$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft File: 128A765795FE2957B26881E441F8240B52742BED.mft (raw, json) Hash identifier: w5K8Wz8RtWmUcZm9bJZRwl7ZiZLVqEeRlTcG9drPvpY= Subject key identifier: 24:9E:9B:61:23:1A:C5:4B:75:EF:67:41:60:97:83:A6:15:5E:D1:0D Authority key identifier: 12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED Certificate issuer: /CN=128A765795FE2957B26881E441F8240B52742BED Certificate serial: 714BD7828000238AFDA3AE023FA47D2421C5B487 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft Manifest number: B7 Signing time: Sun 18 Oct 2026 13:39:50 +0000 Manifest this update: Sun 18 Oct 2026 13:34:50 +0000 Manifest next update: Wed 21 Oct 2026 16:08:50 +0000 Files and hashes: 1: 128A765795FE2957B26881E441F8240B52742BED.crl (hash: YYb0kGBRkwm3Iril7l0W5x9idx2KbNuNU9bkbNbfCR4=) 2: 34322e3135372e302e302f32312d3231203d3e2030.roa (hash: bM7v9GLFz0UJuWkG/QHf07xfzcVdi+a9006fgSCnHjA=) 3: 3130332e32362e37362e302f32322d3232203d3e203233363530.roa (hash: 9Ixfxmr2fgpj9kcGLZ/WcP2sJnuni9uiRkmwCPFkX8w=) 4: 34322e3135372e382e302f32322d3232203d3e2030.roa (hash: KoOdHIkdbXkdF93yxNHctmKrPvxBqAEUbQNpRG2aKoo=) 5: 3130332e35362e3135322e302f32322d3232203d3e203233363530.roa (hash: OgCr00Fv7vrwVQT3hRxID5AadJ10ZP166nV+1cdkYr4=) 6: 34352e3131362e3130302e302f32322d3232203d3e203233363530.roa (hash: w5GVmCPvagQwJruDKnWKoFjQ/Sy9hjjY2UMdNO5sgZI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 Oct 2026 16:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:4b:d7:82:80:00:23:8a:fd:a3:ae:02:3f:a4:7d:24:21:c5:b4:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128A765795FE2957B26881E441F8240B52742BED Validity Not Before: Oct 18 13:34:50 2026 GMT Not After : Oct 21 16:08:50 2026 GMT Subject: CN=249E9B61231AC54B75EF6741609783A6155ED10D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0c:c4:81:e0:bd:96:bd:26:47:fe:29:61:73: ad:b5:d3:0b:cb:75:80:e6:e0:78:78:02:7d:cf:fd: 2c:f1:7c:52:21:7a:e9:a7:e1:48:90:c1:1d:ae:00: 61:84:53:ae:8e:85:a5:a4:7e:3d:50:16:6f:2e:6d: ac:65:5a:cf:9e:47:1a:85:48:fa:72:01:e7:bc:7c: 2c:c2:d7:5c:3b:72:44:9d:18:23:10:75:da:70:d9: 94:7a:98:3c:41:4c:15:fe:95:1c:8c:4e:12:5d:29: 65:d1:c4:53:c0:fd:22:87:69:f8:7e:32:95:4f:ed: 83:ce:c7:87:cf:69:61:1a:52:62:11:10:87:37:55: 01:ff:3f:58:87:97:22:a5:ce:c9:34:97:09:3c:6f: 86:8a:82:07:a2:9b:37:85:67:c5:cf:71:04:92:6a: 78:9e:71:9b:ef:33:ef:7b:05:68:b7:fe:19:d3:32: b4:1c:a6:a6:5e:e9:10:81:3b:77:a7:d1:e6:79:26: 78:9d:da:28:05:be:b3:32:dd:a6:6a:81:3d:38:f1: 13:2f:32:7b:bc:99:5f:ec:fe:3d:1f:93:cc:cc:ac: e9:c2:1e:b0:72:42:7e:84:3d:0c:83:52:b1:7c:59: bb:80:df:cd:8b:35:8f:e7:bf:1d:f4:3c:a0:f0:d3: 72:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9E:9B:61:23:1A:C5:4B:75:EF:67:41:60:97:83:A6:15:5E:D1:0D X509v3 Authority Key Identifier: keyid:12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:b0:3c:33:27:50:2b:6b:e7:46:0e:f6:c4:a5:7d:76:a7:11: fd:98:2f:74:23:04:bc:9b:54:a4:cd:8e:17:a2:c6:ca:de:8c: 3d:a1:11:0f:df:67:da:a8:d0:45:b7:24:41:3b:5d:70:fc:49: b3:9d:9c:17:16:68:04:aa:48:6a:b4:b3:c6:ab:13:cc:aa:12: ac:ad:31:57:c4:cf:f3:3e:cd:4d:08:e8:5f:e2:42:92:8f:44: d9:1e:50:59:dd:dd:7c:7d:3f:e0:b8:90:f7:19:e7:81:eb:c4: 0e:1f:bc:37:c1:49:88:d1:91:cf:c9:ba:c7:25:c4:c3:8a:6c: 8f:e3:42:5a:7c:25:39:83:d6:cf:c4:13:4a:0a:90:77:63:dd: 85:07:86:ca:d9:87:23:b8:3c:60:dd:61:df:9e:2f:d1:a9:73: 13:e9:d7:c0:45:9b:64:37:94:1c:60:1a:83:cb:cd:0a:32:d4: 47:19:28:07:4f:f6:f1:66:92:b2:7d:7f:8d:8b:13:e2:3c:32: 49:dc:ed:32:b9:e0:84:2a:7e:ca:f2:05:40:c7:82:9d:4e:02: f0:16:6c:a8:a3:74:5f:04:d0:e4:15:e8:49:35:06:d4:f2:ff: ed:d6:05:b1:d2:80:f2:34:5a:6b:fa:87:c1:f2:9a:d1:f4:57: d0:08:cc:f4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUcUvXgoAAI4r9o64CP6R9JCHFtIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI4QTc2NTc5NUZFMjk1N0IyNjg4MUU0NDFGODI0MEI1 Mjc0MkJFRDAeFw0yNjEwMTgxMzM0NTBaFw0yNjEwMjExNjA4NTBaMDMxMTAvBgNV BAMTKDI0OUU5QjYxMjMxQUM1NEI3NUVGNjc0MTYwOTc4M0E2MTU1RUQxMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcDMSB4L2WvSZH/ilhc6210wvL dYDm4Hh4An3P/SzxfFIheumn4UiQwR2uAGGEU66OhaWkfj1QFm8ubaxlWs+eRxqF SPpyAee8fCzC11w7ckSdGCMQddpw2ZR6mDxBTBX+lRyMThJdKWXRxFPA/SKHafh+ MpVP7YPOx4fPaWEaUmIREIc3VQH/P1iHlyKlzsk0lwk8b4aKggeimzeFZ8XPcQSS aniecZvvM+97BWi3/hnTMrQcpqZe6RCBO3en0eZ5Jnid2igFvrMy3aZqgT048RMv Mnu8mV/s/j0fk8zMrOnCHrByQn6EPQyDUrF8WbuA382LNY/nvx30PKDw03LdAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUJJ6bYSMaxUt172dBYJeDphVe0Q0wHwYDVR0j BBgwFoAUEop2V5X+KVeyaIHkQfgkC1J0K+0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDk3NzI2NDA4NjQxNzQxNy8wLzEyOEE3NjU3OTVGRTI5NTdCMjY4ODFFNDQxRjgy NDBCNTI3NDJCRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTI4QTc2NTc5NUZFMjk1N0IyNjg4MUU0NDFGODI0MEI1Mjc0MkJFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ5NzcyNjQwODY0MTc0MTcvMC8xMjhBNzY1Nzk1RkUy OTU3QjI2ODgxRTQ0MUY4MjQwQjUyNzQyQkVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLA8MydQK2vn Rg72xKV9dqcR/ZgvdCMEvJtUpM2OF6LGyt6MPaERD99n2qjQRbckQTtdcPxJs52c FxZoBKpIarSzxqsTzKoSrK0xV8TP8z7NTQjoX+JCko9E2R5QWd3dfH0/4LiQ9xnn gevEDh+8N8FJiNGRz8m6xyXEw4psj+NCWnwlOYPWz8QTSgqQd2PdhQeGytmHI7g8 YN1h354v0alzE+nXwEWbZDeUHGAag8vNCjLURxkoB0/28WaSsn1/jYsT4jwySdzt MrnghCp+yvIFQMeCnU4C8BZsqKN0XwTQ5BXoSTUG1PL/7dYFsdKA8jRaa/qHwfKa 0fRX0AjM9A== -----END CERTIFICATE-----Generated at Sun Oct 18 17:47:17 2026 by rpki-client