
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft
File: 526198C6FEC4729E2A08209CDB07E7BD6537198F.mft (raw, json)
Hash identifier: zDbAQH/vQX6LUtoksLR5fryvxMfHvjH2cYEXqTpHed0=
Subject key identifier: E4:D2:D4:B0:CC:4D:25:C3:7C:17:5E:65:2A:69:19:D4:72:BE:EB:BA
Authority key identifier: 52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F
Certificate issuer: /CN=526198C6FEC4729E2A08209CDB07E7BD6537198F
Certificate serial: 1AB566B327FDBF29C5E3C0C5963E285F9EB2C8B2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft
Manifest number: 91
Signing time: Wed 29 Jul 2026 18:59:59 +0000
Manifest this update: Wed 29 Jul 2026 18:54:59 +0000
Manifest next update: Thu 30 Jul 2026 21:47:59 +0000
Files and hashes: 1: 3130332e3233362e3132312e302f32342d3234203d3e2034383337.roa (hash: mfAlEKa+sf3Q0PtsXP0RkfswdV/HI/qvIahppWTM9gQ=)
2: 526198C6FEC4729E2A08209CDB07E7BD6537198F.crl (hash: P2XsBqlrTe6u+Cgw9kTWRPT7bsXQMcQA2HTNe9EkABw=)
3: 3130332e3233362e3132302e302f32322d3232203d3e2034383337.roa (hash: tuXYqVmE6ECVrR2hePGUfUEvZDi/5Mnaky6gOdgaZss=)
4: 3130332e3233362e3132302e302f32342d3234203d3e2030.roa (hash: Km8S2TJ8iKWZOeT+afBnXUsAtpaviIGuscofdyWIck4=)
5: 34332e3233392e3132322e302f32342d3234203d3e2034383337.roa (hash: IaWRC9nHLKC84WiqJrSp1xSXQunbSDFvIw4uS1slruo=)
6: 34332e3233392e3132332e302f32342d3234203d3e2030.roa (hash: VMjL+XSC1mPOSkeTdlTojJzBzT03t2yOX7OTsoHue0g=)
7: 34332e3233392e3132302e302f32342d3234203d3e2034383337.roa (hash: aBspfRQbXDiReoy+rhMlIHE5jaEvuciG3FN3gQQQ3Ss=)
8: 3130332e3233362e3132322e302f32342d3234203d3e2030.roa (hash: PDUqHiXtaBvwn66/fDKMVP8kGki7lnOZa10mr/WECFI=)
9: 323430323a653638303a3a2f33322d3332203d3e2030.roa (hash: 6nLYCWK48FiM/igQDUW+g9AOHXsfwPpZ72/3GSFCJtQ=)
10: 34332e3233392e3132302e302f32322d3232203d3e2034383337.roa (hash: +pyEGxsxJlmP0xnipvGwK3GS+xyc85YePa3acnQ6Uic=)
11: 3130332e3233362e3132332e302f32342d3234203d3e2030.roa (hash: IlBBikhkFQgdIZ1dkeSBSpyvlJVnKeNS3f62qPJAUhI=)
12: 34332e3233392e3132312e302f32342d3234203d3e2034383337.roa (hash: BaekiEiRPpFp2s1DV3F9q7vYjwpTx4wZ+MgPXB7iiFU=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl
rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 21:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:b5:66:b3:27:fd:bf:29:c5:e3:c0:c5:96:3e:28:5f:9e:b2:c8:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=526198C6FEC4729E2A08209CDB07E7BD6537198F
Validity
Not Before: Jul 29 18:54:59 2026 GMT
Not After : Jul 30 21:47:59 2026 GMT
Subject: CN=E4D2D4B0CC4D25C37C175E652A6919D472BEEBBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ef:fe:84:f8:55:86:2f:bd:a0:f9:96:c3:c8:
56:da:17:54:6e:ec:e8:15:35:be:35:bf:52:92:29:
75:82:c1:27:d0:b8:5d:3b:98:53:b6:aa:7d:dd:8e:
08:48:03:be:69:0c:7f:ed:dc:98:50:45:9b:23:d1:
43:f5:c7:fe:b8:37:37:01:27:20:17:b8:e3:4f:31:
d5:ed:b7:77:c6:bd:61:9c:82:fd:ef:fa:f9:26:cf:
8a:be:36:83:05:f8:9e:38:64:00:a7:4b:08:7f:62:
8e:c7:f5:b5:56:3d:cb:b4:a1:71:a2:bd:47:cf:4f:
99:d8:ed:58:e6:c6:f8:61:35:c0:b7:73:a5:97:38:
ba:55:59:27:3f:b6:a0:1a:df:6d:6a:b4:b5:48:46:
a6:d4:bd:0a:24:83:1b:5b:1c:0f:b3:f7:c9:4d:e9:
75:c9:0f:b2:62:4c:4d:19:92:74:8f:14:ef:70:67:
44:9d:a9:09:b3:61:f8:1f:d6:ec:a9:33:16:67:ab:
7d:b1:0a:69:41:33:23:d9:d9:4b:0d:54:95:de:64:
c2:34:2b:c4:3d:51:29:0f:ff:c7:3a:5a:fa:fa:49:
1d:f2:f6:03:c6:e8:cc:61:94:12:81:28:46:92:b3:
de:29:86:27:be:12:29:06:7d:eb:4d:18:2a:06:fd:
09:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D2:D4:B0:CC:4D:25:C3:7C:17:5E:65:2A:69:19:D4:72:BE:EB:BA
X509v3 Authority Key Identifier:
keyid:52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3d:32:34:4c:68:a7:bb:cf:92:03:50:bd:7e:ff:11:97:fc:
54:ed:f5:c9:e6:40:12:73:05:bc:88:96:5a:f6:5b:8c:2d:09:
1c:a4:d4:c3:1c:58:1d:a1:d8:29:43:3b:92:fa:0b:e9:70:f1:
06:24:49:89:0d:07:28:a6:f8:77:79:99:5d:2b:d2:8b:19:26:
08:4e:14:4b:ba:54:9c:9c:22:11:48:60:d7:c1:98:08:6f:b2:
f2:ac:a4:60:8b:ed:28:da:d3:3f:6c:b2:30:59:0b:e4:51:07:
2c:4f:8e:41:3b:a0:05:fd:9c:5e:75:bf:7e:b3:ea:da:5f:57:
15:72:e9:8b:f2:1d:d3:bb:48:51:ad:64:31:a4:4d:d1:6e:b0:
3b:b8:4d:1f:e4:34:e3:7f:05:92:00:93:ca:bf:7f:14:60:27:
73:e1:39:82:26:c4:28:ca:86:cf:64:80:4c:13:75:9d:b4:1e:
0e:2c:bf:32:78:b3:5a:9c:ac:dc:25:9e:9b:0b:d5:9e:b2:61:
b8:a9:8b:7a:8a:60:e8:25:f4:6d:ee:41:89:47:31:d9:99:41:
46:6c:9a:e5:d9:40:b4:f4:69:25:87:a8:e9:d1:53:b1:f1:af:
cb:b5:e6:d4:75:dd:04:86:63:2b:63:7e:e9:b7:4b:57:42:3d:
f9:37:05:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 23:04:09 2026 by rpki-client