$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft File: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft (raw, json) Hash identifier: zRd8ts8igrA2ufMFmi+HVqI0pr5NAn+ikorrwqP8gnU= Subject key identifier: 4D:7F:AB:30:8E:46:4B:7E:10:2A:6E:3B:57:3B:31:83:32:0B:C9:FB Authority key identifier: 10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 Certificate issuer: /CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Certificate serial: 2D262A26E283DA75227C33A4CD489F73C55C2678 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft Manifest number: 71 Signing time: Sun 12 Apr 2026 17:04:16 +0000 Manifest this update: Sun 12 Apr 2026 16:59:16 +0000 Manifest next update: Mon 13 Apr 2026 18:31:16 +0000 Files and hashes: 1: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl (hash: G2Eg/goclTHtQ2WKS4BvGJItKVzturBF+xgOoSjLWRc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 18:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:26:2a:26:e2:83:da:75:22:7c:33:a4:cd:48:9f:73:c5:5c:26:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Validity Not Before: Apr 12 16:59:16 2026 GMT Not After : Apr 13 18:31:16 2026 GMT Subject: CN=4D7FAB308E464B7E102A6E3B573B3183320BC9FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:87:d9:4f:0b:1c:53:80:88:fd:e0:e0:3b:f7: df:30:42:21:44:9c:3c:01:1a:84:c8:3a:e7:2c:62: f9:b4:8e:ca:c6:e3:d1:d2:c1:6e:ce:b6:64:e1:36: bc:03:18:a7:67:fb:0b:41:19:28:16:41:67:dc:aa: ca:cb:59:e9:dc:6d:64:f8:e1:c5:33:9e:fe:c0:1c: 3e:6c:cb:c2:bb:28:af:e2:2b:83:c1:44:11:91:40: f5:13:d5:8b:ec:e0:cb:dd:38:bc:ba:93:59:ba:d5: 93:96:c1:5a:55:e1:9d:ce:84:b5:18:01:70:6e:9c: 39:85:ef:fd:25:5f:eb:cb:ab:f3:90:5f:2a:fb:54: 01:08:de:61:25:26:4d:94:4d:0b:dd:ab:00:fa:ba: 0a:23:12:6b:ee:62:b7:51:a1:cc:f7:90:ea:17:a2: 5c:53:ed:8a:66:2c:9c:f0:23:bc:39:a1:57:9d:8c: 63:09:5c:ba:21:07:04:55:3a:98:8e:80:87:43:1c: d4:65:a0:2a:58:99:ea:1f:6f:f7:9c:aa:94:d1:25: 34:31:06:ee:ce:58:42:d5:67:0f:f6:10:11:ce:57: d9:e4:95:77:08:62:8a:f9:fc:88:cd:06:9f:9a:9b: f5:63:79:d8:31:18:c5:4c:b7:d9:60:58:da:32:05: 69:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7F:AB:30:8E:46:4B:7E:10:2A:6E:3B:57:3B:31:83:32:0B:C9:FB X509v3 Authority Key Identifier: keyid:10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:21:2b:8f:69:af:cc:62:c3:16:f9:86:f0:b0:10:21:9a:de: a1:0f:17:71:69:74:a6:7f:1b:a5:75:5a:ff:e2:f9:e7:73:e8: f8:14:d5:f3:3d:33:d0:08:d8:0a:47:9e:ba:75:58:62:6a:96: 97:13:24:20:44:d6:29:d1:32:96:b3:7f:4d:36:c2:4f:07:68: aa:03:07:c6:08:b3:01:50:da:af:9c:c0:99:5b:6f:65:f3:7c: 7b:c9:d9:37:a6:9e:76:f4:d8:a3:76:ae:f1:f8:65:26:4d:57: f2:a5:38:28:aa:4b:51:20:d5:1a:58:3a:f7:50:5e:5e:1b:1b: 3b:82:d1:4b:65:e4:ba:8a:3b:f4:13:bc:56:07:0b:c7:6e:33: a6:6c:a1:ee:f5:3d:72:65:84:2a:83:f4:06:6b:a4:a9:83:50: f4:72:a1:41:4b:fe:9c:34:b1:f4:03:c1:5c:80:dc:71:a7:cd: b8:f2:b5:0c:03:2a:aa:21:0a:12:1d:1d:85:8d:b6:e6:c1:0b: 10:01:69:7f:77:b2:49:24:b7:0a:b2:df:b4:00:a6:94:88:01: aa:3c:db:64:6b:c1:f2:ed:2d:16:55:c5:c1:4a:ce:04:9f:ef: 38:65:a8:96:68:4a:2a:fa:c3:29:c7:fa:5b:b3:26:d4:cf:51: 97:01:26:a3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULSYqJuKD2nUifDOkzUifc8VcJngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNC RDAwNUY2NTAeFw0yNjA0MTIxNjU5MTZaFw0yNjA0MTMxODMxMTZaMDMxMTAvBgNV BAMTKDREN0ZBQjMwOEU0NjRCN0UxMDJBNkUzQjU3M0IzMTgzMzIwQkM5RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWh9lPCxxTgIj94OA7998wQiFE nDwBGoTIOucsYvm0jsrG49HSwW7OtmThNrwDGKdn+wtBGSgWQWfcqsrLWencbWT4 4cUznv7AHD5sy8K7KK/iK4PBRBGRQPUT1Yvs4MvdOLy6k1m61ZOWwVpV4Z3OhLUY AXBunDmF7/0lX+vLq/OQXyr7VAEI3mElJk2UTQvdqwD6ugojEmvuYrdRocz3kOoX olxT7YpmLJzwI7w5oVedjGMJXLohBwRVOpiOgIdDHNRloCpYmeofb/ecqpTRJTQx Bu7OWELVZw/2EBHOV9nklXcIYor5/IjNBp+am/VjedgxGMVMt9lgWNoyBWmpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTX+rMI5GS34QKm47VzsxgzILyfswHwYDVR0j BBgwFoAUEIry+Y4rwNA/KNwb4+MAI70AX2UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjAxOTMzMC8wLzEwOEFGMkY5OEUyQkMwRDAzRjI4REMxQkUzRTMw MDIzQkQwMDVGNjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNCRDAwNUY2NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwMTkzMzAvMC8xMDhBRjJGOThFMkJD MEQwM0YyOERDMUJFM0UzMDAyM0JEMDA1RjY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCErj2mvzGLD FvmG8LAQIZreoQ8XcWl0pn8bpXVa/+L553Po+BTV8z0z0AjYCkeeunVYYmqWlxMk IETWKdEylrN/TTbCTwdoqgMHxgizAVDar5zAmVtvZfN8e8nZN6aedvTYo3au8fhl Jk1X8qU4KKpLUSDVGlg691BeXhsbO4LRS2Xkuoo79BO8VgcLx24zpmyh7vU9cmWE KoP0BmukqYNQ9HKhQUv+nDSx9APBXIDccafNuPK1DAMqqiEKEh0dhY225sELEAFp f3eySSS3CrLftACmlIgBqjzbZGvB8u0tFlXFwUrOBJ/vOGWolmhKKvrDKcf6W7Mm 1M9RlwEmow== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:41 2026 by rpki-client