
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft
File: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft (raw, json)
Hash identifier: JS48C6wR6TeYJP1IBkHa0PC89zmm7F4D9VHd+cV8/jk=
Subject key identifier: BD:B4:F2:0A:E6:61:23:E1:08:02:2D:39:3B:6E:8A:01:64:63:5F:C1
Authority key identifier: 36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED
Certificate issuer: /CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED
Certificate serial: 71B7B9E1B9FFFBC8E07D293F298707C5E939ADF0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft
Manifest number: C4
Signing time: Sat 13 Jun 2026 23:37:27 +0000
Manifest this update: Sat 13 Jun 2026 23:32:27 +0000
Manifest next update: Mon 15 Jun 2026 01:06:27 +0000
Files and hashes: 1: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl (hash: KqPJkOeNv9J459MMUriMoinZdqoDHrhtZIEGznuKyRA=)
2: 3131392e34302e36342e302f32302d3234203d3e203338333738.roa (hash: c0wW6VCicCCnYfYJdn0/kWyv9t5vGCOs/sl/Ap5EabE=)
3: 3130332e39322e38382e302f32322d3234203d3e203338333738.roa (hash: DQtj51onk1QlrsaGulzt3zyofI52x/prSCn1R/58wqA=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b7:b9:e1:b9:ff:fb:c8:e0:7d:29:3f:29:87:07:c5:e9:39:ad:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED
Validity
Not Before: Jun 13 23:32:27 2026 GMT
Not After : Jun 15 01:06:27 2026 GMT
Subject: CN=BDB4F20AE66123E108022D393B6E8A0164635FC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6e:66:95:19:0d:13:89:2e:44:1e:33:00:69:
40:6d:7c:4e:85:d3:74:60:d2:d0:81:d2:b4:d7:37:
5e:13:2c:a6:84:e4:4b:f8:0a:42:f2:f8:6b:89:a2:
c6:1a:53:14:22:dd:c1:c2:e1:0e:df:23:f2:6f:25:
dc:26:c7:f1:cc:39:c4:36:00:80:e4:6e:1e:40:f0:
1b:22:6d:79:86:14:be:76:2c:f8:b2:0b:57:24:24:
5b:8b:5c:ac:16:49:d7:6f:9b:04:bc:86:d3:6f:92:
34:47:94:c1:24:b5:51:4d:4d:df:52:00:d1:00:bf:
c3:5e:dc:5f:60:ff:60:86:a1:d8:d3:db:00:9a:4b:
b4:20:ec:1b:19:e8:d4:a9:26:7d:f4:07:a7:5c:78:
3d:91:ca:2c:f1:5a:09:00:97:38:0a:28:1c:87:ee:
64:21:65:6b:14:9c:66:80:3f:e6:87:09:83:4a:9c:
dd:65:fe:c3:54:d8:86:74:5a:33:1f:59:91:0b:03:
51:55:cf:27:22:9f:d5:06:1a:3a:bf:d3:50:d6:b8:
f3:b0:fe:50:5a:db:a0:aa:f1:70:4c:e3:c9:8c:e6:
6d:a9:c1:97:4d:47:e4:3e:ec:db:27:12:17:5a:40:
ad:0d:9b:3d:5d:c1:84:74:99:05:d0:55:4c:5c:57:
b3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B4:F2:0A:E6:61:23:E1:08:02:2D:39:3B:6E:8A:01:64:63:5F:C1
X509v3 Authority Key Identifier:
keyid:36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ba:a9:fa:a3:7b:83:71:90:5c:a5:8e:e9:51:d6:c0:bd:43:
01:fc:1e:40:b0:f4:86:0f:e1:4a:0f:c4:9c:d5:b8:aa:a8:29:
8c:dc:12:e9:83:6f:51:62:fb:51:ab:20:73:91:bc:37:3f:fc:
ac:f5:5f:57:8b:b8:45:d6:82:ef:34:82:37:21:ca:6f:74:1e:
bd:f4:fc:cd:b8:4d:6c:35:35:6a:8b:3a:88:02:dd:6a:3f:eb:
e9:c9:9f:fe:d1:3d:83:c7:15:b6:ad:ab:ce:82:7c:ab:55:4a:
0d:ba:87:1f:95:87:46:ec:98:82:7e:38:5e:41:9f:d3:70:d6:
62:ad:cd:f2:b7:92:1b:8e:50:7e:32:4e:a2:57:bb:68:ad:d6:
14:2f:6d:73:19:0f:2d:df:90:c9:98:e2:67:b7:64:7d:47:10:
9c:a2:23:fd:47:77:9b:4e:7d:74:07:dc:18:3d:9b:9f:6b:e1:
4c:46:1b:54:d9:ad:9b:a4:3a:e7:fd:9b:9a:b8:64:df:33:2f:
38:e9:0a:3d:44:82:87:bb:15:87:07:dc:d9:35:9e:49:2a:54:
eb:44:1a:1b:82:1d:fe:00:25:b8:8f:80:64:6e:34:17:3a:37:
1c:d6:08:6f:7a:d7:ba:be:42:3b:8a:fb:f9:ba:5a:1a:36:6f:
b6:ce:98:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:36:24 2026 by rpki-client