$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft File: 36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft (raw, json) Hash identifier: HOofu1fyEZcr3T0MX6Ms5wzpfy9ZQH0nJcAmUAzVrYg= Subject key identifier: 9A:C2:0A:8A:82:AF:71:26:49:3D:E2:DC:98:78:FF:40:CC:0F:E8:6A Authority key identifier: 36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D Certificate issuer: /CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D Certificate serial: 5253C267F2389A04EE70D935CEE23CA88D5A04B3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft Manifest number: 8D Signing time: Wed 29 Jul 2026 01:48:07 +0000 Manifest this update: Wed 29 Jul 2026 01:43:07 +0000 Manifest next update: Thu 30 Jul 2026 03:44:07 +0000 Files and hashes: 1: 3130332e37392e3133362e302f32322d3232203d3e2030.roa (hash: YVxEOO9XO2MmyHqD3Ceyf3SLPC873UJ1DWWky7Vnl30=) 2: 36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl (hash: 6/Ljj+DVqn1v901dRuShYxkBfhrhpBfR1kBQmuydWfY=) 3: 3135372e3131392e32382e302f32322d3232203d3e203538353139.roa (hash: +V7Vd50CrLhAnyJKXkDEE7s1Gt8Bw5Z6WA1KeI/AeLs=) 4: 3130332e3231352e3134302e302f32322d3232203d3e203538353139.roa (hash: rxlfotPYclusuNHWGDhdy78Jx7VJ8aQNKRsyn8w1wxE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:53:c2:67:f2:38:9a:04:ee:70:d9:35:ce:e2:3c:a8:8d:5a:04:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D Validity Not Before: Jul 29 01:43:07 2026 GMT Not After : Jul 30 03:44:07 2026 GMT Subject: CN=9AC20A8A82AF7126493DE2DC9878FF40CC0FE86A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d9:70:59:f4:1f:fc:ec:68:9b:98:9c:58:3f: 98:79:ae:b3:d5:3a:b9:8e:95:f8:4b:4d:48:47:24: d1:8c:0b:d5:a8:c4:7d:fd:55:19:73:0e:51:f7:c6: 5d:66:8e:64:e0:a0:7d:f5:14:25:9c:dd:c4:f4:0e: 44:8d:90:d1:03:91:4a:cb:10:14:7c:90:92:37:8e: 6c:a1:69:a1:13:19:c8:0a:f1:03:57:09:57:22:cb: 4e:f6:b6:33:a6:7e:dd:05:b8:5d:82:64:db:f7:9b: 44:cd:2f:bf:d0:c4:23:1a:4f:9f:19:17:81:9a:e0: bc:6e:4f:d4:34:6d:45:82:a1:c6:fc:38:94:cb:49: 4f:05:a1:13:1a:58:f1:a7:89:7b:c5:54:f4:87:6e: 0f:e4:1f:b8:c4:78:fa:1f:66:ce:15:05:72:4e:6b: c4:ab:e5:cc:a9:dd:b5:33:b5:e2:0e:61:38:8f:4d: d6:85:de:1f:42:de:d7:57:d8:c8:ba:48:a9:a9:43: 80:65:fb:03:cd:da:47:f0:58:dd:d7:15:cb:ce:0f: f2:4b:ff:cc:f7:dd:1a:3f:8a:db:9f:e9:b0:fc:c0: 72:03:6e:49:70:3f:79:cc:23:ee:0d:4d:ac:bf:b2: d7:31:5a:2c:c4:6b:b8:27:1c:f0:99:f6:b7:df:31: ed:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C2:0A:8A:82:AF:71:26:49:3D:E2:DC:98:78:FF:40:CC:0F:E8:6A X509v3 Authority Key Identifier: keyid:36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:15:83:d5:b4:f1:94:dd:ca:6f:07:f0:64:31:e4:ea:b2:10: f5:42:0d:58:da:6a:d9:d9:f6:0b:6e:ef:01:38:9b:0c:b8:62: 51:9f:a5:70:18:fd:89:74:10:86:b9:43:e1:9e:20:c0:ca:49: e0:ce:81:9b:a6:d8:42:17:34:94:5e:87:b6:64:88:1f:7f:6c: cc:23:62:0a:9e:47:8b:88:cc:45:e2:f6:df:4f:3b:e8:73:90: 36:3b:40:0a:f4:21:18:51:b0:8e:09:a6:78:13:ff:b9:ac:e3: 6e:b3:32:42:9a:95:e2:d7:f7:21:7a:7c:a7:78:41:06:b6:c2: 32:b9:fa:17:39:5f:db:e5:6c:26:60:20:10:0d:06:cb:9b:d8: b8:4a:12:4a:57:51:f2:eb:72:99:c9:5e:24:93:dd:13:2a:5e: eb:fb:b4:a6:bb:6c:ad:2a:40:89:e9:73:da:57:7e:7c:10:a6: 95:80:32:8a:1d:58:b8:1a:bc:e5:46:c8:8e:3d:04:03:3a:16: 9d:9d:8d:48:55:b7:6b:7f:70:83:0a:17:39:2e:10:c8:5c:6a: fa:8d:6a:b5:b0:79:e4:b1:9e:4a:6d:ec:7f:b7:2c:e9:f7:7b: 71:50:b1:4b:09:15:c6:a6:eb:c2:05:a4:08:fa:0a:b7:7e:92: 7d:8b:4d:e5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUlPCZ/I4mgTucNk1zuI8qI1aBLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZBMEQxMERBNTEzREM3QUM4QjY4QThCOTQ5MzZDMzNE MEYxMzMxRDAeFw0yNjA3MjkwMTQzMDdaFw0yNjA3MzAwMzQ0MDdaMDMxMTAvBgNV BAMTKDlBQzIwQThBODJBRjcxMjY0OTNERTJEQzk4NzhGRjQwQ0MwRkU4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO2XBZ9B/87GibmJxYP5h5rrPV OrmOlfhLTUhHJNGMC9WoxH39VRlzDlH3xl1mjmTgoH31FCWc3cT0DkSNkNEDkUrL EBR8kJI3jmyhaaETGcgK8QNXCVciy072tjOmft0FuF2CZNv3m0TNL7/QxCMaT58Z F4Ga4LxuT9Q0bUWCocb8OJTLSU8FoRMaWPGniXvFVPSHbg/kH7jEePofZs4VBXJO a8Sr5cyp3bUzteIOYTiPTdaF3h9C3tdX2Mi6SKmpQ4Bl+wPN2kfwWN3XFcvOD/JL /8z33Ro/ituf6bD8wHIDbklwP3nMI+4NTay/stcxWizEa7gnHPCZ9rffMe2bAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUmsIKioKvcSZJPeLcmHj/QMwP6GowHwYDVR0j BBgwFoAUNqDRDaUT3HrItoqLlJNsM9DxMx0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3MjEwNjY1MjMwMzM2Mi8wLzM2QTBEMTBEQTUxM0RDN0FDOEI2OEE4Qjk0OTM2 QzMzRDBGMTMzMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZBMEQxMERBNTEzREM3QUM4QjY4QThCOTQ5MzZDMzNEMEYxMzMxRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzIxMDY2NTIzMDMzNjIvMC8zNkEwRDEwREE1MTNE QzdBQzhCNjhBOEI5NDkzNkMzM0QwRjEzMzFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBWD1bTxlN3K bwfwZDHk6rIQ9UINWNpq2dn2C27vATibDLhiUZ+lcBj9iXQQhrlD4Z4gwMpJ4M6B m6bYQhc0lF6HtmSIH39szCNiCp5Hi4jMReL230876HOQNjtACvQhGFGwjgmmeBP/ uazjbrMyQpqV4tf3IXp8p3hBBrbCMrn6Fzlf2+VsJmAgEA0Gy5vYuEoSSldR8uty mcleJJPdEype6/u0prtsrSpAielz2ld+fBCmlYAyih1YuBq85UbIjj0EAzoWnZ2N SFW3a39wgwoXOS4QyFxq+o1qtbB55LGeSm3sf7cs6fd7cVCxSwkVxqbrwgWkCPoK t36SfYtN5Q== -----END CERTIFICATE-----Generated at Wed Jul 29 11:02:27 2026 by rpki-client