
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft
File: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft (raw, json)
Hash identifier: uv/RFX/kqrcA6/PFtNsjxAqD1P5turWe9K64EHO/SV8=
Subject key identifier: EF:0D:9F:EB:54:4D:53:EC:93:C1:68:A0:32:2A:FD:C3:81:C8:01:CB
Authority key identifier: 10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65
Certificate issuer: /CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65
Certificate serial: 7FAC2A8E4C0A5FA2C663DB095509C0544D01714D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft
Manifest number: 2F
Signing time: Sun 22 Feb 2026 10:22:30 +0000
Manifest this update: Sun 22 Feb 2026 10:17:30 +0000
Manifest next update: Mon 23 Feb 2026 13:53:30 +0000
Files and hashes: 1: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl (hash: fHMw4IEA0gTYF5ANicMQxAipwjf6dhasUj/H8f6jNAE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 09:42:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:ac:2a:8e:4c:0a:5f:a2:c6:63:db:09:55:09:c0:54:4d:01:71:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65
Validity
Not Before: Feb 22 10:17:30 2026 GMT
Not After : Feb 23 13:53:30 2026 GMT
Subject: CN=EF0D9FEB544D53EC93C168A0322AFDC381C801CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e4:40:a4:85:04:ed:26:c9:11:48:71:50:f6:
c7:88:81:fe:68:ab:13:3a:f9:e1:1b:0a:70:67:cd:
ec:14:4c:1c:24:ff:a9:46:2a:85:b9:46:3a:42:5f:
e7:dc:00:41:c7:8e:ad:38:94:6a:10:ce:6c:6e:2a:
04:04:6b:8e:ae:86:2b:07:ec:b7:24:ef:98:3d:4b:
99:a2:f2:b5:b2:d8:1c:1a:0b:1f:77:31:ea:35:84:
69:01:fd:0d:51:3d:ba:fa:50:51:71:d3:45:d5:07:
85:d2:53:7f:85:c8:86:27:29:1e:74:e6:80:0c:15:
3c:18:f0:ac:6d:e9:55:b0:83:bb:6e:dc:c3:c3:55:
ca:89:04:9c:b6:d0:35:99:ee:78:47:d3:7d:11:9f:
b4:b0:c8:74:66:9c:62:7d:95:eb:d9:f1:d0:fa:3a:
a4:4a:25:ae:10:77:78:00:fa:be:e2:fd:f1:01:b9:
ea:97:38:05:3d:b1:ba:8f:23:36:55:ea:f4:7c:6d:
1f:bd:5c:39:7b:e9:f1:a5:7a:a8:d8:fc:a6:6e:51:
50:2e:5d:0e:d9:1d:16:32:0f:a6:2b:0f:9f:f3:08:
18:3d:1e:ce:ff:58:e2:9f:e9:0b:5d:21:92:85:07:
be:c2:b7:dd:74:19:90:6f:8a:6c:cc:3d:dc:98:b0:
e0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0D:9F:EB:54:4D:53:EC:93:C1:68:A0:32:2A:FD:C3:81:C8:01:CB
X509v3 Authority Key Identifier:
keyid:10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:47:7c:3d:c4:2f:8e:b7:6c:18:af:f8:a5:b1:d3:a1:9d:c7:
bf:ef:69:91:8c:0e:23:8d:19:da:89:54:3b:66:41:fc:98:a4:
9e:99:43:74:bd:6a:f1:47:af:c3:ac:f9:f9:d7:00:1c:35:d7:
42:79:66:2f:b4:59:ff:fe:f4:ea:1e:cf:38:72:1d:0d:b0:0d:
79:61:c2:9c:c5:83:85:50:58:59:8a:f1:c5:25:08:27:be:67:
83:3a:f1:61:52:a3:b0:72:d8:f7:02:45:38:fd:4c:46:85:dd:
09:4f:82:1b:01:01:5f:8d:0c:8d:47:91:c8:dd:3d:36:63:e1:
52:ec:49:c7:e0:b5:c7:b2:6f:b4:22:da:dd:b3:ab:c4:5c:77:
7f:b8:9a:9b:11:3f:20:bf:66:be:b0:f3:ab:c7:0b:a3:be:bf:
fa:22:d5:e3:a7:7c:f5:01:ba:94:31:a5:c5:ef:7f:95:e1:71:
0d:24:88:1e:94:9d:bb:3b:7c:d1:26:b4:21:c3:c2:9e:67:22:
8a:b3:9b:7f:0b:73:f4:81:ec:c4:1e:dc:00:95:07:74:90:78:
2c:7e:ae:cd:a2:54:6a:e4:c2:4e:7d:c8:9e:70:e5:53:22:a4:
f1:c7:50:cf:fb:33:33:83:e7:07:90:99:a1:40:d9:cf:bd:7e:
79:aa:5a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 02:27:10 2026 by rpki-client