$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft File: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft (raw, json) Hash identifier: jUTeEkoebTvwHzXau+BfAXQHwyOPRgpK3/5UowwmTog= Subject key identifier: 99:4B:6D:FB:99:75:B8:C6:FE:64:42:B8:E8:44:63:0F:5A:E4:DF:9B Authority key identifier: 36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED Certificate issuer: /CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Certificate serial: 270F6637BC80B4D60512F0056E54A38D31B8713D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft Manifest number: 77 Signing time: Fri 17 Apr 2026 17:14:43 +0000 Manifest this update: Fri 17 Apr 2026 17:09:43 +0000 Manifest next update: Sat 18 Apr 2026 20:54:43 +0000 Files and hashes: 1: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl (hash: A8XL3maMjE3/etK3g4LQMMBmcrlsimsmKSE6uQlEnXY=) 2: 3130332e39322e38382e302f32322d3234203d3e203338333738.roa (hash: DQtj51onk1QlrsaGulzt3zyofI52x/prSCn1R/58wqA=) 3: 3131392e34302e36342e302f32302d3234203d3e203338333738.roa (hash: c0wW6VCicCCnYfYJdn0/kWyv9t5vGCOs/sl/Ap5EabE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:0f:66:37:bc:80:b4:d6:05:12:f0:05:6e:54:a3:8d:31:b8:71:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Validity Not Before: Apr 17 17:09:43 2026 GMT Not After : Apr 18 20:54:43 2026 GMT Subject: CN=994B6DFB9975B8C6FE6442B8E844630F5AE4DF9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6f:4f:7e:70:e9:f2:cc:6a:a4:26:cf:89:bd: 69:05:76:24:62:93:c8:b1:d5:92:db:4e:b0:2e:a4: 05:2d:0d:14:f4:f7:fd:61:ff:59:43:a3:ae:fe:63: 4c:d1:e2:7a:b0:0b:31:76:ff:84:40:47:5d:09:17: d0:e5:81:77:bd:52:14:f9:ba:fb:de:b4:b4:2a:ea: 4b:a2:d8:7f:61:6e:90:f2:e5:6a:63:7c:2b:20:1b: 0f:17:a3:34:e4:c2:8d:29:2c:5a:07:81:62:f6:f8: a6:c3:95:39:65:b2:f7:d3:ae:be:a5:3c:4a:51:d5: 59:a0:e2:79:ff:ec:69:88:7f:fe:9c:c0:c6:ef:a4: 2b:20:22:e6:6c:33:64:2a:58:bc:60:e4:68:2b:64: b1:1b:76:d6:c5:f7:92:9a:bc:a3:33:a7:74:d0:2e: 9c:a6:c2:85:24:8d:fd:bf:2d:34:ff:26:1d:11:44: fd:d3:46:66:3b:5f:2f:cd:2b:14:9c:c5:63:d5:8b: 37:50:74:8a:c2:c2:8c:88:02:41:3a:44:d4:00:b6: 2e:01:7a:c1:7b:47:b0:77:25:88:fb:25:1e:e9:7b: ea:cb:72:c1:8a:af:60:44:a6:55:ad:f4:72:c5:60: 5d:2d:33:06:9f:19:bf:13:f8:0d:13:b0:23:58:b7: 4f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:4B:6D:FB:99:75:B8:C6:FE:64:42:B8:E8:44:63:0F:5A:E4:DF:9B X509v3 Authority Key Identifier: keyid:36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ea:24:7a:38:d1:4a:e9:97:ea:9e:79:de:4e:69:27:d2:ea: c1:5b:78:14:cd:21:82:97:63:29:b7:60:c7:21:48:59:c5:dc: 3c:7a:8e:74:c0:55:a2:23:fe:c4:14:4f:ec:b6:db:97:38:9d: 73:20:ae:6f:49:1a:18:5d:ec:c8:ef:c4:31:a9:74:5d:82:45: f7:d9:77:bc:2e:9f:c2:c9:02:5a:f6:b8:5f:b2:c7:17:84:d5: 78:42:78:49:a4:ad:80:56:f4:18:12:af:12:b2:d8:a5:61:49: 5a:0e:22:6a:12:3b:72:07:56:f5:00:6c:29:18:55:2a:e5:e3: 30:8f:cc:33:e2:d4:db:7b:56:0c:86:33:1f:d2:bd:eb:e5:93: 54:3a:a6:05:07:39:dd:ab:cc:f9:24:07:b2:cd:0f:e9:2a:8b: 58:d4:57:cc:6d:ae:c9:47:67:00:cf:a4:98:9d:d6:b9:9b:1b: 41:7b:42:ff:d9:83:df:f1:25:e7:c0:0d:28:ea:69:9f:20:1e: 14:d5:57:d1:69:4e:86:46:05:a0:23:d2:c2:f1:fa:3c:1b:91: 1b:fb:5d:09:fc:8b:4e:51:fb:9b:d5:72:6c:f9:fe:99:0c:b2: 83:22:57:bd:9b:77:7a:d5:5e:d8:40:7b:52:4b:6b:1e:c1:6a: ee:4f:18:ce -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJw9mN7yAtNYFEvAFblSjjTG4cT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4 MTI2NkVFRDAeFw0yNjA0MTcxNzA5NDNaFw0yNjA0MTgyMDU0NDNaMDMxMTAvBgNV BAMTKDk5NEI2REZCOTk3NUI4QzZGRTY0NDJCOEU4NDQ2MzBGNUFFNERGOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcb09+cOnyzGqkJs+JvWkFdiRi k8ix1ZLbTrAupAUtDRT09/1h/1lDo67+Y0zR4nqwCzF2/4RAR10JF9DlgXe9UhT5 uvvetLQq6kui2H9hbpDy5WpjfCsgGw8XozTkwo0pLFoHgWL2+KbDlTllsvfTrr6l PEpR1Vmg4nn/7GmIf/6cwMbvpCsgIuZsM2QqWLxg5GgrZLEbdtbF95KavKMzp3TQ LpymwoUkjf2/LTT/Jh0RRP3TRmY7Xy/NKxScxWPVizdQdIrCwoyIAkE6RNQAti4B esF7R7B3JYj7JR7pe+rLcsGKr2BEplWt9HLFYF0tMwafGb8T+A0TsCNYt0+lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmUtt+5l1uMb+ZEK46ERjD1rk35swHwYDVR0j BBgwFoAUNt8e1Rrjnnx+os4L7sMDLoEmbu0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzM0MDgwMS8wLzM2REYxRUQ1MUFFMzlFN0M3RUEyQ0UwQkVFQzMw MzJFODEyNjZFRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4MTI2NkVFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDczNDA4MDEvMC8zNkRGMUVENTFBRTM5 RTdDN0VBMkNFMEJFRUMzMDMyRTgxMjY2RUVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhuokejjRSumX 6p553k5pJ9LqwVt4FM0hgpdjKbdgxyFIWcXcPHqOdMBVoiP+xBRP7LbblzidcyCu b0kaGF3syO/EMal0XYJF99l3vC6fwskCWva4X7LHF4TVeEJ4SaStgFb0GBKvErLY pWFJWg4iahI7cgdW9QBsKRhVKuXjMI/MM+LU23tWDIYzH9K96+WTVDqmBQc53avM +SQHss0P6SqLWNRXzG2uyUdnAM+kmJ3WuZsbQXtC/9mD3/El58ANKOppnyAeFNVX 0WlOhkYFoCPSwvH6PBuRG/tdCfyLTlH7m9VybPn+mQyygyJXvZt3etVe2EB7Uktr HsFq7k8Yzg== -----END CERTIFICATE-----Generated at Fri Apr 17 22:14:24 2026 by rpki-client