$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft File: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft (raw, json) Hash identifier: DmC29McMkDxJ9+xrALUWJGG04NLyll/0n9CuNWiNWoU= Subject key identifier: E6:54:87:0C:52:28:75:97:5E:F9:06:3A:CB:DE:33:0D:F0:6D:47:6C Authority key identifier: 10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 Certificate issuer: /CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Certificate serial: 3E35B19178763DDE85002A1677B977B0EDC45703 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 11:38:28 +0000 Manifest this update: Thu 26 Mar 2026 11:33:28 +0000 Manifest next update: Fri 27 Mar 2026 14:40:28 +0000 Files and hashes: 1: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl (hash: PCLuK64ACNRx9QbJFhIfJ6iY8vH2xEchMZ+jTzc4xYA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:40:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:35:b1:91:78:76:3d:de:85:00:2a:16:77:b9:77:b0:ed:c4:57:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Validity Not Before: Mar 26 11:33:28 2026 GMT Not After : Mar 27 14:40:28 2026 GMT Subject: CN=E654870C522875975EF9063ACBDE330DF06D476C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:26:5c:47:7f:69:02:dd:8d:70:4d:8e:95:e0: d3:c2:be:81:b2:1f:a7:51:a8:c1:71:af:2d:e4:85: 2f:a1:49:4c:d5:f6:d6:42:19:1c:34:c4:43:2c:cd: dc:54:8a:79:e9:05:2a:cb:e1:0a:f5:da:f0:95:7e: db:74:49:1d:5c:d1:04:68:ca:cd:4d:3e:26:6c:fe: 12:c4:b7:80:59:4a:33:e2:6d:8e:1a:f1:d2:4b:89: eb:38:1a:c9:b2:a9:55:be:bd:0b:28:ac:09:26:15: 25:f5:b7:5e:38:d3:6d:a8:a0:41:1a:d7:e3:c1:89: cc:79:ab:f7:24:9d:59:5d:e0:17:c6:b9:72:ee:8f: 5a:bd:7b:2d:2f:f2:c1:c9:15:c8:66:8c:a7:62:de: 55:56:3c:b6:dd:c3:3a:a7:cf:8a:84:71:53:cf:fc: 5c:a2:fe:7a:45:9f:f9:00:0c:dc:79:65:df:61:02: 79:fd:fe:fe:7c:da:00:c9:2a:bf:00:5f:f6:ca:cc: a9:28:1a:21:d1:c5:d2:0d:3f:dc:4c:be:f2:24:5e: a3:ea:9b:af:95:39:f9:73:c4:bc:94:09:31:20:d7: ec:e1:22:4f:94:27:87:eb:45:3a:66:f3:07:c7:27: 99:eb:e2:00:47:98:f3:24:07:e4:85:44:1d:3f:10: 31:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:54:87:0C:52:28:75:97:5E:F9:06:3A:CB:DE:33:0D:F0:6D:47:6C X509v3 Authority Key Identifier: keyid:10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:e1:26:c4:42:37:67:9a:3c:82:2f:f7:27:c8:9c:b5:00:b5: 39:aa:67:37:71:b2:06:86:dd:bc:d5:9a:f1:9c:75:3d:43:1a: 8a:12:f0:9a:ab:47:89:46:f6:e0:52:63:61:43:e6:ca:c1:7b: 30:4c:e7:b2:7e:df:3c:98:07:25:d4:68:1c:b1:bd:a6:c7:a1: 73:40:16:b7:81:4a:50:a6:7c:b9:11:de:89:57:61:9b:89:69: d2:7a:df:06:16:38:21:28:af:dc:a8:fe:f7:7f:27:df:f5:46: e0:f0:a7:02:57:6f:a3:5a:e7:86:23:1b:a4:f1:13:e9:c2:27: 63:4a:50:8a:1f:fe:85:16:62:db:65:73:cf:99:9c:18:59:b8: dd:0d:a5:97:dc:f8:8b:e5:d2:6d:9a:50:91:34:fa:28:63:6a: a1:87:9e:36:46:df:28:aa:9b:67:23:64:bd:74:e1:7e:53:02: 36:ba:9b:97:df:39:8a:37:d1:15:85:cf:cf:88:9e:39:a7:9f: b5:a9:c9:e2:37:1c:d8:c0:ce:37:d5:e7:17:d4:13:16:cd:f6: 4e:91:dc:03:53:5a:d5:c2:91:a5:79:29:42:a4:f9:09:bf:c8: f8:fc:82:5e:91:af:61:1c:5b:91:89:ca:69:eb:ad:98:db:7f: 84:81:76:a3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPjWxkXh2Pd6FACoWd7l3sO3EVwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNC RDAwNUY2NTAeFw0yNjAzMjYxMTMzMjhaFw0yNjAzMjcxNDQwMjhaMDMxMTAvBgNV BAMTKEU2NTQ4NzBDNTIyODc1OTc1RUY5MDYzQUNCREUzMzBERjA2RDQ3NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmJlxHf2kC3Y1wTY6V4NPCvoGy H6dRqMFxry3khS+hSUzV9tZCGRw0xEMszdxUinnpBSrL4Qr12vCVftt0SR1c0QRo ys1NPiZs/hLEt4BZSjPibY4a8dJLies4GsmyqVW+vQsorAkmFSX1t144022ooEEa 1+PBicx5q/cknVld4BfGuXLuj1q9ey0v8sHJFchmjKdi3lVWPLbdwzqnz4qEcVPP /Fyi/npFn/kADNx5Zd9hAnn9/v582gDJKr8AX/bKzKkoGiHRxdINP9xMvvIkXqPq m6+VOflzxLyUCTEg1+zhIk+UJ4frRTpm8wfHJ5nr4gBHmPMkB+SFRB0/EDHvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5lSHDFIodZde+QY6y94zDfBtR2wwHwYDVR0j BBgwFoAUEIry+Y4rwNA/KNwb4+MAI70AX2UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjAxOTMzMC8wLzEwOEFGMkY5OEUyQkMwRDAzRjI4REMxQkUzRTMw MDIzQkQwMDVGNjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNCRDAwNUY2NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwMTkzMzAvMC8xMDhBRjJGOThFMkJD MEQwM0YyOERDMUJFM0UzMDAyM0JEMDA1RjY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgeEmxEI3Z5o8 gi/3J8ictQC1OapnN3GyBobdvNWa8Zx1PUMaihLwmqtHiUb24FJjYUPmysF7MEzn sn7fPJgHJdRoHLG9psehc0AWt4FKUKZ8uRHeiVdhm4lp0nrfBhY4ISiv3Kj+938n 3/VG4PCnAldvo1rnhiMbpPET6cInY0pQih/+hRZi22Vzz5mcGFm43Q2ll9z4i+XS bZpQkTT6KGNqoYeeNkbfKKqbZyNkvXThflMCNrqbl985ijfRFYXPz4ieOaeftanJ 4jcc2MDON9XnF9QTFs32TpHcA1Na1cKRpXkpQqT5Cb/I+PyCXpGvYRxbkYnKaeut mNt/hIF2ow== -----END CERTIFICATE-----Generated at Fri Mar 27 02:03:28 2026 by rpki-client