$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft File: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft (raw, json) Hash identifier: XkdqNZxdN1KMeTAGkHatJCcki0iF9stt78v+ker6yJc= Subject key identifier: 11:13:E0:22:58:25:7F:DC:1E:D0:76:9A:70:4E:D6:5A:22:36:62:7E Authority key identifier: 10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 Certificate issuer: /CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Certificate serial: 4258E7759F84BF7ADB922E1B7D5E451A57D9B57A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft Manifest number: 99 Signing time: Wed 13 May 2026 03:20:55 +0000 Manifest this update: Wed 13 May 2026 03:15:55 +0000 Manifest next update: Thu 14 May 2026 05:16:55 +0000 Files and hashes: 1: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl (hash: hCCYimGIEWrqe6Ci9uEPYZ8GOEaZNlnvp0BPIf1xGEk=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:58:e7:75:9f:84:bf:7a:db:92:2e:1b:7d:5e:45:1a:57:d9:b5:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Validity Not Before: May 13 03:15:55 2026 GMT Not After : May 14 05:16:55 2026 GMT Subject: CN=1113E02258257FDC1ED0769A704ED65A2236627E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:75:36:3c:85:9b:8f:ad:45:a4:33:57:8a:87: 96:f6:6f:1d:2e:b8:7d:c1:5c:e6:ae:97:45:47:58: 6d:61:87:e7:e4:c8:d6:c7:5a:6b:70:a1:ea:60:bf: 2b:bf:42:52:9f:27:3d:d8:46:49:7e:e9:3e:e8:38: 84:4f:b8:96:c5:10:53:b1:37:c4:fc:5f:14:74:70: bc:8b:23:3a:25:10:ab:de:3e:cd:b2:0b:2b:8e:7c: 7d:7f:f5:f4:43:a8:10:2e:46:9b:6a:b9:8a:83:eb: 9b:a7:4f:3e:aa:a7:65:a0:b3:cc:d2:b8:9f:ac:35: 56:12:ed:fe:86:fc:c4:47:76:35:fc:1d:c5:b8:61: c1:3e:2c:8b:13:64:cc:cd:6c:2d:18:c4:0d:d7:59: dc:4b:9f:7b:f2:56:44:4d:56:26:af:8c:d3:4d:a8: 5f:3c:71:aa:b0:ab:c0:34:db:23:c0:6d:9d:af:fb: 78:f0:08:79:e6:1d:f9:40:16:18:5c:83:57:c5:03: 35:c4:2a:06:3c:bf:80:fe:bb:69:db:af:aa:19:31: af:a5:e7:54:4d:5c:91:59:55:fa:e3:94:38:28:b5: 76:12:e2:96:68:b5:b2:50:0d:b9:f3:5e:05:76:5d: 51:12:1c:48:77:c4:e0:2c:8b:a3:bd:1c:0c:90:aa: 1d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:13:E0:22:58:25:7F:DC:1E:D0:76:9A:70:4E:D6:5A:22:36:62:7E X509v3 Authority Key Identifier: keyid:10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:0e:4b:30:11:c7:b6:b1:57:61:0f:0f:2b:0b:f2:ee:55:cc: 00:dc:0b:3b:fb:a3:77:79:f3:c2:db:3e:14:31:2a:37:31:3c: c1:dd:53:e9:18:05:44:e7:56:e8:62:d2:02:7c:2a:b5:54:ad: 2e:6d:45:b9:19:fc:65:e5:f1:02:8d:31:75:6a:a5:7d:02:b0: 78:cb:e2:1b:80:dc:dc:03:72:a9:ab:84:fb:65:2c:52:a6:9d: 18:fc:76:c8:db:2f:97:fc:30:2f:8b:31:20:77:39:35:a1:fe: f6:e1:ac:69:f5:12:39:d0:c5:84:21:92:b9:75:46:dc:0c:08: 20:d3:05:1b:25:ae:d8:02:5b:5a:d5:90:96:36:e3:ac:c4:be: 11:a7:18:f6:70:3d:de:3e:03:e1:a5:98:56:f7:8e:2f:bf:39: 76:61:4d:5f:9a:f1:a8:81:44:a6:35:82:e3:3d:f9:c3:dd:01: 27:42:c6:2a:a1:fa:1d:74:54:42:74:57:50:f1:92:a5:07:f4: b7:7a:43:ec:02:2b:76:7a:3b:a3:f8:74:54:01:df:05:a4:1e: 02:18:a1:e5:d0:4a:3c:f2:cd:64:9e:a3:ac:55:93:53:b6:4e: 5a:61:11:1f:b8:89:09:97:76:ad:9d:cb:bd:ab:dc:cc:a8:a5: 12:08:f1:aa -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQljndZ+Ev3rbki4bfV5FGlfZtXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNC RDAwNUY2NTAeFw0yNjA1MTMwMzE1NTVaFw0yNjA1MTQwNTE2NTVaMDMxMTAvBgNV BAMTKDExMTNFMDIyNTgyNTdGREMxRUQwNzY5QTcwNEVENjVBMjIzNjYyN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRdTY8hZuPrUWkM1eKh5b2bx0u uH3BXOaul0VHWG1hh+fkyNbHWmtwoepgvyu/QlKfJz3YRkl+6T7oOIRPuJbFEFOx N8T8XxR0cLyLIzolEKvePs2yCyuOfH1/9fRDqBAuRptquYqD65unTz6qp2Wgs8zS uJ+sNVYS7f6G/MRHdjX8HcW4YcE+LIsTZMzNbC0YxA3XWdxLn3vyVkRNViavjNNN qF88caqwq8A02yPAbZ2v+3jwCHnmHflAFhhcg1fFAzXEKgY8v4D+u2nbr6oZMa+l 51RNXJFZVfrjlDgotXYS4pZotbJQDbnzXgV2XVESHEh3xOAsi6O9HAyQqh0bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUERPgIlglf9we0HaacE7WWiI2Yn4wHwYDVR0j BBgwFoAUEIry+Y4rwNA/KNwb4+MAI70AX2UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjAxOTMzMC8wLzEwOEFGMkY5OEUyQkMwRDAzRjI4REMxQkUzRTMw MDIzQkQwMDVGNjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNCRDAwNUY2NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwMTkzMzAvMC8xMDhBRjJGOThFMkJD MEQwM0YyOERDMUJFM0UzMDAyM0JEMDA1RjY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAw5LMBHHtrFX YQ8PKwvy7lXMANwLO/ujd3nzwts+FDEqNzE8wd1T6RgFROdW6GLSAnwqtVStLm1F uRn8ZeXxAo0xdWqlfQKweMviG4Dc3ANyqauE+2UsUqadGPx2yNsvl/wwL4sxIHc5 NaH+9uGsafUSOdDFhCGSuXVG3AwIINMFGyWu2AJbWtWQljbjrMS+EacY9nA93j4D 4aWYVveOL785dmFNX5rxqIFEpjWC4z35w90BJ0LGKqH6HXRUQnRXUPGSpQf0t3pD 7AIrdno7o/h0VAHfBaQeAhih5dBKPPLNZJ6jrFWTU7ZOWmERH7iJCZd2rZ3Lvavc zKilEgjxqg== -----END CERTIFICATE-----Generated at Wed May 13 19:42:34 2026 by rpki-client