$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft File: 40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft (raw, json) Hash identifier: fpucSMFS9EFD9FkFlBNSObTOAe7xvIdjpdMXc5XGWrU= Subject key identifier: 4E:2C:6B:BB:73:67:DE:87:9F:18:06:85:0E:12:80:24:54:9B:F4:2C Authority key identifier: 40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 Certificate issuer: /CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Certificate serial: 13A94FE65ECC3DB748B867921FE09605DCA9BF37 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft Manifest number: D0 Signing time: Sat 24 Oct 2026 00:10:46 +0000 Manifest this update: Sat 24 Oct 2026 00:05:46 +0000 Manifest next update: Tue 27 Oct 2026 09:09:46 +0000 Files and hashes: 1: 34352e3235322e302e302f32332d3233203d3e2034383337.roa (hash: Girfmzj3SgStMMY9QQQlekVZITn+b5VccIqS4mZXqQI=) 2: 34352e3235322e322e302f32332d3233203d3e2034383337.roa (hash: ogJ8b/pu/yvvBpwQjJD7aR2MKAiB2NVSNAKv0EvNExs=) 3: 3130332e3232302e3234322e302f32332d3233203d3e2034383337.roa (hash: 3TONmc+B7Q42E5fNjNdLH0s/fvuQxKfU4ddysGsNONE=) 4: 323430353a393738303a3a2f33322d313238203d3e2030.roa (hash: wsAlE1QEtrkyozdia6LocJwjVZkBAeHQ4PonEVzYZn4=) 5: 3130332e3232302e3234302e302f32332d3233203d3e2034383337.roa (hash: 2wZEG3CS93oCxpOvvSD/xvBdYQ4/YZbs+htsSujp09o=) 6: 3130332e3232302e3234302e302f32322d3232203d3e203234313339.roa (hash: gbVCFJ5R1GJxVqj6VUJKkq23UMSaPAub7AW4a1P+kwc=) 7: 40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl (hash: KSC0KKHxXbUiNcUIAOIoQzwzPOyOdeLx7bjUlICr4RI=) 8: 34352e3235322e302e302f32322d3232203d3e203234313339.roa (hash: yZ9/bItsZVNimYfZJceoCqR8YKceJZZWWFqQf2xko2Y=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 09:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:a9:4f:e6:5e:cc:3d:b7:48:b8:67:92:1f:e0:96:05:dc:a9:bf:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Validity Not Before: Oct 24 00:05:46 2026 GMT Not After : Oct 27 09:09:46 2026 GMT Subject: CN=4E2C6BBB7367DE879F1806850E128024549BF42C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ae:f5:3c:b5:de:5d:84:e9:b7:83:a4:fd:5e: cc:63:2c:e5:f9:96:37:15:bf:8b:ab:16:cd:f4:10: cc:3d:fe:c0:a4:bf:29:b9:0e:13:9a:9c:c5:7b:e4: ab:ea:65:19:ed:5a:f6:89:34:b9:c6:f6:74:5f:1b: ac:57:e6:9d:94:f5:57:a8:e4:92:89:34:94:77:76: c1:1c:24:63:f8:fa:f5:92:ad:20:4e:0e:7e:d9:87: 58:7e:1d:7e:3f:e7:ec:48:aa:21:6e:52:49:75:fb: 31:8b:b0:2b:ab:fc:33:78:8f:8e:77:aa:55:0b:bb: 4f:af:df:5f:c2:4d:4a:60:8e:25:78:8e:62:db:35: ef:c2:74:77:07:08:df:93:07:d2:ee:ac:02:9f:f1: f0:14:3d:c5:4e:40:22:28:45:eb:6f:79:93:b9:9e: 8a:7e:0f:9c:af:cc:7f:1a:82:d9:5d:cd:27:3f:f1: 2e:c0:63:db:29:4b:82:42:56:83:d3:19:21:d1:f0: 6f:31:82:18:e3:c3:69:23:8e:a0:aa:b9:c6:5e:58: 9a:20:b6:c0:ad:47:de:71:f7:50:85:3c:73:e4:d6: f0:a6:e4:09:55:d2:59:c1:ad:93:bd:e0:bb:26:4a: 3b:78:d7:07:ec:c8:37:7f:03:b3:99:73:d9:90:11: 03:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2C:6B:BB:73:67:DE:87:9F:18:06:85:0E:12:80:24:54:9B:F4:2C X509v3 Authority Key Identifier: keyid:40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:17:97:57:54:f5:62:8c:1a:2c:41:a9:54:81:2d:b9:dc:90: 6b:e1:b2:07:e7:3f:e3:89:ae:89:eb:ce:7d:57:22:53:d4:77: 2f:db:75:13:e1:1c:32:5b:50:2b:c6:1b:04:1b:98:d2:23:7b: ac:3c:57:bf:28:7f:23:12:ac:cf:61:29:72:5f:a0:7b:a2:fd: b8:f2:ca:7f:a0:70:4d:32:f5:76:34:69:a4:6b:e9:93:5a:69: fa:64:41:a4:68:99:16:9f:27:f2:6b:bd:f5:57:9f:1e:e0:0c: 36:60:7b:66:70:ff:60:a3:61:6f:00:d2:f3:c9:f7:d4:51:07: 62:a7:1e:8d:45:ff:cb:22:2c:57:40:b8:0d:02:be:2c:94:42: 72:bf:1e:1f:d2:a9:29:98:bc:20:2e:83:5c:2d:25:8a:b2:70: b7:87:21:c7:8f:5a:6d:3e:63:27:19:50:c0:57:f5:91:09:df: 7d:d5:f5:d9:cc:f0:58:c9:55:0b:e6:55:52:0f:61:0e:53:02: e7:90:35:f1:0f:37:fd:39:2a:6c:29:9f:9c:da:f1:2b:09:1c: 9b:5c:a3:55:00:f0:62:25:a0:11:72:02:76:28:83:52:21:e4: 03:ef:c5:d4:6c:f2:40:81:cc:cd:e8:5d:94:ff:98:a0:a0:9f: 84:26:90:88 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUE6lP5l7MPbdIuGeSH+CWBdypvzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJG Q0I3M0Q3MTAeFw0yNjEwMjQwMDA1NDZaFw0yNjEwMjcwOTA5NDZaMDMxMTAvBgNV BAMTKDRFMkM2QkJCNzM2N0RFODc5RjE4MDY4NTBFMTI4MDI0NTQ5QkY0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRrvU8td5dhOm3g6T9XsxjLOX5 ljcVv4urFs30EMw9/sCkvym5DhOanMV75KvqZRntWvaJNLnG9nRfG6xX5p2U9Veo 5JKJNJR3dsEcJGP4+vWSrSBODn7Zh1h+HX4/5+xIqiFuUkl1+zGLsCur/DN4j453 qlULu0+v31/CTUpgjiV4jmLbNe/CdHcHCN+TB9LurAKf8fAUPcVOQCIoRetveZO5 nop+D5yvzH8agtldzSc/8S7AY9spS4JCVoPTGSHR8G8xghjjw2kjjqCqucZeWJog tsCtR95x91CFPHPk1vCm5AlV0lnBrZO94LsmSjt41wfsyDd/A7OZc9mQEQMDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTixru3Nn3oefGAaFDhKAJFSb9CwwHwYDVR0j BBgwFoAUQKv0E80zDgpNK66PHmavi/y3PXEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk2MjQwNDg5NTQyNDUxNS8wLzQwQUJGNDEzQ0QzMzBFMEE0RDJCQUU4RjFFNjZB RjhCRkNCNzNENzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJGQ0I3M0Q3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5NjI0MDQ4OTU0MjQ1MTUvMC80MEFCRjQxM0NEMzMw RTBBNEQyQkFFOEYxRTY2QUY4QkZDQjczRDcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBeXV1T1Yowa LEGpVIEtudyQa+GyB+c/44muievOfVciU9R3L9t1E+EcMltQK8YbBBuY0iN7rDxX vyh/IxKsz2Epcl+ge6L9uPLKf6BwTTL1djRppGvpk1pp+mRBpGiZFp8n8mu99Vef HuAMNmB7ZnD/YKNhbwDS88n31FEHYqcejUX/yyIsV0C4DQK+LJRCcr8eH9KpKZi8 IC6DXC0lirJwt4chx49abT5jJxlQwFf1kQnffdX12czwWMlVC+ZVUg9hDlMC55A1 8Q83/TkqbCmfnNrxKwkcm1yjVQDwYiWgEXICdiiDUiHkA+/F1GzyQIHMzehdlP+Y oKCfhCaQiA== -----END CERTIFICATE-----Generated at Mon Oct 26 10:52:06 2026 by rpki-client