$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft File: 526198C6FEC4729E2A08209CDB07E7BD6537198F.mft (raw, json) Hash identifier: RT4FXoiYILuDJKeSGwRuR4g6OewaUSxEm5efSrcvKas= Subject key identifier: BB:01:DF:EF:FE:60:3C:BC:AE:E9:7C:57:C3:9C:68:D1:B3:48:69:4D Authority key identifier: 52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F Certificate issuer: /CN=526198C6FEC4729E2A08209CDB07E7BD6537198F Certificate serial: 50CDA9DBE7F515997100DF8FA656BF9495C4515B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft Manifest number: 14 Signing time: Mon 27 Apr 2026 05:23:41 +0000 Manifest this update: Mon 27 Apr 2026 05:18:41 +0000 Manifest next update: Tue 28 Apr 2026 06:47:41 +0000 Files and hashes: 1: 34332e3233392e3132332e302f32342d3234203d3e2030.roa (hash: VMjL+XSC1mPOSkeTdlTojJzBzT03t2yOX7OTsoHue0g=) 2: 526198C6FEC4729E2A08209CDB07E7BD6537198F.crl (hash: x1Z+s5VYfIXeaGrfsMCZPBirOB8CsF8jiWuY7t7GGJA=) 3: 3130332e3233362e3132332e302f32342d3234203d3e2030.roa (hash: IlBBikhkFQgdIZ1dkeSBSpyvlJVnKeNS3f62qPJAUhI=) 4: 3130332e3233362e3132322e302f32342d3234203d3e2030.roa (hash: PDUqHiXtaBvwn66/fDKMVP8kGki7lnOZa10mr/WECFI=) 5: 3130332e3233362e3132302e302f32342d3234203d3e2030.roa (hash: Km8S2TJ8iKWZOeT+afBnXUsAtpaviIGuscofdyWIck4=) 6: 34332e3233392e3132322e302f32342d3234203d3e2034383337.roa (hash: IaWRC9nHLKC84WiqJrSp1xSXQunbSDFvIw4uS1slruo=) 7: 34332e3233392e3132302e302f32342d3234203d3e2034383337.roa (hash: aBspfRQbXDiReoy+rhMlIHE5jaEvuciG3FN3gQQQ3Ss=) 8: 3130332e3233362e3132312e302f32342d3234203d3e2034383337.roa (hash: mfAlEKa+sf3Q0PtsXP0RkfswdV/HI/qvIahppWTM9gQ=) 9: 34332e3233392e3132312e302f32342d3234203d3e2034383337.roa (hash: BaekiEiRPpFp2s1DV3F9q7vYjwpTx4wZ+MgPXB7iiFU=) 10: 323430323a653638303a3a2f33322d3332203d3e2030.roa (hash: 6nLYCWK48FiM/igQDUW+g9AOHXsfwPpZ72/3GSFCJtQ=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 06:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:cd:a9:db:e7:f5:15:99:71:00:df:8f:a6:56:bf:94:95:c4:51:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=526198C6FEC4729E2A08209CDB07E7BD6537198F Validity Not Before: Apr 27 05:18:41 2026 GMT Not After : Apr 28 06:47:41 2026 GMT Subject: CN=BB01DFEFFE603CBCAEE97C57C39C68D1B348694D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:05:17:fe:c0:f6:05:ac:5c:62:4c:5b:4f:8e: 8c:0d:f5:ef:23:3b:4f:a5:e6:5f:55:55:bc:16:55: 75:fb:bc:54:f1:45:1f:9a:d3:a3:d2:a5:ea:89:81: 75:0e:aa:f8:4e:52:78:43:2c:b2:e9:b1:36:8d:43: 2f:96:b0:56:f4:fc:7d:dd:49:3b:59:93:6c:3a:ae: 73:f7:74:63:14:21:7b:d1:7f:a8:1e:82:27:74:68: 2f:d3:54:e3:0b:b3:d8:a5:03:5d:2c:a4:19:cf:fe: 63:ff:bd:47:0b:0f:0a:84:b5:42:f0:f5:4a:df:da: 10:92:fa:ed:d4:71:c0:5e:c9:fe:45:19:27:b2:9a: 85:c0:55:46:74:43:7d:16:f7:d6:ce:52:02:02:41: d1:28:1f:27:50:de:c4:a5:9d:77:c5:f2:1c:6b:b0: 47:b7:c9:d7:d6:80:b4:ab:87:c2:a6:ad:a3:85:ae: 9d:2d:b4:d2:cc:20:c8:58:8f:14:94:9c:57:3c:4e: 70:85:7f:b5:8f:3f:28:a5:fb:38:97:7e:ca:62:d1: c3:94:02:61:9c:93:80:4f:b5:99:51:78:c7:b0:7e: 01:f3:65:52:d2:a5:2e:23:b3:27:29:a6:6e:e8:6c: 35:68:7d:01:dc:db:4f:17:35:56:ac:4e:74:21:a8: 87:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:01:DF:EF:FE:60:3C:BC:AE:E9:7C:57:C3:9C:68:D1:B3:48:69:4D X509v3 Authority Key Identifier: keyid:52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a8:a8:99:0a:5f:8c:82:07:1c:af:21:09:28:3b:ee:94:71: bd:af:d6:55:6e:87:fb:bc:c5:0b:6b:57:42:96:f2:bc:c4:1c: 77:e8:09:1c:60:e7:6c:02:aa:5b:04:15:87:d7:17:35:ba:58: ff:c2:01:13:3a:3d:eb:c5:04:d1:9a:de:0e:ac:b0:68:16:c4: f9:9f:bd:da:d9:db:28:81:d5:70:ed:de:1d:ec:8f:92:13:d3: ea:fa:ff:51:99:0c:8e:1f:86:a4:5e:7e:0c:c7:cf:5d:5b:1c: 35:b6:76:f6:b0:c0:5c:08:41:ca:26:c9:1e:d9:9f:8f:e8:e8: e1:56:3b:08:17:48:c3:30:38:7b:27:fe:a9:c9:65:fe:4b:4f: b3:7f:6d:72:c5:de:01:e9:14:69:70:03:b9:11:ba:b4:c3:2d: 8c:0a:53:10:ce:8d:b0:5e:6c:fc:98:28:ab:d2:92:e8:71:24: 18:0e:32:c6:77:57:b9:15:1c:86:6a:f7:a2:3a:fb:a3:12:6f: a7:d9:6a:1e:99:24:46:16:9a:b5:90:99:3c:cb:c1:38:6f:0f: b5:24:3e:13:48:ec:34:0e:7f:31:1a:f4:dc:30:26:a4:f8:f7: c4:95:fd:90:6b:6a:1c:58:05:39:63:d0:70:cb:01:1d:c0:6a: c9:97:b0:04 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUM2p2+f1FZlxAN+Ppla/lJXEUVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI2MTk4QzZGRUM0NzI5RTJBMDgyMDlDREIwN0U3QkQ2 NTM3MTk4RjAeFw0yNjA0MjcwNTE4NDFaFw0yNjA0MjgwNjQ3NDFaMDMxMTAvBgNV BAMTKEJCMDFERkVGRkU2MDNDQkNBRUU5N0M1N0MzOUM2OEQxQjM0ODY5NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoBRf+wPYFrFxiTFtPjowN9e8j O0+l5l9VVbwWVXX7vFTxRR+a06PSpeqJgXUOqvhOUnhDLLLpsTaNQy+WsFb0/H3d STtZk2w6rnP3dGMUIXvRf6gegid0aC/TVOMLs9ilA10spBnP/mP/vUcLDwqEtULw 9Urf2hCS+u3UccBeyf5FGSeymoXAVUZ0Q30W99bOUgICQdEoHydQ3sSlnXfF8hxr sEe3ydfWgLSrh8KmraOFrp0ttNLMIMhYjxSUnFc8TnCFf7WPPyil+ziXfspi0cOU AmGck4BPtZlReMewfgHzZVLSpS4jsycppm7obDVofQHc208XNVasTnQhqIdXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUuwHf7/5gPLyu6XxXw5xo0bNIaU0wHwYDVR0j BBgwFoAUUmGYxv7Ecp4qCCCc2wfnvWU3GY8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4OTMyMDY4MjU4NjExNC8wLzUyNjE5OEM2RkVDNDcyOUUyQTA4MjA5Q0RCMDdF N0JENjUzNzE5OEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI2MTk4QzZGRUM0NzI5RTJBMDgyMDlDREIwN0U3QkQ2NTM3MTk4Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2ODkzMjA2ODI1ODYxMTQvMC81MjYxOThDNkZFQzQ3 MjlFMkEwODIwOUNEQjA3RTdCRDY1MzcxOThGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6iomQpfjIIH HK8hCSg77pRxva/WVW6H+7zFC2tXQpbyvMQcd+gJHGDnbAKqWwQVh9cXNbpY/8IB Ezo968UE0ZreDqywaBbE+Z+92tnbKIHVcO3eHeyPkhPT6vr/UZkMjh+GpF5+DMfP XVscNbZ29rDAXAhByibJHtmfj+jo4VY7CBdIwzA4eyf+qcll/ktPs39tcsXeAekU aXADuRG6tMMtjApTEM6NsF5s/Jgoq9KS6HEkGA4yxndXuRUchmr3ojr7oxJvp9lq HpkkRhaatZCZPMvBOG8PtSQ+E0jsNA5/MRr03DAmpPj3xJX9kGtqHFgFOWPQcMsB HcBqyZewBA== -----END CERTIFICATE-----Generated at Mon Apr 27 21:50:32 2026 by rpki-client