$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft File: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft (raw, json) Hash identifier: JGO3qnEB+ArxZ3Cn+aLF133D47yuZtfnyUQDZZzWByQ= Subject key identifier: DB:55:45:C9:BB:B9:40:0A:82:53:94:93:72:63:AA:65:C6:22:80:AB Authority key identifier: 10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 Certificate issuer: /CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Certificate serial: 158BC4BB4E60F01C54E86A4A8D96B160BB803D3E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft Manifest number: 013C Signing time: Sat 10 Oct 2026 21:14:56 +0000 Manifest this update: Sat 10 Oct 2026 21:09:56 +0000 Manifest next update: Tue 13 Oct 2026 22:55:56 +0000 Files and hashes: 1: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl (hash: A5tCXa6MPT8IrsSkxk7hN19nkZD85IQs8K6PXE+DsPo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 Oct 2026 22:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:8b:c4:bb:4e:60:f0:1c:54:e8:6a:4a:8d:96:b1:60:bb:80:3d:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Validity Not Before: Oct 10 21:09:56 2026 GMT Not After : Oct 13 22:55:56 2026 GMT Subject: CN=DB5545C9BBB9400A825394937263AA65C62280AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:b0:c2:05:63:e1:67:28:28:a5:75:97:89: 3b:7e:b9:1f:29:85:d0:ab:3e:89:da:fb:1f:92:21: 9f:77:67:d9:78:95:eb:7c:ce:23:5f:b9:0c:3d:64: c1:c7:8b:05:cc:98:d2:1a:a5:2b:ce:51:fd:9e:30: 05:ba:4a:38:90:78:76:e1:f1:09:d4:1a:58:5d:42: fb:51:e5:83:30:1b:2b:51:d4:b9:6b:eb:5f:31:db: f7:67:38:3d:0a:4b:50:c1:7a:30:6b:f1:aa:59:bc: 3c:09:3e:48:2a:18:c7:c5:27:3c:98:07:23:61:ca: da:1d:9d:dd:35:d9:0f:47:09:46:c4:4b:a2:24:5a: a0:31:89:f3:4e:a6:d0:ef:22:3a:23:db:c1:1e:2e: 41:3d:eb:ce:2c:bd:a4:2d:90:ec:e4:71:6c:d8:41: ff:da:75:6d:1d:b0:c4:4e:35:ac:f2:cb:80:98:11: da:c2:71:67:c5:ce:76:47:25:13:ec:a1:79:22:04: b0:10:d5:0b:2f:87:b9:8f:7d:ae:f1:2d:94:93:d7: 2b:1f:97:e5:0e:b5:81:d1:e9:80:3a:da:32:25:84: f2:dd:d1:3b:b2:cc:a6:d2:76:67:eb:b7:93:7b:a4: 10:24:b1:93:63:82:85:95:b1:ec:02:ea:0e:6d:f5: f3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:55:45:C9:BB:B9:40:0A:82:53:94:93:72:63:AA:65:C6:22:80:AB X509v3 Authority Key Identifier: keyid:10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:0a:75:ee:08:bd:aa:d7:c0:e3:ba:97:10:28:fa:e0:57:51: fe:89:02:f2:8e:c6:ee:f3:db:4d:d9:41:6b:4a:7b:06:9f:33: 2f:9a:7a:0b:d6:84:59:4f:de:c7:ca:44:45:78:1f:1d:9c:9f: d1:f6:5e:17:12:b6:33:9b:3c:47:fb:4b:64:5f:73:0c:48:d9: 99:2f:e0:dd:b5:15:c6:bb:a7:62:de:c9:4a:f0:67:33:de:6b: 8a:bf:db:39:43:0b:ab:4a:35:57:87:12:7e:73:1e:3c:c4:58: a7:99:6e:66:3d:f3:70:4c:c3:c7:2f:f1:10:64:3f:c3:ba:15: 13:5e:70:6a:5f:f7:7e:29:29:dc:bb:96:12:19:fd:d7:89:88: 49:9b:0e:17:31:19:aa:36:62:34:dc:c6:46:23:a9:90:53:3f: 6c:8c:2c:13:24:89:de:33:8e:4a:d4:87:47:84:f2:e8:cb:07: 2f:18:9b:7d:58:a0:3d:d9:6c:9d:2f:15:bf:46:3d:e5:6a:1c: 40:2a:f4:29:0c:2d:8f:72:4b:f0:b1:60:2e:1b:94:ac:28:6e: fe:a2:30:dc:ae:30:b4:1f:cd:e8:17:9a:02:31:a6:00:4e:e5: a6:d0:c0:e1:16:5c:ea:4b:ac:99:1e:e1:f5:e1:c1:43:4a:81: c0:46:84:b1 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFYvEu05g8BxU6GpKjZaxYLuAPT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNC RDAwNUY2NTAeFw0yNjEwMTAyMTA5NTZaFw0yNjEwMTMyMjU1NTZaMDMxMTAvBgNV BAMTKERCNTU0NUM5QkJCOTQwMEE4MjUzOTQ5MzcyNjNBQTY1QzYyMjgwQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCybrDCBWPhZygopXWXiTt+uR8p hdCrPona+x+SIZ93Z9l4let8ziNfuQw9ZMHHiwXMmNIapSvOUf2eMAW6SjiQeHbh 8QnUGlhdQvtR5YMwGytR1Llr618x2/dnOD0KS1DBejBr8apZvDwJPkgqGMfFJzyY ByNhytodnd012Q9HCUbES6IkWqAxifNOptDvIjoj28EeLkE9684svaQtkOzkcWzY Qf/adW0dsMRONazyy4CYEdrCcWfFznZHJRPsoXkiBLAQ1Qsvh7mPfa7xLZST1ysf l+UOtYHR6YA62jIlhPLd0TuyzKbSdmfrt5N7pBAksZNjgoWVsewC6g5t9fPTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU21VFybu5QAqCU5STcmOqZcYigKswHwYDVR0j BBgwFoAUEIry+Y4rwNA/KNwb4+MAI70AX2UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjAxOTMzMC8wLzEwOEFGMkY5OEUyQkMwRDAzRjI4REMxQkUzRTMw MDIzQkQwMDVGNjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNCRDAwNUY2NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwMTkzMzAvMC8xMDhBRjJGOThFMkJD MEQwM0YyOERDMUJFM0UzMDAyM0JEMDA1RjY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAp17gi9qtfA 47qXECj64FdR/okC8o7G7vPbTdlBa0p7Bp8zL5p6C9aEWU/ex8pERXgfHZyf0fZe FxK2M5s8R/tLZF9zDEjZmS/g3bUVxrunYt7JSvBnM95rir/bOUMLq0o1V4cSfnMe PMRYp5luZj3zcEzDxy/xEGQ/w7oVE15wal/3fikp3LuWEhn914mISZsOFzEZqjZi NNzGRiOpkFM/bIwsEySJ3jOOStSHR4Ty6MsHLxibfVigPdlsnS8Vv0Y95WocQCr0 KQwtj3JL8LFgLhuUrChu/qIw3K4wtB/N6BeaAjGmAE7lptDA4RZc6kusmR7h9eHB Q0qBwEaEsQ== -----END CERTIFICATE-----Generated at Mon Oct 12 14:31:55 2026 by rpki-client