$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft File: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft (raw, json) Hash identifier: /MBdLqxaa8+ziq9k6lo9rzBTmuBaOj1E3YqQDFM/Vkc= Subject key identifier: 68:ED:4E:AC:75:E3:D3:5B:A7:CE:21:7F:17:34:96:D0:01:D1:F1:98 Authority key identifier: 36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED Certificate issuer: /CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Certificate serial: 4E819692971D571B1F2E6C2CCB63EDA5CE1BB2CC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft Manifest number: 3A Signing time: Mon 02 Mar 2026 18:43:17 +0000 Manifest this update: Mon 02 Mar 2026 18:38:17 +0000 Manifest next update: Tue 03 Mar 2026 20:43:17 +0000 Files and hashes: 1: 3130332e39322e38382e302f32322d3234203d3e203338333738.roa (hash: DQtj51onk1QlrsaGulzt3zyofI52x/prSCn1R/58wqA=) 2: 3131392e34302e36342e302f32302d3234203d3e203338333738.roa (hash: c0wW6VCicCCnYfYJdn0/kWyv9t5vGCOs/sl/Ap5EabE=) 3: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl (hash: UTSfGHoeBDCE/RdkrIf9k7594Xei0O33SekJpdNdzT8=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 20:43:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:81:96:92:97:1d:57:1b:1f:2e:6c:2c:cb:63:ed:a5:ce:1b:b2:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Validity Not Before: Mar 2 18:38:17 2026 GMT Not After : Mar 3 20:43:17 2026 GMT Subject: CN=68ED4EAC75E3D35BA7CE217F173496D001D1F198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a3:cf:a5:e1:d9:2d:19:23:a3:d6:22:64:a4: a5:e2:b4:13:dd:a9:49:83:83:a6:ec:09:87:45:26: a9:59:65:9e:d8:87:73:42:23:7a:4b:a3:93:30:8a: d5:9e:a2:75:a4:f7:60:68:73:46:11:34:8d:9b:de: ca:57:cb:60:31:a8:b5:8e:c4:55:7e:a1:93:6f:31: ff:86:4a:21:ce:8b:2f:a1:bf:ea:df:e5:72:b9:69: 37:6a:5e:9a:dd:08:6f:3d:9a:1d:49:bb:71:d4:f9: 04:c7:a2:8d:c4:17:5a:85:b4:26:fd:d5:bf:5f:e9: 38:20:65:10:07:43:1e:78:13:59:ee:c5:d7:d8:0c: 8c:8e:6d:33:0c:98:12:0d:a8:1d:f3:40:11:9c:ff: 16:bc:25:f2:bc:67:9b:ab:68:84:c5:ca:19:ca:ac: 82:b5:b6:77:74:72:89:bf:77:29:0e:41:a6:80:6d: e9:c2:05:5f:99:1b:d3:0a:ad:ae:8a:96:86:43:aa: f9:a9:5b:71:79:84:39:2e:a7:04:77:4a:10:90:25: 11:b1:1e:70:2d:e6:02:f0:5d:35:35:10:cd:e6:ca: 9a:73:ca:d5:d0:57:bf:e1:6f:db:3a:0f:14:9a:35: b9:43:d0:d8:d0:28:15:51:a1:1a:50:6b:02:b9:44: 66:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:ED:4E:AC:75:E3:D3:5B:A7:CE:21:7F:17:34:96:D0:01:D1:F1:98 X509v3 Authority Key Identifier: keyid:36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:0a:5b:71:75:a8:37:e9:df:fa:9e:3d:a5:48:bb:dd:bb:89: 10:e1:23:85:ed:77:4e:74:5a:2d:1a:a1:20:f7:c2:09:0b:38: 4d:0b:5b:56:f1:e6:0b:c9:fe:68:73:0a:f2:e5:05:ca:93:76: 72:55:60:d3:8e:a7:16:83:09:78:fe:e1:6d:e5:3a:81:a6:a2: 52:f8:56:ed:b7:e1:d6:2b:53:a8:b2:a8:0b:76:8e:7d:45:e5: 6a:17:e0:63:7a:71:ac:4a:4b:bf:a3:bf:a6:ad:bd:5a:27:13: 2e:3b:e8:b8:85:69:f8:37:71:b2:61:66:5b:75:3d:54:21:dc: e9:0f:b9:f0:6f:32:54:05:f7:4d:5a:91:59:42:f7:0a:13:48: 1a:3b:b2:48:d3:5b:c8:a9:1c:4a:28:a9:11:ae:e8:01:b9:64: f8:e3:b6:1b:fb:87:55:0e:c0:7f:20:05:a5:90:b8:2b:6e:39: 28:5d:53:c3:3f:d0:14:0a:cb:d5:58:08:70:eb:d9:b7:85:fc: 15:86:e6:33:e2:c7:e4:77:5e:4e:4e:52:33:4b:fa:e6:1e:b8: 14:7e:4c:bd:b3:17:4a:84:2b:3b:84:ff:9a:48:03:a4:3e:eb: 4d:d1:3b:46:92:e1:44:14:bf:6f:59:19:17:d4:1d:39:19:b0: 53:76:63:a3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUToGWkpcdVxsfLmwsy2Ptpc4bsswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4 MTI2NkVFRDAeFw0yNjAzMDIxODM4MTdaFw0yNjAzMDMyMDQzMTdaMDMxMTAvBgNV BAMTKDY4RUQ0RUFDNzVFM0QzNUJBN0NFMjE3RjE3MzQ5NkQwMDFEMUYxOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJo8+l4dktGSOj1iJkpKXitBPd qUmDg6bsCYdFJqlZZZ7Yh3NCI3pLo5MwitWeonWk92Boc0YRNI2b3spXy2AxqLWO xFV+oZNvMf+GSiHOiy+hv+rf5XK5aTdqXprdCG89mh1Ju3HU+QTHoo3EF1qFtCb9 1b9f6TggZRAHQx54E1nuxdfYDIyObTMMmBINqB3zQBGc/xa8JfK8Z5uraITFyhnK rIK1tnd0com/dykOQaaAbenCBV+ZG9MKra6KloZDqvmpW3F5hDkupwR3ShCQJRGx HnAt5gLwXTU1EM3myppzytXQV7/hb9s6DxSaNblD0NjQKBVRoRpQawK5RGbpAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUaO1OrHXj01unziF/FzSW0AHR8ZgwHwYDVR0j BBgwFoAUNt8e1Rrjnnx+os4L7sMDLoEmbu0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzM0MDgwMS8wLzM2REYxRUQ1MUFFMzlFN0M3RUEyQ0UwQkVFQzMw MzJFODEyNjZFRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4MTI2NkVFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDczNDA4MDEvMC8zNkRGMUVENTFBRTM5 RTdDN0VBMkNFMEJFRUMzMDMyRTgxMjY2RUVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApApbcXWoN+nf +p49pUi73buJEOEjhe13TnRaLRqhIPfCCQs4TQtbVvHmC8n+aHMK8uUFypN2clVg 046nFoMJeP7hbeU6gaaiUvhW7bfh1itTqLKoC3aOfUXlahfgY3pxrEpLv6O/pq29 WicTLjvouIVp+DdxsmFmW3U9VCHc6Q+58G8yVAX3TVqRWUL3ChNIGjuySNNbyKkc SiipEa7oAblk+OO2G/uHVQ7AfyAFpZC4K245KF1Twz/QFArL1VgIcOvZt4X8FYbm M+LH5HdeTk5SM0v65h64FH5MvbMXSoQrO4T/mkgDpD7rTdE7RpLhRBS/b1kZF9Qd ORmwU3Zjow== -----END CERTIFICATE-----Generated at Mon Mar 2 22:45:03 2026 by rpki-client