$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft File: 526198C6FEC4729E2A08209CDB07E7BD6537198F.mft (raw, json) Hash identifier: j+EftVeoaMuBWpxREja4GCDck0+SL+iOxK9b2gBng0M= Subject key identifier: 3A:E6:5D:4F:57:0E:55:BB:01:88:90:A6:9C:C8:0B:BC:89:8A:1E:A8 Authority key identifier: 52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F Certificate issuer: /CN=526198C6FEC4729E2A08209CDB07E7BD6537198F Certificate serial: 5AC0EE5607638634633368358964235B4A645DD8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft Manifest number: 29 Signing time: Wed 13 May 2026 05:15:57 +0000 Manifest this update: Wed 13 May 2026 05:10:57 +0000 Manifest next update: Thu 14 May 2026 09:01:57 +0000 Files and hashes: 1: 34332e3233392e3132322e302f32342d3234203d3e2034383337.roa (hash: IaWRC9nHLKC84WiqJrSp1xSXQunbSDFvIw4uS1slruo=) 2: 323430323a653638303a3a2f33322d3332203d3e2030.roa (hash: 6nLYCWK48FiM/igQDUW+g9AOHXsfwPpZ72/3GSFCJtQ=) 3: 34332e3233392e3132312e302f32342d3234203d3e2034383337.roa (hash: BaekiEiRPpFp2s1DV3F9q7vYjwpTx4wZ+MgPXB7iiFU=) 4: 3130332e3233362e3132302e302f32342d3234203d3e2030.roa (hash: Km8S2TJ8iKWZOeT+afBnXUsAtpaviIGuscofdyWIck4=) 5: 34332e3233392e3132332e302f32342d3234203d3e2030.roa (hash: VMjL+XSC1mPOSkeTdlTojJzBzT03t2yOX7OTsoHue0g=) 6: 3130332e3233362e3132312e302f32342d3234203d3e2034383337.roa (hash: mfAlEKa+sf3Q0PtsXP0RkfswdV/HI/qvIahppWTM9gQ=) 7: 3130332e3233362e3132332e302f32342d3234203d3e2030.roa (hash: IlBBikhkFQgdIZ1dkeSBSpyvlJVnKeNS3f62qPJAUhI=) 8: 34332e3233392e3132302e302f32342d3234203d3e2034383337.roa (hash: aBspfRQbXDiReoy+rhMlIHE5jaEvuciG3FN3gQQQ3Ss=) 9: 526198C6FEC4729E2A08209CDB07E7BD6537198F.crl (hash: 7agVC5dqU7phicpRrTNMt1ZNWMfiOujo5Pgy5ZMfn6c=) 10: 3130332e3233362e3132322e302f32342d3234203d3e2030.roa (hash: PDUqHiXtaBvwn66/fDKMVP8kGki7lnOZa10mr/WECFI=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c0:ee:56:07:63:86:34:63:33:68:35:89:64:23:5b:4a:64:5d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=526198C6FEC4729E2A08209CDB07E7BD6537198F Validity Not Before: May 13 05:10:57 2026 GMT Not After : May 14 09:01:57 2026 GMT Subject: CN=3AE65D4F570E55BB018890A69CC80BBC898A1EA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3f:23:c0:26:a6:af:ff:f2:89:ac:0a:29:98: 46:c3:79:ce:46:92:82:aa:f7:9e:78:2d:37:fb:6c: e7:8d:b9:53:98:0d:f9:0c:37:06:11:22:b8:de:ee: 1c:b5:ae:02:59:cc:be:57:b9:2c:5b:9a:6c:d4:8b: 07:d2:60:d8:e2:fc:04:ff:e9:94:e5:ba:44:65:0c: ad:b4:c1:41:77:9d:66:b5:6a:bb:6e:a0:24:c0:9b: 4e:a4:2f:ba:42:d6:f8:7c:f4:59:91:3c:ce:c6:c9: 43:f8:6f:fd:31:86:44:9b:21:01:b6:d9:76:eb:bb: 8c:43:e1:6d:00:bf:09:ec:e8:10:28:63:b8:ee:1d: 0a:6d:9c:5e:db:0c:35:b4:1d:10:fb:1b:2a:24:80: eb:38:2d:68:37:42:3c:4a:79:6e:50:6a:33:65:11: 31:0e:4b:fc:71:68:01:4d:63:46:ef:80:be:60:bf: a3:b2:29:83:38:26:2e:1a:e7:0c:96:c0:6e:b0:2f: b4:50:6f:f0:62:c9:23:a9:0b:30:01:20:69:d1:d5: 32:c6:9d:31:75:2e:0f:b0:a7:b0:1a:6b:d8:ae:e2: f5:f5:06:44:82:c5:96:62:33:7d:4e:bb:12:12:58: e8:e8:61:71:bd:85:94:29:62:c8:43:f9:bd:06:01: e7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:E6:5D:4F:57:0E:55:BB:01:88:90:A6:9C:C8:0B:BC:89:8A:1E:A8 X509v3 Authority Key Identifier: keyid:52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:0b:6f:b9:23:5c:00:ea:d0:d5:1f:f6:db:c4:b6:3d:7f:23: fa:65:43:df:8e:78:ea:db:4d:9a:cd:ed:d1:31:1b:4e:95:16: 62:64:59:39:b5:bd:02:80:91:3e:a6:ce:bb:98:38:31:00:39: 59:a0:86:a1:00:d2:76:ed:42:8b:ac:67:af:d3:fa:be:9e:f6: 15:c3:e1:ff:27:50:b1:a3:c0:f8:fd:f7:fb:41:90:f2:b2:fc: cb:13:fc:4b:33:75:d5:c4:0c:a9:8f:4c:53:5f:ec:ab:83:e0: 05:cc:a2:d4:3f:3f:ef:56:a6:65:b1:33:4c:9b:4e:20:47:a1: e8:ab:bd:74:ee:9c:f7:82:bc:bc:3f:40:16:a7:f3:22:87:26: cb:0f:53:7d:23:a0:3b:9a:96:de:08:5a:08:5b:a6:86:5f:a3: 4e:2c:b2:80:b2:5b:90:2c:2e:3f:4a:b7:cc:ca:da:31:c7:26: c6:7a:ac:1e:77:a6:6c:e8:6c:5b:6a:ae:db:a2:fd:69:aa:e6: 59:9f:60:c0:bf:5f:74:63:26:f9:4a:fd:de:38:22:20:4e:c2: 83:fd:29:5a:93:4d:a0:9c:c4:c5:0d:3f:21:53:83:5c:8a:9c: bd:8f:43:81:3b:26:4c:8c:29:67:30:b0:62:9e:9a:51:45:fb: 25:fb:ba:18 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUWsDuVgdjhjRjM2g1iWQjW0pkXdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI2MTk4QzZGRUM0NzI5RTJBMDgyMDlDREIwN0U3QkQ2 NTM3MTk4RjAeFw0yNjA1MTMwNTEwNTdaFw0yNjA1MTQwOTAxNTdaMDMxMTAvBgNV BAMTKDNBRTY1RDRGNTcwRTU1QkIwMTg4OTBBNjlDQzgwQkJDODk4QTFFQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVPyPAJqav//KJrAopmEbDec5G koKq9554LTf7bOeNuVOYDfkMNwYRIrje7hy1rgJZzL5XuSxbmmzUiwfSYNji/AT/ 6ZTlukRlDK20wUF3nWa1artuoCTAm06kL7pC1vh89FmRPM7GyUP4b/0xhkSbIQG2 2Xbru4xD4W0Avwns6BAoY7juHQptnF7bDDW0HRD7GyokgOs4LWg3QjxKeW5QajNl ETEOS/xxaAFNY0bvgL5gv6OyKYM4Ji4a5wyWwG6wL7RQb/BiySOpCzABIGnR1TLG nTF1Lg+wp7Aaa9iu4vX1BkSCxZZiM31OuxISWOjoYXG9hZQpYshD+b0GAeedAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUOuZdT1cOVbsBiJCmnMgLvImKHqgwHwYDVR0j BBgwFoAUUmGYxv7Ecp4qCCCc2wfnvWU3GY8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4OTMyMDY4MjU4NjExNC8wLzUyNjE5OEM2RkVDNDcyOUUyQTA4MjA5Q0RCMDdF N0JENjUzNzE5OEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI2MTk4QzZGRUM0NzI5RTJBMDgyMDlDREIwN0U3QkQ2NTM3MTk4Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTY2ODkzMjA2ODI1ODYxMTQvMC81MjYxOThDNkZFQzQ3 MjlFMkEwODIwOUNEQjA3RTdCRDY1MzcxOThGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApwtvuSNcAOrQ 1R/228S2PX8j+mVD34546ttNms3t0TEbTpUWYmRZObW9AoCRPqbOu5g4MQA5WaCG oQDSdu1Ci6xnr9P6vp72FcPh/ydQsaPA+P33+0GQ8rL8yxP8SzN11cQMqY9MU1/s q4PgBcyi1D8/71amZbEzTJtOIEeh6Ku9dO6c94K8vD9AFqfzIocmyw9TfSOgO5qW 3ghaCFumhl+jTiyygLJbkCwuP0q3zMraMccmxnqsHnembOhsW2qu26L9aarmWZ9g wL9fdGMm+Ur93jgiIE7Cg/0pWpNNoJzExQ0/IVODXIqcvY9DgTsmTIwpZzCwYp6a UUX7Jfu6GA== -----END CERTIFICATE-----Generated at Wed May 13 09:20:56 2026 by rpki-client