$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.mft File: 17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.mft (raw, json) Hash identifier: 1nWakkdxiaJnD8blcjqRvoFMRSIhnwhMPiYh2itm6QQ= Subject key identifier: 5D:E8:A2:EB:41:9B:06:3C:3E:50:85:41:D0:E0:E4:EF:09:CE:B6:22 Authority key identifier: 17:C7:9C:17:39:BA:7F:37:2B:B5:0E:93:2D:B2:EB:D1:1C:E5:AF:F2 Certificate issuer: /CN=17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2 Certificate serial: 5AC9CEB508C5F9B824AB2CA8FE332CDCD2CC37FB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.mft Manifest number: 34 Signing time: Tue 13 Oct 2026 07:57:51 +0000 Manifest this update: Tue 13 Oct 2026 07:52:51 +0000 Manifest next update: Fri 16 Oct 2026 17:32:51 +0000 Files and hashes: 1: 17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.crl (hash: Ebt6bp1gXGmZUfCB82EUOm5ZcxC3Ew5IAvURHRc7674=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.crl rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 17:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c9:ce:b5:08:c5:f9:b8:24:ab:2c:a8:fe:33:2c:dc:d2:cc:37:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2 Validity Not Before: Oct 13 07:52:51 2026 GMT Not After : Oct 16 17:32:51 2026 GMT Subject: CN=5DE8A2EB419B063C3E508541D0E0E4EF09CEB622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e9:d2:e1:7d:b7:cf:69:cb:af:e8:c1:1c:41: 81:ca:3f:b0:b5:fa:00:62:37:7e:ba:15:02:41:e8: 48:66:31:e8:e9:e5:42:a1:cd:07:e4:f6:e8:29:32: e3:08:98:24:33:bb:66:09:99:95:2b:ac:b8:97:6c: 63:b2:5e:77:03:06:b5:ad:53:d5:62:d8:44:02:40: 5a:25:93:ab:80:ff:3e:d0:1b:8b:18:6a:2c:a4:28: ac:92:77:9c:9b:34:45:bd:5b:7c:14:f1:c9:b3:ca: 1d:18:37:96:ec:21:77:60:e5:9a:ac:a9:b3:33:a6: fa:b8:39:39:01:20:66:45:21:89:ed:f6:09:bb:d2: 1d:ee:81:9e:81:74:b9:16:02:5a:d1:ad:a2:8a:fd: b0:d3:53:e6:10:05:4d:25:79:ca:3c:a7:2e:50:91: 7b:ea:27:a8:3a:10:6b:0b:31:b1:f8:0e:c8:42:14: 08:79:e6:40:e8:a0:13:be:30:61:36:a1:58:7f:bc: a1:16:43:74:36:de:e5:76:1e:df:ea:cb:cb:ff:44: 25:c1:d8:74:0a:41:2b:0e:1c:da:ec:eb:b2:17:59: 79:a6:72:f9:60:1d:41:95:33:5e:49:b6:1d:95:34: 9c:d9:38:cb:bf:65:da:dd:24:ae:f1:76:b9:bb:cc: fd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E8:A2:EB:41:9B:06:3C:3E:50:85:41:D0:E0:E4:EF:09:CE:B6:22 X509v3 Authority Key Identifier: keyid:17:C7:9C:17:39:BA:7F:37:2B:B5:0E:93:2D:B2:EB:D1:1C:E5:AF:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1137580814452654125/1/17C79C1739BA7F372BB50E932DB2EBD11CE5AFF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:3c:a9:70:d3:0d:72:44:54:b9:dd:ee:90:04:d2:59:d5:65: 0e:31:df:64:50:ad:95:05:39:c0:3d:03:82:a8:9f:f9:69:12: 15:94:ea:6b:c0:a2:16:a8:2f:0a:13:02:24:aa:d3:51:ed:10: 87:f1:98:44:43:a9:be:96:64:6d:af:6b:db:63:63:41:87:df: 3c:b9:07:2e:85:34:f3:ef:bf:ec:3e:4f:71:59:18:a3:9f:2f: 0c:f9:cf:c7:a5:ff:0e:93:44:9b:76:53:d1:5b:67:4b:72:ed: b1:fe:7e:c6:5a:fb:d3:bc:00:c6:8f:2c:71:ad:92:2e:58:4f: 9a:1f:bc:6b:61:df:b0:5d:23:31:44:63:a2:3a:94:34:0c:fa: f8:10:93:b5:14:98:a4:6d:47:f7:12:c3:88:95:6c:d0:41:dd: 13:f8:b2:68:9e:ca:c1:02:16:39:d6:f9:9c:75:6d:53:c6:db: e2:f1:73:d4:4b:93:05:93:24:18:c9:77:57:6b:ed:d5:61:3d: 00:8a:a7:2c:09:da:2e:fc:c7:9f:ce:6f:c6:13:b8:cd:e6:45: 71:2e:58:44:b8:46:56:a0:d3:cb:38:3e:b3:15:f5:3a:09:75: 71:a5:7f:e2:ec:63:92:5e:14:2f:72:2a:06:85:01:1c:50:f1: 06:b3:3c:19 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWsnOtQjF+bgkqyyo/jMs3NLMN/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTdDNzlDMTczOUJBN0YzNzJCQjUwRTkzMkRCMkVCRDEx Q0U1QUZGMjAeFw0yNjEwMTMwNzUyNTFaFw0yNjEwMTYxNzMyNTFaMDMxMTAvBgNV BAMTKDVERThBMkVCNDE5QjA2M0MzRTUwODU0MUQwRTBFNEVGMDlDRUI2MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCF6dLhfbfPacuv6MEcQYHKP7C1 +gBiN366FQJB6EhmMejp5UKhzQfk9ugpMuMImCQzu2YJmZUrrLiXbGOyXncDBrWt U9Vi2EQCQFolk6uA/z7QG4sYaiykKKySd5ybNEW9W3wU8cmzyh0YN5bsIXdg5Zqs qbMzpvq4OTkBIGZFIYnt9gm70h3ugZ6BdLkWAlrRraKK/bDTU+YQBU0leco8py5Q kXvqJ6g6EGsLMbH4DshCFAh55kDooBO+MGE2oVh/vKEWQ3Q23uV2Ht/qy8v/RCXB 2HQKQSsOHNrs67IXWXmmcvlgHUGVM15Jth2VNJzZOMu/ZdrdJK7xdrm7zP3/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXeii60GbBjw+UIVB0ODk7wnOtiIwHwYDVR0j BBgwFoAUF8ecFzm6fzcrtQ6TLbLr0Rzlr/IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz NzU4MDgxNDQ1MjY1NDEyNS8xLzE3Qzc5QzE3MzlCQTdGMzcyQkI1MEU5MzJEQjJF QkQxMUNFNUFGRjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTdDNzlDMTczOUJBN0YzNzJCQjUwRTkzMkRCMkVCRDExQ0U1QUZGMi5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMzc1ODA4MTQ0NTI2NTQxMjUvMS8xN0M3OUMxNzM5QkE3 RjM3MkJCNTBFOTMyREIyRUJEMTFDRTVBRkYyLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjypcNMNckRU ud3ukATSWdVlDjHfZFCtlQU5wD0Dgqif+WkSFZTqa8CiFqgvChMCJKrTUe0Qh/GY REOpvpZkba9r22NjQYffPLkHLoU08++/7D5PcVkYo58vDPnPx6X/DpNEm3ZT0Vtn S3Ltsf5+xlr707wAxo8sca2SLlhPmh+8a2HfsF0jMURjojqUNAz6+BCTtRSYpG1H 9xLDiJVs0EHdE/iyaJ7KwQIWOdb5nHVtU8bb4vFz1EuTBZMkGMl3V2vt1WE9AIqn LAnaLvzHn85vxhO4zeZFcS5YRLhGVqDTyzg+sxX1Ogl1caV/4uxjkl4UL3IqBoUB HFDxBrM8GQ== -----END CERTIFICATE-----Generated at Thu Oct 15 14:17:48 2026 by rpki-client