$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft File: 128A765795FE2957B26881E441F8240B52742BED.mft (raw, json) Hash identifier: n7Piz0aSi2WdRVqusVlEd23JVD8zmKyMbDrzA4Z1BTo= Subject key identifier: A5:12:4A:33:C9:55:F3:87:38:E2:C1:A3:79:90:18:A5:F0:C2:BC:7E Authority key identifier: 12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED Certificate issuer: /CN=128A765795FE2957B26881E441F8240B52742BED Certificate serial: 34EEC377B8DCB3C72A40F06634D1C7B1C291F18A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft Manifest number: B4 Signing time: Mon 12 Oct 2026 00:21:14 +0000 Manifest this update: Mon 12 Oct 2026 00:16:14 +0000 Manifest next update: Thu 15 Oct 2026 05:25:14 +0000 Files and hashes: 1: 128A765795FE2957B26881E441F8240B52742BED.crl (hash: OGGD51c1ROWUrG02yGUbcW6/EyTPfrqeVehxY3J1Xck=) 2: 3130332e35362e3135322e302f32322d3232203d3e203233363530.roa (hash: OgCr00Fv7vrwVQT3hRxID5AadJ10ZP166nV+1cdkYr4=) 3: 3130332e32362e37362e302f32322d3232203d3e203233363530.roa (hash: 9Ixfxmr2fgpj9kcGLZ/WcP2sJnuni9uiRkmwCPFkX8w=) 4: 34352e3131362e3130302e302f32322d3232203d3e203233363530.roa (hash: w5GVmCPvagQwJruDKnWKoFjQ/Sy9hjjY2UMdNO5sgZI=) 5: 34322e3135372e302e302f32312d3231203d3e2030.roa (hash: bM7v9GLFz0UJuWkG/QHf07xfzcVdi+a9006fgSCnHjA=) 6: 34322e3135372e382e302f32322d3232203d3e2030.roa (hash: KoOdHIkdbXkdF93yxNHctmKrPvxBqAEUbQNpRG2aKoo=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 01:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ee:c3:77:b8:dc:b3:c7:2a:40:f0:66:34:d1:c7:b1:c2:91:f1:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128A765795FE2957B26881E441F8240B52742BED Validity Not Before: Oct 12 00:16:14 2026 GMT Not After : Oct 15 05:25:14 2026 GMT Subject: CN=A5124A33C955F38738E2C1A3799018A5F0C2BC7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:c3:4d:f2:da:cc:c6:fe:cb:a9:7d:6d:25: e9:89:ab:8f:9e:99:4f:79:7f:f1:60:b2:34:12:0b: b1:ab:de:cb:81:a0:34:b7:5e:30:ed:28:7a:58:55: a7:61:83:49:1e:7c:44:92:39:36:3d:83:8e:eb:29: da:8c:11:6b:2c:d9:0c:57:08:10:84:3a:c1:b2:63: ed:5b:94:55:f5:1c:91:1a:4c:cf:09:15:d4:b0:fd: 48:d8:e0:67:ef:31:27:83:cc:af:63:7e:3d:f5:a2: 80:e9:1c:3c:39:82:c0:1b:3e:69:a0:fd:bb:e4:20: 21:33:e1:69:bb:c0:27:7b:3f:b1:18:b2:a6:a2:2e: c5:2d:50:af:4c:9a:e8:f9:5c:fa:2c:fb:12:bf:e2: 78:92:b6:69:53:9b:c8:51:a0:6c:de:13:00:9e:c7: a6:d9:23:a4:a6:ae:73:27:a3:f3:8d:5b:2d:c4:9b: 6d:07:e3:c2:d1:98:32:dc:ca:24:3f:b2:57:a5:02: 06:19:2a:27:94:41:a0:9f:28:b7:c3:f7:e2:ee:fe: 8a:d8:d1:9b:84:c7:72:54:53:43:ec:c6:c6:03:72: 9b:e7:65:13:02:30:3e:14:da:f5:38:03:b4:6f:ae: 84:ce:57:c5:6e:77:38:d2:1e:e9:4b:ae:2c:06:e0: 5a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:12:4A:33:C9:55:F3:87:38:E2:C1:A3:79:90:18:A5:F0:C2:BC:7E X509v3 Authority Key Identifier: keyid:12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:56:18:63:8b:6f:dd:79:72:cf:9b:25:13:4f:38:14:0a:ca: 7f:e2:ba:b1:3e:f8:68:d9:9b:4d:dd:3b:cc:a7:e4:cc:ed:fd: 19:2d:29:bc:38:4d:7e:c9:c1:d9:b2:ea:a9:f5:76:08:54:00: 59:67:0a:ac:f8:ec:e5:de:ed:1d:95:fc:47:7e:7b:7e:18:32: c5:12:ef:18:73:ec:a8:00:97:9a:29:19:db:7f:d0:1a:ce:bf: b1:00:da:7a:da:35:2b:b3:17:e6:e8:64:5e:16:68:0c:e2:31: a3:13:40:42:d3:fc:a7:12:fb:cd:3a:8d:5d:53:c8:c0:0d:63: 11:63:40:9f:a5:08:05:e5:b0:85:2f:5c:47:80:2b:e0:36:56: b4:2e:5c:7d:36:1f:6f:68:48:b3:a0:cf:67:6c:49:47:56:1d: e9:d5:f7:eb:cc:64:3e:4d:72:8a:73:1e:d4:da:a0:d0:00:b2: 95:20:4b:b3:c2:44:45:cb:05:44:a2:5a:f3:ef:56:17:ac:a2: df:82:09:22:df:11:86:7e:77:b4:be:90:47:a8:09:c8:d3:7f: f4:13:4a:ae:13:b9:bc:a7:30:ef:d0:d4:36:bd:a5:87:b7:19: 9b:98:1f:b2:66:5e:0f:a3:e7:cb:22:bc:19:89:b3:90:8f:65: b2:94:b7:20 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUNO7Dd7jcs8cqQPBmNNHHscKR8YowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI4QTc2NTc5NUZFMjk1N0IyNjg4MUU0NDFGODI0MEI1 Mjc0MkJFRDAeFw0yNjEwMTIwMDE2MTRaFw0yNjEwMTUwNTI1MTRaMDMxMTAvBgNV BAMTKEE1MTI0QTMzQzk1NUYzODczOEUyQzFBMzc5OTAxOEE1RjBDMkJDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1eMNN8trMxv7LqX1tJemJq4+e mU95f/FgsjQSC7Gr3suBoDS3XjDtKHpYVadhg0kefESSOTY9g47rKdqMEWss2QxX CBCEOsGyY+1blFX1HJEaTM8JFdSw/UjY4GfvMSeDzK9jfj31ooDpHDw5gsAbPmmg /bvkICEz4Wm7wCd7P7EYsqaiLsUtUK9Mmuj5XPos+xK/4niStmlTm8hRoGzeEwCe x6bZI6SmrnMno/ONWy3Em20H48LRmDLcyiQ/slelAgYZKieUQaCfKLfD9+Lu/orY 0ZuEx3JUU0PsxsYDcpvnZRMCMD4U2vU4A7RvroTOV8VudzjSHulLriwG4FoDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUpRJKM8lV84c44sGjeZAYpfDCvH4wHwYDVR0j BBgwFoAUEop2V5X+KVeyaIHkQfgkC1J0K+0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDk3NzI2NDA4NjQxNzQxNy8wLzEyOEE3NjU3OTVGRTI5NTdCMjY4ODFFNDQxRjgy NDBCNTI3NDJCRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTI4QTc2NTc5NUZFMjk1N0IyNjg4MUU0NDFGODI0MEI1Mjc0MkJFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ5NzcyNjQwODY0MTc0MTcvMC8xMjhBNzY1Nzk1RkUy OTU3QjI2ODgxRTQ0MUY4MjQwQjUyNzQyQkVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1VYYY4tv3Xly z5slE084FArKf+K6sT74aNmbTd07zKfkzO39GS0pvDhNfsnB2bLqqfV2CFQAWWcK rPjs5d7tHZX8R357fhgyxRLvGHPsqACXmikZ23/QGs6/sQDaeto1K7MX5uhkXhZo DOIxoxNAQtP8pxL7zTqNXVPIwA1jEWNAn6UIBeWwhS9cR4Ar4DZWtC5cfTYfb2hI s6DPZ2xJR1Yd6dX368xkPk1yinMe1Nqg0ACylSBLs8JERcsFRKJa8+9WF6yi34IJ It8Rhn53tL6QR6gJyNN/9BNKrhO5vKcw79DUNr2lh7cZm5gfsmZeD6PnyyK8GYmz kI9lspS3IA== -----END CERTIFICATE-----Generated at Tue Oct 13 21:21:44 2026 by rpki-client