$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft File: 40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft (raw, json) Hash identifier: 0BlEBehvGdZeb30qqEcYOEPPcyReC84UTgTNVSKRoVw= Subject key identifier: D2:34:67:A3:04:F8:CD:B9:52:FE:46:EF:F9:83:5F:58:C3:73:1C:24 Authority key identifier: 40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 Certificate issuer: /CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Certificate serial: 2DB75BADC310540F30CC8276052825AD16240D52 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft Manifest number: C7 Signing time: Sat 03 Oct 2026 08:41:43 +0000 Manifest this update: Sat 03 Oct 2026 08:36:43 +0000 Manifest next update: Tue 06 Oct 2026 10:00:43 +0000 Files and hashes: 1: 34352e3235322e322e302f32332d3233203d3e2034383337.roa (hash: ogJ8b/pu/yvvBpwQjJD7aR2MKAiB2NVSNAKv0EvNExs=) 2: 3130332e3232302e3234302e302f32322d3232203d3e203234313339.roa (hash: gbVCFJ5R1GJxVqj6VUJKkq23UMSaPAub7AW4a1P+kwc=) 3: 323430353a393738303a3a2f33322d313238203d3e2030.roa (hash: wsAlE1QEtrkyozdia6LocJwjVZkBAeHQ4PonEVzYZn4=) 4: 34352e3235322e302e302f32322d3232203d3e203234313339.roa (hash: yZ9/bItsZVNimYfZJceoCqR8YKceJZZWWFqQf2xko2Y=) 5: 34352e3235322e302e302f32332d3233203d3e2034383337.roa (hash: Girfmzj3SgStMMY9QQQlekVZITn+b5VccIqS4mZXqQI=) 6: 3130332e3232302e3234322e302f32332d3233203d3e2034383337.roa (hash: 3TONmc+B7Q42E5fNjNdLH0s/fvuQxKfU4ddysGsNONE=) 7: 40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl (hash: dJXgeC1S6Oaa82u1rA1pcsGcs6767aW+K/feUOpyma0=) 8: 3130332e3232302e3234302e302f32332d3233203d3e2034383337.roa (hash: 2wZEG3CS93oCxpOvvSD/xvBdYQ4/YZbs+htsSujp09o=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 10:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b7:5b:ad:c3:10:54:0f:30:cc:82:76:05:28:25:ad:16:24:0d:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Validity Not Before: Oct 3 08:36:43 2026 GMT Not After : Oct 6 10:00:43 2026 GMT Subject: CN=D23467A304F8CDB952FE46EFF9835F58C3731C24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ec:9a:5c:ea:2a:c4:8f:95:90:73:7f:02:6c: c2:26:f1:e4:5c:51:ca:b2:25:c7:5d:20:36:62:70: f6:40:bd:05:35:d3:4b:a8:10:ef:e8:ac:0d:c6:1d: d7:33:0a:d9:44:ae:4d:f7:05:74:f7:fb:f5:f2:83: c1:7d:fc:76:4d:3d:2e:f8:8f:6f:b5:3c:06:15:2d: 9c:92:09:79:e4:44:a6:87:e3:37:42:a4:a3:01:c4: 5d:28:8b:5a:e3:d0:e9:48:ec:0e:13:7f:a2:df:43: 1a:7d:41:89:1d:a9:89:fc:b5:34:62:8a:2d:a8:d9: 7d:2a:82:46:71:ac:b5:f9:8f:63:43:dd:8a:4b:d0: de:2e:76:60:ad:82:fa:04:ca:89:74:5c:74:df:dd: 85:1b:30:f7:a5:77:50:b1:9a:3b:dd:95:61:c7:54: 28:cc:2c:a3:fa:f8:51:ec:96:da:88:0c:d5:fc:f5: 83:08:1d:7f:6d:b8:6b:ea:73:16:09:9d:fd:cc:5e: 6d:d9:96:c4:1f:b2:2f:3f:fc:7d:86:d4:62:12:21: 68:91:2b:04:12:69:b9:ac:1c:9a:1b:20:4b:a0:04: 7e:79:8b:d9:ec:6e:de:ab:23:52:88:d3:90:92:8f: 3d:2f:a3:20:1c:d7:66:c4:bd:9a:5b:4c:67:4e:4a: c7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:34:67:A3:04:F8:CD:B9:52:FE:46:EF:F9:83:5F:58:C3:73:1C:24 X509v3 Authority Key Identifier: keyid:40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:3e:14:e4:6f:e3:f0:33:9d:1f:72:29:ee:9f:fd:d0:98:4a: f1:b6:1f:cc:72:7f:5d:c3:b6:f3:2f:e9:c0:df:8e:8f:27:75: fe:77:fd:f4:cf:b1:b0:59:36:f5:a7:47:55:30:79:cd:11:c3: d9:37:97:f4:cf:cf:31:b2:05:f3:58:58:36:5d:c6:b6:59:a3: 6b:e5:b7:ea:ca:e6:0e:68:d2:00:b1:b3:93:97:4a:a1:3f:e8: 1c:4a:9c:29:06:25:da:61:d3:e8:48:01:b5:85:3b:a1:c2:a7: 83:0c:1f:d4:c8:1f:a1:b8:ef:ec:2b:8e:a0:c8:a4:b6:ec:67: 86:7b:97:5b:ad:a1:6e:04:80:65:d8:5b:33:28:e2:4b:0b:1e: 68:a2:32:fb:65:35:7e:1d:bd:49:29:e4:ac:3b:5b:98:7e:5a: 6b:0b:0e:c3:a1:69:37:fe:b6:1a:cc:41:e9:25:29:79:7d:f1: 20:5e:02:f1:cb:40:6f:48:d8:4e:93:d1:7b:90:18:61:2a:eb: ad:45:4a:f4:f2:11:4f:31:3c:8a:51:1e:4a:4d:3c:3d:ad:02: b1:da:56:e3:4e:a9:ff:74:39:5d:7a:87:98:aa:50:b9:04:9e: 59:1e:42:74:be:7b:42:d7:6f:9a:33:9c:a7:23:d0:99:1f:ef: 2f:b5:54:b6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIULbdbrcMQVA8wzIJ2BSglrRYkDVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJG Q0I3M0Q3MTAeFw0yNjEwMDMwODM2NDNaFw0yNjEwMDYxMDAwNDNaMDMxMTAvBgNV BAMTKEQyMzQ2N0EzMDRGOENEQjk1MkZFNDZFRkY5ODM1RjU4QzM3MzFDMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh7Jpc6irEj5WQc38CbMIm8eRc UcqyJcddIDZicPZAvQU100uoEO/orA3GHdczCtlErk33BXT3+/Xyg8F9/HZNPS74 j2+1PAYVLZySCXnkRKaH4zdCpKMBxF0oi1rj0OlI7A4Tf6LfQxp9QYkdqYn8tTRi ii2o2X0qgkZxrLX5j2ND3YpL0N4udmCtgvoEyol0XHTf3YUbMPeld1CxmjvdlWHH VCjMLKP6+FHsltqIDNX89YMIHX9tuGvqcxYJnf3MXm3ZlsQfsi8//H2G1GISIWiR KwQSabmsHJobIEugBH55i9nsbt6rI1KI05CSjz0voyAc12bEvZpbTGdOSsflAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0jRnowT4zblS/kbv+YNfWMNzHCQwHwYDVR0j BBgwFoAUQKv0E80zDgpNK66PHmavi/y3PXEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk2MjQwNDg5NTQyNDUxNS8wLzQwQUJGNDEzQ0QzMzBFMEE0RDJCQUU4RjFFNjZB RjhCRkNCNzNENzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJGQ0I3M0Q3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5NjI0MDQ4OTU0MjQ1MTUvMC80MEFCRjQxM0NEMzMw RTBBNEQyQkFFOEYxRTY2QUY4QkZDQjczRDcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkT4U5G/j8DOd H3Ip7p/90JhK8bYfzHJ/XcO28y/pwN+Ojyd1/nf99M+xsFk29adHVTB5zRHD2TeX 9M/PMbIF81hYNl3Gtlmja+W36srmDmjSALGzk5dKoT/oHEqcKQYl2mHT6EgBtYU7 ocKngwwf1Mgfobjv7CuOoMiktuxnhnuXW62hbgSAZdhbMyjiSwseaKIy+2U1fh29 SSnkrDtbmH5aawsOw6FpN/62GsxB6SUpeX3xIF4C8ctAb0jYTpPRe5AYYSrrrUVK 9PIRTzE8ilEeSk08Pa0CsdpW406p/3Q5XXqHmKpQuQSeWR5CdL57QtdvmjOcpyPQ mR/vL7VUtg== -----END CERTIFICATE-----Generated at Mon Oct 5 05:32:13 2026 by rpki-client