$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft File: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft (raw, json) Hash identifier: iz5q0mSPH3HOury0Wr+B9bCHcNuCy6NSXOlmzY0UPwk= Subject key identifier: 54:E9:42:E2:B3:BC:18:E1:9B:6C:C3:EB:F2:4A:99:ED:00:5B:A0:B1 Authority key identifier: 36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED Certificate issuer: /CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Certificate serial: 21C2C5791801150FDC38A1250CCCBFB4A9075A17 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft Manifest number: 2F Signing time: Sun 22 Feb 2026 13:07:30 +0000 Manifest this update: Sun 22 Feb 2026 13:02:30 +0000 Manifest next update: Mon 23 Feb 2026 15:43:30 +0000 Files and hashes: 1: 3131392e34302e36342e302f32302d3234203d3e203338333738.roa (hash: c0wW6VCicCCnYfYJdn0/kWyv9t5vGCOs/sl/Ap5EabE=) 2: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl (hash: hduriG0mbduD03cSnPzRT4h/G9PtM8kS0ZfsGzB6qNc=) 3: 3130332e39322e38382e302f32322d3234203d3e203338333738.roa (hash: DQtj51onk1QlrsaGulzt3zyofI52x/prSCn1R/58wqA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 09:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c2:c5:79:18:01:15:0f:dc:38:a1:25:0c:cc:bf:b4:a9:07:5a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Validity Not Before: Feb 22 13:02:30 2026 GMT Not After : Feb 23 15:43:30 2026 GMT Subject: CN=54E942E2B3BC18E19B6CC3EBF24A99ED005BA0B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a6:71:a5:9a:32:55:2d:57:a3:30:72:af:52: f6:42:c2:72:d9:bf:fa:c2:8f:39:5b:6e:70:2e:9f: 93:4d:e4:7a:9b:63:cb:ee:85:f7:4c:96:1e:71:5b: 61:88:04:63:c7:ba:1a:bd:e3:92:d2:c6:11:09:dd: df:bf:60:7d:0c:30:a4:c3:5a:98:cc:16:4b:8b:53: c2:ce:20:3d:b9:ca:3f:6d:ef:2f:c9:ef:1b:d9:3d: 3a:a4:fa:32:7d:de:f4:20:60:9f:a4:a5:41:12:a9: 2c:f5:81:81:61:f5:cd:45:4a:fe:46:e0:3b:a7:5b: 3c:ab:b2:3c:34:7c:3d:84:81:36:38:37:d6:32:e9: f1:e8:9d:f2:f9:16:f6:6e:98:25:77:fe:27:0b:a4: 91:f3:9d:23:83:69:22:91:b3:ff:6a:db:c4:36:6c: 79:ea:4c:7f:7b:b3:b3:cb:15:c1:4c:77:73:e0:5f: c1:34:c7:bf:f4:5f:a5:77:89:fb:6b:59:c8:d0:47: 67:1c:fb:21:bc:72:10:ea:85:0e:ae:38:2d:88:e1: 41:5b:9f:f1:2c:46:0a:bc:07:65:a9:d8:77:55:7e: 88:8b:18:58:f6:63:38:43:bf:1d:f0:b5:78:74:3e: 97:95:70:66:6c:fa:34:8f:d8:cd:19:4c:e1:9d:50: 84:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E9:42:E2:B3:BC:18:E1:9B:6C:C3:EB:F2:4A:99:ED:00:5B:A0:B1 X509v3 Authority Key Identifier: keyid:36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:db:ca:71:a8:fb:ed:95:af:08:fa:86:25:3a:24:50:e6:b0: e8:4a:f9:25:51:be:87:98:25:a8:de:5a:be:92:57:fd:43:95: ae:01:b3:9d:95:9b:5f:8a:e5:a5:27:70:69:af:9d:18:d5:c5: 0d:c5:91:d1:e0:3b:f4:8a:87:ad:5e:f1:40:42:c6:73:0c:45: b5:d2:9f:47:5b:a7:8e:51:4a:6e:55:65:49:48:37:4e:78:2a: 53:9c:52:30:56:cd:4f:a2:6b:4f:78:1f:66:a7:5a:5a:ef:7c: ed:c2:86:7c:8b:7f:2e:0b:3d:3d:61:f9:51:72:7c:d8:02:e8: ee:27:ff:8f:4f:34:1f:b4:35:02:81:41:ad:4d:4f:b6:b8:62: 2f:ac:aa:79:1b:d5:e5:d2:2d:28:e5:45:27:70:33:cf:8c:82: 1f:f0:64:58:b3:a0:a2:65:e2:b0:06:df:8d:05:46:6e:c6:1b: 10:f6:63:96:db:bb:88:bb:9e:92:03:58:2c:0b:9f:ca:ec:c7: 0b:98:b1:1b:41:2c:c4:00:57:bc:c8:9f:25:ef:27:d7:5d:5e: 70:cc:f9:3f:90:8e:dd:7e:b6:05:6a:c2:51:11:b1:e7:b4:58: b1:52:12:7d:fb:bc:1a:34:a5:d4:a4:8b:ca:44:aa:c9:2a:f6: 57:5c:5c:07 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIcLFeRgBFQ/cOKElDMy/tKkHWhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4 MTI2NkVFRDAeFw0yNjAyMjIxMzAyMzBaFw0yNjAyMjMxNTQzMzBaMDMxMTAvBgNV BAMTKDU0RTk0MkUyQjNCQzE4RTE5QjZDQzNFQkYyNEE5OUVEMDA1QkEwQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDApnGlmjJVLVejMHKvUvZCwnLZ v/rCjzlbbnAun5NN5HqbY8vuhfdMlh5xW2GIBGPHuhq945LSxhEJ3d+/YH0MMKTD WpjMFkuLU8LOID25yj9t7y/J7xvZPTqk+jJ93vQgYJ+kpUESqSz1gYFh9c1FSv5G 4DunWzyrsjw0fD2EgTY4N9Yy6fHonfL5FvZumCV3/icLpJHznSODaSKRs/9q28Q2 bHnqTH97s7PLFcFMd3PgX8E0x7/0X6V3iftrWcjQR2cc+yG8chDqhQ6uOC2I4UFb n/EsRgq8B2Wp2HdVfoiLGFj2YzhDvx3wtXh0PpeVcGZs+jSP2M0ZTOGdUIRvAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUVOlC4rO8GOGbbMPr8kqZ7QBboLEwHwYDVR0j BBgwFoAUNt8e1Rrjnnx+os4L7sMDLoEmbu0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzM0MDgwMS8wLzM2REYxRUQ1MUFFMzlFN0M3RUEyQ0UwQkVFQzMw MzJFODEyNjZFRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4MTI2NkVFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDczNDA4MDEvMC8zNkRGMUVENTFBRTM5 RTdDN0VBMkNFMEJFRUMzMDMyRTgxMjY2RUVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXtvKcaj77ZWv CPqGJTokUOaw6Er5JVG+h5glqN5avpJX/UOVrgGznZWbX4rlpSdwaa+dGNXFDcWR 0eA79IqHrV7xQELGcwxFtdKfR1unjlFKblVlSUg3TngqU5xSMFbNT6JrT3gfZqda Wu987cKGfIt/Lgs9PWH5UXJ82ALo7if/j080H7Q1AoFBrU1PtrhiL6yqeRvV5dIt KOVFJ3Azz4yCH/BkWLOgomXisAbfjQVGbsYbEPZjltu7iLuekgNYLAufyuzHC5ix G0EsxABXvMifJe8n111ecMz5P5CO3X62BWrCURGx57RYsVISffu8GjSl1KSLykSq ySr2V1xcBw== -----END CERTIFICATE-----Generated at Mon Feb 23 02:26:13 2026 by rpki-client