$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft File: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft (raw, json) Hash identifier: P5qxPlQ65Yd1J1vQCZttwPEW2x9JwSNQjxEU5INBpeg= Subject key identifier: 4D:4E:60:F8:A0:8D:C5:7C:26:95:F9:9D:0F:C5:D3:A8:D3:55:68:D8 Authority key identifier: 36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED Certificate issuer: /CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Certificate serial: 1979645A4FA6D87E2DAD81D9259DAEB07EF8A252 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft Manifest number: 013E Signing time: Wed 14 Oct 2026 12:54:08 +0000 Manifest this update: Wed 14 Oct 2026 12:49:08 +0000 Manifest next update: Sat 17 Oct 2026 19:57:08 +0000 Files and hashes: 1: 3131392e34302e36342e302f32302d3234203d3e203338333738.roa (hash: c0wW6VCicCCnYfYJdn0/kWyv9t5vGCOs/sl/Ap5EabE=) 2: 3130332e39322e38382e302f32322d3234203d3e203338333738.roa (hash: DQtj51onk1QlrsaGulzt3zyofI52x/prSCn1R/58wqA=) 3: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl (hash: /WgWmDYimlXTGHLa2D+qT/CX/Wdxc4EN35odPWRkAdg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 19:57:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:79:64:5a:4f:a6:d8:7e:2d:ad:81:d9:25:9d:ae:b0:7e:f8:a2:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Validity Not Before: Oct 14 12:49:08 2026 GMT Not After : Oct 17 19:57:08 2026 GMT Subject: CN=4D4E60F8A08DC57C2695F99D0FC5D3A8D35568D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:19:f6:4b:1e:d1:c5:42:69:f1:13:31:c4:37: 8b:8d:12:9a:df:b5:db:87:d6:45:b8:2d:9b:5f:ed: db:43:6d:dc:c1:d4:0b:e7:fe:ef:17:04:e8:73:7b: 94:e7:cc:0d:34:ea:00:2f:74:f5:84:28:e0:74:74: 2b:06:98:bf:55:51:69:2d:0b:b4:23:64:0d:78:1a: 05:c4:ec:18:7f:e4:5e:77:c1:f3:03:02:99:5a:97: d4:0f:a0:f4:1c:d8:e1:1f:85:d6:a3:4d:05:4a:bf: 5e:1a:db:83:e4:b7:3d:c4:b1:49:c9:07:14:72:98: 3c:8f:f8:55:8f:91:92:d8:2b:96:80:c7:43:9d:e6: 0a:4f:af:a0:9e:88:03:e4:35:ed:6f:12:b9:d8:fd: 43:12:3a:d4:5a:5a:02:fc:ff:57:4f:52:1b:5e:90: 58:70:62:8d:b9:b3:61:d5:b4:b1:46:3e:ac:4a:a9: d8:41:8e:7f:7f:d3:28:9e:b5:9d:34:e4:42:b6:27: 34:90:4a:bc:ea:1e:fb:9e:83:c0:72:c7:89:44:54: 48:fd:07:a7:c8:b5:12:e4:d4:65:b7:09:57:6c:d3: b3:55:e9:15:89:93:6d:b2:7f:0e:1e:b3:75:48:05: 93:3c:64:54:65:a8:da:79:af:ba:49:87:ff:f1:40: e9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:4E:60:F8:A0:8D:C5:7C:26:95:F9:9D:0F:C5:D3:A8:D3:55:68:D8 X509v3 Authority Key Identifier: keyid:36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:27:11:76:d6:3b:0c:85:ca:cc:11:36:32:52:2a:e1:8e:09: 91:2b:e4:8f:36:86:1a:9c:78:f5:16:df:fe:5b:c6:fb:c2:2b: fb:5f:21:b5:6f:26:23:b6:17:76:3a:04:10:b9:45:17:0f:49: 3a:18:07:ff:e1:2c:56:31:7c:bc:f8:af:12:d1:95:7a:b5:57: 46:f7:3d:32:bb:2e:7c:13:f2:27:13:28:62:e2:44:3b:78:79: a3:40:9c:a8:a7:ef:c8:ed:08:f9:f9:5d:88:14:6b:86:ec:64: d9:9b:76:bd:79:de:94:2f:53:dd:8a:90:3c:30:70:a0:1e:e8: f7:d3:15:17:5e:a1:dc:41:96:8e:2f:a1:1e:aa:fa:47:10:31: 66:2b:b5:7b:ee:86:3c:bf:0b:f6:7a:2b:35:04:36:72:a2:30: d5:5e:42:c0:a3:c0:e0:95:09:58:fb:59:7f:c6:11:4f:53:e6: 85:87:9f:fd:fb:03:ee:6a:89:39:54:ae:5b:7f:be:b9:1d:6b: 63:f3:ae:03:71:3b:2c:3e:3c:c6:6c:77:da:3e:66:0b:87:99: e0:46:b9:a9:1b:1a:f7:a4:6a:d1:aa:63:7a:0a:50:5f:02:f0: fe:5d:93:a6:31:41:fd:4c:57:ec:fc:8c:61:58:f5:c2:0b:c8: ff:ab:13:10 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUGXlkWk+m2H4trYHZJZ2usH74olIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4 MTI2NkVFRDAeFw0yNjEwMTQxMjQ5MDhaFw0yNjEwMTcxOTU3MDhaMDMxMTAvBgNV BAMTKDRENEU2MEY4QTA4REM1N0MyNjk1Rjk5RDBGQzVEM0E4RDM1NTY4RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClGfZLHtHFQmnxEzHEN4uNEprf tduH1kW4LZtf7dtDbdzB1Avn/u8XBOhze5TnzA006gAvdPWEKOB0dCsGmL9VUWkt C7QjZA14GgXE7Bh/5F53wfMDAplal9QPoPQc2OEfhdajTQVKv14a24Pktz3EsUnJ BxRymDyP+FWPkZLYK5aAx0Od5gpPr6CeiAPkNe1vErnY/UMSOtRaWgL8/1dPUhte kFhwYo25s2HVtLFGPqxKqdhBjn9/0yietZ005EK2JzSQSrzqHvueg8Byx4lEVEj9 B6fItRLk1GW3CVds07NV6RWJk22yfw4es3VIBZM8ZFRlqNp5r7pJh//xQOnBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUTU5g+KCNxXwmlfmdD8XTqNNVaNgwHwYDVR0j BBgwFoAUNt8e1Rrjnnx+os4L7sMDLoEmbu0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzM0MDgwMS8wLzM2REYxRUQ1MUFFMzlFN0M3RUEyQ0UwQkVFQzMw MzJFODEyNjZFRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4MTI2NkVFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDczNDA4MDEvMC8zNkRGMUVENTFBRTM5 RTdDN0VBMkNFMEJFRUMzMDMyRTgxMjY2RUVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADScRdtY7DIXK zBE2MlIq4Y4JkSvkjzaGGpx49Rbf/lvG+8Ir+18htW8mI7YXdjoEELlFFw9JOhgH /+EsVjF8vPivEtGVerVXRvc9MrsufBPyJxMoYuJEO3h5o0CcqKfvyO0I+fldiBRr huxk2Zt2vXnelC9T3YqQPDBwoB7o99MVF16h3EGWji+hHqr6RxAxZiu1e+6GPL8L 9norNQQ2cqIw1V5CwKPA4JUJWPtZf8YRT1PmhYef/fsD7mqJOVSuW3++uR1rY/Ou A3E7LD48xmx32j5mC4eZ4Ea5qRsa96Rq0apjegpQXwLw/l2TpjFB/UxX7PyMYVj1 wgvI/6sTEA== -----END CERTIFICATE-----Generated at Thu Oct 15 11:40:33 2026 by rpki-client