
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft
File: 36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft (raw, json)
Hash identifier: occuoFdz2y3p+0iThlGmgO4C7AfpFSoJ3S7g4d9cGWY=
Subject key identifier: 34:8F:FD:26:49:02:7D:0F:9C:C9:D8:13:09:07:8E:41:9B:FC:33:AD
Authority key identifier: 36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D
Certificate issuer: /CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D
Certificate serial: 08E67494AAC438532F9CDC62ADFBCC15E3BFB55F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft
Manifest number: 50
Signing time: Sat 13 Jun 2026 10:51:45 +0000
Manifest this update: Sat 13 Jun 2026 10:46:45 +0000
Manifest next update: Sun 14 Jun 2026 12:15:45 +0000
Files and hashes: 1: 3130332e37392e3133362e302f32322d3232203d3e2030.roa (hash: YVxEOO9XO2MmyHqD3Ceyf3SLPC873UJ1DWWky7Vnl30=)
2: 3135372e3131392e32382e302f32322d3232203d3e203538353139.roa (hash: +V7Vd50CrLhAnyJKXkDEE7s1Gt8Bw5Z6WA1KeI/AeLs=)
3: 36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl (hash: dvUGVGS9GUSNu2mYpeqRJWyoLOZ1dzzDAZx1v5xG5vg=)
4: 3130332e3231352e3134302e302f32322d3232203d3e203538353139.roa (hash: rxlfotPYclusuNHWGDhdy78Jx7VJ8aQNKRsyn8w1wxE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:e6:74:94:aa:c4:38:53:2f:9c:dc:62:ad:fb:cc:15:e3:bf:b5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D
Validity
Not Before: Jun 13 10:46:45 2026 GMT
Not After : Jun 14 12:15:45 2026 GMT
Subject: CN=348FFD2649027D0F9CC9D81309078E419BFC33AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:ae:1d:5e:27:c3:da:70:2b:d0:23:2d:5a:
e5:73:32:19:14:2a:85:f2:cb:b9:2d:78:e8:71:b2:
55:a3:c0:a7:1a:d1:88:5b:45:d6:e3:f8:ca:a9:45:
ad:2f:b0:d2:17:cb:a5:98:3b:96:dd:fc:59:35:34:
42:96:e2:9d:9f:18:9e:a3:0a:3d:bb:55:7e:90:8e:
c1:68:86:c4:e7:7d:64:94:15:a2:8a:9f:70:a7:f3:
3a:5f:74:6a:00:4e:7d:a2:d8:64:48:b6:5c:b9:b1:
b0:09:44:67:90:b4:c1:70:1a:e0:7c:25:83:5a:e5:
df:38:29:1d:28:fe:7c:e8:dc:7e:ff:99:fd:9a:5e:
4c:26:48:27:01:20:fa:b3:7f:3e:72:0b:72:3f:96:
4f:af:25:c5:42:bd:01:dd:58:d4:e5:21:48:0a:53:
4b:59:f3:62:1e:b7:7b:b7:ae:2a:cd:0a:bf:77:7b:
73:06:0d:a2:91:dd:be:26:92:a2:11:b5:b9:bf:52:
d3:42:70:be:8e:37:e6:c1:a1:46:04:2f:3b:40:28:
be:74:92:1b:ac:27:63:98:93:a9:7e:85:bd:06:47:
cf:76:c0:a8:c5:a7:43:c2:6c:10:28:da:3f:ba:2f:
4d:42:c3:6c:9b:55:8d:cf:30:03:b5:69:02:cc:ab:
ff:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8F:FD:26:49:02:7D:0F:9C:C9:D8:13:09:07:8E:41:9B:FC:33:AD
X509v3 Authority Key Identifier:
keyid:36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:84:e5:bc:df:4a:b7:79:95:03:bd:ba:ae:02:03:c4:e4:b2:
07:96:cd:08:1d:3e:4f:1d:7a:61:06:98:c7:e9:7b:e3:22:ff:
06:09:f2:8c:ee:c9:b9:c1:b6:0d:40:62:ec:9b:45:50:9c:30:
c1:50:55:fd:c7:b2:15:61:b4:28:d8:b6:a2:c5:31:5c:1a:31:
2c:c7:f1:28:a0:22:3c:f8:24:6c:48:51:a3:33:5d:dc:78:4b:
f3:ab:67:2a:e8:2d:95:4b:7e:99:97:68:81:c3:75:70:0f:5b:
46:cc:6a:8f:29:97:f7:0b:f5:b8:24:d4:2c:cd:83:05:77:b4:
33:52:b9:63:42:8b:18:55:59:aa:dd:17:43:d3:7d:13:4b:e0:
26:cc:6c:b0:54:69:88:c1:75:50:93:f6:02:02:b7:53:96:29:
3a:f3:87:b7:c9:bc:1b:b3:2e:96:dc:39:fe:d3:64:ca:31:af:
d1:63:f9:1e:cd:6a:a7:56:84:b0:90:12:0d:33:09:ed:38:82:
f2:c9:4f:d4:01:09:d7:b6:a8:b2:16:c3:5f:43:7c:17:80:f6:
4a:65:26:75:e2:18:8e:cc:72:6f:d1:7c:e3:54:6f:42:31:19:
6a:74:21:fa:e9:ce:8e:13:6e:f7:b4:d2:50:55:73:94:43:cd:
42:9c:18:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:08:04 2026 by rpki-client