
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
File: 40D86726DB14F9E5E06610928FF6C77226F14874.mft (raw, json)
Hash identifier: P2RDySXGItb2UTPNuQb0suckW569sw97ECJjr35qaNQ=
Subject key identifier: 2F:67:3C:77:89:AF:B0:94:CE:81:49:DA:76:DD:B7:0B:EA:3C:AE:3F
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Certificate issuer: /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial: 5A416F1607A95A82F56AFE44887DB87442588EB4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
Manifest number: 6A
Signing time: Fri 24 Jul 2026 04:10:19 +0000
Manifest this update: Fri 24 Jul 2026 04:05:19 +0000
Manifest next update: Sat 25 Jul 2026 06:24:19 +0000
Files and hashes: 1: 40D86726DB14F9E5E06610928FF6C77226F14874.crl (hash: Y+r0M1PAuAddbsq44XytX9kus+HGuZSX+j3Zj4Ec9+w=)
2: 34352e3132372e3134342e302f32312d3231203d3e203633363134.roa (hash: U0jAupG8woSMrVhzvzXvCyGAZPLICR8GAAYzIC1138E=)
3: 3132322e3131352e33322e302f31392d3139203d3e2034383038.roa (hash: nwOPFWbG/W5unbw1sDIahREacTrhiUSWc6ubZXKB0SI=)
4: 3130332e32352e32362e302f32342d3234203d3e203633363134.roa (hash: Y36h7EsI0CzZ1VO8KJhB8fR0g7kvGS1N86G8x1f8YM4=)
5: 34332e3232372e3134302e302f32322d3232203d3e2034383038.roa (hash: OoUuuHrzunU/9BuZoT9WM1RqdfIvT8/e0JVCOV3IyEs=)
6: 3131342e3131332e3232342e302f32302d3230203d3e2034383038.roa (hash: HOsabm5bNcShA+X8mkx4KiOxrKQ9GJHd0bDjHFV1wfs=)
7: 3130332e3139362e38382e302f32312d3231203d3e203633363134.roa (hash: cnOQyI9/iTYFqYZQPtmuhSuhepMxk0VUqXtLkgaM4sE=)
8: 3130332e32352e32342e302f32322d3232203d3e2034383437.roa (hash: d/3TyUOCiGQwH9RjPKTQ6/QBlrP2JdKDV9tmp3Ln7M4=)
9: 3131342e3131332e3232342e302f32302d3230203d3e2034383437.roa (hash: 0RUREOZbL7QCSxbilQ+T7phjETfaLT5dhQ9p2hfr/q4=)
10: 32372e302e3136342e302f32332d3233203d3e203633363134.roa (hash: xK3ZkZqmtMvo3ivfx/vtBQEP9Y/roBFijeQOIgVpdsQ=)
11: 3131342e3131332e3233362e302f32342d3234203d3e203633363134.roa (hash: 6a7nE/i1NON4n4MYu43SC1Ar/peQ7xMVgQnVuWXrYg8=)
12: 34332e3232372e3134302e302f32322d3232203d3e203633363134.roa (hash: 1YlErZgQzI+k3M/RrQAuVeM9lWap1eYxH0Be/qgy4mg=)
13: 3132322e3131352e35382e302f32342d3234203d3e203633363134.roa (hash: bGJsXRzQ9+/o5q3jTTaSkdQb2YXV90slfPXEVZCbnUU=)
14: 32372e302e3136362e302f32332d3233203d3e203633363134.roa (hash: ozUNCFnPVmzTNOIyibjsNA5U7OJM6+ITaFZeYJQ0j34=)
15: 3130332e3139362e38382e302f32312d3231203d3e2034383038.roa (hash: APJaFNxQRg6Dn/91z5uTQjOHDylXgTlfMZYVN20xnWw=)
16: 3130332e3139362e38382e302f32312d3231203d3e2034383437.roa (hash: ibPGmc1qq4vu3vSBHok34apQbBgadCqjk0sNTeFZ9aI=)
17: 34352e3132372e3134342e302f32312d3231203d3e2034383038.roa (hash: hXwk2GKDErcKlJU8gELUl9SQbs7cUzuoqY0ENuHWVpI=)
18: 3130332e32352e32342e302f32322d3232203d3e203633363134.roa (hash: 00/6JOZdkomWZNXgpcQVFz0wmg5iWQCIs2r23mxzWFA=)
19: 323430323a653838303a3a2f34382d3438203d3e203633363134.roa (hash: kraliiar4yxqugi2IGhcy/yE4wMZ9/dOXuCy2SdmB+s=)
20: 34352e3132372e3134342e302f32312d3231203d3e2034383437.roa (hash: 91/lKxf1daLG7RqoCQBgCYnA95SLfNLn9WoHXQiHXYk=)
21: 3130332e32352e32342e302f32322d3232203d3e2034383038.roa (hash: PNdyrG9j75/du4oBuputNlHaaXBtZYc/AFdw/0gOmDE=)
22: 3132322e3131352e33322e302f31392d3139203d3e203633363134.roa (hash: FRq9Wg8i5Cnxs/AvTrw6rnTZ2twg1Cyo6B6XO/OMQns=)
23: 3131342e3131332e3233392e302f32342d3234203d3e203633363134.roa (hash: Q6qqkklKXuvcMJlp9EcVx2nUCPbs9Ldm6soTA8Lx8so=)
24: 3131342e3131332e3233372e302f32342d3234203d3e203633363134.roa (hash: bHaeh1TNLPqsa8hf7xh3CWK61xB14SjHDOWsDA2fB0g=)
25: 3131342e3131332e3233312e302f32342d3234203d3e203633363134.roa (hash: ZRtGc8nPpYatduA3uU5SMsf2FFFvYyFWGcooZJgV+r0=)
26: 3132322e3131352e33322e302f31392d3139203d3e2034383437.roa (hash: larc+B0NbWd2LMISFQucSEftOoyGORTbx4vdoeQvZs0=)
27: 34332e3232372e3134302e302f32322d3232203d3e2034383437.roa (hash: aF4/oE0nKF7/LKffe8lyhVCPu0Gr84SGiYDte7e+yvk=)
28: 3131342e3131332e3232342e302f32302d3230203d3e203633363134.roa (hash: RbRkm9DOUi0+FcbSvvr/XcUt0TfxRNIfk/YmeL0HUUQ=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:41:6f:16:07:a9:5a:82:f5:6a:fe:44:88:7d:b8:74:42:58:8e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
Validity
Not Before: Jul 24 04:05:19 2026 GMT
Not After : Jul 25 06:24:19 2026 GMT
Subject: CN=2F673C7789AFB094CE8149DA76DDB70BEA3CAE3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b6:3f:61:00:09:56:85:d5:e6:40:96:10:a4:
ae:2c:44:cd:67:f9:26:cc:03:58:49:41:c7:fe:2c:
72:0c:4e:56:32:60:9f:71:53:90:94:75:3d:49:d2:
43:a5:1c:30:4a:1f:51:5f:45:35:30:3a:ef:fa:81:
df:15:24:1d:53:1e:95:b0:0c:15:bc:4e:9e:94:98:
62:73:2d:93:95:43:00:c4:b7:5e:c6:e2:08:96:72:
c8:62:22:ee:9d:4e:bc:3d:99:bd:a6:75:7b:05:73:
b1:0f:98:d5:2d:50:14:70:48:0f:5c:be:0e:60:9d:
bf:bc:45:d4:42:95:a0:fd:49:70:aa:75:3d:93:a2:
fa:49:ec:df:1b:10:84:08:45:ee:18:0a:f9:0b:4c:
32:76:f5:bc:1d:16:c8:94:05:2b:7b:21:f5:47:cf:
8a:d7:72:56:96:7b:d9:11:ff:58:9c:f1:ab:ec:95:
57:84:8e:08:a9:e0:84:d6:72:4d:e1:5f:9a:b1:bc:
bb:e1:a6:e1:8a:fe:08:78:47:5d:40:9e:e1:7a:05:
07:bd:b8:17:3c:d0:2a:31:ef:a5:6b:d0:07:3b:e7:
f0:00:83:21:df:5a:98:a2:e8:34:d5:2c:f5:d7:72:
ef:72:75:f8:86:67:8c:9c:0b:34:7b:cc:e9:50:0f:
1f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:67:3C:77:89:AF:B0:94:CE:81:49:DA:76:DD:B7:0B:EA:3C:AE:3F
X509v3 Authority Key Identifier:
keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:89:17:69:04:ca:e7:47:5a:03:9e:68:d6:ee:f9:5c:b0:19:
71:39:e9:5b:80:87:d8:8a:09:2b:dd:04:82:63:f1:8b:8c:f2:
d7:b7:e3:2d:0e:64:d3:48:d4:61:47:e1:61:10:ed:da:cc:8e:
0a:32:33:c1:a3:7c:20:85:82:9c:f7:f5:51:49:9b:a4:3e:4b:
8e:08:7d:fd:0e:1d:9a:a6:0f:89:1d:23:7f:91:de:17:b1:05:
26:82:08:90:bf:fb:4e:2e:d0:3c:44:f1:3b:06:bb:75:f7:25:
50:0c:74:c8:e4:54:2e:38:7c:64:68:dd:4b:44:b5:fe:87:a1:
fe:1a:a7:d5:5f:ba:ae:cc:89:a5:d2:d8:3e:b2:6e:3f:81:c8:
59:d4:dd:39:33:ab:ee:fd:9b:81:18:82:9b:4e:cb:68:f0:61:
07:97:c6:07:2b:bc:b3:98:f0:5f:40:17:76:3f:b7:dd:ec:74:
d3:0d:02:47:ea:5e:79:9c:9d:c5:4e:3f:8c:cc:ef:57:df:fa:
1b:41:ef:ec:1f:2a:a3:00:86:10:0c:f1:3a:0a:07:c1:3c:2e:
11:93:9b:a1:20:01:f8:ca:be:05:c4:53:58:df:57:72:cc:18:
96:0f:33:d3:5d:7a:e7:fc:4b:42:90:3a:47:a9:b6:d1:c0:6f:
79:0e:89:b5
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgIUWkFvFgepWoL1av5EiH24dEJYjrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIy
NkYxNDg3NDAeFw0yNjA3MjQwNDA1MTlaFw0yNjA3MjUwNjI0MTlaMDMxMTAvBgNV
BAMTKDJGNjczQzc3ODlBRkIwOTRDRTgxNDlEQTc2RERCNzBCRUEzQ0FFM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJtj9hAAlWhdXmQJYQpK4sRM1n
+SbMA1hJQcf+LHIMTlYyYJ9xU5CUdT1J0kOlHDBKH1FfRTUwOu/6gd8VJB1THpWw
DBW8Tp6UmGJzLZOVQwDEt17G4giWcshiIu6dTrw9mb2mdXsFc7EPmNUtUBRwSA9c
vg5gnb+8RdRClaD9SXCqdT2TovpJ7N8bEIQIRe4YCvkLTDJ29bwdFsiUBSt7IfVH
z4rXclaWe9kR/1ic8avslVeEjgip4ITWck3hX5qxvLvhpuGK/gh4R11AnuF6BQe9
uBc80Cox76Vr0Ac75/AAgyHfWpii6DTVLPXXcu9ydfiGZ4ycCzR7zOlQDx95AgMB
AAGjggIdMIICGTAdBgNVHQ4EFgQUL2c8d4mvsJTOgUnadt23C+o8rj8wHwYDVR0j
BBgwFoAUQNhnJtsU+eXgZhCSj/bHcibxSHQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NjUwMzE1NTY2MDYxOTc5My8wLzQwRDg2NzI2REIxNEY5RTVFMDY2MTA5MjhGRjZD
NzcyMjZGMTQ4NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIyNkYxNDg3NC5jZXIw
fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTExMDY1MDMxNTU2NjA2MTk3OTMvMC80MEQ4NjcyNkRCMTRG
OUU1RTA2NjEwOTI4RkY2Qzc3MjI2RjE0ODc0Lm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4kXaQTK50da
A55o1u75XLAZcTnpW4CH2IoJK90EgmPxi4zy17fjLQ5k00jUYUfhYRDt2syOCjIz
waN8IIWCnPf1UUmbpD5Ljgh9/Q4dmqYPiR0jf5HeF7EFJoIIkL/7Ti7QPETxOwa7
dfclUAx0yORULjh8ZGjdS0S1/oeh/hqn1V+6rsyJpdLYPrJuP4HIWdTdOTOr7v2b
gRiCm07LaPBhB5fGByu8s5jwX0AXdj+33ex00w0CR+peeZydxU4/jMzvV9/6G0Hv
7B8qowCGEAzxOgoHwTwuEZOboSAB+Mq+BcRTWN9XcswYlg8z01165/xLQpA6R6m2
0cBveQ6JtQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:17:13 2026 by rpki-client