$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft File: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft (raw, json) Hash identifier: goA8soxqh6Btnp84yZK/ZfovxSz+UFv48MieK9lZ8ik= Subject key identifier: DB:83:FB:6B:BB:E0:57:A4:EE:6A:1E:09:F6:8F:A9:0A:81:CC:FF:CB Authority key identifier: 10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 Certificate issuer: /CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Certificate serial: 0B2503382FBC8B58ACA9F5124B39F581A1D20B72 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft Manifest number: AE Signing time: Fri 29 May 2026 09:42:46 +0000 Manifest this update: Fri 29 May 2026 09:37:46 +0000 Manifest next update: Sat 30 May 2026 10:32:46 +0000 Files and hashes: 1: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl (hash: DKZRanfq1uxPHWT/kNm9dOUg1mefg5aYWIs6TCaY8Mg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 10:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:25:03:38:2f:bc:8b:58:ac:a9:f5:12:4b:39:f5:81:a1:d2:0b:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Validity Not Before: May 29 09:37:46 2026 GMT Not After : May 30 10:32:46 2026 GMT Subject: CN=DB83FB6BBBE057A4EE6A1E09F68FA90A81CCFFCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:37:e6:fb:93:ae:f0:ae:dc:82:12:af:31:a4: 04:dd:da:44:d6:3e:6f:0e:c8:5c:9b:be:11:c3:b7: f7:4f:a9:72:d3:54:93:db:2e:b3:eb:b6:e2:7e:10: fe:f9:ac:e2:63:b2:e1:22:89:76:f8:3c:e4:c9:ff: c8:78:0d:12:ec:f7:84:28:08:cd:5f:49:71:ba:f7: 7e:ec:ed:21:fa:cf:ff:84:55:37:6c:32:26:6b:db: 29:30:e8:20:6f:56:7e:3f:e3:68:3a:9c:ab:4c:e1: fc:6b:4d:3c:ec:2a:d6:fc:4e:68:fc:a5:8e:e5:f4: a9:86:92:34:1f:8a:bf:43:32:29:b4:4e:b3:9a:15: 31:61:a4:79:6f:82:a9:14:44:c2:b6:4e:48:88:f2: 08:81:d4:17:42:0d:3a:80:87:dd:83:25:ce:c2:08: 64:a1:86:2d:77:77:6f:1f:29:83:a2:44:f8:05:04: 2e:2f:4f:6b:cf:ec:15:9e:c9:8b:79:df:55:43:6a: 22:95:30:f5:65:37:e2:f9:e6:a5:ff:f8:de:30:90: 0c:75:48:72:4c:5f:9d:78:86:32:1e:8b:6c:a7:40: 72:09:54:86:1d:56:ec:8b:7f:9a:57:d9:2b:cd:a9: 9f:4d:cd:56:6a:f1:95:7d:43:5c:cd:88:55:d5:c5: 67:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:83:FB:6B:BB:E0:57:A4:EE:6A:1E:09:F6:8F:A9:0A:81:CC:FF:CB X509v3 Authority Key Identifier: keyid:10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:5a:68:14:74:af:2a:3e:23:0b:ce:01:a5:99:41:25:c7:8c: 6d:24:9c:71:83:4a:67:de:65:19:a7:14:b0:ed:1b:a9:88:6e: 93:5c:4f:cd:46:03:e0:d9:db:8a:0a:f6:a1:a9:56:43:bd:ec: 8f:8d:cf:fc:22:07:35:ea:47:74:7c:b4:6d:86:65:4c:6f:ff: e8:13:fb:a3:6a:68:0c:6f:43:05:1e:ae:d4:ff:ea:bf:cb:62: 06:07:39:fd:6c:76:4d:38:10:ae:5b:21:98:d0:4e:c1:0c:55: ad:b6:f4:19:3a:68:4f:ac:ec:3e:82:f7:69:da:00:90:86:82: ae:30:25:a2:b7:0a:b7:27:16:69:5c:74:a6:c4:a5:c9:d5:66: b4:df:a8:56:19:66:7c:db:5d:82:00:21:c5:ee:2e:81:57:f4: d4:41:73:5d:ff:f3:7f:08:bd:f0:12:bc:73:b1:68:22:a3:ce: 76:41:dd:a4:0f:01:61:e1:5c:e1:5b:00:a0:e3:2f:a4:c8:44: 57:5c:b0:b7:98:c6:96:9b:e5:f2:6c:3b:c4:14:cc:27:e1:2b: 71:27:05:14:16:d9:bb:45:0e:cf:9a:88:ab:fe:9f:9c:0c:4f: f6:eb:3d:37:9a:22:de:ab:ff:2d:25:1d:f2:59:93:4a:c1:f4: 25:ce:80:80 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCyUDOC+8i1isqfUSSzn1gaHSC3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNC RDAwNUY2NTAeFw0yNjA1MjkwOTM3NDZaFw0yNjA1MzAxMDMyNDZaMDMxMTAvBgNV BAMTKERCODNGQjZCQkJFMDU3QTRFRTZBMUUwOUY2OEZBOTBBODFDQ0ZGQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjN+b7k67wrtyCEq8xpATd2kTW Pm8OyFybvhHDt/dPqXLTVJPbLrPrtuJ+EP75rOJjsuEiiXb4POTJ/8h4DRLs94Qo CM1fSXG6937s7SH6z/+EVTdsMiZr2ykw6CBvVn4/42g6nKtM4fxrTTzsKtb8Tmj8 pY7l9KmGkjQfir9DMim0TrOaFTFhpHlvgqkURMK2TkiI8giB1BdCDTqAh92DJc7C CGShhi13d28fKYOiRPgFBC4vT2vP7BWeyYt531VDaiKVMPVlN+L55qX/+N4wkAx1 SHJMX514hjIei2ynQHIJVIYdVuyLf5pX2SvNqZ9NzVZq8ZV9Q1zNiFXVxWfZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU24P7a7vgV6Tuah4J9o+pCoHM/8swHwYDVR0j BBgwFoAUEIry+Y4rwNA/KNwb4+MAI70AX2UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjAxOTMzMC8wLzEwOEFGMkY5OEUyQkMwRDAzRjI4REMxQkUzRTMw MDIzQkQwMDVGNjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNCRDAwNUY2NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwMTkzMzAvMC8xMDhBRjJGOThFMkJD MEQwM0YyOERDMUJFM0UzMDAyM0JEMDA1RjY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAalpoFHSvKj4j C84BpZlBJceMbSSccYNKZ95lGacUsO0bqYhuk1xPzUYD4Nnbigr2oalWQ73sj43P /CIHNepHdHy0bYZlTG//6BP7o2poDG9DBR6u1P/qv8tiBgc5/Wx2TTgQrlshmNBO wQxVrbb0GTpoT6zsPoL3adoAkIaCrjAlorcKtycWaVx0psSlydVmtN+oVhlmfNtd ggAhxe4ugVf01EFzXf/zfwi98BK8c7FoIqPOdkHdpA8BYeFc4VsAoOMvpMhEV1yw t5jGlpvl8mw7xBTMJ+ErcScFFBbZu0UOz5qIq/6fnAxP9us9N5oi3qv/LSUd8lmT SsH0Jc6AgA== -----END CERTIFICATE-----Generated at Fri May 29 22:05:08 2026 by rpki-client