$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft File: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft (raw, json) Hash identifier: hHBaQIT3kGV0K+Jtj1IOfOJzoPNpsqFhuo/UONc6MqI= Subject key identifier: 7A:80:98:88:BE:04:DB:F0:7B:E4:23:FD:07:6D:0D:C9:F6:1F:92:8D Authority key identifier: 10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 Certificate issuer: /CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Certificate serial: 4280F4E5FDE8DFDFCA4AB94CD6F8AF2B31401057 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft Manifest number: F8 Signing time: Fri 24 Jul 2026 01:40:02 +0000 Manifest this update: Fri 24 Jul 2026 01:35:02 +0000 Manifest next update: Sat 25 Jul 2026 02:32:02 +0000 Files and hashes: 1: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl (hash: gA1h7p6Ocs1HQ6OjvrjVXf1W1cFaqColQ23AGxqFGpM=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:32:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:80:f4:e5:fd:e8:df:df:ca:4a:b9:4c:d6:f8:af:2b:31:40:10:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Validity Not Before: Jul 24 01:35:02 2026 GMT Not After : Jul 25 02:32:02 2026 GMT Subject: CN=7A809888BE04DBF07BE423FD076D0DC9F61F928D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2b:ec:fa:1c:7e:89:21:8f:84:38:92:e7:33: 8f:1a:b5:b1:90:05:97:46:a7:66:dd:ce:e9:6e:c4: b6:3f:57:28:5c:07:2c:18:eb:79:e6:c4:96:69:ed: 3a:30:82:51:b6:1c:39:86:15:ff:52:70:00:56:b9: a3:51:9c:b6:1a:b7:0f:00:1f:e1:ef:cc:51:57:90: ff:ad:c1:b4:6a:a1:8e:a4:2c:40:39:ad:af:08:20: 8a:1a:82:6e:bd:bd:ab:a2:8f:fa:40:1f:59:64:6b: 64:bd:c0:e4:ca:13:bd:5b:1d:c5:e9:b6:fa:e8:40: b9:d9:f4:26:5c:51:39:0f:12:b3:b4:60:e1:60:d3: 7c:eb:9e:15:93:7c:51:2a:e4:d2:16:b9:72:03:5d: 1e:80:ce:c3:57:16:c1:5a:88:ad:6e:61:ad:51:6a: ea:a0:61:7b:d7:5a:56:42:5f:34:8e:a8:54:cf:51: 19:49:2a:f9:3d:81:de:33:fa:fc:53:c4:ad:ce:a8: 66:8a:1e:59:ad:ae:3d:a5:43:18:fb:ad:3f:3b:73: 70:4b:a5:e5:38:31:9d:15:68:57:c7:7a:e9:50:c4: 92:e1:c1:80:30:f2:6c:7d:a9:cb:da:92:63:ea:cb: b1:3a:d4:7e:a5:c6:b7:a7:14:c6:bd:a9:33:06:48: 96:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:80:98:88:BE:04:DB:F0:7B:E4:23:FD:07:6D:0D:C9:F6:1F:92:8D X509v3 Authority Key Identifier: keyid:10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:e1:6f:4a:7d:e1:a5:0e:6d:8c:c3:82:b2:75:a5:5d:b6:19: 4d:5b:33:20:71:19:af:96:20:6e:7f:d1:07:4c:13:36:03:a4: 50:50:ad:08:1f:9b:e8:fa:ee:16:8b:56:51:9f:bd:90:f1:c3: 14:47:f6:67:e4:de:71:05:69:1b:83:6f:b3:d4:b3:7d:4f:07: b2:e2:98:41:b8:ff:52:c5:75:4e:36:54:da:a1:85:dd:7e:18: 5b:52:dc:ee:dd:1f:f8:da:3d:57:cd:f9:97:da:ed:cc:fa:b8: 5c:5b:a9:dd:6a:0b:db:f9:74:4d:c3:57:7b:be:30:ef:cf:b1: 9a:5b:6f:0c:19:62:14:01:d7:6c:c5:fd:cc:eb:8c:70:60:5c: e7:3f:f4:f6:85:cf:13:13:19:2a:3e:b1:ff:b3:42:57:ba:44: bb:be:70:e5:8f:af:db:37:71:52:f6:d9:e0:7a:b9:43:b6:fe: 7d:a5:0c:ea:e3:d0:b1:dc:ba:0c:76:d9:29:ba:70:a9:95:70: 15:ce:b5:6e:e8:30:d9:ba:5e:1d:d8:d0:c2:7c:09:22:cd:5e: 34:fd:68:77:82:c2:5c:fe:7f:bf:f9:a3:45:9f:51:fd:cc:f2: b7:a4:34:7c:c2:fe:9b:50:f3:29:a1:f9:46:80:ba:19:72:7a: 82:22:92:da -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUQoD05f3o39/KSrlM1vivKzFAEFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNC RDAwNUY2NTAeFw0yNjA3MjQwMTM1MDJaFw0yNjA3MjUwMjMyMDJaMDMxMTAvBgNV BAMTKDdBODA5ODg4QkUwNERCRjA3QkU0MjNGRDA3NkQwREM5RjYxRjkyOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVK+z6HH6JIY+EOJLnM48atbGQ BZdGp2bdzuluxLY/VyhcBywY63nmxJZp7TowglG2HDmGFf9ScABWuaNRnLYatw8A H+HvzFFXkP+twbRqoY6kLEA5ra8IIIoagm69vauij/pAH1lka2S9wOTKE71bHcXp tvroQLnZ9CZcUTkPErO0YOFg03zrnhWTfFEq5NIWuXIDXR6AzsNXFsFaiK1uYa1R auqgYXvXWlZCXzSOqFTPURlJKvk9gd4z+vxTxK3OqGaKHlmtrj2lQxj7rT87c3BL peU4MZ0VaFfHeulQxJLhwYAw8mx9qcvakmPqy7E61H6lxrenFMa9qTMGSJbNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUeoCYiL4E2/B75CP9B20NyfYfko0wHwYDVR0j BBgwFoAUEIry+Y4rwNA/KNwb4+MAI70AX2UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjAxOTMzMC8wLzEwOEFGMkY5OEUyQkMwRDAzRjI4REMxQkUzRTMw MDIzQkQwMDVGNjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNCRDAwNUY2NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwMTkzMzAvMC8xMDhBRjJGOThFMkJD MEQwM0YyOERDMUJFM0UzMDAyM0JEMDA1RjY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeFvSn3hpQ5t jMOCsnWlXbYZTVszIHEZr5Ygbn/RB0wTNgOkUFCtCB+b6PruFotWUZ+9kPHDFEf2 Z+TecQVpG4Nvs9SzfU8HsuKYQbj/UsV1TjZU2qGF3X4YW1Lc7t0f+No9V835l9rt zPq4XFup3WoL2/l0TcNXe74w78+xmltvDBliFAHXbMX9zOuMcGBc5z/09oXPExMZ Kj6x/7NCV7pEu75w5Y+v2zdxUvbZ4Hq5Q7b+faUM6uPQsdy6DHbZKbpwqZVwFc61 bugw2bpeHdjQwnwJIs1eNP1od4LCXP5/v/mjRZ9R/czyt6Q0fML+m1DzKaH5RoC6 GXJ6giKS2g== -----END CERTIFICATE-----Generated at Fri Jul 24 08:55:18 2026 by rpki-client