$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft File: 40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft (raw, json) Hash identifier: F8TnOfN4cMIJawb9VaHQ4wGKuH87sxxcb4TwxoBBXjw= Subject key identifier: C5:9C:49:9B:7E:B1:5E:AC:B4:EF:ED:50:EC:D8:E9:4F:6E:2D:58:A0 Authority key identifier: 40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 Certificate issuer: /CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Certificate serial: 6766512E8E3F96227CA72B67AF6E607AF7A61800 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft Manifest number: 8D Signing time: Mon 27 Jul 2026 11:44:04 +0000 Manifest this update: Mon 27 Jul 2026 11:39:04 +0000 Manifest next update: Tue 28 Jul 2026 13:45:04 +0000 Files and hashes: 1: 3130332e3232302e3234322e302f32332d3233203d3e2034383337.roa (hash: 3TONmc+B7Q42E5fNjNdLH0s/fvuQxKfU4ddysGsNONE=) 2: 3130332e3232302e3234302e302f32322d3232203d3e203234313339.roa (hash: gbVCFJ5R1GJxVqj6VUJKkq23UMSaPAub7AW4a1P+kwc=) 3: 323430353a393738303a3a2f33322d313238203d3e2030.roa (hash: wsAlE1QEtrkyozdia6LocJwjVZkBAeHQ4PonEVzYZn4=) 4: 34352e3235322e302e302f32332d3233203d3e2034383337.roa (hash: Girfmzj3SgStMMY9QQQlekVZITn+b5VccIqS4mZXqQI=) 5: 3130332e3232302e3234302e302f32332d3233203d3e2034383337.roa (hash: 2wZEG3CS93oCxpOvvSD/xvBdYQ4/YZbs+htsSujp09o=) 6: 34352e3235322e302e302f32322d3232203d3e203234313339.roa (hash: yZ9/bItsZVNimYfZJceoCqR8YKceJZZWWFqQf2xko2Y=) 7: 40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl (hash: Lfnht+6cTo7JyIu6yN8dpQFPsuD7kyt9YuJri3rlJUI=) 8: 34352e3235322e322e302f32332d3233203d3e2034383337.roa (hash: ogJ8b/pu/yvvBpwQjJD7aR2MKAiB2NVSNAKv0EvNExs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:66:51:2e:8e:3f:96:22:7c:a7:2b:67:af:6e:60:7a:f7:a6:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Validity Not Before: Jul 27 11:39:04 2026 GMT Not After : Jul 28 13:45:04 2026 GMT Subject: CN=C59C499B7EB15EACB4EFED50ECD8E94F6E2D58A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:08:4d:91:18:2e:8a:8a:5a:6e:8f:52:98:24: 3e:6a:8b:c8:33:b0:5a:99:de:31:9c:86:54:23:e6: 6c:50:05:f9:8f:54:23:32:d9:b3:77:d5:14:e2:d9: 61:6d:0d:e1:ef:55:5f:fe:e8:4d:54:c2:04:b3:ae: 94:38:14:07:a2:a4:5f:57:33:f2:3d:f9:50:1f:eb: f5:18:47:95:db:7d:10:f9:94:36:21:d9:4a:68:2e: 9f:5f:c4:4a:49:63:36:d6:fa:55:9a:24:8e:3c:5c: f1:55:b8:ad:1c:ab:f8:c7:56:30:4f:7b:b3:8f:8f: 6d:fa:72:0b:c4:45:7e:a1:93:69:ee:1d:f0:47:68: a6:78:50:95:ba:df:81:37:86:7a:f8:cd:c4:b7:50: 3d:bd:60:3d:26:d5:5a:66:8c:08:f6:b7:68:bc:7f: 06:93:e6:02:83:82:94:52:9e:0d:b0:e8:6c:53:fd: 17:97:c0:37:36:ff:3b:0c:d5:1d:e4:c3:de:54:64: bf:9a:1a:36:0a:a1:9b:bd:e8:27:70:46:cc:52:8f: be:bd:d0:76:70:ef:d3:3a:ad:f5:36:11:d9:f6:99: 62:93:d8:54:67:15:1f:16:54:5f:db:64:a1:0d:6d: 61:7d:61:1b:4b:04:68:62:ab:65:56:65:33:ea:46: 98:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:9C:49:9B:7E:B1:5E:AC:B4:EF:ED:50:EC:D8:E9:4F:6E:2D:58:A0 X509v3 Authority Key Identifier: keyid:40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:1c:7b:14:36:7f:a1:1c:ea:d0:e3:18:9e:7c:9a:01:3d:5d: 9e:bf:88:ba:48:3d:98:86:d4:e3:3a:f3:1d:45:72:c5:ef:6b: 6b:f2:0f:bc:d2:bd:37:45:9c:a9:6d:83:8b:d1:b5:e4:69:5f: 27:20:78:da:23:27:94:52:1e:8c:21:a8:c3:a5:64:63:32:ca: 0e:e5:0c:b9:24:ed:86:de:28:82:0f:80:65:99:d1:15:50:22: 37:5c:8c:5c:ab:e1:d8:97:28:91:0d:b5:d2:98:aa:36:2a:72: 02:0e:83:88:fa:5c:ea:2d:93:07:76:ef:67:39:65:eb:c3:8d: 6a:8b:b9:d0:f1:d3:6f:1d:7b:1d:87:02:d6:c1:1e:56:35:2d: 1f:70:07:56:3a:a5:d8:b3:e2:b4:f1:cd:00:0a:df:a0:14:d7: f0:40:05:65:ab:bd:e6:fc:e2:ca:a7:db:c1:1e:17:db:70:43: 21:93:2d:77:af:dc:59:a1:ea:09:b5:81:89:c6:f4:52:21:34: b8:e7:03:38:29:3b:34:4d:7f:97:47:19:64:32:51:af:ef:0f: 7b:48:2b:eb:ba:80:ce:25:43:53:72:7c:f0:c1:b1:3b:a3:56: d1:71:6f:b2:79:a8:65:39:82:79:03:d8:65:ab:98:e2:f3:52: c7:bf:fb:c4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZ2ZRLo4/liJ8pytnr25gevemGAAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJG Q0I3M0Q3MTAeFw0yNjA3MjcxMTM5MDRaFw0yNjA3MjgxMzQ1MDRaMDMxMTAvBgNV BAMTKEM1OUM0OTlCN0VCMTVFQUNCNEVGRUQ1MEVDRDhFOTRGNkUyRDU4QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzCE2RGC6Kilpuj1KYJD5qi8gz sFqZ3jGchlQj5mxQBfmPVCMy2bN31RTi2WFtDeHvVV/+6E1UwgSzrpQ4FAeipF9X M/I9+VAf6/UYR5XbfRD5lDYh2UpoLp9fxEpJYzbW+lWaJI48XPFVuK0cq/jHVjBP e7OPj236cgvERX6hk2nuHfBHaKZ4UJW634E3hnr4zcS3UD29YD0m1VpmjAj2t2i8 fwaT5gKDgpRSng2w6GxT/ReXwDc2/zsM1R3kw95UZL+aGjYKoZu96CdwRsxSj769 0HZw79M6rfU2Edn2mWKT2FRnFR8WVF/bZKENbWF9YRtLBGhiq2VWZTPqRpgVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUxZxJm36xXqy07+1Q7NjpT24tWKAwHwYDVR0j BBgwFoAUQKv0E80zDgpNK66PHmavi/y3PXEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk2MjQwNDg5NTQyNDUxNS8wLzQwQUJGNDEzQ0QzMzBFMEE0RDJCQUU4RjFFNjZB RjhCRkNCNzNENzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJGQ0I3M0Q3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5NjI0MDQ4OTU0MjQ1MTUvMC80MEFCRjQxM0NEMzMw RTBBNEQyQkFFOEYxRTY2QUY4QkZDQjczRDcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhx7FDZ/oRzq 0OMYnnyaAT1dnr+Iukg9mIbU4zrzHUVyxe9ra/IPvNK9N0WcqW2Di9G15GlfJyB4 2iMnlFIejCGow6VkYzLKDuUMuSTtht4ogg+AZZnRFVAiN1yMXKvh2JcokQ210piq NipyAg6DiPpc6i2TB3bvZzll68ONaou50PHTbx17HYcC1sEeVjUtH3AHVjql2LPi tPHNAArfoBTX8EAFZau95vziyqfbwR4X23BDIZMtd6/cWaHqCbWBicb0UiE0uOcD OCk7NE1/l0cZZDJRr+8Pe0gr67qAziVDU3J88MGxO6NW0XFvsnmoZTmCeQPYZauY 4vNSx7/7xA== -----END CERTIFICATE-----Generated at Mon Jul 27 15:43:30 2026 by rpki-client