$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft File: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft (raw, json) Hash identifier: wGWVbmRbGx0EwFdIqbnJZyrQyAFgwNNItfKaPM+Np1w= Subject key identifier: 20:E1:12:32:23:7D:9E:DD:E4:D4:27:2C:4C:1E:F5:47:E2:C0:94:DE Authority key identifier: 10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 Certificate issuer: /CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Certificate serial: 7EFA96EAA0297DF594B02E5C1E2CF09BDCD6D144 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft Manifest number: 3A Signing time: Mon 02 Mar 2026 13:33:17 +0000 Manifest this update: Mon 02 Mar 2026 13:28:17 +0000 Manifest next update: Tue 03 Mar 2026 14:15:17 +0000 Files and hashes: 1: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl (hash: Z/gQGCmHItsVngzHr7WZXes+aM9NwcnxawYGpdRT1Kc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 14:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:fa:96:ea:a0:29:7d:f5:94:b0:2e:5c:1e:2c:f0:9b:dc:d6:d1:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Validity Not Before: Mar 2 13:28:17 2026 GMT Not After : Mar 3 14:15:17 2026 GMT Subject: CN=20E11232237D9EDDE4D4272C4C1EF547E2C094DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1d:8c:c4:a3:97:91:b4:a7:c1:d5:06:b6:47: da:0a:cd:1f:55:aa:4b:f0:d0:5a:24:77:41:1b:72: 23:46:c1:fb:c2:b9:03:b1:55:ef:7c:95:2b:43:a6: 27:ed:bc:28:dc:cf:53:60:f7:a1:f7:99:1c:01:b4: 2e:8a:eb:21:10:13:ff:60:30:7b:c7:42:b3:8b:7d: af:b3:e8:49:7f:15:88:49:e5:3e:a3:6b:73:a7:38: 78:5d:38:f7:a6:76:c0:23:d8:c0:56:0a:ae:4d:41: f8:95:b1:57:a9:1c:3b:16:7b:c8:93:00:17:0f:49: ce:3e:64:00:42:08:45:54:a3:24:ba:bb:72:01:6f: 2e:16:e5:89:59:40:fe:26:b5:c3:b7:a2:20:17:bf: 48:5f:7a:38:dc:39:a5:a1:e7:6b:7d:4e:db:83:2f: 2f:9c:0f:53:54:0d:20:6d:08:a6:c1:d7:76:39:7d: b0:7d:ac:24:17:0f:69:25:30:c0:9e:98:9c:8e:11: 01:87:c7:ce:c5:9e:c9:53:4a:2d:5c:9b:59:ae:f4: a2:9e:6b:09:4f:53:08:03:79:fd:18:e4:c4:14:e5: be:fa:b2:d2:2f:56:05:b0:ef:8b:c7:23:93:f2:24: f5:8e:2a:48:f9:9e:72:6d:7d:5e:34:60:cf:7d:94: ea:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E1:12:32:23:7D:9E:DD:E4:D4:27:2C:4C:1E:F5:47:E2:C0:94:DE X509v3 Authority Key Identifier: keyid:10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:2b:95:1a:12:b1:a9:7f:87:46:cb:be:d5:98:7b:d6:e7:4a: 59:af:5b:f3:ed:83:96:e3:dc:8e:b7:95:1a:02:d5:0e:65:e6: 1e:51:26:94:5f:c2:1a:3b:64:4f:69:e5:c2:81:dd:0e:d0:69: 30:a3:10:5c:36:bd:0f:e0:ac:86:a7:be:a1:7f:ac:66:35:98: fd:f4:06:02:52:83:6a:de:84:04:de:69:8a:22:88:47:f9:2c: 34:ec:da:79:e0:ce:53:5f:cb:98:f8:9d:29:87:c8:76:4a:c6: bf:0d:69:f6:f3:1e:4e:58:b1:46:68:3d:9d:23:10:5f:d7:42: 76:f7:27:f3:1b:d9:53:1d:e1:23:43:11:05:99:dd:f9:55:d6: 84:12:55:00:4c:e2:0e:a7:6c:c2:23:e5:e0:c6:1d:f3:90:b8: 5b:d0:49:fc:48:d8:39:b3:d2:81:e9:ae:43:ef:f1:59:35:fb: bc:07:3b:fb:9f:1f:35:a0:91:4b:07:31:57:fe:4f:df:14:45: 8e:71:60:7f:b2:c3:34:4c:e1:cf:b4:88:de:6c:45:36:85:e8: 8e:9e:eb:72:f4:51:39:a0:c5:f6:1d:3e:b4:ac:3c:6c:16:f7: 8b:7a:d1:b4:b5:ed:cd:56:41:58:29:3c:82:71:d9:e3:ad:6d: c8:4c:42:8d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfvqW6qApffWUsC5cHizwm9zW0UQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNC RDAwNUY2NTAeFw0yNjAzMDIxMzI4MTdaFw0yNjAzMDMxNDE1MTdaMDMxMTAvBgNV BAMTKDIwRTExMjMyMjM3RDlFRERFNEQ0MjcyQzRDMUVGNTQ3RTJDMDk0REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1HYzEo5eRtKfB1Qa2R9oKzR9V qkvw0Fokd0EbciNGwfvCuQOxVe98lStDpiftvCjcz1Ng96H3mRwBtC6K6yEQE/9g MHvHQrOLfa+z6El/FYhJ5T6ja3OnOHhdOPemdsAj2MBWCq5NQfiVsVepHDsWe8iT ABcPSc4+ZABCCEVUoyS6u3IBby4W5YlZQP4mtcO3oiAXv0hfejjcOaWh52t9TtuD Ly+cD1NUDSBtCKbB13Y5fbB9rCQXD2klMMCemJyOEQGHx87FnslTSi1cm1mu9KKe awlPUwgDef0Y5MQU5b76stIvVgWw74vHI5PyJPWOKkj5nnJtfV40YM99lOrFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUIOESMiN9nt3k1CcsTB71R+LAlN4wHwYDVR0j BBgwFoAUEIry+Y4rwNA/KNwb4+MAI70AX2UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjAxOTMzMC8wLzEwOEFGMkY5OEUyQkMwRDAzRjI4REMxQkUzRTMw MDIzQkQwMDVGNjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNCRDAwNUY2NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwMTkzMzAvMC8xMDhBRjJGOThFMkJD MEQwM0YyOERDMUJFM0UzMDAyM0JEMDA1RjY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4iuVGhKxqX+H Rsu+1Zh71udKWa9b8+2DluPcjreVGgLVDmXmHlEmlF/CGjtkT2nlwoHdDtBpMKMQ XDa9D+Cshqe+oX+sZjWY/fQGAlKDat6EBN5piiKIR/ksNOzaeeDOU1/LmPidKYfI dkrGvw1p9vMeTlixRmg9nSMQX9dCdvcn8xvZUx3hI0MRBZnd+VXWhBJVAEziDqds wiPl4MYd85C4W9BJ/EjYObPSgemuQ+/xWTX7vAc7+58fNaCRSwcxV/5P3xRFjnFg f7LDNEzhz7SI3mxFNoXojp7rcvRROaDF9h0+tKw8bBb3i3rRtLXtzVZBWCk8gnHZ 461tyExCjQ== -----END CERTIFICATE-----Generated at Tue Mar 3 02:05:17 2026 by rpki-client