$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft File: 40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft (raw, json) Hash identifier: aqda76fNUNXRvnbO4P45zmkpk516OaFM0EfFViFfUXE= Subject key identifier: EF:C7:10:2F:2E:B0:EC:59:2F:CC:38:BE:DE:15:28:8A:2A:B7:B3:A6 Authority key identifier: 40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 Certificate issuer: /CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Certificate serial: 7951972DC3E0F5F36D40BED10283477C4A717B1E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft Manifest number: BC Signing time: Tue 08 Sep 2026 08:03:54 +0000 Manifest this update: Tue 08 Sep 2026 07:58:54 +0000 Manifest next update: Fri 11 Sep 2026 17:46:54 +0000 Files and hashes: 1: 323430353a393738303a3a2f33322d313238203d3e2030.roa (hash: wsAlE1QEtrkyozdia6LocJwjVZkBAeHQ4PonEVzYZn4=) 2: 3130332e3232302e3234322e302f32332d3233203d3e2034383337.roa (hash: 3TONmc+B7Q42E5fNjNdLH0s/fvuQxKfU4ddysGsNONE=) 3: 3130332e3232302e3234302e302f32332d3233203d3e2034383337.roa (hash: 2wZEG3CS93oCxpOvvSD/xvBdYQ4/YZbs+htsSujp09o=) 4: 34352e3235322e302e302f32322d3232203d3e203234313339.roa (hash: yZ9/bItsZVNimYfZJceoCqR8YKceJZZWWFqQf2xko2Y=) 5: 34352e3235322e302e302f32332d3233203d3e2034383337.roa (hash: Girfmzj3SgStMMY9QQQlekVZITn+b5VccIqS4mZXqQI=) 6: 3130332e3232302e3234302e302f32322d3232203d3e203234313339.roa (hash: gbVCFJ5R1GJxVqj6VUJKkq23UMSaPAub7AW4a1P+kwc=) 7: 34352e3235322e322e302f32332d3233203d3e2034383337.roa (hash: ogJ8b/pu/yvvBpwQjJD7aR2MKAiB2NVSNAKv0EvNExs=) 8: 40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl (hash: KxRxVw0/uU+18b9+lHLIGM2cHDdkFraqchQSZx5y7v4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 17:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:51:97:2d:c3:e0:f5:f3:6d:40:be:d1:02:83:47:7c:4a:71:7b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Validity Not Before: Sep 8 07:58:54 2026 GMT Not After : Sep 11 17:46:54 2026 GMT Subject: CN=EFC7102F2EB0EC592FCC38BEDE15288A2AB7B3A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e4:61:13:4c:49:1c:ae:dd:17:04:1b:f2:98: 57:9f:76:5f:4d:f1:d0:fd:cb:6f:3f:b8:23:c6:6b: 11:0a:0f:7a:95:88:b1:bf:6f:57:0d:ec:aa:4f:55: a1:d6:eb:8d:9c:00:a0:c2:a1:6d:51:45:4e:33:9e: 74:33:ba:12:80:06:77:ed:c0:82:3d:6e:3a:19:b9: db:32:21:79:1d:fc:a0:b2:fa:a4:e9:57:20:de:e3: 91:7d:04:da:76:7c:fe:e0:b6:bd:d6:e7:c7:f1:fa: 89:c0:3a:e8:34:73:de:b3:a7:d3:84:3d:44:42:fb: 71:d0:78:b9:d6:3f:e9:8d:14:e9:ed:6e:08:8e:ac: e0:8f:d6:81:98:29:1e:eb:17:40:38:4e:e5:0a:b3: 5b:0d:15:5e:ed:ed:fd:7e:55:c2:42:d9:2e:a8:80: 91:08:5a:86:61:71:8f:04:4d:30:35:a2:39:91:b5: ba:34:7b:13:dc:6b:e2:e6:74:b1:c5:bf:fa:32:d7: 33:26:82:32:df:ba:76:35:2c:0a:c5:60:08:43:60: 4e:66:1a:4e:b4:0d:7c:7a:eb:6d:19:ae:d4:f7:7c: 26:33:33:68:79:85:e1:b8:97:74:de:a1:6e:9f:5e: 8b:a9:5a:87:19:d2:da:3e:f3:22:65:34:6f:44:30: 20:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C7:10:2F:2E:B0:EC:59:2F:CC:38:BE:DE:15:28:8A:2A:B7:B3:A6 X509v3 Authority Key Identifier: keyid:40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:64:75:dd:a6:21:39:d8:72:5f:91:4c:2e:da:83:a3:c7:4c: 5b:b8:39:db:c3:86:64:ba:6f:fe:88:e7:2d:40:85:56:0d:9b: fa:e4:3c:5c:43:cc:b8:14:24:7d:65:53:ee:fc:88:56:fd:b2: 00:f5:d1:e8:8e:3e:e8:0b:09:55:78:d8:f6:8d:a8:df:d2:85: c5:37:80:5c:1a:2d:f1:97:ce:83:b1:84:d8:6e:0a:c1:b7:29: 1d:13:e0:92:36:ed:03:b5:76:14:aa:e7:5a:94:16:4c:de:ad: 59:32:42:bf:e3:4c:a6:5c:10:91:a1:3e:b6:71:af:51:14:b6: 56:d6:c5:f7:74:0b:10:fe:a6:e8:e1:bf:f3:c8:92:f0:1c:95: c2:c3:e3:96:05:06:b1:48:e5:f0:13:5b:12:73:67:9b:83:a6: fb:73:7b:8d:a0:a8:d3:b4:36:70:1b:62:c5:13:b7:2b:d0:d3: e1:cf:62:e8:5b:66:49:0e:e2:7c:06:b7:43:7f:d6:02:6e:1b: ee:23:45:30:83:7b:a0:bf:51:43:28:a4:aa:68:e9:10:0d:60: a4:fd:d1:55:be:60:fe:61:f3:29:f3:34:0a:50:0c:f0:69:ca: dc:89:f2:ff:ab:4c:f1:97:99:9f:1d:a8:1e:af:47:af:58:81: a1:ad:be:82 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeVGXLcPg9fNtQL7RAoNHfEpxex4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJG Q0I3M0Q3MTAeFw0yNjA5MDgwNzU4NTRaFw0yNjA5MTExNzQ2NTRaMDMxMTAvBgNV BAMTKEVGQzcxMDJGMkVCMEVDNTkyRkNDMzhCRURFMTUyODhBMkFCN0IzQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb5GETTEkcrt0XBBvymFefdl9N 8dD9y28/uCPGaxEKD3qViLG/b1cN7KpPVaHW642cAKDCoW1RRU4znnQzuhKABnft wII9bjoZudsyIXkd/KCy+qTpVyDe45F9BNp2fP7gtr3W58fx+onAOug0c96zp9OE PURC+3HQeLnWP+mNFOntbgiOrOCP1oGYKR7rF0A4TuUKs1sNFV7t7f1+VcJC2S6o gJEIWoZhcY8ETTA1ojmRtbo0exPca+LmdLHFv/oy1zMmgjLfunY1LArFYAhDYE5m Gk60DXx6620ZrtT3fCYzM2h5heG4l3TeoW6fXoupWocZ0to+8yJlNG9EMCDZAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU78cQLy6w7FkvzDi+3hUoiiq3s6YwHwYDVR0j BBgwFoAUQKv0E80zDgpNK66PHmavi/y3PXEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk2MjQwNDg5NTQyNDUxNS8wLzQwQUJGNDEzQ0QzMzBFMEE0RDJCQUU4RjFFNjZB RjhCRkNCNzNENzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJGQ0I3M0Q3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5NjI0MDQ4OTU0MjQ1MTUvMC80MEFCRjQxM0NEMzMw RTBBNEQyQkFFOEYxRTY2QUY4QkZDQjczRDcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGR13aYhOdhy X5FMLtqDo8dMW7g528OGZLpv/ojnLUCFVg2b+uQ8XEPMuBQkfWVT7vyIVv2yAPXR 6I4+6AsJVXjY9o2o39KFxTeAXBot8ZfOg7GE2G4KwbcpHRPgkjbtA7V2FKrnWpQW TN6tWTJCv+NMplwQkaE+tnGvURS2VtbF93QLEP6m6OG/88iS8ByVwsPjlgUGsUjl 8BNbEnNnm4Om+3N7jaCo07Q2cBtixRO3K9DT4c9i6FtmSQ7ifAa3Q3/WAm4b7iNF MIN7oL9RQyikqmjpEA1gpP3RVb5g/mHzKfM0ClAM8GnK3Iny/6tM8ZeZnx2oHq9H r1iBoa2+gg== -----END CERTIFICATE-----Generated at Thu Sep 10 19:13:51 2026 by rpki-client