$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft File: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft (raw, json) Hash identifier: e+ZecFwNRpkyiYGfkCePgbpus7454KxxWscxkO/ueY4= Subject key identifier: DC:98:3E:E2:B3:09:FF:67:6D:75:23:53:15:D4:07:89:3A:76:8E:69 Authority key identifier: 36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED Certificate issuer: /CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Certificate serial: 16AB06CB58E75644E21BD44CFC35E85FD13E1246 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft Manifest number: AF Signing time: Fri 29 May 2026 10:32:46 +0000 Manifest this update: Fri 29 May 2026 10:27:46 +0000 Manifest next update: Sat 30 May 2026 10:40:46 +0000 Files and hashes: 1: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl (hash: mZeIKp8WOpB75RiGlQcHNVwju5DVVe5o3JB1dpB9zc4=) 2: 3130332e39322e38382e302f32322d3234203d3e203338333738.roa (hash: DQtj51onk1QlrsaGulzt3zyofI52x/prSCn1R/58wqA=) 3: 3131392e34302e36342e302f32302d3234203d3e203338333738.roa (hash: c0wW6VCicCCnYfYJdn0/kWyv9t5vGCOs/sl/Ap5EabE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 10:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ab:06:cb:58:e7:56:44:e2:1b:d4:4c:fc:35:e8:5f:d1:3e:12:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Validity Not Before: May 29 10:27:46 2026 GMT Not After : May 30 10:40:46 2026 GMT Subject: CN=DC983EE2B309FF676D75235315D407893A768E69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cc:54:55:b5:4b:16:12:69:33:d0:69:56:9a: 96:51:26:d8:63:4d:dc:cb:d0:7b:18:c2:2f:93:09: ff:1f:3d:5b:c4:d3:c5:18:68:8d:e5:c0:1d:b2:4a: 74:43:ca:ec:fe:dc:40:9d:45:85:8e:b4:7e:f6:d3: c1:48:38:4c:ab:47:bb:a5:81:72:d0:3d:35:b7:b7: bb:c8:51:bb:4a:ae:65:6f:fc:0b:7e:ac:8f:77:df: af:71:f5:02:2f:0a:4c:00:8c:dc:25:df:6f:0b:c0: a2:12:36:c3:f6:12:28:98:aa:ce:c3:c8:ea:05:f8: ec:2d:5d:94:00:5f:ad:f4:35:69:b4:14:7d:1b:c9: 10:d6:be:f9:3d:de:d7:c5:71:36:1b:7d:c5:5c:54: 1a:b3:1f:02:d6:f5:ae:e9:32:11:32:76:48:d3:34: bd:04:7a:f7:3c:4b:4b:c4:9f:9c:a9:17:a0:92:25: e4:e9:21:bc:4b:60:19:97:23:07:b3:9b:23:c2:91: 8a:79:a0:0a:9f:69:14:0f:85:dd:26:1d:30:34:6b: 92:4a:08:c4:c1:f2:c4:79:c1:e7:f9:66:96:e6:af: 51:da:42:af:4d:e5:a5:b0:af:54:0a:1c:c6:a0:d6: 60:1c:24:95:79:9d:6f:f0:32:0e:e8:e8:e9:36:6c: 55:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:98:3E:E2:B3:09:FF:67:6D:75:23:53:15:D4:07:89:3A:76:8E:69 X509v3 Authority Key Identifier: keyid:36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:19:16:32:05:ef:dd:79:5a:54:88:9a:93:60:8e:c7:d4:4c: 6a:98:f3:b9:81:aa:2a:4a:aa:6c:db:33:83:9b:4b:d0:4b:13: 6c:a3:e3:30:9f:f3:b0:1e:79:92:b3:62:d1:0d:e2:cf:a0:7e: 17:58:d9:ac:a5:36:1a:93:ae:9b:97:fe:20:0f:b7:5f:07:f9: 5e:e1:bb:4e:b9:e5:17:2e:03:70:05:1e:66:b2:f2:19:80:49: d2:a3:81:05:6d:53:b3:b0:91:0d:cd:fb:c2:51:b5:ab:bf:9c: c9:28:6b:f3:99:f9:ed:99:91:af:d5:63:e1:13:7c:58:68:80: 90:df:42:4d:c5:83:0c:f6:bd:62:69:17:b0:fa:66:54:68:0f: 52:75:bc:04:15:42:4b:f8:3e:5b:c4:9b:c7:ec:7e:07:08:98: d7:93:90:c6:97:94:85:53:cc:de:39:5b:6e:00:4b:09:3b:31: 60:2a:15:99:e2:bd:76:d4:89:aa:9b:72:63:c7:ab:8b:41:a8: a6:a6:26:5b:63:16:5c:8e:6a:26:0c:3d:75:1b:02:9d:03:7f: a9:b8:c7:b3:90:c4:f7:a0:27:99:82:88:96:95:3e:a6:b4:fb: 69:76:f8:66:53:33:06:d1:db:e2:3f:12:64:2f:cc:2f:c3:d8: c5:76:94:c3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUFqsGy1jnVkTiG9RM/DXoX9E+EkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4 MTI2NkVFRDAeFw0yNjA1MjkxMDI3NDZaFw0yNjA1MzAxMDQwNDZaMDMxMTAvBgNV BAMTKERDOTgzRUUyQjMwOUZGNjc2RDc1MjM1MzE1RDQwNzg5M0E3NjhFNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCezFRVtUsWEmkz0GlWmpZRJthj TdzL0HsYwi+TCf8fPVvE08UYaI3lwB2ySnRDyuz+3ECdRYWOtH7208FIOEyrR7ul gXLQPTW3t7vIUbtKrmVv/At+rI93369x9QIvCkwAjNwl328LwKISNsP2EiiYqs7D yOoF+OwtXZQAX630NWm0FH0byRDWvvk93tfFcTYbfcVcVBqzHwLW9a7pMhEydkjT NL0Eevc8S0vEn5ypF6CSJeTpIbxLYBmXIwezmyPCkYp5oAqfaRQPhd0mHTA0a5JK CMTB8sR5wef5Zpbmr1HaQq9N5aWwr1QKHMag1mAcJJV5nW/wMg7o6Ok2bFXNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3Jg+4rMJ/2dtdSNTFdQHiTp2jmkwHwYDVR0j BBgwFoAUNt8e1Rrjnnx+os4L7sMDLoEmbu0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzM0MDgwMS8wLzM2REYxRUQ1MUFFMzlFN0M3RUEyQ0UwQkVFQzMw MzJFODEyNjZFRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4MTI2NkVFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDczNDA4MDEvMC8zNkRGMUVENTFBRTM5 RTdDN0VBMkNFMEJFRUMzMDMyRTgxMjY2RUVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShkWMgXv3Xla VIiak2COx9RMapjzuYGqKkqqbNszg5tL0EsTbKPjMJ/zsB55krNi0Q3iz6B+F1jZ rKU2GpOum5f+IA+3Xwf5XuG7TrnlFy4DcAUeZrLyGYBJ0qOBBW1Ts7CRDc37wlG1 q7+cyShr85n57ZmRr9Vj4RN8WGiAkN9CTcWDDPa9YmkXsPpmVGgPUnW8BBVCS/g+ W8Sbx+x+BwiY15OQxpeUhVPM3jlbbgBLCTsxYCoVmeK9dtSJqptyY8eri0GopqYm W2MWXI5qJgw9dRsCnQN/qbjHs5DE96AnmYKIlpU+prT7aXb4ZlMzBtHb4j8SZC/M L8PYxXaUww== -----END CERTIFICATE-----Generated at Fri May 29 22:05:09 2026 by rpki-client