$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft File: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft (raw, json) Hash identifier: u6ZIQcJuWF5vp4UQ4iT/pnB11DXJfjOG7EuFXFLvzrE= Subject key identifier: 78:3C:83:DD:5C:B7:82:0D:77:ED:83:EA:21:CC:13:7E:57:73:92:C9 Authority key identifier: 36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED Certificate issuer: /CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Certificate serial: 75C4B525C9BC8ABD304527851E4A697569F1104F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft Manifest number: 71 Signing time: Sun 12 Apr 2026 23:34:17 +0000 Manifest this update: Sun 12 Apr 2026 23:29:17 +0000 Manifest next update: Tue 14 Apr 2026 03:08:17 +0000 Files and hashes: 1: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl (hash: k05EOriVi5d3vCVEBuVfbYTKF1OcO98kW4JFyEasrJo=) 2: 3130332e39322e38382e302f32322d3234203d3e203338333738.roa (hash: DQtj51onk1QlrsaGulzt3zyofI52x/prSCn1R/58wqA=) 3: 3131392e34302e36342e302f32302d3234203d3e203338333738.roa (hash: c0wW6VCicCCnYfYJdn0/kWyv9t5vGCOs/sl/Ap5EabE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 03:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:c4:b5:25:c9:bc:8a:bd:30:45:27:85:1e:4a:69:75:69:f1:10:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Validity Not Before: Apr 12 23:29:17 2026 GMT Not After : Apr 14 03:08:17 2026 GMT Subject: CN=783C83DD5CB7820D77ED83EA21CC137E577392C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c5:b7:56:6d:a3:26:5c:9d:93:f0:a5:d3:40: 49:6f:67:05:97:63:0b:dc:e3:69:5a:ef:63:37:a6: 76:c0:d1:52:7f:b8:86:35:cc:a1:50:88:31:2b:05: b4:2c:f4:1e:38:3c:e1:83:0a:c3:4a:c7:69:00:91: 84:02:4a:aa:c8:9c:61:de:81:c1:c8:dd:16:06:61: f4:f5:e6:d7:84:4a:53:43:fd:80:fa:ac:0d:2c:28: f9:37:4d:18:1b:02:aa:58:5a:45:54:29:48:1f:80: f6:32:ec:70:5e:0a:61:b5:40:ae:25:7a:46:19:ba: 00:1c:83:4e:97:e6:ee:f8:6a:d3:b0:95:0b:bc:62: 87:e8:04:6c:61:f2:6d:0a:c5:c1:fc:10:bd:4a:75: 6f:a2:d8:a1:8d:66:2e:f4:88:85:31:30:d4:0c:1c: b3:9e:81:81:d6:ac:d1:98:47:54:48:0a:17:61:c1: 49:85:9c:d5:69:fa:91:3d:d8:5a:10:82:ba:ef:70: db:69:96:3f:75:44:b6:f1:1f:13:3f:b7:a2:74:0b: 50:f0:6d:6f:4d:c2:8e:13:7a:b3:09:20:94:fc:a7: 6d:4b:86:64:5d:1c:61:94:aa:53:85:e2:33:ff:a0: 2e:e1:d2:b7:d8:1f:3d:6a:d3:e4:9a:49:ae:b2:03: 9f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3C:83:DD:5C:B7:82:0D:77:ED:83:EA:21:CC:13:7E:57:73:92:C9 X509v3 Authority Key Identifier: keyid:36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c7:08:57:8b:cc:e3:f4:38:35:af:95:04:27:9a:7e:c0:08: 1e:e8:f3:02:ba:60:12:ab:7a:4d:e8:de:d2:cb:e1:28:52:02: 06:0c:70:6e:07:49:6e:a6:f5:ab:9f:bd:b5:eb:f5:59:2b:04: 3f:30:7b:73:82:a2:30:db:98:43:14:13:6a:c6:30:d8:c1:66: 1e:9e:5d:27:39:bc:39:e7:55:58:a6:53:48:36:ac:90:66:15: d2:fd:44:a3:59:2d:e0:28:fc:10:92:74:e9:7f:b7:74:dd:69: d6:7c:51:ad:e1:e4:71:5a:4b:10:22:3d:92:b6:25:c3:ee:d7: a8:cd:93:d8:af:5a:77:77:bd:4c:36:89:94:7a:98:02:03:dd: ef:90:aa:cf:d7:a2:1a:44:3c:3e:a2:e5:5f:64:8e:f3:a5:06: 02:c5:fc:7b:7a:c7:77:ce:4b:50:f1:8b:c4:20:6f:69:a5:19: 2a:ea:c6:fd:68:82:1f:1c:fe:8a:01:00:a1:01:6d:a6:f4:1a: 0d:43:42:28:8a:e3:51:7b:6a:61:42:5c:0a:ee:ff:6a:71:c1: bc:d8:bc:06:38:f5:e4:59:79:ce:c6:76:db:e1:65:54:f9:6a: f1:c0:a1:8a:cf:47:20:85:9d:4e:a2:9d:60:63:a2:99:6e:5a: 21:85:a6:26 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUdcS1Jcm8ir0wRSeFHkppdWnxEE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4 MTI2NkVFRDAeFw0yNjA0MTIyMzI5MTdaFw0yNjA0MTQwMzA4MTdaMDMxMTAvBgNV BAMTKDc4M0M4M0RENUNCNzgyMEQ3N0VEODNFQTIxQ0MxMzdFNTc3MzkyQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYxbdWbaMmXJ2T8KXTQElvZwWX Ywvc42la72M3pnbA0VJ/uIY1zKFQiDErBbQs9B44POGDCsNKx2kAkYQCSqrInGHe gcHI3RYGYfT15teESlND/YD6rA0sKPk3TRgbAqpYWkVUKUgfgPYy7HBeCmG1QK4l ekYZugAcg06X5u74atOwlQu8YofoBGxh8m0KxcH8EL1KdW+i2KGNZi70iIUxMNQM HLOegYHWrNGYR1RIChdhwUmFnNVp+pE92FoQgrrvcNtplj91RLbxHxM/t6J0C1Dw bW9Nwo4TerMJIJT8p21LhmRdHGGUqlOF4jP/oC7h0rfYHz1q0+SaSa6yA59hAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUeDyD3Vy3gg137YPqIcwTfldzkskwHwYDVR0j BBgwFoAUNt8e1Rrjnnx+os4L7sMDLoEmbu0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzM0MDgwMS8wLzM2REYxRUQ1MUFFMzlFN0M3RUEyQ0UwQkVFQzMw MzJFODEyNjZFRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4MTI2NkVFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDczNDA4MDEvMC8zNkRGMUVENTFBRTM5 RTdDN0VBMkNFMEJFRUMzMDMyRTgxMjY2RUVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8cIV4vM4/Q4 Na+VBCeafsAIHujzArpgEqt6Teje0svhKFICBgxwbgdJbqb1q5+9tev1WSsEPzB7 c4KiMNuYQxQTasYw2MFmHp5dJzm8OedVWKZTSDaskGYV0v1Eo1kt4Cj8EJJ06X+3 dN1p1nxRreHkcVpLECI9krYlw+7XqM2T2K9ad3e9TDaJlHqYAgPd75Cqz9eiGkQ8 PqLlX2SO86UGAsX8e3rHd85LUPGLxCBvaaUZKurG/WiCHxz+igEAoQFtpvQaDUNC KIrjUXtqYUJcCu7/anHBvNi8Bjj15Fl5zsZ22+FlVPlq8cChis9HIIWdTqKdYGOi mW5aIYWmJg== -----END CERTIFICATE-----Generated at Mon Apr 13 11:03:42 2026 by rpki-client