$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft File: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft (raw, json) Hash identifier: eaTiO5l+SIey+ilAlXTK3RXL9/dH2vP1RBhyaXnpoDM= Subject key identifier: 5C:27:7D:BB:08:F2:F0:91:32:5F:72:BC:4B:3D:F4:4C:90:94:BC:4E Authority key identifier: 10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 Certificate issuer: /CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Certificate serial: 2C292CF234E664D8227A1E849C2CB94F6E851903 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft Manifest number: EB Signing time: Tue 14 Jul 2026 16:06:36 +0000 Manifest this update: Tue 14 Jul 2026 16:01:36 +0000 Manifest next update: Wed 15 Jul 2026 16:49:36 +0000 Files and hashes: 1: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl (hash: xviU4aLA/qTJ8sN5+2s2eSCajqHxmg1HEqBo4hd7RxE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 16:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:29:2c:f2:34:e6:64:d8:22:7a:1e:84:9c:2c:b9:4f:6e:85:19:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Validity Not Before: Jul 14 16:01:36 2026 GMT Not After : Jul 15 16:49:36 2026 GMT Subject: CN=5C277DBB08F2F091325F72BC4B3DF44C9094BC4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9d:87:2b:e6:28:ac:d3:56:99:f7:b5:95:26: 76:d5:cc:a9:ff:0d:0e:e1:e9:46:00:bd:b1:08:1d: 00:9c:b5:4c:2a:4e:1e:8a:72:24:d0:63:a9:40:cc: 4b:92:60:b9:69:65:0c:74:a2:1b:e5:6e:87:e5:d7: f8:ba:3a:80:e6:5b:a2:7c:d3:7f:34:58:d8:6d:db: e5:dc:5c:b4:da:e4:bc:9f:1b:31:c0:76:10:59:77: 0a:a5:c3:90:8a:76:42:2d:5e:9d:41:41:d6:bc:57: c5:ad:a1:32:64:f5:67:ad:84:ec:9c:6b:e8:19:2b: 50:87:d1:97:85:e0:23:d2:49:cb:73:84:9b:fe:e6: 81:ca:39:9c:ab:00:c6:6f:cf:56:db:3f:38:af:cf: a3:a3:4e:69:90:aa:2a:ff:71:39:9b:54:96:95:4a: 00:86:b8:c2:fe:cf:66:1e:44:74:d0:e8:ad:43:eb: 53:a0:7f:f8:f7:40:7e:de:45:0b:1c:8f:ee:14:60: 05:c6:d3:e8:8b:c4:3b:e4:8a:99:1c:5f:04:ea:13: aa:fc:99:aa:9f:d9:d5:06:ce:ba:57:9d:fd:8f:db: ee:9c:84:3b:33:15:82:7e:5f:ef:88:ba:77:c6:3b: c5:c3:de:a6:f7:7f:d0:b5:ff:9a:84:1d:5c:64:9c: 86:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:27:7D:BB:08:F2:F0:91:32:5F:72:BC:4B:3D:F4:4C:90:94:BC:4E X509v3 Authority Key Identifier: keyid:10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:05:d6:ef:62:3f:80:0d:58:f3:b7:d8:9a:77:fa:02:43:ea: 00:23:5a:f3:53:07:d1:fd:4b:e2:17:c0:38:99:18:a5:ae:79: 57:5a:69:ab:11:10:18:38:4d:b3:dd:7f:f6:62:f0:5e:d8:59: 16:da:8e:43:3c:9f:55:5a:95:eb:5d:0b:c0:55:80:c8:48:b1: f6:12:37:7c:7a:27:42:01:cf:c0:ff:f0:f6:05:43:30:c3:05: 55:54:77:8b:a2:72:ba:96:d3:2f:2c:fd:51:19:7a:b6:20:83: 12:64:46:b7:69:cb:71:14:bc:89:c8:d5:59:39:b9:69:84:0a: 01:46:3e:d8:cc:c7:7d:cd:59:93:72:3c:a9:cf:f1:53:85:ca: cc:86:fc:e9:90:0a:b9:d6:39:c4:b7:5b:89:b1:e2:78:13:d3: ee:1d:bf:75:27:1d:07:68:71:5e:45:94:3a:6c:e2:8e:65:53: 4a:2d:42:c4:e7:90:e7:0f:14:78:39:9f:96:e8:ad:22:35:af: 19:df:94:fe:59:7f:35:03:a9:67:71:98:f7:e4:6a:4f:99:28: 2c:bd:10:98:f2:42:f2:cb:06:89:7e:4e:54:f9:73:e7:d0:b3: 20:f5:c9:c6:80:b4:58:96:ef:40:f2:a7:9b:71:17:45:a3:ae: b2:a2:a2:be -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULCks8jTmZNgieh6EnCy5T26FGQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNC RDAwNUY2NTAeFw0yNjA3MTQxNjAxMzZaFw0yNjA3MTUxNjQ5MzZaMDMxMTAvBgNV BAMTKDVDMjc3REJCMDhGMkYwOTEzMjVGNzJCQzRCM0RGNDRDOTA5NEJDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTnYcr5iis01aZ97WVJnbVzKn/ DQ7h6UYAvbEIHQCctUwqTh6KciTQY6lAzEuSYLlpZQx0ohvlbofl1/i6OoDmW6J8 0380WNht2+XcXLTa5LyfGzHAdhBZdwqlw5CKdkItXp1BQda8V8WtoTJk9WethOyc a+gZK1CH0ZeF4CPSSctzhJv+5oHKOZyrAMZvz1bbPzivz6OjTmmQqir/cTmbVJaV SgCGuML+z2YeRHTQ6K1D61Ogf/j3QH7eRQscj+4UYAXG0+iLxDvkipkcXwTqE6r8 maqf2dUGzrpXnf2P2+6chDszFYJ+X++IunfGO8XD3qb3f9C1/5qEHVxknIZXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUXCd9uwjy8JEyX3K8Sz30TJCUvE4wHwYDVR0j BBgwFoAUEIry+Y4rwNA/KNwb4+MAI70AX2UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjAxOTMzMC8wLzEwOEFGMkY5OEUyQkMwRDAzRjI4REMxQkUzRTMw MDIzQkQwMDVGNjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNCRDAwNUY2NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwMTkzMzAvMC8xMDhBRjJGOThFMkJD MEQwM0YyOERDMUJFM0UzMDAyM0JEMDA1RjY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgXW72I/gA1Y 87fYmnf6AkPqACNa81MH0f1L4hfAOJkYpa55V1ppqxEQGDhNs91/9mLwXthZFtqO QzyfVVqV610LwFWAyEix9hI3fHonQgHPwP/w9gVDMMMFVVR3i6JyupbTLyz9URl6 tiCDEmRGt2nLcRS8icjVWTm5aYQKAUY+2MzHfc1Zk3I8qc/xU4XKzIb86ZAKudY5 xLdbibHieBPT7h2/dScdB2hxXkWUOmzijmVTSi1CxOeQ5w8UeDmfluitIjWvGd+U /ll/NQOpZ3GY9+RqT5koLL0QmPJC8ssGiX5OVPlz59CzIPXJxoC0WJbvQPKnm3EX RaOusqKivg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:12:44 2026 by rpki-client