$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft File: 128A765795FE2957B26881E441F8240B52742BED.mft (raw, json) Hash identifier: 7YcDWcVQI4SiP3GiLhQMG748Qy/EuYK7cJsa6eeGcoM= Subject key identifier: 37:9D:78:80:14:B5:45:1D:F5:5A:EE:C5:B1:05:C4:3C:CD:B3:8A:7B Authority key identifier: 12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED Certificate issuer: /CN=128A765795FE2957B26881E441F8240B52742BED Certificate serial: 0A5D3DA4A106410BB1639356908EA380CBB592FD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft Manifest number: 71 Signing time: Fri 24 Jul 2026 12:11:07 +0000 Manifest this update: Fri 24 Jul 2026 12:06:07 +0000 Manifest next update: Sat 25 Jul 2026 16:08:07 +0000 Files and hashes: 1: 34352e3131362e3130302e302f32322d3232203d3e203233363530.roa (hash: w5GVmCPvagQwJruDKnWKoFjQ/Sy9hjjY2UMdNO5sgZI=) 2: 34322e3135372e382e302f32322d3232203d3e2030.roa (hash: KoOdHIkdbXkdF93yxNHctmKrPvxBqAEUbQNpRG2aKoo=) 3: 3130332e32362e37362e302f32322d3232203d3e203233363530.roa (hash: 9Ixfxmr2fgpj9kcGLZ/WcP2sJnuni9uiRkmwCPFkX8w=) 4: 3130332e35362e3135322e302f32322d3232203d3e203233363530.roa (hash: OgCr00Fv7vrwVQT3hRxID5AadJ10ZP166nV+1cdkYr4=) 5: 34322e3135372e302e302f32312d3231203d3e2030.roa (hash: bM7v9GLFz0UJuWkG/QHf07xfzcVdi+a9006fgSCnHjA=) 6: 128A765795FE2957B26881E441F8240B52742BED.crl (hash: r06W1nfbcbJrybK9O1f+Gs1nSgsV3auRONQlJqfxHjg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:5d:3d:a4:a1:06:41:0b:b1:63:93:56:90:8e:a3:80:cb:b5:92:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128A765795FE2957B26881E441F8240B52742BED Validity Not Before: Jul 24 12:06:07 2026 GMT Not After : Jul 25 16:08:07 2026 GMT Subject: CN=379D788014B5451DF55AEEC5B105C43CCDB38A7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:13:f0:02:ac:21:06:78:9e:8c:61:7c:cc:61: 13:3f:0c:c3:4c:ce:72:92:b6:1a:3c:a2:4f:f0:dc: 0d:d2:51:3f:bc:98:be:d7:e1:22:3f:7a:d8:99:b0: 01:49:b1:d3:55:2a:52:a3:38:20:2a:16:68:bf:c9: a8:85:f1:97:be:c7:06:d7:e8:9d:44:96:9b:9c:8a: 33:e2:82:cf:6a:a3:f6:08:9c:2f:76:17:a5:70:47: cb:2a:8a:4f:83:c3:53:6f:4d:25:b3:70:85:ba:a9: 03:d1:05:d3:60:0d:5d:8c:7f:ef:13:26:ab:c0:d5: 9b:ba:06:38:fd:b9:5b:78:32:a2:63:25:4b:ad:28: 83:d8:de:2f:88:3c:e7:15:1c:de:3b:78:fb:31:29: bf:62:b6:f5:7d:f0:1a:dd:f9:4e:51:7e:61:4b:a0: 97:5c:c8:b4:e0:ac:da:78:f6:4b:8d:da:32:60:49: 1d:20:b0:b7:9a:27:18:43:66:32:0c:97:cb:93:57: 0d:10:16:e4:7d:91:0b:58:3b:a9:25:77:ff:eb:ec: bc:7f:30:16:88:b5:2c:a7:90:4e:25:4d:65:d7:a4: e7:4d:ba:1a:b9:6f:a2:49:44:b6:1d:01:35:97:8a: a3:7e:78:87:fa:a6:e4:11:5e:b6:b1:23:59:cd:57: 5f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9D:78:80:14:B5:45:1D:F5:5A:EE:C5:B1:05:C4:3C:CD:B3:8A:7B X509v3 Authority Key Identifier: keyid:12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:47:71:f8:51:42:f2:58:31:da:65:e9:30:c4:30:bd:f9:16: f3:b5:9e:5a:f9:c0:df:14:89:58:1a:9f:0e:27:64:57:ba:65: 96:25:7a:73:cf:b0:54:c1:16:a1:d1:8a:04:d4:01:1e:f8:93: 0d:60:2a:4d:cc:f7:8a:93:55:65:1e:2b:51:02:6b:b9:30:fd: 23:4c:c2:79:25:9b:b2:0f:e5:53:eb:20:a0:09:34:95:49:e0: 0e:33:78:fa:07:42:74:d7:46:d9:71:03:08:a3:ad:a6:73:dc: 77:23:b2:74:12:d6:32:88:aa:e4:e0:d9:41:8e:58:d5:ab:c8: e6:d7:7c:0b:e4:d9:17:26:4e:e3:62:ce:f0:99:2a:0b:21:11: 19:4b:0f:72:f0:03:65:ef:71:a3:18:b8:39:ab:5d:b7:bf:05: 31:f0:b9:c1:41:07:6c:c5:01:e7:06:11:95:95:13:e4:23:16: de:09:7b:7a:bb:c3:98:0f:12:74:80:8f:37:33:72:7a:92:a1: 27:48:0a:43:40:d0:ca:cc:0a:54:84:41:b4:e2:2f:9f:6e:9c: af:57:9c:d9:0d:b1:85:bc:b2:80:e4:63:a4:49:90:d6:f7:9e: eb:23:0f:48:5d:df:04:2d:af:f3:5e:1f:50:6d:32:3d:ce:2c: a6:3d:e1:07 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUCl09pKEGQQuxY5NWkI6jgMu1kv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI4QTc2NTc5NUZFMjk1N0IyNjg4MUU0NDFGODI0MEI1 Mjc0MkJFRDAeFw0yNjA3MjQxMjA2MDdaFw0yNjA3MjUxNjA4MDdaMDMxMTAvBgNV BAMTKDM3OUQ3ODgwMTRCNTQ1MURGNTVBRUVDNUIxMDVDNDNDQ0RCMzhBN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwE/ACrCEGeJ6MYXzMYRM/DMNM znKStho8ok/w3A3SUT+8mL7X4SI/etiZsAFJsdNVKlKjOCAqFmi/yaiF8Ze+xwbX 6J1ElpucijPigs9qo/YInC92F6VwR8sqik+Dw1NvTSWzcIW6qQPRBdNgDV2Mf+8T JqvA1Zu6Bjj9uVt4MqJjJUutKIPY3i+IPOcVHN47ePsxKb9itvV98Brd+U5RfmFL oJdcyLTgrNp49kuN2jJgSR0gsLeaJxhDZjIMl8uTVw0QFuR9kQtYO6kld//r7Lx/ MBaItSynkE4lTWXXpOdNuhq5b6JJRLYdATWXiqN+eIf6puQRXraxI1nNV1+tAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUN514gBS1RR31Wu7FsQXEPM2zinswHwYDVR0j BBgwFoAUEop2V5X+KVeyaIHkQfgkC1J0K+0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDk3NzI2NDA4NjQxNzQxNy8wLzEyOEE3NjU3OTVGRTI5NTdCMjY4ODFFNDQxRjgy NDBCNTI3NDJCRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTI4QTc2NTc5NUZFMjk1N0IyNjg4MUU0NDFGODI0MEI1Mjc0MkJFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMDQ5NzcyNjQwODY0MTc0MTcvMC8xMjhBNzY1Nzk1RkUy OTU3QjI2ODgxRTQ0MUY4MjQwQjUyNzQyQkVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHkdx+FFC8lgx 2mXpMMQwvfkW87WeWvnA3xSJWBqfDidkV7plliV6c8+wVMEWodGKBNQBHviTDWAq Tcz3ipNVZR4rUQJruTD9I0zCeSWbsg/lU+sgoAk0lUngDjN4+gdCdNdG2XEDCKOt pnPcdyOydBLWMoiq5ODZQY5Y1avI5td8C+TZFyZO42LO8JkqCyERGUsPcvADZe9x oxi4Oatdt78FMfC5wUEHbMUB5wYRlZUT5CMW3gl7ervDmA8SdICPNzNyepKhJ0gK Q0DQyswKVIRBtOIvn26cr1ec2Q2xhbyygORjpEmQ1vee6yMPSF3fBC2v814fUG0y Pc4spj3hBw== -----END CERTIFICATE-----Generated at Fri Jul 24 15:59:51 2026 by rpki-client