$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft File: 128A765795FE2957B26881E441F8240B52742BED.mft (raw, json) Hash identifier: DeFxH739P2FyGQMR7KK+jBShCfWo2K5ZcQyrBy0hpF0= Subject key identifier: 8A:33:F3:96:47:00:6E:29:19:21:FE:87:F4:F9:B8:A6:1F:89:11:35 Authority key identifier: 12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED Certificate issuer: /CN=128A765795FE2957B26881E441F8240B52742BED Certificate serial: 4BA7D3A675E136DCB34119B480F99125F4E68DA8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft Manifest number: 0E Signing time: Wed 13 May 2026 00:40:49 +0000 Manifest this update: Wed 13 May 2026 00:35:49 +0000 Manifest next update: Thu 14 May 2026 04:25:49 +0000 Files and hashes: 1: 34352e3131362e3130302e302f32322d3232203d3e203233363530.roa (hash: w5GVmCPvagQwJruDKnWKoFjQ/Sy9hjjY2UMdNO5sgZI=) 2: 3130332e32362e37362e302f32322d3232203d3e203233363530.roa (hash: 9Ixfxmr2fgpj9kcGLZ/WcP2sJnuni9uiRkmwCPFkX8w=) 3: 128A765795FE2957B26881E441F8240B52742BED.crl (hash: 9jZXl6BErTaCN/TvHkWCE+zcN+M9vl4236VAilK/fng=) 4: 3130332e35362e3135322e302f32322d3232203d3e20313430323933.roa (hash: ImPPU3y8zUBWVvlQ9Qo+FugbAtbXfmTj3yi+DJ+CZ2U=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a7:d3:a6:75:e1:36:dc:b3:41:19:b4:80:f9:91:25:f4:e6:8d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128A765795FE2957B26881E441F8240B52742BED Validity Not Before: May 13 00:35:49 2026 GMT Not After : May 14 04:25:49 2026 GMT Subject: CN=8A33F39647006E291921FE87F4F9B8A61F891135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6c:e1:80:11:c6:46:e0:66:c4:ff:74:4a:94: 6c:ed:19:73:c4:b5:b7:c4:7b:85:cc:e6:0d:70:da: a0:94:d7:8b:36:72:d2:93:2c:6e:d9:32:8b:16:1d: 67:d5:60:5c:66:c5:7e:40:9f:8a:b0:1d:63:fb:d2: 89:15:3f:f4:51:3d:33:be:3c:ef:19:70:e0:8c:c9: 15:d9:67:66:b6:f4:32:10:5a:8e:01:02:93:8f:a8: b9:38:d5:a2:66:dd:95:e5:3f:57:43:4a:c7:4a:ee: 9d:92:22:54:fb:b3:2c:3a:46:88:34:a7:8a:ec:7d: 9b:3b:51:e3:8f:c7:ab:f8:47:09:3b:4c:7b:5d:fe: b4:76:7e:06:fc:f4:0d:56:9f:84:6b:6b:b3:df:e4: 1c:ce:11:11:8f:6c:89:81:ff:c3:72:a1:e9:0b:08: 91:42:e3:6b:1d:a7:7d:90:b2:01:59:d3:82:48:55: 8e:69:f4:c8:12:89:6f:4a:80:2b:4a:d6:39:f5:f5: 20:59:51:bd:ba:f3:d8:51:59:99:51:c7:bb:5b:6f: 8e:2a:3a:22:a3:86:18:20:65:9d:10:92:59:89:91: ae:75:61:9f:99:3a:40:16:a6:b1:eb:cd:09:c0:69: 37:a5:42:28:fb:2c:0c:a5:3b:14:71:11:f0:00:f4: 9c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:33:F3:96:47:00:6E:29:19:21:FE:87:F4:F9:B8:A6:1F:89:11:35 X509v3 Authority Key Identifier: keyid:12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:c8:41:83:77:79:7b:68:0b:ab:f4:3a:54:d3:3e:e1:68:7a: 1c:92:ea:3a:d6:56:a3:38:21:97:b8:25:14:f6:31:bb:c4:58: 21:f8:b4:83:78:4d:49:3e:38:d9:19:15:9f:f9:c3:56:ff:1a: 0b:67:80:86:8a:36:6c:ec:b2:28:00:8a:77:ac:4f:8b:7f:9d: 69:14:2c:68:0c:9c:4d:49:32:e1:a0:c9:ff:ba:c1:af:ef:f1: 96:93:0c:dc:b1:d7:cc:68:cc:af:c9:5a:60:9d:5f:ae:72:f3: 2a:18:0e:65:94:6b:b9:b2:af:10:4e:4f:bc:94:30:90:f8:4a: 0c:10:78:c8:89:9d:9d:2c:7a:ec:f6:13:6c:ed:7a:44:fa:37: 1e:00:17:77:e3:cd:85:74:f8:14:36:e5:bd:44:36:d3:31:62: ec:14:f3:f8:cf:ea:e7:83:fc:fb:f6:88:84:3d:9e:54:57:ba: 61:69:57:87:e9:aa:99:ea:29:88:07:b0:19:c1:7b:cb:30:a4: f8:b0:95:b7:e9:67:33:c8:3b:a1:9e:d9:77:5a:26:5c:99:5d: 6f:c7:87:20:55:be:6f:97:a1:53:49:48:df:05:40:12:75:9f: 8b:1b:be:1c:0c:a1:47:88:7c:d4:70:db:b0:6c:3a:2e:bf:f1: 69:dd:80:b3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUS6fTpnXhNtyzQRm0gPmRJfTmjagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI4QTc2NTc5NUZFMjk1N0IyNjg4MUU0NDFGODI0MEI1 Mjc0MkJFRDAeFw0yNjA1MTMwMDM1NDlaFw0yNjA1MTQwNDI1NDlaMDMxMTAvBgNV BAMTKDhBMzNGMzk2NDcwMDZFMjkxOTIxRkU4N0Y0RjlCOEE2MUY4OTExMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQbOGAEcZG4GbE/3RKlGztGXPE tbfEe4XM5g1w2qCU14s2ctKTLG7ZMosWHWfVYFxmxX5An4qwHWP70okVP/RRPTO+ PO8ZcOCMyRXZZ2a29DIQWo4BApOPqLk41aJm3ZXlP1dDSsdK7p2SIlT7syw6Rog0 p4rsfZs7UeOPx6v4Rwk7THtd/rR2fgb89A1Wn4Rra7Pf5BzOERGPbImB/8NyoekL CJFC42sdp32QsgFZ04JIVY5p9MgSiW9KgCtK1jn19SBZUb2689hRWZlRx7tbb44q OiKjhhggZZ0QklmJka51YZ+ZOkAWprHrzQnAaTelQij7LAylOxRxEfAA9JwRAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUijPzlkcAbikZIf6H9Pm4ph+JETUwHwYDVR0j BBgwFoAUEop2V5X+KVeyaIHkQfgkC1J0K+0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDk3NzI2NDA4NjQxNzQxNy8wLzEyOEE3NjU3OTVGRTI5NTdCMjY4ODFFNDQxRjgy NDBCNTI3NDJCRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTI4QTc2NTc5NUZFMjk1N0IyNjg4MUU0NDFGODI0MEI1Mjc0MkJFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ5NzcyNjQwODY0MTc0MTcvMC8xMjhBNzY1Nzk1RkUy OTU3QjI2ODgxRTQ0MUY4MjQwQjUyNzQyQkVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8hBg3d5e2gL q/Q6VNM+4Wh6HJLqOtZWozghl7glFPYxu8RYIfi0g3hNST442RkVn/nDVv8aC2eA hoo2bOyyKACKd6xPi3+daRQsaAycTUky4aDJ/7rBr+/xlpMM3LHXzGjMr8laYJ1f rnLzKhgOZZRrubKvEE5PvJQwkPhKDBB4yImdnSx67PYTbO16RPo3HgAXd+PNhXT4 FDblvUQ20zFi7BTz+M/q54P8+/aIhD2eVFe6YWlXh+mqmeopiAewGcF7yzCk+LCV t+lnM8g7oZ7Zd1omXJldb8eHIFW+b5ehU0lI3wVAEnWfixu+HAyhR4h81HDbsGw6 Lr/xad2Asw== -----END CERTIFICATE-----Generated at Wed May 13 15:07:33 2026 by rpki-client