
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
File: 40D86726DB14F9E5E06610928FF6C77226F14874.mft (raw, json)
Hash identifier: 7xtdt5WPU8kEh4DUfVVuAWnVjil06Nijilm95xnMy24=
Subject key identifier: 53:ED:BE:92:4B:54:70:C8:C5:B6:0C:B2:B4:1C:07:47:91:33:24:A4
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Certificate issuer: /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial: 53886E34E4B6B5A0879901A19117CF2654E1FB70
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
Manifest number: AD
Signing time: Tue 13 Oct 2026 20:53:13 +0000
Manifest this update: Tue 13 Oct 2026 20:48:13 +0000
Manifest next update: Fri 16 Oct 2026 23:19:13 +0000
Files and hashes: 1: 3130332e3139362e38382e302f32312d3231203d3e203633363134.roa (hash: cnOQyI9/iTYFqYZQPtmuhSuhepMxk0VUqXtLkgaM4sE=)
2: 3132322e3131352e35382e302f32342d3234203d3e203633363134.roa (hash: bGJsXRzQ9+/o5q3jTTaSkdQb2YXV90slfPXEVZCbnUU=)
3: 3131342e3131332e3232342e302f32302d3230203d3e2034383437.roa (hash: 0RUREOZbL7QCSxbilQ+T7phjETfaLT5dhQ9p2hfr/q4=)
4: 34352e3132372e3134342e302f32312d3231203d3e2034383038.roa (hash: hXwk2GKDErcKlJU8gELUl9SQbs7cUzuoqY0ENuHWVpI=)
5: 3130332e32352e32342e302f32322d3232203d3e203633363134.roa (hash: 00/6JOZdkomWZNXgpcQVFz0wmg5iWQCIs2r23mxzWFA=)
6: 3131342e3131332e3233362e302f32342d3234203d3e203633363134.roa (hash: 6a7nE/i1NON4n4MYu43SC1Ar/peQ7xMVgQnVuWXrYg8=)
7: 3132322e3131352e33322e302f31392d3139203d3e2034383038.roa (hash: nwOPFWbG/W5unbw1sDIahREacTrhiUSWc6ubZXKB0SI=)
8: 3131342e3131332e3232342e302f32302d3230203d3e203633363134.roa (hash: RbRkm9DOUi0+FcbSvvr/XcUt0TfxRNIfk/YmeL0HUUQ=)
9: 3132322e3131352e33322e302f31392d3139203d3e2034383437.roa (hash: larc+B0NbWd2LMISFQucSEftOoyGORTbx4vdoeQvZs0=)
10: 32372e302e3136362e302f32332d3233203d3e203633363134.roa (hash: ozUNCFnPVmzTNOIyibjsNA5U7OJM6+ITaFZeYJQ0j34=)
11: 3130332e32352e32362e302f32342d3234203d3e203633363134.roa (hash: Y36h7EsI0CzZ1VO8KJhB8fR0g7kvGS1N86G8x1f8YM4=)
12: 34352e3132372e3134342e302f32312d3231203d3e203633363134.roa (hash: U0jAupG8woSMrVhzvzXvCyGAZPLICR8GAAYzIC1138E=)
13: 3131342e3131332e3232342e302f32302d3230203d3e2034383038.roa (hash: HOsabm5bNcShA+X8mkx4KiOxrKQ9GJHd0bDjHFV1wfs=)
14: 323430323a653838303a3a2f34382d3438203d3e203633363134.roa (hash: kraliiar4yxqugi2IGhcy/yE4wMZ9/dOXuCy2SdmB+s=)
15: 3132322e3131352e33322e302f31392d3139203d3e203633363134.roa (hash: FRq9Wg8i5Cnxs/AvTrw6rnTZ2twg1Cyo6B6XO/OMQns=)
16: 3130332e32352e32342e302f32322d3232203d3e2034383038.roa (hash: PNdyrG9j75/du4oBuputNlHaaXBtZYc/AFdw/0gOmDE=)
17: 34332e3232372e3134302e302f32322d3232203d3e2034383038.roa (hash: OoUuuHrzunU/9BuZoT9WM1RqdfIvT8/e0JVCOV3IyEs=)
18: 3131342e3131332e3233372e302f32342d3234203d3e203633363134.roa (hash: bHaeh1TNLPqsa8hf7xh3CWK61xB14SjHDOWsDA2fB0g=)
19: 3130332e3139362e38382e302f32312d3231203d3e2034383437.roa (hash: ibPGmc1qq4vu3vSBHok34apQbBgadCqjk0sNTeFZ9aI=)
20: 3130332e3139362e38382e302f32312d3231203d3e2034383038.roa (hash: APJaFNxQRg6Dn/91z5uTQjOHDylXgTlfMZYVN20xnWw=)
21: 3131342e3131332e3233312e302f32342d3234203d3e203633363134.roa (hash: ZRtGc8nPpYatduA3uU5SMsf2FFFvYyFWGcooZJgV+r0=)
22: 34332e3232372e3134302e302f32322d3232203d3e203633363134.roa (hash: 1YlErZgQzI+k3M/RrQAuVeM9lWap1eYxH0Be/qgy4mg=)
23: 40D86726DB14F9E5E06610928FF6C77226F14874.crl (hash: vCVjekxylSklalGj23i6+Nps9wYmNjV8m7jSR2wlTrQ=)
24: 34332e3232372e3134302e302f32322d3232203d3e2034383437.roa (hash: aF4/oE0nKF7/LKffe8lyhVCPu0Gr84SGiYDte7e+yvk=)
25: 32372e302e3136342e302f32332d3233203d3e203633363134.roa (hash: xK3ZkZqmtMvo3ivfx/vtBQEP9Y/roBFijeQOIgVpdsQ=)
26: 3131342e3131332e3233392e302f32342d3234203d3e203633363134.roa (hash: Q6qqkklKXuvcMJlp9EcVx2nUCPbs9Ldm6soTA8Lx8so=)
27: 3130332e32352e32342e302f32322d3232203d3e2034383437.roa (hash: d/3TyUOCiGQwH9RjPKTQ6/QBlrP2JdKDV9tmp3Ln7M4=)
28: 34352e3132372e3134342e302f32312d3231203d3e2034383437.roa (hash: 91/lKxf1daLG7RqoCQBgCYnA95SLfNLn9WoHXQiHXYk=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 16 Oct 2026 23:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:88:6e:34:e4:b6:b5:a0:87:99:01:a1:91:17:cf:26:54:e1:fb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
Validity
Not Before: Oct 13 20:48:13 2026 GMT
Not After : Oct 16 23:19:13 2026 GMT
Subject: CN=53EDBE924B5470C8C5B60CB2B41C0747913324A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a4:f7:53:5f:7d:87:70:c7:d6:71:c9:fb:a9:
38:ca:13:b8:6c:95:89:49:a1:e7:24:c5:99:9d:d0:
e2:98:f6:76:8d:e9:c3:9e:7c:ed:d1:d5:ab:9b:89:
b6:d8:b2:78:2d:81:5c:e9:d5:6b:14:ce:42:76:d8:
c4:00:fd:7d:d3:74:71:28:d7:e9:66:ff:c4:ee:38:
48:d1:9e:fe:8e:9a:aa:c0:6d:a1:aa:e0:4a:71:76:
c1:b7:8d:04:a7:95:40:71:49:18:22:2a:8b:26:c0:
bd:22:8b:11:fc:98:3a:5d:d0:82:55:01:98:20:f3:
a0:90:45:a5:1e:61:c0:fd:f7:60:cc:16:40:dd:96:
80:ac:91:ac:1d:03:4a:0d:c1:4f:59:52:ff:ad:f1:
32:ca:fa:4a:a0:ac:99:8c:84:94:69:63:21:75:aa:
42:ca:d7:78:4b:78:37:11:40:ee:50:33:cb:02:cf:
ee:29:51:f5:24:ab:f5:b4:9d:85:3e:8a:ca:12:2d:
21:2c:7b:23:f6:9c:3d:9f:92:1c:c5:63:e9:53:a3:
58:e9:16:8a:f5:d5:26:8a:9a:b0:49:66:a7:b4:16:
dd:a2:d2:d0:af:38:4c:81:65:90:d3:6b:87:9e:6f:
65:76:53:84:c5:9d:1c:c1:89:53:f4:46:8b:e2:bc:
30:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:ED:BE:92:4B:54:70:C8:C5:B6:0C:B2:B4:1C:07:47:91:33:24:A4
X509v3 Authority Key Identifier:
keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:75:8b:8b:97:ea:6b:b8:1a:8d:f0:7b:5b:f6:35:e4:7f:a4:
78:d7:03:07:9a:0e:18:bd:a4:95:ea:93:e8:d2:b8:6a:5b:5b:
3f:ae:a4:33:27:54:7a:2b:02:d8:45:ee:23:e6:26:92:b2:7e:
de:df:c9:6a:b5:e2:9c:cc:3c:3e:7f:0b:77:ba:20:ff:b9:19:
be:55:a6:51:32:0a:e6:47:c1:d8:1b:c1:e9:56:f5:a0:9d:7c:
35:49:9e:18:19:cf:69:ba:a4:54:55:60:e6:b0:c7:cc:a3:a1:
a6:36:3f:7b:8a:6c:5e:08:f5:c9:60:4b:a1:a2:84:e7:54:0f:
01:09:99:86:b3:72:f1:86:e0:ca:93:45:22:6b:a6:0c:ae:a9:
9a:2f:e4:7f:b4:ee:8b:54:6d:b9:65:9e:95:61:0d:0b:08:88:
64:02:3e:5c:31:5b:0e:27:ff:ee:55:ce:f1:96:c1:08:21:73:
2f:f6:0f:33:81:34:da:28:d0:43:25:92:6e:01:45:b5:13:03:
b1:ae:10:02:ad:2f:68:4f:61:27:d8:62:85:db:23:78:af:68:
7d:a6:db:b2:f1:87:02:b8:c1:d0:6b:71:1e:21:52:e2:ca:b4:
91:61:a9:99:34:be:37:9a:85:79:44:2f:66:ee:2c:54:a6:b7:
78:05:e9:a4
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUU4huNOS2taCHmQGhkRfPJlTh+3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIy
NkYxNDg3NDAeFw0yNjEwMTMyMDQ4MTNaFw0yNjEwMTYyMzE5MTNaMDMxMTAvBgNV
BAMTKDUzRURCRTkyNEI1NDcwQzhDNUI2MENCMkI0MUMwNzQ3OTEzMzI0QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCpPdTX32HcMfWccn7qTjKE7hs
lYlJoeckxZmd0OKY9naN6cOefO3R1aubibbYsngtgVzp1WsUzkJ22MQA/X3TdHEo
1+lm/8TuOEjRnv6OmqrAbaGq4EpxdsG3jQSnlUBxSRgiKosmwL0iixH8mDpd0IJV
AZgg86CQRaUeYcD992DMFkDdloCskawdA0oNwU9ZUv+t8TLK+kqgrJmMhJRpYyF1
qkLK13hLeDcRQO5QM8sCz+4pUfUkq/W0nYU+isoSLSEseyP2nD2fkhzFY+lTo1jp
For11SaKmrBJZqe0Ft2i0tCvOEyBZZDTa4eeb2V2U4TFnRzBiVP0RovivDC1AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUU+2+kktUcMjFtgyytBwHR5EzJKQwHwYDVR0j
BBgwFoAUQNhnJtsU+eXgZhCSj/bHcibxSHQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjUwMzE1NTY2MDYxOTc5My8wLzQwRDg2NzI2REIxNEY5RTVFMDY2MTA5MjhGRjZD
NzcyMjZGMTQ4NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIyNkYxNDg3NC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDY1MDMxNTU2NjA2MTk3OTMvMC80MEQ4NjcyNkRCMTRG
OUU1RTA2NjEwOTI4RkY2Qzc3MjI2RjE0ODc0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXWLi5fqa7ga
jfB7W/Y15H+keNcDB5oOGL2kleqT6NK4altbP66kMydUeisC2EXuI+YmkrJ+3t/J
arXinMw8Pn8Ld7og/7kZvlWmUTIK5kfB2BvB6Vb1oJ18NUmeGBnPabqkVFVg5rDH
zKOhpjY/e4psXgj1yWBLoaKE51QPAQmZhrNy8YbgypNFImumDK6pmi/kf7Tui1Rt
uWWelWENCwiIZAI+XDFbDif/7lXO8ZbBCCFzL/YPM4E02ijQQyWSbgFFtRMDsa4Q
Aq0vaE9hJ9hihdsjeK9ofabbsvGHArjB0GtxHiFS4sq0kWGpmTS+N5qFeUQvZu4s
VKa3eAXppA==
-----END CERTIFICATE-----
Generated at Wed Oct 14 17:14:50 2026 by rpki-client