$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft File: 40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft (raw, json) Hash identifier: JLGJM1CIRFkTEbidibwVcfR1+DJRcFvZk6qGwETNias= Subject key identifier: D4:B2:E5:20:3A:32:41:DB:86:C7:6B:D7:C4:FB:75:36:16:38:2D:A5 Authority key identifier: 40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 Certificate issuer: /CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Certificate serial: 607B7E2CD9592400509AFD39B9A756FB1160D574 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft Manifest number: 53 Signing time: Sun 14 Jun 2026 04:07:41 +0000 Manifest this update: Sun 14 Jun 2026 04:02:41 +0000 Manifest next update: Mon 15 Jun 2026 04:40:41 +0000 Files and hashes: 1: 3130332e3232302e3234302e302f32332d3233203d3e2034383337.roa (hash: 2wZEG3CS93oCxpOvvSD/xvBdYQ4/YZbs+htsSujp09o=) 2: 40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl (hash: URdQlb+e2tLJnkjMYxBBR0QacfnkYuFJr1WepiQWhmY=) 3: 323430353a393738303a3a2f33322d313238203d3e2030.roa (hash: wsAlE1QEtrkyozdia6LocJwjVZkBAeHQ4PonEVzYZn4=) 4: 34352e3235322e302e302f32322d3232203d3e203234313339.roa (hash: yZ9/bItsZVNimYfZJceoCqR8YKceJZZWWFqQf2xko2Y=) 5: 34352e3235322e322e302f32332d3233203d3e2034383337.roa (hash: ogJ8b/pu/yvvBpwQjJD7aR2MKAiB2NVSNAKv0EvNExs=) 6: 3130332e3232302e3234302e302f32322d3232203d3e203234313339.roa (hash: gbVCFJ5R1GJxVqj6VUJKkq23UMSaPAub7AW4a1P+kwc=) 7: 3130332e3232302e3234322e302f32332d3233203d3e2034383337.roa (hash: 3TONmc+B7Q42E5fNjNdLH0s/fvuQxKfU4ddysGsNONE=) 8: 34352e3235322e302e302f32332d3233203d3e2034383337.roa (hash: Girfmzj3SgStMMY9QQQlekVZITn+b5VccIqS4mZXqQI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:7b:7e:2c:d9:59:24:00:50:9a:fd:39:b9:a7:56:fb:11:60:d5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Validity Not Before: Jun 14 04:02:41 2026 GMT Not After : Jun 15 04:40:41 2026 GMT Subject: CN=D4B2E5203A3241DB86C76BD7C4FB753616382DA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0a:df:a4:d5:3e:97:d4:3d:a1:4b:33:0c:89: 9c:fe:50:e6:b4:e3:1e:e2:23:b7:dd:9b:ff:65:b0: 6c:3c:53:b9:01:35:77:f5:3c:d9:79:da:36:ae:3b: df:7c:ce:2b:af:07:37:e0:27:4e:f2:0d:2f:69:9c: 19:25:a4:b7:af:99:9d:ad:4a:d0:9a:50:8b:19:9d: a4:ec:a7:a1:7c:4c:21:7a:ad:1f:19:8e:ea:30:1c: 44:68:a9:bc:2a:bd:65:3c:23:a1:2e:13:e6:c2:ba: 92:83:42:10:67:e3:b5:60:45:b1:28:cb:f7:83:1a: ca:1f:22:71:04:cd:50:23:14:d1:69:aa:b5:4c:9c: 05:ba:69:9a:bb:ba:45:70:1c:35:06:e4:ce:3b:76: 2f:55:45:43:80:ef:66:03:e2:1f:c2:b9:bf:83:d1: c9:d0:0a:9c:f0:48:50:e9:d7:ea:2b:50:9f:a5:a4: 8a:06:45:c7:da:81:c9:de:54:5a:b9:7f:99:43:af: 60:eb:f2:17:ed:48:93:ee:c5:bc:c5:ec:17:03:82: 31:70:e9:95:5e:02:36:32:98:24:c7:ee:68:ca:05: 2f:15:89:12:6b:2d:dd:de:93:14:c4:e9:5d:4a:37: eb:30:ed:00:4c:98:18:96:b0:cd:ce:8f:84:e3:ac: 7a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B2:E5:20:3A:32:41:DB:86:C7:6B:D7:C4:FB:75:36:16:38:2D:A5 X509v3 Authority Key Identifier: keyid:40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:76:4c:2c:27:b1:9f:62:de:48:bc:f1:51:74:a8:68:f4:1d: 0e:a2:bf:5e:c5:f6:e9:78:7a:da:44:7a:16:2f:02:ad:57:dc: 4a:98:20:5a:22:49:9b:89:fe:ec:cb:f9:c8:28:96:05:81:81: 27:e1:51:ef:d3:92:5c:48:b4:f3:b1:97:da:8c:fa:64:40:d6: ea:45:17:4f:0d:45:97:90:ee:17:a1:10:d7:f8:b9:76:29:ef: c4:e9:68:e5:a7:03:e7:20:ac:fa:07:3e:f7:77:31:88:a9:eb: e4:3e:93:8a:92:d2:4f:b7:b5:51:1d:cd:71:74:96:e3:00:04: 32:54:1a:20:42:bf:03:49:21:2b:24:21:ca:ec:d9:d1:06:c9: 6d:8d:6c:cb:32:4a:1e:f4:9a:f6:b7:43:64:84:30:2d:0b:27: a1:fc:aa:13:a7:a6:d3:3f:05:5a:34:ed:0a:2d:f2:00:01:6f: b8:2d:9d:0b:d2:11:7b:85:6c:17:c8:e8:5f:98:c3:f3:54:ae: 9e:fc:e0:71:1f:0e:c3:70:21:8f:e6:be:77:f7:71:9e:90:32: 79:38:0b:40:72:08:d5:ed:b2:b0:81:e5:84:b6:72:bd:69:de: 7c:04:03:01:c5:08:e2:33:25:9f:a6:ff:f7:c1:d3:8b:f2:1e: a0:13:93:c3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUYHt+LNlZJABQmv05uadW+xFg1XQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJG Q0I3M0Q3MTAeFw0yNjA2MTQwNDAyNDFaFw0yNjA2MTUwNDQwNDFaMDMxMTAvBgNV BAMTKEQ0QjJFNTIwM0EzMjQxREI4NkM3NkJEN0M0RkI3NTM2MTYzODJEQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuCt+k1T6X1D2hSzMMiZz+UOa0 4x7iI7fdm/9lsGw8U7kBNXf1PNl52jauO998ziuvBzfgJ07yDS9pnBklpLevmZ2t StCaUIsZnaTsp6F8TCF6rR8ZjuowHERoqbwqvWU8I6EuE+bCupKDQhBn47VgRbEo y/eDGsofInEEzVAjFNFpqrVMnAW6aZq7ukVwHDUG5M47di9VRUOA72YD4h/Cub+D 0cnQCpzwSFDp1+orUJ+lpIoGRcfagcneVFq5f5lDr2Dr8hftSJPuxbzF7BcDgjFw 6ZVeAjYymCTH7mjKBS8ViRJrLd3ekxTE6V1KN+sw7QBMmBiWsM3Oj4TjrHoLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU1LLlIDoyQduGx2vXxPt1NhY4LaUwHwYDVR0j BBgwFoAUQKv0E80zDgpNK66PHmavi/y3PXEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk2MjQwNDg5NTQyNDUxNS8wLzQwQUJGNDEzQ0QzMzBFMEE0RDJCQUU4RjFFNjZB RjhCRkNCNzNENzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJGQ0I3M0Q3MS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY5NjI0MDQ4OTU0MjQ1MTUvMC80MEFCRjQxM0NEMzMw RTBBNEQyQkFFOEYxRTY2QUY4QkZDQjczRDcxLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXZMLCexn2Le SLzxUXSoaPQdDqK/XsX26Xh62kR6Fi8CrVfcSpggWiJJm4n+7Mv5yCiWBYGBJ+FR 79OSXEi087GX2oz6ZEDW6kUXTw1Fl5DuF6EQ1/i5dinvxOlo5acD5yCs+gc+93cx iKnr5D6TipLST7e1UR3NcXSW4wAEMlQaIEK/A0khKyQhyuzZ0QbJbY1syzJKHvSa 9rdDZIQwLQsnofyqE6em0z8FWjTtCi3yAAFvuC2dC9IRe4VsF8joX5jD81Sunvzg cR8Ow3Ahj+a+d/dxnpAyeTgLQHII1e2ysIHlhLZyvWnefAQDAcUI4jMln6b/98HT i/IeoBOTww== -----END CERTIFICATE-----Generated at Sun Jun 14 06:35:44 2026 by rpki-client