$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft File: 40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft (raw, json) Hash identifier: XeftYxgETUmLPeSbDgcpiqYu2f7bfz2Ux14WYGTrbwg= Subject key identifier: E7:F3:A7:A8:49:4A:BB:E4:36:85:9D:88:92:9F:96:CA:31:10:17:40 Authority key identifier: 40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 Certificate issuer: /CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Certificate serial: 7487D33AC1543B83E506EE92230BF16F111AE691 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft Manifest number: 90 Signing time: Wed 29 Jul 2026 18:29:55 +0000 Manifest this update: Wed 29 Jul 2026 18:24:55 +0000 Manifest next update: Thu 30 Jul 2026 18:46:55 +0000 Files and hashes: 1: 3130332e3232302e3234322e302f32332d3233203d3e2034383337.roa (hash: 3TONmc+B7Q42E5fNjNdLH0s/fvuQxKfU4ddysGsNONE=) 2: 34352e3235322e302e302f32322d3232203d3e203234313339.roa (hash: yZ9/bItsZVNimYfZJceoCqR8YKceJZZWWFqQf2xko2Y=) 3: 40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl (hash: 65Cr8TaTTUJVgKDAwaX/VNkkLLTbmOKLgygRHPTcVeU=) 4: 3130332e3232302e3234302e302f32332d3233203d3e2034383337.roa (hash: 2wZEG3CS93oCxpOvvSD/xvBdYQ4/YZbs+htsSujp09o=) 5: 34352e3235322e322e302f32332d3233203d3e2034383337.roa (hash: ogJ8b/pu/yvvBpwQjJD7aR2MKAiB2NVSNAKv0EvNExs=) 6: 323430353a393738303a3a2f33322d313238203d3e2030.roa (hash: wsAlE1QEtrkyozdia6LocJwjVZkBAeHQ4PonEVzYZn4=) 7: 34352e3235322e302e302f32332d3233203d3e2034383337.roa (hash: Girfmzj3SgStMMY9QQQlekVZITn+b5VccIqS4mZXqQI=) 8: 3130332e3232302e3234302e302f32322d3232203d3e203234313339.roa (hash: gbVCFJ5R1GJxVqj6VUJKkq23UMSaPAub7AW4a1P+kwc=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 18:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:87:d3:3a:c1:54:3b:83:e5:06:ee:92:23:0b:f1:6f:11:1a:e6:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Validity Not Before: Jul 29 18:24:55 2026 GMT Not After : Jul 30 18:46:55 2026 GMT Subject: CN=E7F3A7A8494ABBE436859D88929F96CA31101740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4a:f3:31:10:87:32:51:9f:fa:6c:6b:00:f6: 2f:4f:54:e0:13:81:e4:e4:a5:8d:07:f0:90:ad:dd: c8:2c:1d:20:c4:b2:c3:6e:f5:19:41:68:cb:0f:2f: 81:29:97:36:e9:fd:c2:05:70:f0:7d:c4:df:6f:98: 91:f7:fe:d4:68:5e:13:af:4e:a0:77:64:6b:59:a0: 9d:33:85:d8:3e:91:67:fe:41:5e:33:ea:83:82:c4: 90:2e:9e:f7:19:f4:0f:64:ea:82:e4:ed:2f:1c:19: d7:43:96:c1:40:cb:1a:60:ef:4d:72:c3:22:78:da: 02:b8:63:be:4b:c3:5e:e7:53:a5:5f:9a:05:10:c6: 5a:87:76:b0:45:ce:fb:2a:bd:05:52:61:96:98:9d: 58:4d:a3:d8:cb:91:81:54:0f:e3:9d:4b:43:f3:ac: e8:f7:16:2e:09:38:5b:13:69:3d:cc:13:84:00:c2: 38:92:ad:44:35:2b:09:2a:b8:15:22:61:c8:14:0e: 20:c2:29:cf:3f:16:ef:b8:7c:d5:77:1e:dd:63:cf: c1:7f:d9:6c:92:fc:02:91:2b:21:70:b0:9d:8b:cc: 0c:07:fb:82:9a:fc:13:84:33:c9:78:a8:14:97:d1: 9c:21:0a:1f:21:b5:e7:b4:7b:7a:00:09:b3:06:df: b0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F3:A7:A8:49:4A:BB:E4:36:85:9D:88:92:9F:96:CA:31:10:17:40 X509v3 Authority Key Identifier: keyid:40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7c:8e:29:4a:5e:28:4b:d4:22:38:53:e7:7d:68:46:2d:25: 81:2f:18:b8:28:72:4f:5d:6a:be:7e:53:13:40:9e:88:fc:ba: c3:b2:0e:3e:3f:c3:77:a3:bb:a7:97:cb:db:4f:58:82:ad:b0: ac:7b:ad:e2:26:87:07:46:2e:92:a5:ca:17:73:41:1b:7d:e3: 02:58:42:c4:4f:9e:60:b1:10:4c:c9:6f:39:1e:52:d9:66:41: 80:a0:ea:45:dd:7d:e1:35:78:4f:dc:e7:25:0c:bd:a2:d9:d9: 35:6c:e9:c1:43:73:6e:e1:7b:7e:c8:5e:82:17:e7:55:20:bb: 2a:fa:cb:90:4d:82:1d:62:ff:85:5d:b6:57:2d:c7:48:13:8b: af:9f:a4:d7:13:43:29:52:41:3f:33:5a:a5:44:34:e0:a0:f9: f6:6a:02:b2:29:f8:aa:a1:e7:46:7e:b8:44:c3:8f:24:10:a5: ef:34:56:2d:03:60:b5:97:69:65:9a:83:89:2f:0d:ec:de:77: c7:35:28:b6:2a:c3:91:33:9b:e8:33:30:dd:91:fc:3d:11:cc: da:db:1e:f3:41:d5:9f:dc:1d:a3:1f:c3:89:23:e5:27:92:a8: bb:44:00:31:de:73:6b:bf:10:fa:3a:24:09:95:ec:51:92:ff: bf:12:d2:e7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdIfTOsFUO4PlBu6SIwvxbxEa5pEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJG Q0I3M0Q3MTAeFw0yNjA3MjkxODI0NTVaFw0yNjA3MzAxODQ2NTVaMDMxMTAvBgNV BAMTKEU3RjNBN0E4NDk0QUJCRTQzNjg1OUQ4ODkyOUY5NkNBMzExMDE3NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnSvMxEIcyUZ/6bGsA9i9PVOAT geTkpY0H8JCt3cgsHSDEssNu9RlBaMsPL4Eplzbp/cIFcPB9xN9vmJH3/tRoXhOv TqB3ZGtZoJ0zhdg+kWf+QV4z6oOCxJAunvcZ9A9k6oLk7S8cGddDlsFAyxpg701y wyJ42gK4Y75Lw17nU6VfmgUQxlqHdrBFzvsqvQVSYZaYnVhNo9jLkYFUD+OdS0Pz rOj3Fi4JOFsTaT3ME4QAwjiSrUQ1KwkquBUiYcgUDiDCKc8/Fu+4fNV3Ht1jz8F/ 2WyS/AKRKyFwsJ2LzAwH+4Ka/BOEM8l4qBSX0ZwhCh8htee0e3oACbMG37CbAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU5/OnqElKu+Q2hZ2Ikp+WyjEQF0AwHwYDVR0j BBgwFoAUQKv0E80zDgpNK66PHmavi/y3PXEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk2MjQwNDg5NTQyNDUxNS8wLzQwQUJGNDEzQ0QzMzBFMEE0RDJCQUU4RjFFNjZB RjhCRkNCNzNENzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJGQ0I3M0Q3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5NjI0MDQ4OTU0MjQ1MTUvMC80MEFCRjQxM0NEMzMw RTBBNEQyQkFFOEYxRTY2QUY4QkZDQjczRDcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3yOKUpeKEvU IjhT531oRi0lgS8YuChyT11qvn5TE0CeiPy6w7IOPj/Dd6O7p5fL209Ygq2wrHut 4iaHB0YukqXKF3NBG33jAlhCxE+eYLEQTMlvOR5S2WZBgKDqRd194TV4T9znJQy9 otnZNWzpwUNzbuF7fsheghfnVSC7KvrLkE2CHWL/hV22Vy3HSBOLr5+k1xNDKVJB PzNapUQ04KD59moCsin4qqHnRn64RMOPJBCl7zRWLQNgtZdpZZqDiS8N7N53xzUo tirDkTOb6DMw3ZH8PRHM2tse80HVn9wdox/DiSPlJ5Kou0QAMd5za78Q+jokCZXs UZL/vxLS5w== -----END CERTIFICATE-----Generated at Wed Jul 29 23:01:04 2026 by rpki-client