$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft File: 128A765795FE2957B26881E441F8240B52742BED.mft (raw, json) Hash identifier: 5fAy37DzA22k+H7DjE4ofJXCpIfwUewlsPYJdeBjtPM= Subject key identifier: 5E:92:C8:1D:EE:D0:EE:A8:E7:6B:52:D6:4F:CB:50:DF:02:43:2B:38 Authority key identifier: 12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED Certificate issuer: /CN=128A765795FE2957B26881E441F8240B52742BED Certificate serial: 2840440DAD7B3EBBCE2C61F5E9371F4A6D9E5D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft Manifest number: 77 Signing time: Wed 29 Jul 2026 07:13:46 +0000 Manifest this update: Wed 29 Jul 2026 07:08:46 +0000 Manifest next update: Thu 30 Jul 2026 09:57:46 +0000 Files and hashes: 1: 128A765795FE2957B26881E441F8240B52742BED.crl (hash: fBENlkgfm3rcsaYx+jtlmcOV4LigT6Mq+lXDV8rcOCo=) 2: 34352e3131362e3130302e302f32322d3232203d3e203233363530.roa (hash: w5GVmCPvagQwJruDKnWKoFjQ/Sy9hjjY2UMdNO5sgZI=) 3: 34322e3135372e302e302f32312d3231203d3e2030.roa (hash: bM7v9GLFz0UJuWkG/QHf07xfzcVdi+a9006fgSCnHjA=) 4: 34322e3135372e382e302f32322d3232203d3e2030.roa (hash: KoOdHIkdbXkdF93yxNHctmKrPvxBqAEUbQNpRG2aKoo=) 5: 3130332e32362e37362e302f32322d3232203d3e203233363530.roa (hash: 9Ixfxmr2fgpj9kcGLZ/WcP2sJnuni9uiRkmwCPFkX8w=) 6: 3130332e35362e3135322e302f32322d3232203d3e203233363530.roa (hash: OgCr00Fv7vrwVQT3hRxID5AadJ10ZP166nV+1cdkYr4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:40:44:0d:ad:7b:3e:bb:ce:2c:61:f5:e9:37:1f:4a:6d:9e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128A765795FE2957B26881E441F8240B52742BED Validity Not Before: Jul 29 07:08:46 2026 GMT Not After : Jul 30 09:57:46 2026 GMT Subject: CN=5E92C81DEED0EEA8E76B52D64FCB50DF02432B38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2e:6c:c1:12:e5:20:fe:75:cf:d8:0f:1b:1a: 3c:e2:fc:d8:b2:55:d6:87:48:19:77:f3:98:cc:7d: ae:ba:c8:1d:6d:f5:52:d6:55:5f:c1:cf:03:1d:2c: 24:ca:24:c5:c0:83:1b:5f:9f:c4:2a:b7:06:b4:a7: 19:f5:00:d8:f0:3a:8f:eb:1f:b8:b0:e4:70:73:bc: f9:0c:e7:4d:13:2f:cc:9b:61:79:09:d8:6c:da:11: d3:37:ae:96:dc:be:4f:aa:88:73:db:06:94:0e:36: c7:25:19:cc:30:5b:e6:51:d3:c0:20:7f:fc:e0:96: 52:78:4d:a3:6b:1d:87:ee:4f:54:8e:5b:70:01:39: 06:cc:24:ad:6a:f4:34:16:21:b7:23:c3:9b:25:a3: 93:f0:db:6f:da:fc:3b:7b:0b:e6:c3:71:12:ac:6d: 0b:03:4f:89:73:4a:70:08:69:82:d1:7d:76:44:7d: da:9f:c6:8e:be:b5:9f:b1:07:b9:0e:c9:26:b5:c9: 25:b4:16:29:5e:89:d9:50:b8:f7:57:1d:74:a1:3f: 81:67:bc:1e:6e:15:2a:38:49:65:d5:d4:77:7e:24: ab:2f:1e:0f:04:17:49:84:f6:da:23:a7:e0:a4:34: b2:7b:fc:2a:07:4d:60:84:9b:6f:6d:15:5d:66:99: c4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:92:C8:1D:EE:D0:EE:A8:E7:6B:52:D6:4F:CB:50:DF:02:43:2B:38 X509v3 Authority Key Identifier: keyid:12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:77:1f:8e:1d:38:a1:89:fa:91:69:90:f8:f3:0a:df:ae:0d: 40:b3:f7:61:99:97:83:5a:32:07:29:c5:85:88:e9:ad:ce:e0: d9:22:35:17:33:f1:04:9f:2b:6f:73:2e:02:f3:c0:3c:ea:4e: cb:8b:ff:54:14:55:1a:8b:f8:f8:ec:09:ce:b2:9e:f7:ed:d0: 9e:e8:4d:89:63:0c:ed:5d:53:d4:f4:88:53:97:df:d7:c4:6e: d4:32:1b:55:39:17:69:4e:4e:ba:6d:00:79:8a:a7:fc:8e:52: 39:5c:47:4f:dc:0f:b0:f4:25:63:64:aa:3f:dc:32:cc:96:37: 83:e5:9e:a6:4b:62:fe:c7:98:6d:9e:45:73:02:88:c4:d9:28: 42:71:fe:70:d4:68:37:aa:55:b4:6a:1f:ac:52:0b:a4:d7:2c: eb:a6:c1:ce:7f:b3:6a:bb:6e:a3:16:ea:01:d2:ea:bf:93:b1: 79:c1:62:9b:04:80:33:ee:51:f2:3d:c6:a8:00:da:0d:1b:e8: 3e:d8:cf:de:c4:23:88:14:96:ab:0f:1c:fd:95:ba:d7:6b:85: b2:25:90:6d:10:2b:a9:ba:b9:b8:c8:8f:1d:30:7d:94:2f:83: 0f:11:63:0c:77:63:5d:ee:fa:10:db:6e:18:cf:23:66:8b:86: 8c:88:00:3c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgITKEBEDa17PrvOLGH16TcfSm2eXTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygxMjhBNzY1Nzk1RkUyOTU3QjI2ODgxRTQ0MUY4MjQwQjUy NzQyQkVEMB4XDTI2MDcyOTA3MDg0NloXDTI2MDczMDA5NTc0NlowMzExMC8GA1UE AxMoNUU5MkM4MURFRUQwRUVBOEU3NkI1MkQ2NEZDQjUwREYwMjQzMkIzODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN4ubMES5SD+dc/YDxsaPOL82LJV 1odIGXfzmMx9rrrIHW31UtZVX8HPAx0sJMokxcCDG1+fxCq3BrSnGfUA2PA6j+sf uLDkcHO8+QznTRMvzJtheQnYbNoR0zeulty+T6qIc9sGlA42xyUZzDBb5lHTwCB/ /OCWUnhNo2sdh+5PVI5bcAE5BswkrWr0NBYhtyPDmyWjk/Dbb9r8O3sL5sNxEqxt CwNPiXNKcAhpgtF9dkR92p/Gjr61n7EHuQ7JJrXJJbQWKV6J2VC491cddKE/gWe8 Hm4VKjhJZdXUd34kqy8eDwQXSYT22iOn4KQ0snv8KgdNYISbb20VXWaZxEMCAwEA AaOCAh0wggIZMB0GA1UdDgQWBBReksgd7tDuqOdrUtZPy1DfAkMrODAfBgNVHSME GDAWgBQSinZXlf4pV7JogeRB+CQLUnQr7TAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA0 OTc3MjY0MDg2NDE3NDE3LzAvMTI4QTc2NTc5NUZFMjk1N0IyNjg4MUU0NDFGODI0 MEI1Mjc0MkJFRC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv MS8xMjhBNzY1Nzk1RkUyOTU3QjI2ODgxRTQ0MUY4MjQwQjUyNzQyQkVELmNlcjB+ BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS1ycHMuY25u aWMuY24vcmVwby9BMTEwNDk3NzI2NDA4NjQxNzQxNy8wLzEyOEE3NjU3OTVGRTI5 NTdCMjY4ODFFNDQxRjgyNDBCNTI3NDJCRUQubWZ0MBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggr BgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5dx+OHTihifqR aZD48wrfrg1As/dhmZeDWjIHKcWFiOmtzuDZIjUXM/EEnytvcy4C88A86k7Li/9U FFUai/j47AnOsp737dCe6E2JYwztXVPU9IhTl9/XxG7UMhtVORdpTk66bQB5iqf8 jlI5XEdP3A+w9CVjZKo/3DLMljeD5Z6mS2L+x5htnkVzAojE2ShCcf5w1Gg3qlW0 ah+sUguk1yzrpsHOf7Nqu26jFuoB0uq/k7F5wWKbBIAz7lHyPcaoANoNG+g+2M/e xCOIFJarDxz9lbrXa4WyJZBtECupurm4yI8dMH2UL4MPEWMMd2Nd7voQ224YzyNm i4aMiAA8 -----END CERTIFICATE-----Generated at Wed Jul 29 10:40:09 2026 by rpki-client