$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft File: 526198C6FEC4729E2A08209CDB07E7BD6537198F.mft (raw, json) Hash identifier: +TFKW0vUoLc0bN9F6rQ4uxyRIWsIzWUCS5Uh0rgh/qw= Subject key identifier: 43:C5:1B:3E:B0:D4:E9:E2:BE:CD:3F:15:8E:52:7F:41:9A:30:01:86 Authority key identifier: 52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F Certificate issuer: /CN=526198C6FEC4729E2A08209CDB07E7BD6537198F Certificate serial: 1798C636AA216F667C88C0687213B6DE93E149FD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft Manifest number: 06 Signing time: Thu 16 Apr 2026 18:29:32 +0000 Manifest this update: Thu 16 Apr 2026 18:24:32 +0000 Manifest next update: Fri 17 Apr 2026 19:37:32 +0000 Files and hashes: 1: 3130332e3233362e3132332e302f32342d3234203d3e2030.roa (hash: IlBBikhkFQgdIZ1dkeSBSpyvlJVnKeNS3f62qPJAUhI=) 2: 34332e3233392e3132322e302f32342d3234203d3e2034383337.roa (hash: IaWRC9nHLKC84WiqJrSp1xSXQunbSDFvIw4uS1slruo=) 3: 323430323a653638303a3a2f33322d3332203d3e2030.roa (hash: 6nLYCWK48FiM/igQDUW+g9AOHXsfwPpZ72/3GSFCJtQ=) 4: 3130332e3233362e3132322e302f32342d3234203d3e2030.roa (hash: PDUqHiXtaBvwn66/fDKMVP8kGki7lnOZa10mr/WECFI=) 5: 34332e3233392e3132312e302f32342d3234203d3e2034383337.roa (hash: BaekiEiRPpFp2s1DV3F9q7vYjwpTx4wZ+MgPXB7iiFU=) 6: 526198C6FEC4729E2A08209CDB07E7BD6537198F.crl (hash: bjXJmTzysyRRsHLlxCLBoWNJ+9Gqp1nT10i5OY7DsI8=) 7: 34332e3233392e3132332e302f32342d3234203d3e2030.roa (hash: VMjL+XSC1mPOSkeTdlTojJzBzT03t2yOX7OTsoHue0g=) 8: 3130332e3233362e3132312e302f32342d3234203d3e2034383337.roa (hash: mfAlEKa+sf3Q0PtsXP0RkfswdV/HI/qvIahppWTM9gQ=) 9: 3130332e3233362e3132302e302f32342d3234203d3e2030.roa (hash: Km8S2TJ8iKWZOeT+afBnXUsAtpaviIGuscofdyWIck4=) 10: 34332e3233392e3132302e302f32342d3234203d3e2034383337.roa (hash: aBspfRQbXDiReoy+rhMlIHE5jaEvuciG3FN3gQQQ3Ss=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 17:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:98:c6:36:aa:21:6f:66:7c:88:c0:68:72:13:b6:de:93:e1:49:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=526198C6FEC4729E2A08209CDB07E7BD6537198F Validity Not Before: Apr 16 18:24:32 2026 GMT Not After : Apr 17 19:37:32 2026 GMT Subject: CN=43C51B3EB0D4E9E2BECD3F158E527F419A300186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4c:0b:cd:94:c4:ff:8f:a3:0f:b9:25:2e:0a: d8:d0:33:ef:98:4d:00:b3:7a:0f:98:67:e2:ca:77: cb:d6:cb:15:33:1d:c1:35:1b:1d:e0:d3:ad:86:44: a5:2b:1c:a7:cf:4e:fb:7e:3c:3b:84:3f:75:6f:80: 1e:9e:74:8b:fc:98:42:72:bc:0d:89:e4:eb:fb:15: 1f:5e:75:15:fb:86:40:7e:85:a9:12:b4:a9:1c:13: 60:80:6d:be:7f:cb:0a:78:db:fa:a9:52:47:d5:2c: be:e8:fe:a1:4d:42:49:1e:01:d0:97:d7:67:7b:09: 11:b6:a9:9f:30:f5:f1:d1:67:36:00:63:8b:54:4d: f1:65:10:18:96:16:77:9b:0b:0d:23:dd:66:b2:c2: c8:eb:ac:1c:a7:bb:f6:05:18:a3:68:36:d7:9c:fe: 0b:4c:37:f4:d1:46:a3:d6:3a:0e:6b:d6:52:d3:1e: fa:a7:25:04:9b:e6:5f:8b:f7:59:8e:fc:08:6c:35: 63:d3:a5:53:98:ca:09:27:83:47:45:1c:c2:4d:8d: dd:95:a3:5d:36:51:41:ba:4b:46:c1:34:3f:28:79: f7:1e:9e:bc:ee:85:4f:31:8d:d0:c6:ad:69:5f:c7: d6:d3:08:fe:fa:a9:28:11:59:44:72:d3:dd:d2:b5: 00:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C5:1B:3E:B0:D4:E9:E2:BE:CD:3F:15:8E:52:7F:41:9A:30:01:86 X509v3 Authority Key Identifier: keyid:52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:ff:15:a8:1b:78:86:7d:d2:89:7b:ab:25:3c:63:ae:b7:1f: cc:66:83:ad:39:df:ab:a0:65:94:63:58:0e:aa:44:ed:83:34: eb:aa:81:2a:00:1d:f5:c2:0f:92:b7:5d:ef:2f:51:5f:a5:6d: f0:0b:79:07:98:7a:cb:c1:d7:e4:aa:c6:42:5a:11:a4:b9:51: 4d:76:83:3c:11:90:c9:33:bd:a3:19:4e:db:b7:dd:fa:4f:ac: 11:0c:1e:62:10:79:59:5d:dc:43:a0:09:17:6a:c3:ea:89:c0: 7b:0f:51:3d:a5:cf:96:af:dc:df:c7:e0:ab:fd:92:23:e7:29: a9:05:09:4b:9a:86:89:8a:a7:0a:e5:fc:5f:d6:eb:da:07:e8: 64:f1:82:99:07:a7:76:79:80:75:16:da:e9:a6:81:90:50:e1: 6d:66:d9:20:6a:c9:9b:4e:45:b1:e2:67:b4:e5:32:7d:ff:97: 74:3e:01:b8:a9:95:72:37:75:9a:da:52:67:5d:e0:49:b2:81: 5d:16:43:88:1b:82:89:be:87:ce:2b:a6:76:49:e2:11:63:ab: ca:23:95:19:6f:a0:25:09:fc:51:8f:7b:7e:7f:6b:6d:f9:8c: d3:5e:53:e9:2a:30:ae:e2:22:7f:f2:0c:93:a8:7c:32:cd:d8: b9:9b:6e:b6 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUF5jGNqohb2Z8iMBochO23pPhSf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI2MTk4QzZGRUM0NzI5RTJBMDgyMDlDREIwN0U3QkQ2 NTM3MTk4RjAeFw0yNjA0MTYxODI0MzJaFw0yNjA0MTcxOTM3MzJaMDMxMTAvBgNV BAMTKDQzQzUxQjNFQjBENEU5RTJCRUNEM0YxNThFNTI3RjQxOUEzMDAxODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqTAvNlMT/j6MPuSUuCtjQM++Y TQCzeg+YZ+LKd8vWyxUzHcE1Gx3g062GRKUrHKfPTvt+PDuEP3VvgB6edIv8mEJy vA2J5Ov7FR9edRX7hkB+hakStKkcE2CAbb5/ywp42/qpUkfVLL7o/qFNQkkeAdCX 12d7CRG2qZ8w9fHRZzYAY4tUTfFlEBiWFnebCw0j3WaywsjrrBynu/YFGKNoNtec /gtMN/TRRqPWOg5r1lLTHvqnJQSb5l+L91mO/AhsNWPTpVOYygkng0dFHMJNjd2V o102UUG6S0bBND8oefcenrzuhU8xjdDGrWlfx9bTCP76qSgRWURy093StQC9AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUQ8UbPrDU6eK+zT8VjlJ/QZowAYYwHwYDVR0j BBgwFoAUUmGYxv7Ecp4qCCCc2wfnvWU3GY8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4OTMyMDY4MjU4NjExNC8wLzUyNjE5OEM2RkVDNDcyOUUyQTA4MjA5Q0RCMDdF N0JENjUzNzE5OEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI2MTk4QzZGRUM0NzI5RTJBMDgyMDlDREIwN0U3QkQ2NTM3MTk4Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2ODkzMjA2ODI1ODYxMTQvMC81MjYxOThDNkZFQzQ3 MjlFMkEwODIwOUNEQjA3RTdCRDY1MzcxOThGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHP8VqBt4hn3S iXurJTxjrrcfzGaDrTnfq6BllGNYDqpE7YM066qBKgAd9cIPkrdd7y9RX6Vt8At5 B5h6y8HX5KrGQloRpLlRTXaDPBGQyTO9oxlO27fd+k+sEQweYhB5WV3cQ6AJF2rD 6onAew9RPaXPlq/c38fgq/2SI+cpqQUJS5qGiYqnCuX8X9br2gfoZPGCmQendnmA dRba6aaBkFDhbWbZIGrJm05FseJntOUyff+XdD4BuKmVcjd1mtpSZ13gSbKBXRZD iBuCib6HziumdkniEWOryiOVGW+gJQn8UY97fn9rbfmM015T6SowruIif/IMk6h8 Ms3YuZtutg== -----END CERTIFICATE-----Generated at Thu Apr 16 23:52:59 2026 by rpki-client