$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft File: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft (raw, json) Hash identifier: Bj5HeBsgJAiPNQ5OJ0lewLYvGkpIkxX+i+sjVZ9W6rc= Subject key identifier: A1:A0:83:8F:0D:E3:AB:64:B3:F1:C6:D8:6E:A5:5F:35:51:7E:DF:D5 Authority key identifier: 10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 Certificate issuer: /CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Certificate serial: 0EA9713C0C36A4EBD7A988A9265170CF754E2A9B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft Manifest number: 013D Signing time: Mon 12 Oct 2026 22:57:31 +0000 Manifest this update: Mon 12 Oct 2026 22:52:31 +0000 Manifest next update: Fri 16 Oct 2026 04:40:31 +0000 Files and hashes: 1: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl (hash: 11jOLWhYZXk3zT72HXS4cLlTcqPg21MuyjcJvyTDVTA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a9:71:3c:0c:36:a4:eb:d7:a9:88:a9:26:51:70:cf:75:4e:2a:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Validity Not Before: Oct 12 22:52:31 2026 GMT Not After : Oct 16 04:40:31 2026 GMT Subject: CN=A1A0838F0DE3AB64B3F1C6D86EA55F35517EDFD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:29:06:c5:a6:53:c6:59:ed:af:b9:58:8e:67: c4:ce:38:02:c8:2d:c0:1a:f6:51:52:40:3c:57:da: ba:87:61:df:58:91:e8:6c:3a:3e:65:fe:ad:42:3e: fa:5b:4b:3e:72:85:97:05:24:39:11:69:42:c6:1c: b3:93:6c:2b:cb:35:ab:f9:27:ed:3c:f8:65:59:49: c8:13:eb:ba:37:4e:3c:2a:52:74:ee:a2:fb:9a:af: a2:1e:bf:74:31:e6:4c:d0:5f:17:d4:45:16:00:9a: b1:a1:56:a7:97:4e:6b:dc:23:cd:8a:6d:a0:6e:b2: a3:70:17:0e:67:c6:bc:77:21:35:c3:1c:f0:e6:5e: f1:79:7c:dc:7b:06:64:33:0a:1a:9b:40:c1:27:7c: 9b:b2:30:72:a5:76:06:ca:49:fe:f7:0e:ef:c4:4d: 2d:84:ac:af:45:10:0b:f6:48:eb:aa:6f:c7:e5:fb: d7:ca:6c:80:7e:c2:cb:a2:85:07:66:30:31:2d:84: 8e:92:38:f7:35:00:6d:2d:5f:88:3b:5f:88:61:94: 21:91:aa:77:52:68:ba:b5:e9:4c:15:9b:16:ca:78: c6:89:35:21:52:10:21:ff:21:c1:af:f5:f1:5c:3a: 00:ba:a4:b1:65:a3:ca:3c:5c:d1:df:7b:05:6e:cb: fb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A0:83:8F:0D:E3:AB:64:B3:F1:C6:D8:6E:A5:5F:35:51:7E:DF:D5 X509v3 Authority Key Identifier: keyid:10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:c4:56:3d:ae:80:a1:23:f2:60:6d:33:b0:6a:1f:28:39:5b: 07:5a:b8:5d:78:3d:17:7b:ed:22:fb:30:ba:4d:d3:a7:17:33: 32:e4:a8:b1:34:14:91:a7:4d:db:7f:3d:d3:35:bb:e9:7a:e0: f0:ed:f9:32:7d:da:be:0a:28:0e:b4:e0:f4:4a:bb:44:c9:cd: 4f:e7:7a:48:98:33:a9:39:15:7d:5a:aa:d4:2a:e1:3a:d6:d5: 82:d1:7d:2c:ff:19:e6:dd:aa:65:8f:f2:8b:77:86:0d:d4:58: c7:6f:83:c6:15:6d:d1:9a:ad:ac:75:3a:2a:5c:86:8d:68:a6: c5:74:6c:1b:78:25:14:76:26:0f:1e:3a:60:d6:d1:7d:b2:aa: 77:75:ee:00:c1:95:94:6d:80:5d:c8:ac:c3:bc:f4:18:63:b4: 96:3d:4c:f1:d2:a9:52:a3:6b:7e:73:50:dc:8b:11:84:d5:77: 3c:8f:20:4f:fd:11:f5:ef:08:ba:e5:ec:66:9e:a4:2e:87:47: f2:cb:ff:5f:eb:e7:38:25:65:6b:25:d8:9f:3d:f1:4d:d7:a0: 58:0d:42:cb:56:d2:11:a3:5d:dc:2f:44:39:2d:76:b2:9f:db: ba:61:97:a7:37:49:f1:49:c3:50:9c:91:3b:af:41:ef:e6:5a: 91:d2:a5:25 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUDqlxPAw2pOvXqYipJlFwz3VOKpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNC RDAwNUY2NTAeFw0yNjEwMTIyMjUyMzFaFw0yNjEwMTYwNDQwMzFaMDMxMTAvBgNV BAMTKEExQTA4MzhGMERFM0FCNjRCM0YxQzZEODZFQTU1RjM1NTE3RURGRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2KQbFplPGWe2vuViOZ8TOOALI LcAa9lFSQDxX2rqHYd9YkehsOj5l/q1CPvpbSz5yhZcFJDkRaULGHLOTbCvLNav5 J+08+GVZScgT67o3TjwqUnTuovuar6Iev3Qx5kzQXxfURRYAmrGhVqeXTmvcI82K baBusqNwFw5nxrx3ITXDHPDmXvF5fNx7BmQzChqbQMEnfJuyMHKldgbKSf73Du/E TS2ErK9FEAv2SOuqb8fl+9fKbIB+wsuihQdmMDEthI6SOPc1AG0tX4g7X4hhlCGR qndSaLq16UwVmxbKeMaJNSFSECH/IcGv9fFcOgC6pLFlo8o8XNHfewVuy/t/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUoaCDjw3jq2Sz8cbYbqVfNVF+39UwHwYDVR0j BBgwFoAUEIry+Y4rwNA/KNwb4+MAI70AX2UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjAxOTMzMC8wLzEwOEFGMkY5OEUyQkMwRDAzRjI4REMxQkUzRTMw MDIzQkQwMDVGNjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNCRDAwNUY2NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwMTkzMzAvMC8xMDhBRjJGOThFMkJD MEQwM0YyOERDMUJFM0UzMDAyM0JEMDA1RjY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu8RWPa6AoSPy YG0zsGofKDlbB1q4XXg9F3vtIvswuk3TpxczMuSosTQUkadN23890zW76Xrg8O35 Mn3avgooDrTg9Eq7RMnNT+d6SJgzqTkVfVqq1CrhOtbVgtF9LP8Z5t2qZY/yi3eG DdRYx2+DxhVt0ZqtrHU6KlyGjWimxXRsG3glFHYmDx46YNbRfbKqd3XuAMGVlG2A Xcisw7z0GGO0lj1M8dKpUqNrfnNQ3IsRhNV3PI8gT/0R9e8IuuXsZp6kLodH8sv/ X+vnOCVlayXYnz3xTdegWA1Cy1bSEaNd3C9EOS12sp/bumGXpzdJ8UnDUJyRO69B 7+ZakdKlJQ== -----END CERTIFICATE-----Generated at Wed Oct 14 01:57:12 2026 by rpki-client