$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft File: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft (raw, json) Hash identifier: frXjPbOTUsQQjMOAiaH5g/h5/FtbBLuwVUu2CTkE7jI= Subject key identifier: AF:FE:0A:C9:CE:3A:93:CD:FB:22:A0:2F:C4:46:0A:3D:9D:13:D1:DF Authority key identifier: 10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 Certificate issuer: /CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Certificate serial: 6472F09BB2355954E2C66789D6C10FA540B62904 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft Manifest number: 0128 Signing time: Fri 28 Aug 2026 06:48:15 +0000 Manifest this update: Fri 28 Aug 2026 06:43:15 +0000 Manifest next update: Mon 31 Aug 2026 12:16:15 +0000 Files and hashes: 1: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl (hash: jcyE92NTkVLa/xw/bA9FAMcPHEd+qan0Iv9dEOB0uaY=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 12:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:72:f0:9b:b2:35:59:54:e2:c6:67:89:d6:c1:0f:a5:40:b6:29:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Validity Not Before: Aug 28 06:43:15 2026 GMT Not After : Aug 31 12:16:15 2026 GMT Subject: CN=AFFE0AC9CE3A93CDFB22A02FC4460A3D9D13D1DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c8:50:e4:c0:61:9c:94:53:69:1d:23:8f:fb: 29:f5:f4:d1:0e:85:30:7a:7b:64:a5:da:bb:c0:16: 2a:5b:0e:87:33:f7:8b:84:c3:ec:68:da:e4:43:cd: db:30:00:8f:b3:15:9c:38:72:8c:1d:6f:1d:3c:b6: d6:87:9e:27:95:51:41:3c:ae:5e:51:d7:3b:8a:90: 8c:1e:c1:6b:a8:15:f0:f9:c9:ee:59:de:5e:1d:ae: a8:7c:b6:63:13:ea:4f:a6:6e:fa:74:f2:3e:e7:36: 6a:52:82:08:79:d0:b2:26:27:48:92:de:b7:b4:89: e1:a3:55:27:75:d4:c2:5e:b8:01:26:4a:53:8b:5f: f5:e6:66:8a:31:e4:fc:be:47:33:70:b0:12:23:7e: e7:78:fe:7b:b0:af:34:f1:96:86:8d:7a:d0:91:6a: 10:5e:09:e6:86:8d:4d:47:de:18:11:d2:29:52:9e: 90:34:38:f2:ae:fc:6c:ca:3f:25:eb:09:65:e1:f9: 4e:ad:7c:9d:6b:2a:0b:8e:c0:90:d3:e1:bd:5c:56: cc:83:82:e4:3f:fb:97:f7:8c:94:b3:81:c7:27:fc: 14:28:81:9c:4c:0a:67:22:39:e2:bc:b0:f8:5e:52: d1:f1:f3:98:5c:c6:2a:2d:50:41:fe:08:fc:9c:1a: 4c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FE:0A:C9:CE:3A:93:CD:FB:22:A0:2F:C4:46:0A:3D:9D:13:D1:DF X509v3 Authority Key Identifier: keyid:10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:60:77:c3:a8:ba:e5:01:ef:6d:75:11:e7:85:a1:a1:7d:97: 27:6f:e4:6e:f0:24:b3:98:92:2a:ae:77:26:01:9e:31:33:6f: 2a:4e:3e:c1:0c:ed:06:1c:07:88:64:08:7b:c5:51:75:16:a5: 23:df:89:b7:d8:f4:7d:cc:a5:5b:01:f6:dc:db:3a:75:73:ce: 9a:0e:14:fb:41:1a:60:cf:d0:40:cb:a6:b1:c2:37:f1:2b:c9: 82:50:ba:b7:27:73:3e:73:a8:14:31:b9:59:ca:0e:13:d2:00: 89:e0:97:56:c7:51:10:70:97:c2:b8:b6:17:fb:31:04:79:9a: 75:a2:83:a2:f0:5b:19:8a:e1:67:42:ac:dc:64:50:54:62:cc: 39:3b:5f:2f:d0:ac:e9:ce:24:ca:81:ca:cb:dd:dc:8a:53:d0: ee:9c:3c:44:b8:9b:e9:c9:71:4c:de:ca:e5:3d:b0:64:0a:5c: 95:6a:b9:84:e5:e3:2c:09:e9:6b:d2:21:ce:77:35:58:92:99: 5b:5f:10:bd:46:ea:5b:7a:61:f9:9e:5f:1f:97:06:3e:77:96: b8:3e:1a:d6:91:dc:4d:2f:5f:89:10:d1:2b:6b:da:9f:eb:cf: cc:0c:90:53:d2:bd:3c:7f:aa:cd:f0:2d:a6:52:4e:7c:57:fb: b5:e6:ba:ef -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZHLwm7I1WVTixmeJ1sEPpUC2KQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNC RDAwNUY2NTAeFw0yNjA4MjgwNjQzMTVaFw0yNjA4MzExMjE2MTVaMDMxMTAvBgNV BAMTKEFGRkUwQUM5Q0UzQTkzQ0RGQjIyQTAyRkM0NDYwQTNEOUQxM0QxREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZyFDkwGGclFNpHSOP+yn19NEO hTB6e2Sl2rvAFipbDocz94uEw+xo2uRDzdswAI+zFZw4cowdbx08ttaHnieVUUE8 rl5R1zuKkIwewWuoFfD5ye5Z3l4drqh8tmMT6k+mbvp08j7nNmpSggh50LImJ0iS 3re0ieGjVSd11MJeuAEmSlOLX/XmZoox5Py+RzNwsBIjfud4/nuwrzTxloaNetCR ahBeCeaGjU1H3hgR0ilSnpA0OPKu/GzKPyXrCWXh+U6tfJ1rKguOwJDT4b1cVsyD guQ/+5f3jJSzgccn/BQogZxMCmciOeK8sPheUtHx85hcxiotUEH+CPycGkydAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUr/4Kyc46k837IqAvxEYKPZ0T0d8wHwYDVR0j BBgwFoAUEIry+Y4rwNA/KNwb4+MAI70AX2UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjAxOTMzMC8wLzEwOEFGMkY5OEUyQkMwRDAzRjI4REMxQkUzRTMw MDIzQkQwMDVGNjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNCRDAwNUY2NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwMTkzMzAvMC8xMDhBRjJGOThFMkJD MEQwM0YyOERDMUJFM0UzMDAyM0JEMDA1RjY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5GB3w6i65QHv bXUR54WhoX2XJ2/kbvAks5iSKq53JgGeMTNvKk4+wQztBhwHiGQIe8VRdRalI9+J t9j0fcylWwH23Ns6dXPOmg4U+0EaYM/QQMumscI38SvJglC6tydzPnOoFDG5WcoO E9IAieCXVsdREHCXwri2F/sxBHmadaKDovBbGYrhZ0Ks3GRQVGLMOTtfL9Cs6c4k yoHKy93cilPQ7pw8RLib6clxTN7K5T2wZApclWq5hOXjLAnpa9Ihznc1WJKZW18Q vUbqW3ph+Z5fH5cGPneWuD4a1pHcTS9fiRDRK2van+vPzAyQU9K9PH+qzfAtplJO fFf7tea67w== -----END CERTIFICATE-----Generated at Sat Aug 29 07:27:43 2026 by rpki-client