$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft File: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft (raw, json) Hash identifier: RH3v63yEYieyXllIONAlQwb4CGUoy79bSkMO2sWvlmU= Subject key identifier: 89:A5:35:92:DF:41:FE:E8:D3:22:C6:64:76:36:0B:55:F9:39:FE:63 Authority key identifier: 10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 Certificate issuer: /CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Certificate serial: 2A83B94CABAE0D2EE0895247CEE4BA364C78B36E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft Manifest number: FF Signing time: Wed 29 Jul 2026 10:09:04 +0000 Manifest this update: Wed 29 Jul 2026 10:04:04 +0000 Manifest next update: Thu 30 Jul 2026 11:09:04 +0000 Files and hashes: 1: 108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl (hash: xi2TSPqMv6MIYJKRl32/O7TrTa+QyqGkrScwNBQot7o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 11:09:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:83:b9:4c:ab:ae:0d:2e:e0:89:52:47:ce:e4:ba:36:4c:78:b3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108AF2F98E2BC0D03F28DC1BE3E30023BD005F65 Validity Not Before: Jul 29 10:04:04 2026 GMT Not After : Jul 30 11:09:04 2026 GMT Subject: CN=89A53592DF41FEE8D322C66476360B55F939FE63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:f6:d6:01:d4:c1:5d:19:15:a9:28:1f:10: 30:84:a0:19:1e:4f:1a:3d:f1:79:1f:56:1a:11:f2: 78:43:50:04:cd:17:92:e6:93:e9:2a:4f:25:70:0f: 41:1c:5a:ce:02:3c:7c:7c:65:10:5b:cf:6f:fd:28: 40:3f:cf:1e:a6:be:0e:83:56:c7:3d:6b:05:ac:ec: 1f:92:d1:a6:c0:b1:bd:06:1c:14:de:b9:6c:33:13: 70:7a:18:14:99:c8:3a:2d:a3:bd:91:41:bb:97:22: 02:6b:ab:02:1a:1d:45:19:71:01:fc:21:70:06:ec: 9c:e5:06:6b:43:5d:df:12:81:b4:a3:9d:d0:ce:68: db:ed:be:e6:b7:e1:5e:1e:6b:5e:05:ee:3d:ba:7e: a2:9e:9a:d6:09:ad:16:17:1a:95:81:92:2c:f4:2a: 9c:28:d2:cc:1f:4d:48:a2:26:57:f7:d9:ae:cd:55: 78:d0:9c:ba:42:ed:67:07:bf:c8:a7:c5:2f:ec:1d: 5b:a9:a5:14:b1:bb:28:41:01:4f:b5:20:ca:ef:d2: d0:84:e9:dd:55:e2:f2:cf:67:c7:b4:e2:69:71:01: ae:bb:fb:91:a6:ad:6d:9d:ed:ca:cc:47:2a:af:f3: 8b:a7:2f:4b:b5:2a:9e:c1:6c:37:a8:e2:64:bc:a0: b8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A5:35:92:DF:41:FE:E8:D3:22:C6:64:76:36:0B:55:F9:39:FE:63 X509v3 Authority Key Identifier: keyid:10:8A:F2:F9:8E:2B:C0:D0:3F:28:DC:1B:E3:E3:00:23:BD:00:5F:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346019330/0/108AF2F98E2BC0D03F28DC1BE3E30023BD005F65.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:40:36:61:35:13:bf:12:46:36:4a:dd:5e:5e:52:d8:40:b0: a2:4b:83:b3:19:3a:d1:e1:4b:08:f9:b8:18:f1:b3:43:d0:b0: 66:08:e2:b2:f4:a2:71:60:75:03:72:75:f0:c7:0e:84:ab:cf: 9a:9c:90:a5:a3:a5:76:cb:8e:35:d6:e8:15:0a:e9:47:b2:01: 61:b8:c3:bd:8a:c2:30:c1:b3:76:07:09:3e:57:d0:da:d6:55: ea:3d:29:69:fd:99:82:2a:66:ea:78:44:7a:5a:00:5e:20:31: 72:5d:30:94:d2:5f:65:ff:26:3d:7d:21:c5:2b:5d:65:b3:b5: b0:27:0c:fc:3b:73:03:34:85:92:64:9d:f9:69:40:b1:b3:a4: 5a:f5:34:44:5f:82:18:a7:78:c4:8b:be:0e:b8:c6:2d:8c:1c: 49:71:c9:f4:4b:d4:a5:78:a7:52:50:2e:b0:69:8e:9e:97:90: 9a:64:d8:2b:72:fb:02:33:41:6b:5e:d5:da:ed:bd:2d:07:74: c3:5e:e6:09:17:b7:72:40:56:a6:0a:08:66:dd:86:5d:8e:9d: 71:56:b7:b3:8d:d1:27:17:92:89:1c:74:b8:0a:be:01:17:be: 10:64:3f:3a:ef:63:00:e2:76:4d:d3:b8:5b:26:9b:03:98:3f: f8:d1:39:8d -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUKoO5TKuuDS7giVJHzuS6Nkx4s24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNC RDAwNUY2NTAeFw0yNjA3MjkxMDA0MDRaFw0yNjA3MzAxMTA5MDRaMDMxMTAvBgNV BAMTKDg5QTUzNTkyREY0MUZFRThEMzIyQzY2NDc2MzYwQjU1RjkzOUZFNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1f/bWAdTBXRkVqSgfEDCEoBke Txo98XkfVhoR8nhDUATNF5Lmk+kqTyVwD0EcWs4CPHx8ZRBbz2/9KEA/zx6mvg6D Vsc9awWs7B+S0abAsb0GHBTeuWwzE3B6GBSZyDoto72RQbuXIgJrqwIaHUUZcQH8 IXAG7JzlBmtDXd8SgbSjndDOaNvtvua34V4ea14F7j26fqKemtYJrRYXGpWBkiz0 Kpwo0swfTUiiJlf32a7NVXjQnLpC7WcHv8inxS/sHVuppRSxuyhBAU+1IMrv0tCE 6d1V4vLPZ8e04mlxAa67+5GmrW2d7crMRyqv84unL0u1Kp7BbDeo4mS8oLjtAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUiaU1kt9B/ujTIsZkdjYLVfk5/mMwHwYDVR0j BBgwFoAUEIry+Y4rwNA/KNwb4+MAI70AX2UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NjAxOTMzMC8wLzEwOEFGMkY5OEUyQkMwRDAzRjI4REMxQkUzRTMw MDIzQkQwMDVGNjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA4QUYyRjk4RTJCQzBEMDNGMjhEQzFCRTNFMzAwMjNCRDAwNUY2NS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDYwMTkzMzAvMC8xMDhBRjJGOThFMkJD MEQwM0YyOERDMUJFM0UzMDAyM0JEMDA1RjY1Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwUA2YTUTvxJG NkrdXl5S2ECwokuDsxk60eFLCPm4GPGzQ9CwZgjisvSicWB1A3J18McOhKvPmpyQ paOldsuONdboFQrpR7IBYbjDvYrCMMGzdgcJPlfQ2tZV6j0paf2Zgipm6nhEeloA XiAxcl0wlNJfZf8mPX0hxStdZbO1sCcM/DtzAzSFkmSd+WlAsbOkWvU0RF+CGKd4 xIu+DrjGLYwcSXHJ9EvUpXinUlAusGmOnpeQmmTYK3L7AjNBa17V2u29LQd0w17m CRe3ckBWpgoIZt2GXY6dcVa3s43RJxeSiRx0uAq+ARe+EGQ/Ou9jAOJ2TdO4Wyab A5g/+NE5jQ== -----END CERTIFICATE-----Generated at Wed Jul 29 23:01:54 2026 by rpki-client