7:78:7C:50:E3:FA:39:B0:47:C6:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112266204052979731/0/17DD38B4C590466DEEF7787C50E3FA39B047C6AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:12:d6:e0:c3:e5:79:35:53:41:32:a8:c4:05:3b:ce:d0:dd: 76:10:b1:25:13:3b:c1:90:32:8b:a7:17:f9:d9:5d:25:4c:9e: 95:6f:ac:82:70:8e:c7:c6:0f:3a:9d:43:97:dd:63:72:f8:c3: b2:01:8f:fe:b1:cd:61:b1:69:67:94:49:c9:78:ba:88:39:8e: b8:bf:b1:6f:58:51:5d:3e:9b:91:af:1d:81:0e:a1:02:ed:ef: cf:35:1c:88:d4:ec:97:c6:32:11:2d:c7:45:c9:96:40:c3:3f: d9:e9:7e:f6:e4:c0:d9:3b:c8:d3:57:be:7d:d2:27:41:9c:73: 3b:8d:46:f7:70:33:44:67:35:7b:18:04:27:40:10:f3:5f:79: d4:d7:39:87:24:9d:c2:53:0c:3f:cf:13:98:79:a1:80:8d:ba: 99:50:8d:3e:d8:3b:56:d5:0d:13:d5:71:a2:31:94:6d:28:9a: dd:5e:b7:75:fc:8c:8d:02:0e:cd:02:d7:e5:b4:21:ab:17:91: 6a:11:fb:c1:40:a6:a5:59:cd:87:e8:28:09:0d:71:0c:2a:b0: c1:f0:09:71:a2:69:dc:9e:86:94:5a:8d:1c:0e:27:b1:e5:62: 6f:b2:a6:cb:21:03:e7:41:23:92:31:fd:58:fd:3a:b7:04:58: 66:a0:f6:57 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUSYiTJeGLSd2DeOZJWbTt5K8E9KYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdERDM4QjRDNTkwNDY2REVFRjc3ODdDNTBFM0ZBMzlC MDQ3QzZBQzAeFw0yNjEwMTUwNDMxMTdaFw0yNjEwMTgwODA1MTdaMDMxMTAvBgNV BAMTKDcwNDVDNTQyNUJDQjQ0NEUzM0JBODk1NUE0MzE4QUQ5NkMzNzhEMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsm1MxZ5I6YbU4Y21y15PwC1d8 UR85fWmu0xAIzsDmOLya+YLAyk6u9fPF2oaPaySNW52CZkYPAVNouLG0cB1/3HGc bcbRQ/06v6UldUUjIZ8xqVnULP25z5QzTjTBdUTaAUCmESnCrfH8z1JY+Ryefp8H xdhLnkyvSkHJVUEf0P0aCs8EQY6M07DxNR+piefAlzSOzKNGnE5C/Y+yvbuStVJy v2GXoqW9HStncWDisyT4zdt3KnREresdgOcysp9fuNAthyVrpZGc4FJuDoopfb8z P86P5puMIEJ0IjY3BbFWCBRxh78qH7P0SIbLwDrkiY8yx0g/T8/UbXxFX++rAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUcEXFQlvLRE4zuolVpDGK2Ww3jR8wHwYDVR0j BBgwFoAUF904tMWQRm3u93h8UOP6ObBHxqwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjI2NjIwNDA1Mjk3OTczMS8wLzE3REQzOEI0QzU5MDQ2NkRFRUY3Nzg3QzUwRTNG QTM5QjA0N0M2QUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvMTdERDM4QjRDNTkwNDY2REVFRjc3ODdDNTBFM0ZBMzlCMDQ3QzZBQy5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTIyNjYyMDQwNTI5Nzk3MzEvMC8xN0REMzhCNEM1OTA0 NjZERUVGNzc4N0M1MEUzRkEzOUIwNDdDNkFDLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRLW4MPleTVT QTKoxAU7ztDddhCxJRM7wZAyi6cX+dldJUyelW+sgnCOx8YPOp1Dl91jcvjDsgGP /rHNYbFpZ5RJyXi6iDmOuL+xb1hRXT6bka8dgQ6hAu3vzzUciNTsl8YyES3HRcmW QMM/2el+9uTA2TvI01e+fdInQZxzO41G93AzRGc1exgEJ0AQ81951Nc5hySdwlMM P88TmHmhgI26mVCNPtg7VtUNE9VxojGUbSia3V63dfyMjQIOzQLX5bQhqxeRahH7 wUCmpVnNh+goCQ1xDCqwwfAJcaJp3J6GlFqNHA4nseVib7KmyyED50EjkjH9WP06 twRYZqD2Vw== -----END CERTIFICATE-----Generated at Thu Oct 15 13:32:56 2026 by rpki-client