$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft File: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft (raw, json) Hash identifier: ecdDdHyO1T0dJbHgGaRm1fFYTUw96QBpxD41y8Cike8= Subject key identifier: C2:A5:C0:F8:B2:32:AF:6B:03:54:58:19:B0:32:9D:4E:08:A6:80:50 Authority key identifier: 36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED Certificate issuer: /CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Certificate serial: 7F9C03208B4DE2408F97C39E2EDC528CA1B89FE0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft Manifest number: 0129 Signing time: Fri 28 Aug 2026 06:47:50 +0000 Manifest this update: Fri 28 Aug 2026 06:42:50 +0000 Manifest next update: Mon 31 Aug 2026 14:43:50 +0000 Files and hashes: 1: 3131392e34302e36342e302f32302d3234203d3e203338333738.roa (hash: c0wW6VCicCCnYfYJdn0/kWyv9t5vGCOs/sl/Ap5EabE=) 2: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl (hash: KBWw3Qo+uH+F9v8FCN1geEof4zcLoVA4+rkZca/o+24=) 3: 3130332e39322e38382e302f32322d3234203d3e203338333738.roa (hash: DQtj51onk1QlrsaGulzt3zyofI52x/prSCn1R/58wqA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 14:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:9c:03:20:8b:4d:e2:40:8f:97:c3:9e:2e:dc:52:8c:a1:b8:9f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Validity Not Before: Aug 28 06:42:50 2026 GMT Not After : Aug 31 14:43:50 2026 GMT Subject: CN=C2A5C0F8B232AF6B03545819B0329D4E08A68050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2d:fa:98:6e:08:ac:a2:b9:66:67:7b:76:3f: 74:38:c1:42:1f:9b:0d:50:11:38:ac:d3:b1:65:1d: 66:fa:7b:2f:ec:b7:62:89:cf:ce:5a:9b:cb:27:74: 43:8b:20:19:d5:11:13:3b:61:10:b8:dd:38:f0:b5: bc:a6:bd:0e:da:05:93:69:29:7c:1e:00:73:c3:fa: 15:2f:e4:57:f3:27:d1:fc:ac:94:22:e5:69:15:b8: 69:e3:bd:c3:6c:9e:18:df:78:1b:7e:8d:1e:9c:0a: 11:6a:e5:48:f9:ba:05:7c:61:7a:6b:35:22:97:04: 1a:4d:45:a1:c4:29:eb:d0:b5:fc:40:66:60:f7:a8: 33:62:59:9b:ee:22:61:5e:a8:7a:90:82:1a:96:01: 97:06:53:cf:b9:2d:3f:c3:b7:e7:2e:6f:21:52:bc: 6f:e0:40:8d:e2:c1:d4:d1:e6:00:5f:c5:7c:02:98: b7:ea:cc:90:f2:d9:50:8c:ac:68:7d:79:31:31:ee: 39:8a:6a:50:92:a5:c5:ef:2f:8f:cb:c8:77:26:db: 3f:e5:f2:6c:23:bc:0f:6b:ec:65:d8:de:b4:2f:0b: d3:48:1e:11:21:80:12:ce:e6:fb:15:1e:30:f5:04: 4e:38:dc:bf:0a:2a:85:55:0c:aa:e4:34:20:05:5d: 62:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A5:C0:F8:B2:32:AF:6B:03:54:58:19:B0:32:9D:4E:08:A6:80:50 X509v3 Authority Key Identifier: keyid:36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:89:29:fa:dc:81:77:97:4d:fd:8c:7a:b3:b1:94:83:fe:f3: 37:12:5d:36:dd:30:2b:5f:7c:09:19:1f:a2:e0:64:20:26:96: d1:9c:d9:e2:67:5a:e0:c0:49:31:8e:4b:09:ce:97:ba:04:03: cb:3b:d9:1f:95:ab:3d:e8:0b:ad:90:94:a3:99:58:5f:67:f4: 48:ef:56:5b:95:9a:7a:39:f2:cc:44:53:e7:41:bc:5d:ef:16: cb:65:52:41:31:78:75:9b:49:f4:61:2b:35:96:11:29:18:d8: 66:91:43:3b:e2:ca:81:94:20:2b:33:5e:05:38:18:42:f0:02: a3:7b:27:b1:0d:77:ba:3e:55:b9:62:4a:f4:9f:5e:23:0a:c7: 3e:48:e2:ab:91:63:06:f3:04:f8:0e:c9:53:43:e5:92:81:4c: d7:e0:41:ab:fd:6e:09:9b:3f:51:6e:05:68:8c:de:9c:3d:e0: f3:0b:18:41:a3:5a:af:7e:a4:71:8e:19:36:80:9d:6e:ba:5d: b7:e7:34:00:f7:cd:b2:bf:04:af:fa:dd:57:ef:e1:2c:58:0d: c0:bc:25:d9:ee:9b:3e:65:85:5b:79:92:33:1f:6a:58:1b:54: dd:01:37:7e:06:23:f1:15:6d:64:96:8b:17:8f:b1:b6:7d:ac: fc:a5:aa:d8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUf5wDIItN4kCPl8OeLtxSjKG4n+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4 MTI2NkVFRDAeFw0yNjA4MjgwNjQyNTBaFw0yNjA4MzExNDQzNTBaMDMxMTAvBgNV BAMTKEMyQTVDMEY4QjIzMkFGNkIwMzU0NTgxOUIwMzI5RDRFMDhBNjgwNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvLfqYbgisorlmZ3t2P3Q4wUIf mw1QETis07FlHWb6ey/st2KJz85am8sndEOLIBnVERM7YRC43TjwtbymvQ7aBZNp KXweAHPD+hUv5FfzJ9H8rJQi5WkVuGnjvcNsnhjfeBt+jR6cChFq5Uj5ugV8YXpr NSKXBBpNRaHEKevQtfxAZmD3qDNiWZvuImFeqHqQghqWAZcGU8+5LT/Dt+cubyFS vG/gQI3iwdTR5gBfxXwCmLfqzJDy2VCMrGh9eTEx7jmKalCSpcXvL4/LyHcm2z/l 8mwjvA9r7GXY3rQvC9NIHhEhgBLO5vsVHjD1BE443L8KKoVVDKrkNCAFXWIVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUwqXA+LIyr2sDVFgZsDKdTgimgFAwHwYDVR0j BBgwFoAUNt8e1Rrjnnx+os4L7sMDLoEmbu0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzM0MDgwMS8wLzM2REYxRUQ1MUFFMzlFN0M3RUEyQ0UwQkVFQzMw MzJFODEyNjZFRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4MTI2NkVFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDczNDA4MDEvMC8zNkRGMUVENTFBRTM5 RTdDN0VBMkNFMEJFRUMzMDMyRTgxMjY2RUVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4kp+tyBd5dN /Yx6s7GUg/7zNxJdNt0wK198CRkfouBkICaW0ZzZ4mda4MBJMY5LCc6XugQDyzvZ H5WrPegLrZCUo5lYX2f0SO9WW5WaejnyzERT50G8Xe8Wy2VSQTF4dZtJ9GErNZYR KRjYZpFDO+LKgZQgKzNeBTgYQvACo3snsQ13uj5VuWJK9J9eIwrHPkjiq5FjBvME +A7JU0PlkoFM1+BBq/1uCZs/UW4FaIzenD3g8wsYQaNar36kcY4ZNoCdbrpdt+c0 APfNsr8Er/rdV+/hLFgNwLwl2e6bPmWFW3mSMx9qWBtU3QE3fgYj8RVtZJaLF4+x tn2s/KWq2A== -----END CERTIFICATE-----Generated at Sat Aug 29 07:05:52 2026 by rpki-client