$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.mft File: 2C17316B7F43D4949633C8E9473373FAB42B7312.mft (raw, json) Hash identifier: 321GVJC9FjIralOC+ORwiziCjFagvCbpGrue+T8777A= Subject key identifier: 4D:54:1D:26:87:84:02:D4:4B:51:16:A6:68:7F:F0:2D:5E:BE:2E:38 Authority key identifier: 2C:17:31:6B:7F:43:D4:94:96:33:C8:E9:47:33:73:FA:B4:2B:73:12 Certificate issuer: /CN=A91B10180000/serialNumber=2C17316B7F43D4949633C8E9473373FAB42B7312 Certificate serial: 346CCB0DE9E681742594FCACCA702346015B9FEF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LBcxa39D1JSWM8jpRzNz-rQrcxI.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.mft Manifest number: 17 Signing time: Tue 06 Oct 2026 01:28:10 +0000 Manifest this update: Tue 06 Oct 2026 01:23:10 +0000 Manifest next update: Fri 09 Oct 2026 10:57:10 +0000 Files and hashes: 1: 2C17316B7F43D4949633C8E9473373FAB42B7312.crl (hash: 1xIocTLoOtfb7BWhpPknF7aMadJPRVky03qNduoVHmc=) 2: 3133342e34392e3234302e302f32322d3234203d3e20313331353632.roa (hash: 43geaqjpTOxkcmIT2KJclGaVNFKcxR+7BHayTCyYSPk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.crl rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LBcxa39D1JSWM8jpRzNz-rQrcxI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 10:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:6c:cb:0d:e9:e6:81:74:25:94:fc:ac:ca:70:23:46:01:5b:9f:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B10180000, serialNumber=2C17316B7F43D4949633C8E9473373FAB42B7312 Validity Not Before: Oct 6 01:23:10 2026 GMT Not After : Oct 9 10:57:10 2026 GMT Subject: CN=4D541D26878402D44B5116A6687FF02D5EBE2E38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:77:c3:48:00:aa:3e:99:ad:b1:c8:68:a1:8f: 03:7e:5d:9f:23:1d:a3:c5:50:e3:00:88:06:8c:8f: bb:73:8a:d5:b4:98:20:49:71:3b:84:e6:92:cb:ce: 8f:56:e9:14:b7:09:97:cc:96:be:f3:00:dc:71:66: e6:51:9e:25:7f:28:a3:78:95:d0:8f:2b:41:a7:dc: c5:5b:07:61:f9:d2:7a:21:67:27:c4:42:e9:3d:0c: 25:bb:ba:cb:36:aa:7b:9b:df:5c:92:7a:36:12:e5: 3e:01:5d:32:a9:24:4d:5a:0e:80:b8:8f:5c:6f:03: 2b:38:e5:ea:9e:52:23:ee:99:c2:3c:98:93:68:d4: ba:97:94:e6:65:11:a7:a6:02:bb:f7:50:72:d0:e5: 80:fc:3a:67:55:ea:9b:e9:50:30:e9:4d:dd:43:e5: 39:03:1c:14:81:c9:81:14:d9:5b:f0:c6:f7:fd:c0: 35:ec:f6:3d:9f:7c:52:2a:8e:35:1c:7c:77:6a:f7: 03:71:e0:e4:91:ce:80:7c:97:18:35:17:c2:02:e2: a9:55:18:c3:03:a4:19:b0:11:ee:b8:09:94:cd:f0: 53:bf:8a:68:fd:d1:8c:53:b9:55:6b:bd:c4:f4:d4: 6f:c0:c7:8b:e9:4b:c7:57:94:58:54:d7:70:c1:96: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:54:1D:26:87:84:02:D4:4B:51:16:A6:68:7F:F0:2D:5E:BE:2E:38 X509v3 Authority Key Identifier: keyid:2C:17:31:6B:7F:43:D4:94:96:33:C8:E9:47:33:73:FA:B4:2B:73:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LBcxa39D1JSWM8jpRzNz-rQrcxI.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112360312121655313/1/2C17316B7F43D4949633C8E9473373FAB42B7312.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ac:d2:0a:49:a6:83:cc:5b:6c:d9:8d:85:22:60:39:29:e8: 55:95:e4:bc:d3:a2:c4:f2:01:0a:fa:f5:75:0b:7f:39:a7:d5: 9f:44:15:29:1a:a6:22:58:83:f9:9f:75:18:9e:5b:dd:7f:8f: 84:c3:50:09:80:f5:88:55:f7:41:1c:59:07:cc:c6:89:7e:8b: 52:60:d4:6f:4d:87:7d:ed:b5:9f:04:ac:63:d7:fa:c0:92:29: 80:f9:ef:28:49:6f:fe:71:17:4b:7b:41:1b:02:a0:7e:7f:f0: 66:a0:ef:b5:aa:de:bb:ab:27:81:df:14:30:86:60:1c:bd:a4: 99:bc:37:72:b1:36:17:5b:d3:ec:67:35:8f:a4:30:34:fd:5b: d0:c5:de:11:9f:7b:bd:8b:83:fe:9a:2c:87:7b:d4:27:f5:e0: 2c:67:e3:b3:4f:5c:29:26:ab:19:16:eb:c5:83:3e:bb:ba:44: 29:03:ed:24:c8:ae:cc:71:1f:04:a5:d5:9f:d1:f8:1e:8f:9a: 48:af:8d:93:8d:15:2c:17:1e:94:c0:38:11:7b:e8:05:ca:ae: 39:e8:1b:14:46:e3:18:0a:41:a3:65:82:a3:83:7a:bc:ef:bc: b0:28:c8:83:da:c1:87:3d:ac:1a:ce:37:fd:4a:80:dc:86:cc: 4f:56:39:dc -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgIUNGzLDenmgXQllPysynAjRgFbn+8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQjEwMTgwMDAwMTEwLwYDVQQFEygyQzE3MzE2QjdG NDNENDk0OTYzM0M4RTk0NzMzNzNGQUI0MkI3MzEyMB4XDTI2MTAwNjAxMjMxMFoX DTI2MTAwOTEwNTcxMFowMzExMC8GA1UEAxMoNEQ1NDFEMjY4Nzg0MDJENDRCNTEx NkE2Njg3RkYwMkQ1RUJFMkUzODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKh3w0gAqj6ZrbHIaKGPA35dnyMdo8VQ4wCIBoyPu3OK1bSYIElxO4TmksvO j1bpFLcJl8yWvvMA3HFm5lGeJX8oo3iV0I8rQafcxVsHYfnSeiFnJ8RC6T0MJbu6 yzaqe5vfXJJ6NhLlPgFdMqkkTVoOgLiPXG8DKzjl6p5SI+6ZwjyYk2jUupeU5mUR p6YCu/dQctDlgPw6Z1Xqm+lQMOlN3UPlOQMcFIHJgRTZW/DG9/3ANez2PZ98UiqO NRx8d2r3A3Hg5JHOgHyXGDUXwgLiqVUYwwOkGbAR7rgJlM3wU7+KaP3RjFO5VWu9 xPTUb8DHi+lLx1eUWFTXcMGW4B8CAwEAAaOCAh0wggIZMB0GA1UdDgQWBBRNVB0m h4QC1EtRFqZof/AtXr4uODAfBgNVHSMEGDAWgBQsFzFrf0PUlJYzyOlHM3P6tCtz EjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyMzYwMzEyMTIxNjU1MzEzLzEvMkMxNzMx NkI3RjQzRDQ5NDk2MzNDOEU5NDczMzczRkFCNDJCNzMxMi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJGRDFGRjIvTEJjeGEzOUQx SlNXTThqcFJ6TnotclFyY3hJLmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUH MAuGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTExMjM2MDMxMjEy MTY1NTMxMy8xLzJDMTczMTZCN0Y0M0Q0OTQ5NjMzQzhFOTQ3MzM3M0ZBQjQyQjcz MTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8E EjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqG SIb3DQEBCwUAA4IBAQCprNIKSaaDzFts2Y2FImA5KehVleS806LE8gEK+vV1C385 p9WfRBUpGqYiWIP5n3UYnlvdf4+Ew1AJgPWIVfdBHFkHzMaJfotSYNRvTYd97bWf BKxj1/rAkimA+e8oSW/+cRdLe0EbAqB+f/BmoO+1qt67qyeB3xQwhmAcvaSZvDdy sTYXW9PsZzWPpDA0/VvQxd4Rn3u9i4P+miyHe9Qn9eAsZ+OzT1wpJqsZFuvFgz67 ukQpA+0kyK7McR8EpdWf0fgej5pIr42TjRUsFx6UwDgRe+gFyq456BsURuMYCkGj ZYKjg3q877ywKMiD2sGHPawazjf9SoDchsxPVjnc -----END CERTIFICATE-----Generated at Thu Oct 8 12:19:58 2026 by rpki-client