$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft File: 40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft (raw, json) Hash identifier: FP/wI0ks/zif6AMxydCf2JDbZcBqYjTIdKO9117sDt8= Subject key identifier: EB:2B:2D:D5:07:84:A1:12:38:7B:6D:9B:AB:46:F6:5D:6D:18:46:96 Authority key identifier: 40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 Certificate issuer: /CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Certificate serial: 5C6F93F78F99BA81A8EB79D87010407F5F93019A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 10:06:46 +0000 Manifest this update: Thu 24 Sep 2026 10:01:46 +0000 Manifest next update: Sun 27 Sep 2026 13:05:46 +0000 Files and hashes: 1: 3130332e3232302e3234302e302f32332d3233203d3e2034383337.roa (hash: 2wZEG3CS93oCxpOvvSD/xvBdYQ4/YZbs+htsSujp09o=) 2: 34352e3235322e302e302f32332d3233203d3e2034383337.roa (hash: Girfmzj3SgStMMY9QQQlekVZITn+b5VccIqS4mZXqQI=) 3: 3130332e3232302e3234302e302f32322d3232203d3e203234313339.roa (hash: gbVCFJ5R1GJxVqj6VUJKkq23UMSaPAub7AW4a1P+kwc=) 4: 34352e3235322e302e302f32322d3232203d3e203234313339.roa (hash: yZ9/bItsZVNimYfZJceoCqR8YKceJZZWWFqQf2xko2Y=) 5: 3130332e3232302e3234322e302f32332d3233203d3e2034383337.roa (hash: 3TONmc+B7Q42E5fNjNdLH0s/fvuQxKfU4ddysGsNONE=) 6: 40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl (hash: yA57HgRYj0MWb1yEGFw9QTNpcgkHgEj3NiqM7/iDGDE=) 7: 34352e3235322e322e302f32332d3233203d3e2034383337.roa (hash: ogJ8b/pu/yvvBpwQjJD7aR2MKAiB2NVSNAKv0EvNExs=) 8: 323430353a393738303a3a2f33322d313238203d3e2030.roa (hash: wsAlE1QEtrkyozdia6LocJwjVZkBAeHQ4PonEVzYZn4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:06:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:6f:93:f7:8f:99:ba:81:a8:eb:79:d8:70:10:40:7f:5f:93:01:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Validity Not Before: Sep 24 10:01:46 2026 GMT Not After : Sep 27 13:05:46 2026 GMT Subject: CN=EB2B2DD50784A112387B6D9BAB46F65D6D184696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:88:7c:57:c5:73:0c:cf:04:c2:b7:93:5b:9a: 3a:36:17:0f:8a:20:c6:fd:12:f8:a7:23:ea:b8:11: 40:ca:74:e0:96:62:7e:1a:43:cf:e7:e0:d6:f3:a6: a8:09:ca:21:e1:40:b5:fe:19:44:f2:4a:71:51:82: fd:31:b3:8f:d8:78:08:4c:be:65:3a:ec:a7:50:8f: e9:4a:a4:67:92:c6:55:0e:11:f6:06:3c:d2:25:8b: c7:07:53:a9:4a:97:88:f4:b0:65:5f:f3:bd:0c:39: 5b:90:42:74:4e:19:39:33:95:dd:67:29:7b:41:cd: 57:cd:c7:08:87:38:9d:22:95:20:9b:ea:69:83:d3: 90:0a:bf:c6:9f:35:3e:65:cf:f3:59:92:06:96:30: ff:d2:4e:82:a7:56:66:c2:c2:b9:ee:ba:b1:64:19: 47:8e:dd:43:f0:66:c0:5e:b0:4c:1f:71:24:25:2c: 16:e4:95:c5:e3:5e:7e:f2:95:23:b8:51:55:5e:a7: 3a:86:4d:74:83:6e:1a:58:ac:68:23:ac:d3:43:98: 22:23:71:dd:fe:c6:35:f7:89:6c:7d:a1:64:49:34: dc:44:26:d0:a9:a3:1b:b6:6c:e4:b0:a1:86:d8:db: 0d:d7:ec:ee:1a:cb:5c:cf:6a:14:b0:d3:c6:9e:57: 4a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2B:2D:D5:07:84:A1:12:38:7B:6D:9B:AB:46:F6:5D:6D:18:46:96 X509v3 Authority Key Identifier: keyid:40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:00:c7:1f:f0:e9:c8:26:08:54:36:a5:bf:0e:ae:9f:d5:bd: 97:a0:94:8a:dd:04:8b:b3:de:be:14:33:5d:c2:45:ca:9e:53: c9:d6:37:21:0b:b9:4a:b1:6d:82:63:70:70:56:ac:7b:90:d8: 16:97:25:64:04:5f:cb:09:d2:90:2b:a0:ef:17:fe:40:af:41: a9:e4:34:33:34:c0:86:92:68:db:59:81:e9:2a:09:81:e3:d8: aa:fe:76:1b:ff:cf:f8:f9:11:fb:99:37:1a:e8:c8:59:a5:ef: e3:df:2e:eb:34:98:35:d4:63:2c:12:7c:29:97:25:74:44:76: 6c:50:33:c1:4a:9b:51:88:d4:1e:c7:91:4d:87:eb:5f:5e:fc: 59:20:d4:b8:fa:08:d7:27:a1:55:2e:4c:de:1a:32:a2:8e:15: 7e:cd:5e:3c:ab:93:38:06:82:89:6e:0d:e6:d4:05:8b:d4:b5: 15:15:d7:3f:29:65:c3:1a:b4:a5:2d:fa:f0:49:ff:21:01:85: b2:d6:9b:43:7b:be:0e:0b:a2:97:34:10:7d:26:50:e9:c9:a3: 5f:d6:a3:a0:49:2e:9d:3e:bf:00:5b:65:10:4b:48:c6:52:3b: 57:0c:36:b9:ff:32:d6:5e:0c:57:e0:7d:45:fb:63:b7:e1:d2: 4a:54:35:e4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUXG+T94+ZuoGo63nYcBBAf1+TAZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJG Q0I3M0Q3MTAeFw0yNjA5MjQxMDAxNDZaFw0yNjA5MjcxMzA1NDZaMDMxMTAvBgNV BAMTKEVCMkIyREQ1MDc4NEExMTIzODdCNkQ5QkFCNDZGNjVENkQxODQ2OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDviHxXxXMMzwTCt5Nbmjo2Fw+K IMb9EvinI+q4EUDKdOCWYn4aQ8/n4NbzpqgJyiHhQLX+GUTySnFRgv0xs4/YeAhM vmU67KdQj+lKpGeSxlUOEfYGPNIli8cHU6lKl4j0sGVf870MOVuQQnROGTkzld1n KXtBzVfNxwiHOJ0ilSCb6mmD05AKv8afNT5lz/NZkgaWMP/SToKnVmbCwrnuurFk GUeO3UPwZsBesEwfcSQlLBbklcXjXn7ylSO4UVVepzqGTXSDbhpYrGgjrNNDmCIj cd3+xjX3iWx9oWRJNNxEJtCpoxu2bOSwoYbY2w3X7O4ay1zPahSw08aeV0rVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6yst1QeEoRI4e22bq0b2XW0YRpYwHwYDVR0j BBgwFoAUQKv0E80zDgpNK66PHmavi/y3PXEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk2MjQwNDg5NTQyNDUxNS8wLzQwQUJGNDEzQ0QzMzBFMEE0RDJCQUU4RjFFNjZB RjhCRkNCNzNENzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJGQ0I3M0Q3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5NjI0MDQ4OTU0MjQ1MTUvMC80MEFCRjQxM0NEMzMw RTBBNEQyQkFFOEYxRTY2QUY4QkZDQjczRDcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwDHH/DpyCYI VDalvw6un9W9l6CUit0Ei7PevhQzXcJFyp5TydY3IQu5SrFtgmNwcFase5DYFpcl ZARfywnSkCug7xf+QK9BqeQ0MzTAhpJo21mB6SoJgePYqv52G//P+PkR+5k3GujI WaXv498u6zSYNdRjLBJ8KZcldER2bFAzwUqbUYjUHseRTYfrX178WSDUuPoI1yeh VS5M3hoyoo4Vfs1ePKuTOAaCiW4N5tQFi9S1FRXXPyllwxq0pS368En/IQGFstab Q3u+DguilzQQfSZQ6cmjX9ajoEkunT6/AFtlEEtIxlI7Vww2uf8y1l4MV+B9Rftj t+HSSlQ15A== -----END CERTIFICATE-----Generated at Thu Sep 24 13:01:19 2026 by rpki-client