$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft File: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft (raw, json) Hash identifier: dTBvbI3a8kiBXXGuYSVzEa0ddo0IVqNrX2rgp5UnvCA= Subject key identifier: BA:6C:BE:95:6D:A7:82:44:02:61:75:7F:FF:61:49:76:4C:21:7F:53 Authority key identifier: 36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED Certificate issuer: /CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Certificate serial: 4D67FB72CD7FA3302F8BA2BB143B40CED75E62EE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft Manifest number: EC Signing time: Tue 14 Jul 2026 03:30:19 +0000 Manifest this update: Tue 14 Jul 2026 03:25:19 +0000 Manifest next update: Wed 15 Jul 2026 05:05:19 +0000 Files and hashes: 1: 3131392e34302e36342e302f32302d3234203d3e203338333738.roa (hash: c0wW6VCicCCnYfYJdn0/kWyv9t5vGCOs/sl/Ap5EabE=) 2: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl (hash: XvjTY8ireSqLPhgvYAanuYfFtA6vpM30FEPpfV8Lk70=) 3: 3130332e39322e38382e302f32322d3234203d3e203338333738.roa (hash: DQtj51onk1QlrsaGulzt3zyofI52x/prSCn1R/58wqA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 05:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:67:fb:72:cd:7f:a3:30:2f:8b:a2:bb:14:3b:40:ce:d7:5e:62:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Validity Not Before: Jul 14 03:25:19 2026 GMT Not After : Jul 15 05:05:19 2026 GMT Subject: CN=BA6CBE956DA782440261757FFF6149764C217F53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:01:84:6b:72:b9:c9:05:89:4b:aa:79:d4: 52:61:3a:89:7f:f0:9f:bc:9e:dc:23:3c:be:95:94: af:4f:a4:35:18:82:64:27:04:db:5f:32:01:d5:f2: 10:65:70:10:7e:14:55:c0:1e:c8:aa:38:c1:94:58: be:b7:ef:53:90:84:04:55:e9:46:fe:f7:26:17:b0: 12:25:c5:7b:21:8f:37:74:e0:e6:9d:99:0b:14:2e: f2:0e:d5:e6:81:95:d0:ee:30:cf:71:46:0d:29:6c: 39:2a:6a:06:c0:f2:81:04:2a:8c:5e:e6:62:7e:ca: e8:76:2b:4e:6c:f6:44:6e:53:b4:74:fc:9a:61:32: df:f5:4d:b0:6f:66:d8:a2:f7:51:59:9a:b0:37:bb: 19:c0:49:8d:0e:90:19:5e:75:b2:7e:04:7c:01:b7: 25:49:27:7e:84:45:c8:c3:ea:0f:6e:25:4e:68:bb: c1:2d:54:e0:65:2a:18:30:18:f5:d5:1a:24:1d:1f: 0b:02:32:23:b1:90:68:88:da:62:b9:55:a7:73:c4: 34:c9:c9:3e:81:a2:a4:6c:77:6a:63:ff:e0:0e:c5: 70:2d:c4:44:4f:b9:1a:79:17:40:8f:fc:ff:4a:a7: e2:a0:d1:ab:ae:0c:ba:d8:71:93:50:61:a6:14:24: d0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:6C:BE:95:6D:A7:82:44:02:61:75:7F:FF:61:49:76:4C:21:7F:53 X509v3 Authority Key Identifier: keyid:36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:90:55:a6:bd:7a:e5:7d:b6:9e:d8:50:14:2f:62:d1:a4:25: b9:60:7e:8a:0b:e8:f4:ba:75:a5:75:14:0a:72:ed:67:a9:3e: 97:bf:5d:cf:0b:17:8e:87:ae:e2:5b:cc:84:da:69:6c:40:0a: 25:86:24:1d:34:3f:8a:0b:07:b9:89:d4:32:3e:69:93:22:55: d4:4d:09:7a:29:50:72:62:3e:61:2b:6c:b7:3a:25:b6:83:b5: 9c:ab:19:ca:83:12:da:62:40:71:c8:4c:68:eb:ae:59:51:57: e7:f6:05:b2:bf:e0:5b:f2:e0:4a:42:b5:42:c3:b2:c6:45:80: 11:dc:6c:fa:b7:52:84:83:a5:70:67:37:15:4c:57:6d:1d:d3: 5b:15:64:b5:93:4a:a4:24:f0:12:88:f6:9b:26:a8:ac:bf:16: 3a:87:2f:a9:32:a5:6a:a5:e5:f9:0f:3c:1e:2a:56:2f:89:c6: f3:66:92:fc:51:5c:06:f2:3d:16:9a:11:4c:8d:5e:f6:91:e2: c6:33:ef:d0:ba:0b:1b:76:c6:2d:22:83:35:59:42:e5:75:ab: 47:cf:7b:3f:ff:f7:e7:91:41:88:31:79:7f:50:62:c6:71:d2: d4:33:b3:d8:f8:fd:b8:05:7f:b1:65:5e:4a:fe:ef:1f:5f:ab: b0:f2:00:43 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUTWf7cs1/ozAvi6K7FDtAztdeYu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4 MTI2NkVFRDAeFw0yNjA3MTQwMzI1MTlaFw0yNjA3MTUwNTA1MTlaMDMxMTAvBgNV BAMTKEJBNkNCRTk1NkRBNzgyNDQwMjYxNzU3RkZGNjE0OTc2NEMyMTdGNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVwGEa3K5yQWJS6p51FJhOol/ 8J+8ntwjPL6VlK9PpDUYgmQnBNtfMgHV8hBlcBB+FFXAHsiqOMGUWL6371OQhARV 6Ub+9yYXsBIlxXshjzd04OadmQsULvIO1eaBldDuMM9xRg0pbDkqagbA8oEEKoxe 5mJ+yuh2K05s9kRuU7R0/JphMt/1TbBvZtii91FZmrA3uxnASY0OkBledbJ+BHwB tyVJJ36ERcjD6g9uJU5ou8EtVOBlKhgwGPXVGiQdHwsCMiOxkGiI2mK5VadzxDTJ yT6BoqRsd2pj/+AOxXAtxERPuRp5F0CP/P9Kp+Kg0auuDLrYcZNQYaYUJNCBAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUumy+lW2ngkQCYXV//2FJdkwhf1MwHwYDVR0j BBgwFoAUNt8e1Rrjnnx+os4L7sMDLoEmbu0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzM0MDgwMS8wLzM2REYxRUQ1MUFFMzlFN0M3RUEyQ0UwQkVFQzMw MzJFODEyNjZFRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4MTI2NkVFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDczNDA4MDEvMC8zNkRGMUVENTFBRTM5 RTdDN0VBMkNFMEJFRUMzMDMyRTgxMjY2RUVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppBVpr165X22 nthQFC9i0aQluWB+igvo9Lp1pXUUCnLtZ6k+l79dzwsXjoeu4lvMhNppbEAKJYYk HTQ/igsHuYnUMj5pkyJV1E0JeilQcmI+YStstzoltoO1nKsZyoMS2mJAcchMaOuu WVFX5/YFsr/gW/LgSkK1QsOyxkWAEdxs+rdShIOlcGc3FUxXbR3TWxVktZNKpCTw Eoj2myaorL8WOocvqTKlaqXl+Q88HipWL4nG82aS/FFcBvI9FpoRTI1e9pHixjPv 0LoLG3bGLSKDNVlC5XWrR897P//355FBiDF5f1BixnHS1DOz2Pj9uAV/sWVeSv7v H1+rsPIAQw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:12:37 2026 by rpki-client