$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft File: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft (raw, json) Hash identifier: 6YSQumSy/sAyOpc+Iq7KyNHb7mfdLPiJ20pgJ4ITo3Y= Subject key identifier: 1C:A7:B9:51:C0:B5:6C:40:88:66:71:F9:FA:82:15:10:B9:FD:E5:A2 Authority key identifier: 10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 Certificate issuer: /CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Certificate serial: 0297A1A27320DF9406ACBC5AFC4A79C7146AFE56 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft Manifest number: 013E Signing time: Thu 15 Oct 2026 04:41:17 +0000 Manifest this update: Thu 15 Oct 2026 04:36:17 +0000 Manifest next update: Sun 18 Oct 2026 06:53:17 +0000 Files and hashes: 1: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl (hash: 8fLK5a/UAqe/6eZcxHAGmZNE7bUT+nSQYdrFx927/nI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 18 Oct 2026 06:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:97:a1:a2:73:20:df:94:06:ac:bc:5a:fc:4a:79:c7:14:6a:fe:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Validity Not Before: Oct 15 04:36:17 2026 GMT Not After : Oct 18 06:53:17 2026 GMT Subject: CN=1CA7B951C0B56C40886671F9FA821510B9FDE5A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:eb:b6:85:45:f8:e1:83:47:be:53:66:bd:b2: 1d:3d:a7:89:c5:d6:ac:97:87:90:16:a3:70:53:26: a1:1a:eb:33:89:58:7a:53:32:2a:f9:2f:14:c4:90: 6b:1d:b6:1c:63:02:71:c9:ab:5e:6d:49:6a:72:4b: 88:92:33:18:bf:54:8b:19:c7:0e:71:39:37:d7:44: d8:6f:c5:0e:4c:19:2d:61:0f:5d:c5:da:30:53:d7: 07:05:ec:9d:be:4a:38:8c:e2:5a:f2:03:fd:ca:a2: 0c:6b:1e:56:86:62:d3:34:35:39:1f:24:4b:49:d2: 5d:9e:51:2e:2f:52:43:f8:27:b0:f7:f3:b9:ea:f0: 7a:30:6e:5f:0c:2c:3f:72:b7:b0:1b:9b:64:92:22: ce:83:d4:3a:1a:3c:02:4a:84:28:b6:92:a5:a7:03: da:6a:34:f5:76:b3:b8:66:a3:7c:7a:69:b8:51:ca: 3c:c9:f3:8c:24:cd:f5:78:d9:bc:03:26:1c:97:73: 80:bb:20:c5:04:88:65:09:62:a6:7c:20:f4:cf:5d: 43:2f:05:e1:ee:09:52:99:03:a4:bf:14:ba:8e:9e: 8c:da:7d:92:67:2c:fd:c9:dd:ff:b2:cd:3d:db:e5: f3:0c:d9:ba:a4:ca:20:68:19:0d:13:4a:4b:17:1f: db:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:A7:B9:51:C0:B5:6C:40:88:66:71:F9:FA:82:15:10:B9:FD:E5:A2 X509v3 Authority Key Identifier: keyid:10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f6:10:e1:01:7a:4a:8c:75:29:86:91:ed:e6:a9:84:20:e2: ea:f3:93:0b:5b:9c:f2:1a:70:a1:3a:33:84:2e:37:cb:3f:fb: a9:de:53:eb:25:aa:df:6d:65:11:90:30:6a:2c:76:94:60:68: c7:f5:f7:74:b1:89:91:22:58:36:37:6b:e3:c6:52:a2:ac:42: 22:77:18:d3:d3:c5:df:5c:dc:d4:f7:13:83:74:1f:5d:e1:04: b8:ac:55:ee:99:23:5f:9a:b0:14:1a:5c:8f:91:83:88:52:bd: d6:f3:a0:11:d4:99:2f:bb:2b:0c:ab:17:27:7b:d5:f8:1e:dd: 94:82:55:40:16:4a:eb:57:01:d1:d7:f3:0e:d0:1c:90:ca:55: c2:72:17:39:81:10:89:71:88:16:25:1b:18:8a:68:81:df:a1: 7b:ad:29:fa:5b:9e:21:57:eb:bf:9b:85:cd:1e:61:8c:c6:5b: 09:41:2b:c1:c9:8a:7a:21:2f:38:d7:87:71:29:15:b6:ca:c4: c1:ff:35:3f:a5:af:23:a0:cd:6b:26:85:67:77:32:e5:eb:60: 67:91:32:bf:79:7e:8a:e3:6d:88:40:7e:dc:2c:1e:d1:e7:d6: b9:bf:a9:da:25:e2:5c:6f:85:e3:3c:b6:8c:fd:2c:be:5d:e0: 7e:4c:91:1a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUApehonMg35QGrLxa/Ep5xxRq/lYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNC RDAwNUY2NTAeFw0yNjEwMTUwNDM2MTdaFw0yNjEwMTgwNjUzMTdaMDMxMTAvBgNV BAMTKDFDQTdCOTUxQzBCNTZDNDA4ODY2NzFGOUZBODIxNTEwQjlGREU1QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC867aFRfjhg0e+U2a9sh09p4nF 1qyXh5AWo3BTJqEa6zOJWHpTMir5LxTEkGsdthxjAnHJq15tSWpyS4iSMxi/VIsZ xw5xOTfXRNhvxQ5MGS1hD13F2jBT1wcF7J2+SjiM4lryA/3KogxrHlaGYtM0NTkf JEtJ0l2eUS4vUkP4J7D387nq8Howbl8MLD9yt7Abm2SSIs6D1DoaPAJKhCi2kqWn A9pqNPV2s7hmo3x6abhRyjzJ84wkzfV42bwDJhyXc4C7IMUEiGUJYqZ8IPTPXUMv BeHuCVKZA6S/FLqOnozafZJnLP3J3f+yzT3b5fMM2bqkyiBoGQ0TSksXH9vTAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUHKe5UcC1bECIZnH5+oIVELn95aIwHwYDVR0j BBgwFoAUEIry+Y4rwNA/KNwb4+MAI70AX2UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjAxOTMzMC8wLzEwOEFGMkY5OEUyQkMwRDAzRjI4REMxQkUzRTMw MDIzQkQwMDVGNjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNCRDAwNUY2NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwMTkzMzAvMC8xMDhBRjJGOThFMkJD MEQwM0YyOERDMUJFM0UzMDAyM0JEMDA1RjY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivYQ4QF6Sox1 KYaR7eaphCDi6vOTC1uc8hpwoTozhC43yz/7qd5T6yWq321lEZAwaix2lGBox/X3 dLGJkSJYNjdr48ZSoqxCIncY09PF31zc1PcTg3QfXeEEuKxV7pkjX5qwFBpcj5GD iFK91vOgEdSZL7srDKsXJ3vV+B7dlIJVQBZK61cB0dfzDtAckMpVwnIXOYEQiXGI FiUbGIpogd+he60p+lueIVfrv5uFzR5hjMZbCUErwcmKeiEvONeHcSkVtsrEwf81 P6WvI6DNayaFZ3cy5etgZ5Eyv3l+iuNtiEB+3Cwe0efWub+p2iXiXG+F4zy2jP0s vl3gfkyRGg== -----END CERTIFICATE-----Generated at Thu Oct 15 19:21:09 2026 by rpki-client