$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft File: 36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft (raw, json) Hash identifier: o11yZ5OX05tZlMgIJNFu2exeDktrm6PlHflLX4E5OqU= Subject key identifier: DE:6C:48:C3:45:EA:60:F3:05:EB:B6:21:BB:F8:20:5B:BC:2B:64:70 Authority key identifier: 36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D Certificate issuer: /CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D Certificate serial: 7FC32DFEB5DD2830FCC6850C98B3E3ED1D77E103 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft Manifest number: D0 Signing time: Mon 26 Oct 2026 00:03:05 +0000 Manifest this update: Sun 25 Oct 2026 23:58:05 +0000 Manifest next update: Thu 29 Oct 2026 11:46:05 +0000 Files and hashes: 1: 3130332e37392e3133362e302f32322d3232203d3e2030.roa (hash: YVxEOO9XO2MmyHqD3Ceyf3SLPC873UJ1DWWky7Vnl30=) 2: 36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl (hash: DaiZUHga3k+M5OvKT4XknJwC+eB/NRtxzU0j79XqUWY=) 3: 3135372e3131392e32382e302f32322d3232203d3e203538353139.roa (hash: +V7Vd50CrLhAnyJKXkDEE7s1Gt8Bw5Z6WA1KeI/AeLs=) 4: 3130332e3231352e3134302e302f32322d3232203d3e203538353139.roa (hash: rxlfotPYclusuNHWGDhdy78Jx7VJ8aQNKRsyn8w1wxE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 11:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:c3:2d:fe:b5:dd:28:30:fc:c6:85:0c:98:b3:e3:ed:1d:77:e1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D Validity Not Before: Oct 25 23:58:05 2026 GMT Not After : Oct 29 11:46:05 2026 GMT Subject: CN=DE6C48C345EA60F305EBB621BBF8205BBC2B6470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:14:7b:df:21:9a:e8:e2:7c:24:60:6c:69: a2:97:81:3a:e2:d0:4b:fa:eb:b5:f1:04:37:d0:b8: 4b:04:c7:76:df:5f:1a:6a:95:76:7a:60:87:5a:75: d6:ba:95:63:f1:eb:1f:b6:14:3f:f8:49:90:f9:83: f4:e4:6d:95:a8:fa:c5:cf:0d:6b:be:96:21:74:75: cd:a2:13:78:ea:98:9a:5f:4e:dc:9e:2b:8c:1f:61: 12:c7:be:66:14:e4:c1:1d:ca:de:83:94:48:74:92: b7:81:b5:28:cb:75:1a:8e:a9:ef:28:cf:a9:fb:7c: 87:c8:08:d8:b5:6b:62:fa:f4:38:74:8d:b9:76:8c: 7e:a2:c8:60:a6:3a:45:f5:0b:bd:ee:1f:be:2d:df: a8:e0:ee:b3:24:92:cf:fe:54:f5:78:2b:51:2c:dd: 4c:29:cb:22:e7:11:24:c9:cf:89:fd:08:3f:18:56: bb:49:22:05:2f:a6:3c:0b:5c:1b:b8:ce:ce:cc:2c: b1:35:f2:90:07:7e:c3:36:18:f4:95:53:09:c8:94: 8a:0e:7d:c8:86:97:b4:91:87:3f:a1:78:51:58:d5: b2:5f:a3:83:c7:dd:97:81:c4:f7:6a:47:7e:13:2f: 9d:ea:b1:27:0a:60:97:a7:b0:ed:e2:c2:39:25:a9: 93:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6C:48:C3:45:EA:60:F3:05:EB:B6:21:BB:F8:20:5B:BC:2B:64:70 X509v3 Authority Key Identifier: keyid:36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:5f:eb:2f:8e:05:aa:d2:59:e3:ab:11:a6:c9:49:a3:ac:b1: c5:2d:d4:e0:93:fa:1a:ab:96:31:8b:ad:e6:da:b0:05:42:7b: 1b:c6:46:1a:53:42:46:41:7e:d0:17:5b:58:d3:16:65:f2:4b: 6d:cf:4c:6d:4b:e9:f3:5e:e7:a4:87:18:54:0d:0a:b1:dd:c2: 00:12:7a:23:9a:10:82:de:79:95:c0:3e:0b:5d:b4:5d:c9:cd: 9e:0e:44:29:31:80:f1:48:a1:12:b1:e4:e7:53:b0:28:9f:57: e5:9c:c3:12:25:9a:8b:47:9c:f6:28:a1:e6:08:cb:43:5b:e8: a3:1f:9a:db:c5:51:a2:57:b1:e1:2d:ac:4e:01:34:d4:49:41: f0:91:af:ce:95:1e:b4:cf:0e:dc:ca:ed:42:14:73:c7:3c:ff: 24:24:49:39:87:d6:8d:b2:16:d0:9c:3f:91:40:24:6a:dc:05: 2c:2a:e4:b8:9e:bb:a6:cf:e9:72:34:2a:7c:00:68:85:68:da: 4d:ee:3f:28:f7:40:f5:54:c4:6e:fe:c6:46:a8:25:d0:fd:02: 59:b9:ee:e3:b7:24:5c:67:b4:6d:42:cc:25:95:11:96:7b:56: ba:25:15:96:30:ed:e9:8f:d9:e5:e6:e0:87:f7:dc:ac:e4:2a: 31:20:92:f5 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUf8Mt/rXdKDD8xoUMmLPj7R134QMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZBMEQxMERBNTEzREM3QUM4QjY4QThCOTQ5MzZDMzNE MEYxMzMxRDAeFw0yNjEwMjUyMzU4MDVaFw0yNjEwMjkxMTQ2MDVaMDMxMTAvBgNV BAMTKERFNkM0OEMzNDVFQTYwRjMwNUVCQjYyMUJCRjgyMDVCQkMyQjY0NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9SxR73yGa6OJ8JGBsaaKXgTri 0Ev667XxBDfQuEsEx3bfXxpqlXZ6YIdadda6lWPx6x+2FD/4SZD5g/TkbZWo+sXP DWu+liF0dc2iE3jqmJpfTtyeK4wfYRLHvmYU5MEdyt6DlEh0kreBtSjLdRqOqe8o z6n7fIfICNi1a2L69Dh0jbl2jH6iyGCmOkX1C73uH74t36jg7rMkks/+VPV4K1Es 3UwpyyLnESTJz4n9CD8YVrtJIgUvpjwLXBu4zs7MLLE18pAHfsM2GPSVUwnIlIoO fciGl7SRhz+heFFY1bJfo4PH3ZeBxPdqR34TL53qsScKYJensO3iwjklqZP3AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3mxIw0XqYPMF67Yhu/ggW7wrZHAwHwYDVR0j BBgwFoAUNqDRDaUT3HrItoqLlJNsM9DxMx0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3MjEwNjY1MjMwMzM2Mi8wLzM2QTBEMTBEQTUxM0RDN0FDOEI2OEE4Qjk0OTM2 QzMzRDBGMTMzMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZBMEQxMERBNTEzREM3QUM4QjY4QThCOTQ5MzZDMzNEMEYxMzMxRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzIxMDY2NTIzMDMzNjIvMC8zNkEwRDEwREE1MTNE QzdBQzhCNjhBOEI5NDkzNkMzM0QwRjEzMzFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1/rL44FqtJZ 46sRpslJo6yxxS3U4JP6GquWMYut5tqwBUJ7G8ZGGlNCRkF+0BdbWNMWZfJLbc9M bUvp817npIcYVA0Ksd3CABJ6I5oQgt55lcA+C120XcnNng5EKTGA8UihErHk51Ow KJ9X5ZzDEiWai0ec9iih5gjLQ1voox+a28VRolex4S2sTgE01ElB8JGvzpUetM8O 3MrtQhRzxzz/JCRJOYfWjbIW0Jw/kUAkatwFLCrkuJ67ps/pcjQqfABohWjaTe4/ KPdA9VTEbv7GRqgl0P0CWbnu47ckXGe0bULMJZURlntWuiUVljDt6Y/Z5ebgh/fc rOQqMSCS9Q== -----END CERTIFICATE-----Generated at Tue Oct 27 21:53:50 2026 by rpki-client