$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft File: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft (raw, json) Hash identifier: EOian7wPW3Vbbp0WMC105Onv6Gg0S7hr5vt5JuUJbgs= Subject key identifier: 41:91:85:19:54:B1:C3:22:C6:34:40:A6:34:81:A8:BD:70:EF:46:7C Authority key identifier: 10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 Certificate issuer: /CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Certificate serial: 20156E45AE3D23052CD633FA099B78107C644D2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 02:04:38 +0000 Manifest this update: Fri 17 Apr 2026 01:59:38 +0000 Manifest next update: Sat 18 Apr 2026 04:16:38 +0000 Files and hashes: 1: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl (hash: nqZv2k67m5rwR8WlVzyBDDj0wcx9sSqfOJPcSomLDZU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 04:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:15:6e:45:ae:3d:23:05:2c:d6:33:fa:09:9b:78:10:7c:64:4d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Validity Not Before: Apr 17 01:59:38 2026 GMT Not After : Apr 18 04:16:38 2026 GMT Subject: CN=4191851954B1C322C63440A63481A8BD70EF467C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:01:43:dd:61:c5:73:b9:87:3d:cd:60:71:9a: c2:34:db:d1:84:5e:53:2b:32:76:f6:2b:bc:51:a8: c9:2a:3e:38:c4:c1:44:da:63:01:b3:37:e5:2a:9b: 0f:78:c4:2c:87:7f:8c:1c:f8:6e:20:37:74:b4:f7: b9:cc:b4:91:24:89:0f:f4:ce:01:55:89:d5:d2:2d: 84:eb:0a:59:63:be:af:09:8d:7d:3c:5d:38:c4:2d: ef:b5:24:f8:c3:bc:8a:d0:02:e6:bb:c9:3d:2c:7f: bd:82:3b:ae:e8:65:bb:06:5a:59:b5:b2:84:a9:21: c9:45:1f:d2:64:55:e6:15:43:37:bc:b5:67:c3:c3: 66:e9:7a:99:80:72:94:4c:18:66:fa:eb:a0:fd:93: b7:84:5b:ba:30:48:d3:50:7b:cf:7f:b2:14:78:2a: 18:a6:d3:51:6b:32:eb:d0:71:af:45:00:41:bf:40: 1d:74:ed:1e:f3:23:f8:80:09:52:d8:df:ba:5e:df: 29:24:6e:57:2a:dd:d7:bb:29:14:f2:7d:5e:1c:28: 9a:da:ba:43:8f:da:3c:92:e5:28:03:85:7c:88:da: 1a:ce:ca:77:b1:80:78:fc:1a:db:fe:47:28:14:97: c3:82:d4:8f:aa:07:70:13:7c:87:c7:ef:18:b3:cf: d2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:91:85:19:54:B1:C3:22:C6:34:40:A6:34:81:A8:BD:70:EF:46:7C X509v3 Authority Key Identifier: keyid:10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:29:23:66:b6:1e:e9:6d:c4:e0:6e:db:c2:d4:a1:1b:15:7c: b5:98:af:37:11:f1:7c:7e:a0:b1:52:5c:ba:c1:1c:43:92:98: 26:e1:f4:d5:8c:6a:9f:49:a5:ab:e2:0c:1d:5c:b4:03:33:6e: 0c:84:56:3d:ae:b4:e4:8a:80:aa:41:4c:34:77:e5:21:fa:b0: 56:65:b9:cd:2c:6e:4d:2b:6a:a3:0c:94:4e:e0:e9:dc:a9:cf: 49:e8:c2:c1:98:06:bc:61:a6:61:23:0d:a7:89:c0:ca:ed:c9: f9:84:62:7b:25:9f:e6:7c:c3:7c:47:60:b1:19:84:8a:6f:95: f9:c7:95:aa:1e:ba:53:f0:29:bd:35:51:cb:cd:11:58:73:db: 16:6b:d8:98:ca:96:31:14:26:5e:9d:6e:80:08:b7:c6:24:bd: ba:7c:0a:97:5d:4e:53:55:c5:9e:4c:c2:4d:fe:f3:97:c9:24: 34:df:dc:58:5f:0d:c5:f6:64:02:3c:03:a7:b5:10:cc:0a:ee: 3b:8c:1a:a6:2c:2a:74:96:65:6e:23:00:51:6f:d5:ea:19:c3: 51:69:08:fd:fb:13:7a:b2:fc:5b:ad:96:0d:45:39:ed:8e:5b: be:a6:34:da:bc:94:2e:53:99:23:4b:8c:06:c3:da:3e:51:f2: 04:f5:46:e8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIBVuRa49IwUs1jP6CZt4EHxkTSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNC RDAwNUY2NTAeFw0yNjA0MTcwMTU5MzhaFw0yNjA0MTgwNDE2MzhaMDMxMTAvBgNV BAMTKDQxOTE4NTE5NTRCMUMzMjJDNjM0NDBBNjM0ODFBOEJENzBFRjQ2N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTAUPdYcVzuYc9zWBxmsI029GE XlMrMnb2K7xRqMkqPjjEwUTaYwGzN+Uqmw94xCyHf4wc+G4gN3S097nMtJEkiQ/0 zgFVidXSLYTrClljvq8JjX08XTjELe+1JPjDvIrQAua7yT0sf72CO67oZbsGWlm1 soSpIclFH9JkVeYVQze8tWfDw2bpepmAcpRMGGb666D9k7eEW7owSNNQe89/shR4 Khim01FrMuvQca9FAEG/QB107R7zI/iACVLY37pe3ykkblcq3de7KRTyfV4cKJra ukOP2jyS5SgDhXyI2hrOynexgHj8Gtv+RygUl8OC1I+qB3ATfIfH7xizz9L/AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQZGFGVSxwyLGNECmNIGovXDvRnwwHwYDVR0j BBgwFoAUEIry+Y4rwNA/KNwb4+MAI70AX2UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjAxOTMzMC8wLzEwOEFGMkY5OEUyQkMwRDAzRjI4REMxQkUzRTMw MDIzQkQwMDVGNjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNCRDAwNUY2NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwMTkzMzAvMC8xMDhBRjJGOThFMkJD MEQwM0YyOERDMUJFM0UzMDAyM0JEMDA1RjY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0ikjZrYe6W3E 4G7bwtShGxV8tZivNxHxfH6gsVJcusEcQ5KYJuH01Yxqn0mlq+IMHVy0AzNuDIRW Pa605IqAqkFMNHflIfqwVmW5zSxuTStqowyUTuDp3KnPSejCwZgGvGGmYSMNp4nA yu3J+YRieyWf5nzDfEdgsRmEim+V+ceVqh66U/ApvTVRy80RWHPbFmvYmMqWMRQm Xp1ugAi3xiS9unwKl11OU1XFnkzCTf7zl8kkNN/cWF8NxfZkAjwDp7UQzAruO4wa piwqdJZlbiMAUW/V6hnDUWkI/fsTerL8W62WDUU57Y5bvqY02ryULlOZI0uMBsPa PlHyBPVG6A== -----END CERTIFICATE-----Generated at Fri Apr 17 19:36:03 2026 by rpki-client