$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft File: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft (raw, json) Hash identifier: V82nwcNVtfzgZh43drxjPRohDHG99o+Ryh6b7AaO4Q4= Subject key identifier: CD:0C:C6:64:DD:B3:51:A1:BA:E8:9D:C5:40:9F:B5:58:74:24:41:AF Authority key identifier: 36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED Certificate issuer: /CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Certificate serial: 5B4320A2866FFB05C4AA4F85F9C520904A8DC046 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft Manifest number: 0101 Signing time: Wed 29 Jul 2026 20:30:11 +0000 Manifest this update: Wed 29 Jul 2026 20:25:11 +0000 Manifest next update: Thu 30 Jul 2026 22:27:11 +0000 Files and hashes: 1: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl (hash: 5dNPPfoJHRjf2d183iNpRWEo25SfmOGNDDdkqAs/s8c=) 2: 3130332e39322e38382e302f32322d3234203d3e203338333738.roa (hash: DQtj51onk1QlrsaGulzt3zyofI52x/prSCn1R/58wqA=) 3: 3131392e34302e36342e302f32302d3234203d3e203338333738.roa (hash: c0wW6VCicCCnYfYJdn0/kWyv9t5vGCOs/sl/Ap5EabE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 22:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:43:20:a2:86:6f:fb:05:c4:aa:4f:85:f9:c5:20:90:4a:8d:c0:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Validity Not Before: Jul 29 20:25:11 2026 GMT Not After : Jul 30 22:27:11 2026 GMT Subject: CN=CD0CC664DDB351A1BAE89DC5409FB558742441AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:01:1f:a8:3a:ea:d4:6d:97:e8:5d:e3:0c: e2:46:c4:65:4a:22:4a:4f:c1:af:94:b0:ca:30:b4: 04:92:db:72:6e:7f:52:94:13:a9:11:1e:08:31:02: 9c:de:3b:27:e5:2a:eb:89:7b:cf:e2:47:81:5a:11: 54:d7:6e:dd:82:88:5a:18:75:b3:69:f8:3a:9d:d9: a7:f2:89:f2:65:91:1b:d1:8a:d2:16:e0:f8:fd:3c: d0:4a:65:44:0b:dc:0d:a1:66:10:84:ad:19:45:23: 59:55:e4:7c:3f:39:69:e7:6c:48:72:b5:74:00:9a: 42:b7:31:53:f6:d8:8f:ca:75:b0:8d:14:07:15:53: 04:7a:5a:d8:7c:dc:b6:48:d8:fd:dc:cf:02:03:47: 18:17:28:9d:89:5b:9b:78:70:5c:33:30:68:5a:7d: 60:ff:3f:55:56:51:1f:e9:b6:c7:08:ee:5f:0f:52: 9a:9b:2f:7c:cf:e4:af:c1:83:01:fa:94:2f:16:a9: dc:27:43:3c:2d:e7:d4:65:0a:fa:63:96:bf:df:f6: a4:3b:24:8a:0c:a8:72:ed:0d:e2:29:0c:11:51:0e: ea:fd:54:5f:da:43:9c:3a:67:e6:2d:1b:2f:bb:21: a1:6f:99:d8:4f:0b:13:4e:7b:8b:e4:14:9e:8c:90: 00:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0C:C6:64:DD:B3:51:A1:BA:E8:9D:C5:40:9F:B5:58:74:24:41:AF X509v3 Authority Key Identifier: keyid:36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:50:66:07:8a:33:ad:9a:fd:e9:13:f1:39:2d:bc:9f:68:a8: 80:57:27:c1:11:b6:b5:82:4c:78:cd:39:71:49:a6:fb:f5:d0: e5:3e:b8:c9:ea:20:2f:b0:df:3a:a8:fc:ef:db:f2:33:0a:08: 3e:bf:88:2c:ff:c9:28:fb:16:8a:e7:4f:cd:bb:e7:6b:78:8a: f4:9f:c9:2b:d1:66:8f:58:45:09:d2:c1:65:08:c2:01:f7:be: e6:cd:bd:96:f9:74:d9:a9:05:15:89:d4:e4:e5:47:2d:36:23: 12:db:07:fa:87:64:6c:cd:b1:c7:f7:c8:0a:cf:47:d3:54:6d: 03:90:1b:23:77:e0:53:86:2a:e8:ea:88:27:86:16:0d:13:53: ef:af:41:12:d4:c5:6d:c2:96:04:71:77:2c:08:a7:eb:c7:ec: 8c:57:fb:ab:87:72:8c:e7:7b:b8:b2:eb:c3:cc:55:03:a2:73: 95:ed:61:1e:5b:11:aa:19:ae:c8:8d:dc:c3:5f:cd:cc:92:a6: f3:12:cb:3b:2d:61:e5:95:4b:5b:3e:d5:66:84:fc:5a:13:95: fa:d3:b9:20:eb:d0:10:71:ff:b4:4a:0e:3a:c3:85:7d:d0:fb: 77:87:e1:e0:41:e3:d0:5b:88:24:e0:56:d6:5b:a5:2b:f1:ac: 31:e6:82:ae -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUW0MgooZv+wXEqk+F+cUgkEqNwEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4 MTI2NkVFRDAeFw0yNjA3MjkyMDI1MTFaFw0yNjA3MzAyMjI3MTFaMDMxMTAvBgNV BAMTKENEMENDNjY0RERCMzUxQTFCQUU4OURDNTQwOUZCNTU4NzQyNDQxQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtWQEfqDrq1G2X6F3jDOJGxGVK IkpPwa+UsMowtASS23Juf1KUE6kRHggxApzeOyflKuuJe8/iR4FaEVTXbt2CiFoY dbNp+Dqd2afyifJlkRvRitIW4Pj9PNBKZUQL3A2hZhCErRlFI1lV5Hw/OWnnbEhy tXQAmkK3MVP22I/KdbCNFAcVUwR6Wth83LZI2P3czwIDRxgXKJ2JW5t4cFwzMGha fWD/P1VWUR/ptscI7l8PUpqbL3zP5K/BgwH6lC8WqdwnQzwt59RlCvpjlr/f9qQ7 JIoMqHLtDeIpDBFRDur9VF/aQ5w6Z+YtGy+7IaFvmdhPCxNOe4vkFJ6MkAD3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUzQzGZN2zUaG66J3FQJ+1WHQkQa8wHwYDVR0j BBgwFoAUNt8e1Rrjnnx+os4L7sMDLoEmbu0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzM0MDgwMS8wLzM2REYxRUQ1MUFFMzlFN0M3RUEyQ0UwQkVFQzMw MzJFODEyNjZFRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4MTI2NkVFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDczNDA4MDEvMC8zNkRGMUVENTFBRTM5 RTdDN0VBMkNFMEJFRUMzMDMyRTgxMjY2RUVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFBmB4ozrZr9 6RPxOS28n2iogFcnwRG2tYJMeM05cUmm+/XQ5T64yeogL7DfOqj879vyMwoIPr+I LP/JKPsWiudPzbvna3iK9J/JK9Fmj1hFCdLBZQjCAfe+5s29lvl02akFFYnU5OVH LTYjEtsH+odkbM2xx/fICs9H01RtA5AbI3fgU4Yq6OqIJ4YWDRNT769BEtTFbcKW BHF3LAin68fsjFf7q4dyjOd7uLLrw8xVA6Jzle1hHlsRqhmuyI3cw1/NzJKm8xLL Oy1h5ZVLWz7VZoT8WhOV+tO5IOvQEHH/tEoOOsOFfdD7d4fh4EHj0FuIJOBW1lul K/GsMeaCrg== -----END CERTIFICATE-----Generated at Wed Jul 29 22:59:49 2026 by rpki-client