$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft File: 36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft (raw, json) Hash identifier: WVAfsacQaVAVDbu0ktEEBHNXP+CWJeC2dgAlIOEk6sw= Subject key identifier: 6F:B5:91:79:9D:7A:44:1A:5A:E9:C0:CB:D1:04:83:61:A6:EF:59:2B Authority key identifier: 36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D Certificate issuer: /CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D Certificate serial: 04B1AA8FE10B26AE777FA0E39525C2A085B20189 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft Manifest number: 4E Signing time: Thu 11 Jun 2026 21:04:24 +0000 Manifest this update: Thu 11 Jun 2026 20:59:24 +0000 Manifest next update: Fri 12 Jun 2026 23:08:24 +0000 Files and hashes: 1: 3135372e3131392e32382e302f32322d3232203d3e203538353139.roa (hash: +V7Vd50CrLhAnyJKXkDEE7s1Gt8Bw5Z6WA1KeI/AeLs=) 2: 3130332e37392e3133362e302f32322d3232203d3e2030.roa (hash: YVxEOO9XO2MmyHqD3Ceyf3SLPC873UJ1DWWky7Vnl30=) 3: 3130332e3231352e3134302e302f32322d3232203d3e203538353139.roa (hash: rxlfotPYclusuNHWGDhdy78Jx7VJ8aQNKRsyn8w1wxE=) 4: 36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl (hash: 91haJfPYe31y/tJ+zXUz8OzH01sZYBbbav6bzwi4Mhs=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 23:08:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b1:aa:8f:e1:0b:26:ae:77:7f:a0:e3:95:25:c2:a0:85:b2:01:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D Validity Not Before: Jun 11 20:59:24 2026 GMT Not After : Jun 12 23:08:24 2026 GMT Subject: CN=6FB591799D7A441A5AE9C0CBD1048361A6EF592B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6b:7f:bb:47:b1:e6:da:e0:35:3d:40:4f:1e: 68:b8:54:fc:29:7d:44:cc:e6:28:a0:3c:0e:b2:ea: 82:e7:11:e2:21:86:be:e2:d4:87:0a:0d:df:7b:9b: 4a:b9:2b:d4:41:bc:a4:78:8f:55:b7:eb:05:7f:bb: 6d:49:77:f2:f8:32:6d:19:3c:5b:a4:6e:9e:c3:47: f4:15:63:1f:05:7f:19:87:32:f8:11:9e:83:4d:19: d2:7c:bc:8c:eb:da:55:46:fb:fa:6d:90:0b:c0:d5: 34:3e:fb:fe:30:bd:e6:92:e3:b3:ea:4b:12:26:63: 1a:19:cc:2f:8e:29:22:bd:23:71:1d:e4:28:5c:f6: 7f:ce:c4:4e:bb:f7:73:7f:8d:42:5b:25:f0:3b:f3: 3b:48:c1:20:cf:92:42:54:39:5d:d4:07:f4:34:91: 2e:77:a6:f6:b9:af:b8:3a:d5:02:77:1f:b9:fd:71: 2b:88:0f:3b:53:1d:bc:19:27:64:67:c8:49:ef:96: 30:bc:29:3e:64:6d:24:7b:93:d8:3e:d2:ce:53:24: 68:e6:9d:35:bd:69:0d:e2:e4:fa:81:68:59:24:e5: 2f:65:02:77:c2:45:10:77:6c:9c:1a:dd:0a:da:94: 3e:37:de:aa:2d:14:49:66:c1:f7:64:23:8f:36:a7: c3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B5:91:79:9D:7A:44:1A:5A:E9:C0:CB:D1:04:83:61:A6:EF:59:2B X509v3 Authority Key Identifier: keyid:36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:c2:c9:f0:81:06:a1:ec:8f:4b:2a:98:e4:19:14:51:9d:16: ae:1d:b7:3a:f7:9f:3a:12:ca:48:df:c5:68:bd:99:45:b7:3f: 17:05:67:8e:2d:39:89:04:ed:31:8d:98:04:84:1b:06:8a:c3: 3f:a7:7e:01:82:52:54:3b:98:8b:d7:33:bb:5a:fa:7c:79:7c: e8:dd:99:bb:2c:be:d8:21:0e:71:a9:aa:f2:82:57:10:a6:bd: 65:94:4b:e4:cb:6a:cb:ab:a2:62:13:e7:06:36:ab:31:62:75: 24:19:b4:73:2d:09:2f:4a:16:1c:cd:57:68:af:98:11:ea:4e: c3:f4:6d:b6:0a:0b:4a:b1:f8:d7:85:2f:8b:ad:1c:0a:dc:81: 32:34:1d:7b:2e:cc:13:4e:3d:95:fe:fa:6d:8f:2b:bc:50:62: 87:6c:fd:43:50:80:0d:21:16:f1:50:b3:22:7f:fb:38:7a:03: 4e:c3:26:11:10:cc:e5:37:d1:79:b5:f6:5c:b7:47:84:5f:81: c0:41:33:ba:15:5c:fb:82:5c:d9:32:25:e4:30:59:93:c8:6d: 69:6e:cd:db:8e:58:25:bc:f1:3e:37:98:c2:a1:8d:44:9e:21: c8:fd:f2:e2:54:4d:fc:cf:f0:89:4b:00:f0:28:40:f6:61:e8: b0:a6:39:1c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUBLGqj+ELJq53f6DjlSXCoIWyAYkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZBMEQxMERBNTEzREM3QUM4QjY4QThCOTQ5MzZDMzNE MEYxMzMxRDAeFw0yNjA2MTEyMDU5MjRaFw0yNjA2MTIyMzA4MjRaMDMxMTAvBgNV BAMTKDZGQjU5MTc5OUQ3QTQ0MUE1QUU5QzBDQkQxMDQ4MzYxQTZFRjU5MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqa3+7R7Hm2uA1PUBPHmi4VPwp fUTM5iigPA6y6oLnEeIhhr7i1IcKDd97m0q5K9RBvKR4j1W36wV/u21Jd/L4Mm0Z PFukbp7DR/QVYx8FfxmHMvgRnoNNGdJ8vIzr2lVG+/ptkAvA1TQ++/4wveaS47Pq SxImYxoZzC+OKSK9I3Ed5Chc9n/OxE6793N/jUJbJfA78ztIwSDPkkJUOV3UB/Q0 kS53pva5r7g61QJ3H7n9cSuIDztTHbwZJ2RnyEnvljC8KT5kbSR7k9g+0s5TJGjm nTW9aQ3i5PqBaFkk5S9lAnfCRRB3bJwa3QralD433qotFElmwfdkI482p8NDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUb7WReZ16RBpa6cDL0QSDYabvWSswHwYDVR0j BBgwFoAUNqDRDaUT3HrItoqLlJNsM9DxMx0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3MjEwNjY1MjMwMzM2Mi8wLzM2QTBEMTBEQTUxM0RDN0FDOEI2OEE4Qjk0OTM2 QzMzRDBGMTMzMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZBMEQxMERBNTEzREM3QUM4QjY4QThCOTQ5MzZDMzNEMEYxMzMxRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzIxMDY2NTIzMDMzNjIvMC8zNkEwRDEwREE1MTNE QzdBQzhCNjhBOEI5NDkzNkMzM0QwRjEzMzFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcLJ8IEGoeyP SyqY5BkUUZ0Wrh23OvefOhLKSN/FaL2ZRbc/FwVnji05iQTtMY2YBIQbBorDP6d+ AYJSVDuYi9czu1r6fHl86N2Zuyy+2CEOcamq8oJXEKa9ZZRL5Mtqy6uiYhPnBjar MWJ1JBm0cy0JL0oWHM1XaK+YEepOw/RttgoLSrH414Uvi60cCtyBMjQdey7ME049 lf76bY8rvFBih2z9Q1CADSEW8VCzIn/7OHoDTsMmERDM5TfRebX2XLdHhF+BwEEz uhVc+4Jc2TIl5DBZk8htaW7N245YJbzxPjeYwqGNRJ4hyP3y4lRN/M/wiUsA8ChA 9mHosKY5HA== -----END CERTIFICATE-----Generated at Fri Jun 12 04:14:04 2026 by rpki-client