$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft File: 40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft (raw, json) Hash identifier: ZgbDc9O/RoZKN4ngJXCXGOrdPWq70aR0JTWhSmBaeLA= Subject key identifier: FE:5E:CE:85:DF:A2:77:24:3C:76:2A:20:CA:56:C5:F1:4A:29:24:9B Authority key identifier: 40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 Certificate issuer: /CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Certificate serial: 18FA65B58527D78A415F8175A18053AE4FAEAAE4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft Manifest number: 27 Signing time: Tue 12 May 2026 21:25:47 +0000 Manifest this update: Tue 12 May 2026 21:20:47 +0000 Manifest next update: Thu 14 May 2026 01:01:47 +0000 Files and hashes: 1: 34352e3235322e322e302f32332d3233203d3e2034383337.roa (hash: ogJ8b/pu/yvvBpwQjJD7aR2MKAiB2NVSNAKv0EvNExs=) 2: 34352e3235322e302e302f32332d3233203d3e2034383337.roa (hash: Girfmzj3SgStMMY9QQQlekVZITn+b5VccIqS4mZXqQI=) 3: 34352e3235322e302e302f32322d3232203d3e203234313339.roa (hash: yZ9/bItsZVNimYfZJceoCqR8YKceJZZWWFqQf2xko2Y=) 4: 3130332e3232302e3234302e302f32322d3232203d3e203234313339.roa (hash: gbVCFJ5R1GJxVqj6VUJKkq23UMSaPAub7AW4a1P+kwc=) 5: 3130332e3232302e3234302e302f32332d3233203d3e2034383337.roa (hash: 2wZEG3CS93oCxpOvvSD/xvBdYQ4/YZbs+htsSujp09o=) 6: 323430353a393738303a3a2f33322d313238203d3e2030.roa (hash: wsAlE1QEtrkyozdia6LocJwjVZkBAeHQ4PonEVzYZn4=) 7: 40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl (hash: EDYynRInjAvviXTBzh3uF8m4UgJeOD8qzzW5TcXWsso=) 8: 3130332e3232302e3234322e302f32332d3233203d3e2034383337.roa (hash: 3TONmc+B7Q42E5fNjNdLH0s/fvuQxKfU4ddysGsNONE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:fa:65:b5:85:27:d7:8a:41:5f:81:75:a1:80:53:ae:4f:ae:aa:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Validity Not Before: May 12 21:20:47 2026 GMT Not After : May 14 01:01:47 2026 GMT Subject: CN=FE5ECE85DFA277243C762A20CA56C5F14A29249B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e8:c9:f0:2c:99:da:ea:e3:0d:6c:14:2f:7c: 56:08:f3:c2:1c:cd:da:cc:d4:81:0e:c2:08:9b:4c: f5:fc:0e:6d:a1:d5:4c:42:94:95:cd:9f:2e:a1:11: 88:72:8e:5e:58:a2:86:b7:60:7c:c7:27:98:0a:88: d7:e2:fc:8a:79:c7:fd:57:24:58:d5:12:f5:41:ec: 26:ca:fe:04:e0:a5:2a:68:b9:c5:17:a6:e3:43:6d: 93:59:4d:39:a2:cc:ef:6b:fe:fc:44:b7:43:72:14: d0:e6:e0:8a:e9:ba:03:dc:c4:26:51:ac:37:5f:19: 80:54:12:f7:f7:24:13:57:b1:6a:fd:21:49:75:05: 81:f8:ba:9d:97:99:08:ec:1a:04:61:cf:6e:7d:87: 6a:a2:dc:c1:ff:97:7d:18:72:2d:1b:60:74:87:89: 83:aa:58:0e:73:0f:ca:bc:df:f0:f7:f4:46:da:14: 65:59:cf:01:45:26:d3:77:92:3d:d3:4a:c0:6f:11: 5e:90:9d:ec:7c:e6:56:a7:56:bc:e5:e1:e1:ed:7b: f2:e0:a8:a6:1a:5a:cf:58:88:1a:b7:a1:e7:df:4e: 30:7f:b7:fd:57:a9:03:27:34:81:43:85:5e:ed:9d: 47:8d:2e:99:2e:c5:65:f2:d4:e2:24:02:c7:62:80: df:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:5E:CE:85:DF:A2:77:24:3C:76:2A:20:CA:56:C5:F1:4A:29:24:9B X509v3 Authority Key Identifier: keyid:40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:59:f8:92:e9:c1:9d:a5:08:52:68:04:75:e0:d0:56:77:55: 54:19:25:6b:ef:19:1f:8a:db:1f:39:68:f3:55:75:c6:2c:67: fc:a7:5c:77:ee:26:56:bc:28:de:e2:f0:a2:e7:b6:2c:f0:df: 7b:cd:3e:96:cd:20:32:db:c5:b1:98:2b:b1:36:82:47:bb:e2: 4e:3b:9c:5c:00:69:bc:54:33:ba:9a:52:22:82:62:0a:69:2f: 61:13:fe:b9:36:f4:4f:9f:4c:4c:72:60:91:c8:a0:38:38:2f: 8b:d6:6a:f5:07:79:5c:d6:4c:17:20:57:ea:3a:7d:b6:3a:0d: 31:2d:fa:02:67:17:6b:1b:d9:17:42:00:f6:18:5a:14:91:98: 3d:e6:af:f7:53:5b:48:dc:6f:a4:17:df:82:a4:f6:d7:aa:00: 74:93:ae:7f:f7:2c:1d:bf:9d:29:bc:0f:3f:ea:fb:b1:4d:fb: 72:92:56:9f:fe:95:e2:26:23:84:62:0d:f5:7e:b3:5a:b2:7a: 8e:1b:28:aa:f5:42:5d:57:9c:35:65:ba:aa:a0:89:b1:55:06: bb:4e:f7:a9:4d:66:68:ab:fb:c7:8e:71:4a:0c:db:0b:67:d2: c6:e8:0b:7b:88:9d:5c:a5:bd:90:0a:51:84:8e:f1:b3:a2:ff: 3c:09:40:14 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGPpltYUn14pBX4F1oYBTrk+uquQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJG Q0I3M0Q3MTAeFw0yNjA1MTIyMTIwNDdaFw0yNjA1MTQwMTAxNDdaMDMxMTAvBgNV BAMTKEZFNUVDRTg1REZBMjc3MjQzQzc2MkEyMENBNTZDNUYxNEEyOTI0OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6MnwLJna6uMNbBQvfFYI88Ic zdrM1IEOwgibTPX8Dm2h1UxClJXNny6hEYhyjl5Yooa3YHzHJ5gKiNfi/Ip5x/1X JFjVEvVB7CbK/gTgpSpoucUXpuNDbZNZTTmizO9r/vxEt0NyFNDm4IrpugPcxCZR rDdfGYBUEvf3JBNXsWr9IUl1BYH4up2XmQjsGgRhz259h2qi3MH/l30Yci0bYHSH iYOqWA5zD8q83/D39EbaFGVZzwFFJtN3kj3TSsBvEV6Qnex85lanVrzl4eHte/Lg qKYaWs9YiBq3oeffTjB/t/1XqQMnNIFDhV7tnUeNLpkuxWXy1OIkAsdigN+5AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU/l7Ohd+idyQ8diogylbF8UopJJswHwYDVR0j BBgwFoAUQKv0E80zDgpNK66PHmavi/y3PXEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk2MjQwNDg5NTQyNDUxNS8wLzQwQUJGNDEzQ0QzMzBFMEE0RDJCQUU4RjFFNjZB RjhCRkNCNzNENzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJGQ0I3M0Q3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5NjI0MDQ4OTU0MjQ1MTUvMC80MEFCRjQxM0NEMzMw RTBBNEQyQkFFOEYxRTY2QUY4QkZDQjczRDcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVn4kunBnaUI UmgEdeDQVndVVBkla+8ZH4rbHzlo81V1xixn/Kdcd+4mVrwo3uLwoue2LPDfe80+ ls0gMtvFsZgrsTaCR7viTjucXABpvFQzuppSIoJiCmkvYRP+uTb0T59MTHJgkcig ODgvi9Zq9Qd5XNZMFyBX6jp9tjoNMS36AmcXaxvZF0IA9hhaFJGYPeav91NbSNxv pBffgqT216oAdJOuf/csHb+dKbwPP+r7sU37cpJWn/6V4iYjhGIN9X6zWrJ6jhso qvVCXVecNWW6qqCJsVUGu073qU1maKv7x45xSgzbC2fSxugLe4idXKW9kApRhI7x s6L/PAlAFA== -----END CERTIFICATE-----Generated at Wed May 13 09:15:16 2026 by rpki-client