$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft File: 128A765795FE2957B26881E441F8240B52742BED.mft (raw, json) Hash identifier: l3rrSB3m49bKklZdEIOxyb19r87tyrWiJf9A4+E5Hbg= Subject key identifier: 99:9F:74:17:EE:6C:69:BA:62:3D:BC:C0:8E:BD:EE:57:DD:42:96:15 Authority key identifier: 12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED Certificate issuer: /CN=128A765795FE2957B26881E441F8240B52742BED Certificate serial: 22828A1016E4C126570315531CCFBE0C41C3B671 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft Manifest number: 64 Signing time: Tue 14 Jul 2026 13:16:22 +0000 Manifest this update: Tue 14 Jul 2026 13:11:22 +0000 Manifest next update: Wed 15 Jul 2026 16:51:22 +0000 Files and hashes: 1: 128A765795FE2957B26881E441F8240B52742BED.crl (hash: WmRcEGA8JNwjswUNi8/yuA2zUbrivcJghQdqv7gCga4=) 2: 34322e3135372e382e302f32322d3232203d3e2030.roa (hash: KoOdHIkdbXkdF93yxNHctmKrPvxBqAEUbQNpRG2aKoo=) 3: 34352e3131362e3130302e302f32322d3232203d3e203233363530.roa (hash: w5GVmCPvagQwJruDKnWKoFjQ/Sy9hjjY2UMdNO5sgZI=) 4: 3130332e35362e3135322e302f32322d3232203d3e203233363530.roa (hash: OgCr00Fv7vrwVQT3hRxID5AadJ10ZP166nV+1cdkYr4=) 5: 3130332e32362e37362e302f32322d3232203d3e203233363530.roa (hash: 9Ixfxmr2fgpj9kcGLZ/WcP2sJnuni9uiRkmwCPFkX8w=) 6: 34322e3135372e302e302f32312d3231203d3e2030.roa (hash: bM7v9GLFz0UJuWkG/QHf07xfzcVdi+a9006fgSCnHjA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 16:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:82:8a:10:16:e4:c1:26:57:03:15:53:1c:cf:be:0c:41:c3:b6:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128A765795FE2957B26881E441F8240B52742BED Validity Not Before: Jul 14 13:11:22 2026 GMT Not After : Jul 15 16:51:22 2026 GMT Subject: CN=999F7417EE6C69BA623DBCC08EBDEE57DD429615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:94:33:28:29:0d:20:d0:4b:b7:20:01:07:2f: 1f:89:39:c5:1a:09:75:6e:94:1e:3a:fd:f5:8a:9e: 11:d7:f9:9d:4f:7b:7f:7e:4b:0b:b5:06:86:af:23: e8:2b:ed:e1:c2:f9:dc:29:80:7a:e8:3a:c7:79:30: f3:e5:f1:6f:bd:3e:34:5b:4d:95:b4:22:2a:2d:52: bb:0e:35:77:71:8a:cc:8b:e5:66:70:99:9a:28:d7: 19:d9:ca:50:c2:ce:eb:05:2a:a2:37:e1:1e:2a:5b: 19:59:b3:38:60:1a:b7:84:fe:5c:81:ba:4a:92:ba: 66:62:31:df:04:0a:e2:80:cb:38:c8:d4:51:b2:8f: 03:a2:ed:1e:02:6a:e8:fb:49:24:69:81:d2:24:9d: 89:9e:17:c3:c9:d5:53:b7:ed:1d:f4:a2:55:bf:40: 6a:8f:12:05:36:44:88:7a:0a:5e:96:c7:16:f5:f8: b1:b2:9f:41:01:5b:80:28:96:7e:b3:99:f4:d1:4b: 45:86:ac:1f:6c:69:ae:a6:e1:f0:0d:ec:08:a4:65: 8e:76:25:05:33:f8:e4:22:da:85:28:69:14:9b:06: 5a:45:76:f8:36:c1:e7:c3:83:dd:56:0d:87:51:15: eb:53:46:8c:ae:a6:56:82:34:7b:67:7e:54:24:58: 55:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9F:74:17:EE:6C:69:BA:62:3D:BC:C0:8E:BD:EE:57:DD:42:96:15 X509v3 Authority Key Identifier: keyid:12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:8c:60:0e:e2:95:a5:47:64:bc:5f:8b:b1:52:07:b1:89:de: 4d:7d:06:ec:b7:ba:00:50:57:e6:43:a6:9e:e0:8c:08:a4:e8: 67:08:18:6d:08:27:37:ed:85:a5:7c:00:fd:48:f9:b1:99:78: d0:e7:46:9f:40:42:4e:a0:ae:96:0e:ec:1f:4b:46:b2:b9:67: 9c:60:59:c4:ec:30:72:cb:26:43:c5:1e:d6:69:a6:7c:69:d4: f4:19:cf:fb:3b:10:ae:c8:44:97:62:ca:8a:23:d6:18:dc:c3: 7a:10:56:bd:c7:17:fd:bd:89:7c:8f:7d:a6:70:1e:58:5d:a6: ad:0e:0d:6d:c6:91:6a:d2:b6:a0:b0:36:e3:a8:5f:51:77:99: b0:f3:81:6c:d3:ee:a2:66:f1:f8:65:29:45:60:ff:ab:8c:5f: 47:b7:04:4f:da:08:40:ad:aa:b7:55:81:1e:81:d9:31:22:10: 2a:e9:c5:67:01:8b:42:ce:6b:69:1b:6b:8f:0d:f4:e8:9c:95: a0:ed:c8:74:19:b9:50:cd:32:2d:ce:94:05:9c:83:04:e6:d5: c1:47:79:98:91:4f:e9:0b:80:48:d4:37:75:8f:40:ad:7a:e0: b8:6f:28:ad:4d:b5:b2:5f:61:43:c2:fb:c0:99:b8:cb:b3:49: 2c:22:a0:34 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIoKKEBbkwSZXAxVTHM++DEHDtnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI4QTc2NTc5NUZFMjk1N0IyNjg4MUU0NDFGODI0MEI1 Mjc0MkJFRDAeFw0yNjA3MTQxMzExMjJaFw0yNjA3MTUxNjUxMjJaMDMxMTAvBgNV BAMTKDk5OUY3NDE3RUU2QzY5QkE2MjNEQkNDMDhFQkRFRTU3REQ0Mjk2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmlDMoKQ0g0Eu3IAEHLx+JOcUa CXVulB46/fWKnhHX+Z1Pe39+Swu1BoavI+gr7eHC+dwpgHroOsd5MPPl8W+9PjRb TZW0IiotUrsONXdxisyL5WZwmZoo1xnZylDCzusFKqI34R4qWxlZszhgGreE/lyB ukqSumZiMd8ECuKAyzjI1FGyjwOi7R4Cauj7SSRpgdIknYmeF8PJ1VO37R30olW/ QGqPEgU2RIh6Cl6Wxxb1+LGyn0EBW4Aoln6zmfTRS0WGrB9saa6m4fAN7AikZY52 JQUz+OQi2oUoaRSbBlpFdvg2wefDg91WDYdRFetTRoyuplaCNHtnflQkWFUDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmZ90F+5sabpiPbzAjr3uV91ClhUwHwYDVR0j BBgwFoAUEop2V5X+KVeyaIHkQfgkC1J0K+0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDk3NzI2NDA4NjQxNzQxNy8wLzEyOEE3NjU3OTVGRTI5NTdCMjY4ODFFNDQxRjgy NDBCNTI3NDJCRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTI4QTc2NTc5NUZFMjk1N0IyNjg4MUU0NDFGODI0MEI1Mjc0MkJFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ5NzcyNjQwODY0MTc0MTcvMC8xMjhBNzY1Nzk1RkUy OTU3QjI2ODgxRTQ0MUY4MjQwQjUyNzQyQkVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoxgDuKVpUdk vF+LsVIHsYneTX0G7Le6AFBX5kOmnuCMCKToZwgYbQgnN+2FpXwA/Uj5sZl40OdG n0BCTqCulg7sH0tGsrlnnGBZxOwwcssmQ8Ue1mmmfGnU9BnP+zsQrshEl2LKiiPW GNzDehBWvccX/b2JfI99pnAeWF2mrQ4NbcaRatK2oLA246hfUXeZsPOBbNPuombx +GUpRWD/q4xfR7cET9oIQK2qt1WBHoHZMSIQKunFZwGLQs5raRtrjw306JyVoO3I dBm5UM0yLc6UBZyDBObVwUd5mJFP6QuASNQ3dY9ArXrguG8orU21sl9hQ8L7wJm4 y7NJLCKgNA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:09:23 2026 by rpki-client