$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft File: 128A765795FE2957B26881E441F8240B52742BED.mft (raw, json) Hash identifier: FqFalCLJLvVQ24Zo/y7seElFecd+ffkczLbThKpcS90= Subject key identifier: 8F:29:5F:AE:B8:96:CC:03:3B:7E:FD:73:2C:8D:54:CC:4C:C6:1B:D0 Authority key identifier: 12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED Certificate issuer: /CN=128A765795FE2957B26881E441F8240B52742BED Certificate serial: 3A8163853C31B17755270FCF4332649962931652 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft Manifest number: 27 Signing time: Fri 29 May 2026 14:52:58 +0000 Manifest this update: Fri 29 May 2026 14:47:58 +0000 Manifest next update: Sat 30 May 2026 16:28:58 +0000 Files and hashes: 1: 3130332e35362e3135322e302f32322d3232203d3e203233363530.roa (hash: OgCr00Fv7vrwVQT3hRxID5AadJ10ZP166nV+1cdkYr4=) 2: 34322e3135372e382e302f32322d3232203d3e2030.roa (hash: KoOdHIkdbXkdF93yxNHctmKrPvxBqAEUbQNpRG2aKoo=) 3: 34352e3131362e3130302e302f32322d3232203d3e203233363530.roa (hash: w5GVmCPvagQwJruDKnWKoFjQ/Sy9hjjY2UMdNO5sgZI=) 4: 3130332e32362e37362e302f32322d3232203d3e203233363530.roa (hash: 9Ixfxmr2fgpj9kcGLZ/WcP2sJnuni9uiRkmwCPFkX8w=) 5: 128A765795FE2957B26881E441F8240B52742BED.crl (hash: ozIUGXO4lDr+187MV7uADGs8cj60NLVzYY3xaSlxp/s=) 6: 34322e3135372e302e302f32312d3231203d3e2030.roa (hash: bM7v9GLFz0UJuWkG/QHf07xfzcVdi+a9006fgSCnHjA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:81:63:85:3c:31:b1:77:55:27:0f:cf:43:32:64:99:62:93:16:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128A765795FE2957B26881E441F8240B52742BED Validity Not Before: May 29 14:47:58 2026 GMT Not After : May 30 16:28:58 2026 GMT Subject: CN=8F295FAEB896CC033B7EFD732C8D54CC4CC61BD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a4:b5:29:64:04:7a:f1:6e:2d:35:b6:4a:0d: 70:4e:62:93:21:0b:ac:38:88:da:35:a5:b0:06:5b: 95:46:de:17:b2:af:09:d9:da:67:40:1e:c3:e0:93: 8d:66:7d:44:29:70:cb:6f:07:4a:4c:be:dc:62:05: 73:2e:30:6c:71:97:98:3e:7e:d3:71:5a:52:d7:2c: 16:4e:69:1b:40:63:47:47:49:54:60:d8:c0:0f:35: 2e:3c:6c:45:91:f2:3a:b2:c8:e3:df:02:c4:99:85: d9:95:9c:94:a1:14:7d:52:36:0a:1a:ea:c1:38:e2: 33:be:2d:27:1d:92:08:2f:dc:de:70:72:48:f1:ef: fe:02:ca:ef:b5:d2:91:80:55:7f:68:30:73:10:86: 8d:35:e2:db:25:04:05:e5:a0:c0:a7:f4:12:b9:02: 60:74:db:b3:80:4e:08:8f:84:91:dc:3a:af:f3:9e: 8a:13:cd:f5:ee:2f:99:e4:40:4f:79:34:ad:3f:5d: 48:bb:8c:2c:a7:52:46:e3:28:69:0a:4b:fd:5b:f7: 50:7d:ce:10:19:2f:2a:14:bb:1f:68:fd:b3:6d:f5: 17:32:a7:a1:a3:1a:7c:94:3f:d7:d6:26:2a:38:29: 19:4c:a1:c4:ce:5e:36:08:ba:3a:91:98:a9:f6:7c: f9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:29:5F:AE:B8:96:CC:03:3B:7E:FD:73:2C:8D:54:CC:4C:C6:1B:D0 X509v3 Authority Key Identifier: keyid:12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:27:7f:25:03:ee:7a:ab:41:96:a1:5b:41:30:e9:ad:fe:aa: 8a:97:a9:43:b4:3b:06:e5:be:d2:b1:dc:3a:f5:72:4b:d8:ee: b2:5e:0b:76:82:af:ae:74:4e:74:0c:12:e1:78:f2:1b:1d:ea: 1f:81:8f:15:a1:d7:3b:b8:8b:da:62:85:3d:6b:5a:60:35:ce: 95:70:77:59:bf:84:e8:4f:6d:07:3c:c9:88:3a:74:15:2d:80: 9a:e1:35:c0:28:a0:fe:0a:8a:e6:c8:10:f8:89:fe:1c:10:51: e0:77:1a:de:15:61:de:7b:77:04:16:df:b7:dc:ca:ff:5d:4a: 1f:2f:85:7f:83:78:2c:6d:7d:85:62:4a:b9:bb:0b:16:ad:d8: 83:59:1a:06:ca:39:1c:85:11:a6:e8:91:9c:a5:f6:c8:c7:4e: ab:9f:7c:7c:0d:1a:10:84:2c:b1:ab:d3:30:01:b7:f0:46:40: fe:01:67:c2:ca:14:7f:29:ce:2e:7f:32:29:81:15:16:2e:8e: e1:24:92:28:67:a4:ab:fb:2c:b2:a2:b5:04:f0:d9:ea:a8:34: ff:a9:de:44:aa:f7:28:7b:3e:1c:52:73:57:16:37:13:73:34: 45:14:fe:07:b0:09:5c:4a:b0:0b:8c:43:32:3e:ca:e7:b1:a4: 60:1f:bc:6b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOoFjhTwxsXdVJw/PQzJkmWKTFlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI4QTc2NTc5NUZFMjk1N0IyNjg4MUU0NDFGODI0MEI1 Mjc0MkJFRDAeFw0yNjA1MjkxNDQ3NThaFw0yNjA1MzAxNjI4NThaMDMxMTAvBgNV BAMTKDhGMjk1RkFFQjg5NkNDMDMzQjdFRkQ3MzJDOEQ1NENDNENDNjFCRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdpLUpZAR68W4tNbZKDXBOYpMh C6w4iNo1pbAGW5VG3heyrwnZ2mdAHsPgk41mfUQpcMtvB0pMvtxiBXMuMGxxl5g+ ftNxWlLXLBZOaRtAY0dHSVRg2MAPNS48bEWR8jqyyOPfAsSZhdmVnJShFH1SNgoa 6sE44jO+LScdkggv3N5wckjx7/4Cyu+10pGAVX9oMHMQho014tslBAXloMCn9BK5 AmB027OATgiPhJHcOq/znooTzfXuL5nkQE95NK0/XUi7jCynUkbjKGkKS/1b91B9 zhAZLyoUux9o/bNt9Rcyp6GjGnyUP9fWJio4KRlMocTOXjYIujqRmKn2fPkvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUjylfrriWzAM7fv1zLI1UzEzGG9AwHwYDVR0j BBgwFoAUEop2V5X+KVeyaIHkQfgkC1J0K+0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDk3NzI2NDA4NjQxNzQxNy8wLzEyOEE3NjU3OTVGRTI5NTdCMjY4ODFFNDQxRjgy NDBCNTI3NDJCRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTI4QTc2NTc5NUZFMjk1N0IyNjg4MUU0NDFGODI0MEI1Mjc0MkJFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ5NzcyNjQwODY0MTc0MTcvMC8xMjhBNzY1Nzk1RkUy OTU3QjI2ODgxRTQ0MUY4MjQwQjUyNzQyQkVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCd/JQPueqtB lqFbQTDprf6qipepQ7Q7BuW+0rHcOvVyS9jusl4LdoKvrnROdAwS4XjyGx3qH4GP FaHXO7iL2mKFPWtaYDXOlXB3Wb+E6E9tBzzJiDp0FS2AmuE1wCig/gqK5sgQ+In+ HBBR4Hca3hVh3nt3BBbft9zK/11KHy+Ff4N4LG19hWJKubsLFq3Yg1kaBso5HIUR puiRnKX2yMdOq598fA0aEIQssavTMAG38EZA/gFnwsoUfynOLn8yKYEVFi6O4SSS KGekq/sssqK1BPDZ6qg0/6neRKr3KHs+HFJzVxY3E3M0RRT+B7AJXEqwC4xDMj7K 57GkYB+8aw== -----END CERTIFICATE-----Generated at Fri May 29 22:03:31 2026 by rpki-client