$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft File: 40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft (raw, json) Hash identifier: CKVbVFocmrjZUqfMECU2MAkf/0zqMWCNnwRTJAXSGgc= Subject key identifier: D9:CC:EE:65:6A:C2:9B:78:56:7A:4D:8B:EC:4B:3D:0D:3D:1C:13:2B Authority key identifier: 40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 Certificate issuer: /CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Certificate serial: 59C3F7C8C38B2F3C7150E8867B8C9EA31EB8BB32 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft Manifest number: 04 Signing time: Thu 16 Apr 2026 08:15:23 +0000 Manifest this update: Thu 16 Apr 2026 08:10:23 +0000 Manifest next update: Fri 17 Apr 2026 10:55:23 +0000 Files and hashes: 1: 34352e3235322e302e302f32332d3233203d3e2034383337.roa (hash: Girfmzj3SgStMMY9QQQlekVZITn+b5VccIqS4mZXqQI=) 2: 3130332e3232302e3234302e302f32322d3232203d3e203234313339.roa (hash: gbVCFJ5R1GJxVqj6VUJKkq23UMSaPAub7AW4a1P+kwc=) 3: 40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl (hash: DJIjQLxhbfbzSNKLf1V7kTNxZ+nSuDe1TcOyexhEyfI=) 4: 34352e3235322e322e302f32332d3233203d3e2034383337.roa (hash: ogJ8b/pu/yvvBpwQjJD7aR2MKAiB2NVSNAKv0EvNExs=) 5: 323430353a393738303a3a2f33322d313238203d3e2030.roa (hash: wsAlE1QEtrkyozdia6LocJwjVZkBAeHQ4PonEVzYZn4=) 6: 34352e3235322e302e302f32322d3232203d3e203234313339.roa (hash: yZ9/bItsZVNimYfZJceoCqR8YKceJZZWWFqQf2xko2Y=) 7: 3130332e3232302e3234302e302f32332d3233203d3e2034383337.roa (hash: 2wZEG3CS93oCxpOvvSD/xvBdYQ4/YZbs+htsSujp09o=) 8: 3130332e3232302e3234322e302f32332d3233203d3e2034383337.roa (hash: 3TONmc+B7Q42E5fNjNdLH0s/fvuQxKfU4ddysGsNONE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 10:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c3:f7:c8:c3:8b:2f:3c:71:50:e8:86:7b:8c:9e:a3:1e:b8:bb:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Validity Not Before: Apr 16 08:10:23 2026 GMT Not After : Apr 17 10:55:23 2026 GMT Subject: CN=D9CCEE656AC29B78567A4D8BEC4B3D0D3D1C132B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0a:20:ab:7e:05:ca:a6:cd:69:44:75:60:a5: 29:9a:98:77:fd:2f:45:53:c0:74:da:6f:cd:31:9a: aa:e5:bf:0d:2a:09:c3:61:91:4b:d4:a5:cb:44:34: e1:e6:13:c8:c9:25:f9:3e:18:d3:9d:75:be:f3:49: c7:43:cc:f5:9b:52:0a:c2:7f:16:a7:d6:5f:96:c9: 79:93:41:f5:c9:f6:c0:f9:e1:cf:66:43:d5:17:57: c3:f9:16:cf:d5:cd:57:8c:ee:bd:3c:c8:87:a4:43: 22:c6:58:f3:f3:15:78:cf:da:3b:ad:44:ad:bb:9d: fa:6d:30:16:0d:50:fc:3e:d8:5c:32:42:27:10:91: 3b:a3:7d:b4:04:53:48:b6:28:6e:ca:de:c0:70:81: a2:bb:a1:09:d1:98:bf:cf:d4:d8:22:be:af:28:9d: 6b:55:63:d3:04:2d:cd:33:46:14:a2:09:1d:3b:ab: 7a:29:b8:6c:1c:9d:bb:75:e3:22:80:f7:91:d1:99: 65:4f:9c:de:2e:a9:91:48:1c:8d:a9:42:a7:86:4d: 49:a6:bc:1b:ea:6b:9e:09:20:98:4f:12:83:a6:65: 18:dd:b6:f3:a1:2e:60:9a:e7:eb:cb:0a:72:53:c3: b3:bf:58:c7:df:da:f7:0a:41:37:0d:06:a0:8f:04: ec:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CC:EE:65:6A:C2:9B:78:56:7A:4D:8B:EC:4B:3D:0D:3D:1C:13:2B X509v3 Authority Key Identifier: keyid:40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:98:c6:00:ed:b6:f0:f3:8e:a7:bf:41:08:6d:47:0e:8c:a8: d2:0f:22:ad:1b:19:ad:47:5d:a6:de:70:3a:c6:86:93:7d:d9: 96:eb:de:e0:b5:74:4c:ea:6a:bc:09:89:8b:96:05:1b:08:1b: 50:ed:b7:d5:43:b7:9b:08:39:9d:69:93:a8:18:c3:1e:d5:83: e2:f1:d8:07:df:11:f0:74:f5:9f:18:be:e2:10:d4:80:dc:66: ef:55:0a:5d:52:b3:34:39:16:33:31:8a:b0:04:ad:f4:69:eb: 24:ca:ff:35:8e:d0:1a:7c:b5:97:0e:bd:72:c1:2a:87:98:22: e7:4d:ae:3b:bf:a1:a7:9e:ae:d8:03:b0:d4:bf:b8:0f:70:57: 7e:8a:54:05:91:90:bc:6a:61:57:0c:1e:fe:77:23:2f:0d:4b: e6:ea:36:cd:46:ed:46:17:a9:6c:77:91:36:04:74:ea:01:46: 2b:7f:ba:c8:96:4b:b7:8c:1e:fc:a0:e4:02:2a:b7:d6:74:14: 43:9b:c0:cd:54:bc:91:ae:a7:8d:ce:02:44:24:c3:3e:c1:84: e8:6b:9b:43:f3:7f:3b:fd:5b:f4:4c:4a:d6:48:8b:33:0e:5a: be:9f:60:46:e5:ad:20:bc:6b:ab:1a:c9:6b:cf:04:ab:5c:93: 45:9f:42:0a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWcP3yMOLLzxxUOiGe4yeox64uzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJG Q0I3M0Q3MTAeFw0yNjA0MTYwODEwMjNaFw0yNjA0MTcxMDU1MjNaMDMxMTAvBgNV BAMTKEQ5Q0NFRTY1NkFDMjlCNzg1NjdBNEQ4QkVDNEIzRDBEM0QxQzEzMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTCiCrfgXKps1pRHVgpSmamHf9 L0VTwHTab80xmqrlvw0qCcNhkUvUpctENOHmE8jJJfk+GNOddb7zScdDzPWbUgrC fxan1l+WyXmTQfXJ9sD54c9mQ9UXV8P5Fs/VzVeM7r08yIekQyLGWPPzFXjP2jut RK27nfptMBYNUPw+2FwyQicQkTujfbQEU0i2KG7K3sBwgaK7oQnRmL/P1Ngivq8o nWtVY9MELc0zRhSiCR07q3opuGwcnbt14yKA95HRmWVPnN4uqZFIHI2pQqeGTUmm vBvqa54JIJhPEoOmZRjdtvOhLmCa5+vLCnJTw7O/WMff2vcKQTcNBqCPBOxLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU2czuZWrCm3hWek2L7Es9DT0cEyswHwYDVR0j BBgwFoAUQKv0E80zDgpNK66PHmavi/y3PXEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk2MjQwNDg5NTQyNDUxNS8wLzQwQUJGNDEzQ0QzMzBFMEE0RDJCQUU4RjFFNjZB RjhCRkNCNzNENzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJGQ0I3M0Q3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5NjI0MDQ4OTU0MjQ1MTUvMC80MEFCRjQxM0NEMzMw RTBBNEQyQkFFOEYxRTY2QUY4QkZDQjczRDcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpjGAO228POO p79BCG1HDoyo0g8irRsZrUddpt5wOsaGk33Zluve4LV0TOpqvAmJi5YFGwgbUO23 1UO3mwg5nWmTqBjDHtWD4vHYB98R8HT1nxi+4hDUgNxm71UKXVKzNDkWMzGKsASt 9GnrJMr/NY7QGny1lw69csEqh5gi502uO7+hp56u2AOw1L+4D3BXfopUBZGQvGph Vwwe/ncjLw1L5uo2zUbtRhepbHeRNgR06gFGK3+6yJZLt4we/KDkAiq31nQUQ5vA zVS8ka6njc4CRCTDPsGE6GubQ/N/O/1b9ExK1kiLMw5avp9gRuWtILxrqxrJa88E q1yTRZ9CCg== -----END CERTIFICATE-----Generated at Thu Apr 16 23:52:09 2026 by rpki-client