
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
File: 40D86726DB14F9E5E06610928FF6C77226F14874.mft (raw, json)
Hash identifier: 9MX8fiVI90NmhugHghmbcmADdSLVnDiQ2hQa8R0hKac=
Subject key identifier: 79:A3:AD:DA:62:A9:BE:36:FB:47:2F:70:ED:91:68:19:9A:F9:D1:6D
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Certificate issuer: /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial: 59AB694F5612DA40AC9401E72ADE8CC38611EFDE
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
Manifest number: 70
Signing time: Tue 28 Jul 2026 17:22:20 +0000
Manifest this update: Tue 28 Jul 2026 17:17:20 +0000
Manifest next update: Wed 29 Jul 2026 19:12:20 +0000
Files and hashes: 1: 3132322e3131352e35382e302f32342d3234203d3e203633363134.roa (hash: bGJsXRzQ9+/o5q3jTTaSkdQb2YXV90slfPXEVZCbnUU=)
2: 3132322e3131352e33322e302f31392d3139203d3e2034383437.roa (hash: larc+B0NbWd2LMISFQucSEftOoyGORTbx4vdoeQvZs0=)
3: 3130332e3139362e38382e302f32312d3231203d3e2034383437.roa (hash: ibPGmc1qq4vu3vSBHok34apQbBgadCqjk0sNTeFZ9aI=)
4: 34352e3132372e3134342e302f32312d3231203d3e203633363134.roa (hash: U0jAupG8woSMrVhzvzXvCyGAZPLICR8GAAYzIC1138E=)
5: 34352e3132372e3134342e302f32312d3231203d3e2034383437.roa (hash: 91/lKxf1daLG7RqoCQBgCYnA95SLfNLn9WoHXQiHXYk=)
6: 3130332e3139362e38382e302f32312d3231203d3e2034383038.roa (hash: APJaFNxQRg6Dn/91z5uTQjOHDylXgTlfMZYVN20xnWw=)
7: 34332e3232372e3134302e302f32322d3232203d3e2034383437.roa (hash: aF4/oE0nKF7/LKffe8lyhVCPu0Gr84SGiYDte7e+yvk=)
8: 32372e302e3136362e302f32332d3233203d3e203633363134.roa (hash: ozUNCFnPVmzTNOIyibjsNA5U7OJM6+ITaFZeYJQ0j34=)
9: 34332e3232372e3134302e302f32322d3232203d3e203633363134.roa (hash: 1YlErZgQzI+k3M/RrQAuVeM9lWap1eYxH0Be/qgy4mg=)
10: 3130332e32352e32342e302f32322d3232203d3e2034383038.roa (hash: PNdyrG9j75/du4oBuputNlHaaXBtZYc/AFdw/0gOmDE=)
11: 3131342e3131332e3232342e302f32302d3230203d3e2034383038.roa (hash: HOsabm5bNcShA+X8mkx4KiOxrKQ9GJHd0bDjHFV1wfs=)
12: 32372e302e3136342e302f32332d3233203d3e203633363134.roa (hash: xK3ZkZqmtMvo3ivfx/vtBQEP9Y/roBFijeQOIgVpdsQ=)
13: 3130332e3139362e38382e302f32312d3231203d3e203633363134.roa (hash: cnOQyI9/iTYFqYZQPtmuhSuhepMxk0VUqXtLkgaM4sE=)
14: 3131342e3131332e3233312e302f32342d3234203d3e203633363134.roa (hash: ZRtGc8nPpYatduA3uU5SMsf2FFFvYyFWGcooZJgV+r0=)
15: 3130332e32352e32362e302f32342d3234203d3e203633363134.roa (hash: Y36h7EsI0CzZ1VO8KJhB8fR0g7kvGS1N86G8x1f8YM4=)
16: 40D86726DB14F9E5E06610928FF6C77226F14874.crl (hash: aNe8O7YTDQawqcLhHQh+pm5IrhiADORF3vaUD6Hu2q4=)
17: 323430323a653838303a3a2f34382d3438203d3e203633363134.roa (hash: kraliiar4yxqugi2IGhcy/yE4wMZ9/dOXuCy2SdmB+s=)
18: 3131342e3131332e3232342e302f32302d3230203d3e203633363134.roa (hash: RbRkm9DOUi0+FcbSvvr/XcUt0TfxRNIfk/YmeL0HUUQ=)
19: 3132322e3131352e33322e302f31392d3139203d3e2034383038.roa (hash: nwOPFWbG/W5unbw1sDIahREacTrhiUSWc6ubZXKB0SI=)
20: 3132322e3131352e33322e302f31392d3139203d3e203633363134.roa (hash: FRq9Wg8i5Cnxs/AvTrw6rnTZ2twg1Cyo6B6XO/OMQns=)
21: 34332e3232372e3134302e302f32322d3232203d3e2034383038.roa (hash: OoUuuHrzunU/9BuZoT9WM1RqdfIvT8/e0JVCOV3IyEs=)
22: 3131342e3131332e3232342e302f32302d3230203d3e2034383437.roa (hash: 0RUREOZbL7QCSxbilQ+T7phjETfaLT5dhQ9p2hfr/q4=)
23: 3131342e3131332e3233392e302f32342d3234203d3e203633363134.roa (hash: Q6qqkklKXuvcMJlp9EcVx2nUCPbs9Ldm6soTA8Lx8so=)
24: 34352e3132372e3134342e302f32312d3231203d3e2034383038.roa (hash: hXwk2GKDErcKlJU8gELUl9SQbs7cUzuoqY0ENuHWVpI=)
25: 3131342e3131332e3233372e302f32342d3234203d3e203633363134.roa (hash: bHaeh1TNLPqsa8hf7xh3CWK61xB14SjHDOWsDA2fB0g=)
26: 3131342e3131332e3233362e302f32342d3234203d3e203633363134.roa (hash: 6a7nE/i1NON4n4MYu43SC1Ar/peQ7xMVgQnVuWXrYg8=)
27: 3130332e32352e32342e302f32322d3232203d3e2034383437.roa (hash: d/3TyUOCiGQwH9RjPKTQ6/QBlrP2JdKDV9tmp3Ln7M4=)
28: 3130332e32352e32342e302f32322d3232203d3e203633363134.roa (hash: 00/6JOZdkomWZNXgpcQVFz0wmg5iWQCIs2r23mxzWFA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 19:11:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ab:69:4f:56:12:da:40:ac:94:01:e7:2a:de:8c:c3:86:11:ef:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
Validity
Not Before: Jul 28 17:17:20 2026 GMT
Not After : Jul 29 19:12:20 2026 GMT
Subject: CN=79A3ADDA62A9BE36FB472F70ED9168199AF9D16D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:df:75:62:06:6d:ca:be:21:56:f3:34:13:73:
fb:59:24:6e:66:f3:1b:00:74:3b:f4:31:7b:ae:66:
a5:3d:8d:d9:56:d8:64:df:84:0d:43:8f:aa:d1:49:
13:e4:06:05:e1:9f:ba:1c:da:36:3b:25:5a:79:9a:
7b:10:d8:3a:96:f9:f1:d0:98:20:9a:3b:60:f2:51:
0d:ea:81:76:d0:9c:e9:92:3b:eb:ee:f6:5c:56:09:
dc:3e:9f:17:c5:e4:87:d1:ac:13:9c:ed:ea:72:c3:
b6:6f:8f:17:29:54:f0:8b:ed:3f:8b:cc:28:e8:74:
4a:fa:03:60:c6:32:c6:82:15:2a:fe:4b:68:5b:6d:
2e:29:48:5d:f0:14:94:51:d4:be:28:6a:0b:2c:51:
c6:29:eb:e0:b4:1b:b3:d6:25:bf:64:07:9a:99:ad:
cc:90:63:e7:24:ce:84:a9:dd:24:39:ac:e8:fe:b4:
1c:6c:0b:1c:2b:77:4e:71:25:4d:db:09:97:0e:98:
4b:9e:9a:2f:e0:20:ae:93:fb:23:9a:3a:e8:d4:c4:
c4:5c:d8:08:4f:45:a1:09:32:6b:7c:1b:11:8c:8c:
60:e2:31:b0:8a:c9:55:39:36:12:f1:2b:17:6e:05:
72:2c:9a:17:38:c5:9f:5c:f8:d9:f9:8f:67:65:58:
00:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A3:AD:DA:62:A9:BE:36:FB:47:2F:70:ED:91:68:19:9A:F9:D1:6D
X509v3 Authority Key Identifier:
keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:40:28:81:9f:24:78:48:fa:5d:d2:db:d1:fc:8e:42:3f:02:
75:92:cd:f6:a1:a8:1b:63:f6:18:86:8c:58:2d:67:14:21:f5:
1f:a1:70:b3:d2:2d:ec:4f:34:c2:50:c7:f5:92:7e:3e:38:48:
00:1e:69:7c:eb:01:c6:39:96:8f:b7:42:fe:c5:47:c9:95:9c:
ab:b2:ba:ca:f7:b7:2a:a6:ff:4a:f2:5c:59:df:18:04:0b:b5:
68:ed:1d:08:b7:56:ff:0b:40:e2:d9:1e:a5:f0:97:28:89:4d:
83:df:cd:1d:5c:5f:6e:74:4a:21:a2:e6:c5:06:2b:e5:83:bd:
cc:c4:b1:04:69:a3:1b:06:b8:f2:11:9e:79:de:12:60:73:e3:
f1:59:b7:8d:79:a1:87:a9:08:c0:21:7e:c8:d8:45:fe:3b:1f:
4a:85:d7:23:d4:40:96:4b:9f:ff:81:ae:07:ef:a1:2f:e8:79:
a1:c1:54:55:97:1d:2c:73:8f:e5:0c:a0:d6:51:27:87:0f:20:
5f:05:cc:57:34:ba:9f:b6:80:96:61:3e:df:cc:bb:a6:7b:56:
c2:e5:83:9a:e5:6a:d6:e8:48:97:dd:04:9b:3b:70:fc:53:98:
cb:91:01:c5:5b:1f:d4:9b:ec:10:5c:9d:77:fd:ff:06:59:2d:
de:c2:25:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:04:53 2026 by rpki-client