$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft File: 36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft (raw, json) Hash identifier: WxDL5REUHZvBU+8jvo+NaeBIIZKs5ho0A3+r+G7BZoc= Subject key identifier: 34:97:B7:03:9E:57:AB:14:03:98:5A:72:B7:F3:60:0E:D3:2E:FE:70 Authority key identifier: 36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D Certificate issuer: /CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D Certificate serial: 1D6F5381373FC532FDADB1FC05C871237E0347CD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft Manifest number: 12 Signing time: Mon 27 Apr 2026 13:08:47 +0000 Manifest this update: Mon 27 Apr 2026 13:03:47 +0000 Manifest next update: Tue 28 Apr 2026 15:23:47 +0000 Files and hashes: 1: 3130332e37392e3133362e302f32322d3232203d3e2030.roa (hash: YVxEOO9XO2MmyHqD3Ceyf3SLPC873UJ1DWWky7Vnl30=) 2: 3135372e3131392e32382e302f32322d3232203d3e203538353139.roa (hash: +V7Vd50CrLhAnyJKXkDEE7s1Gt8Bw5Z6WA1KeI/AeLs=) 3: 3130332e3231352e3134302e302f32322d3232203d3e203538353139.roa (hash: rxlfotPYclusuNHWGDhdy78Jx7VJ8aQNKRsyn8w1wxE=) 4: 36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl (hash: utmOgUWv1Fk4o3OoiXVwA2IfEAWTqYSTx7tRlVHJxzg=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:6f:53:81:37:3f:c5:32:fd:ad:b1:fc:05:c8:71:23:7e:03:47:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D Validity Not Before: Apr 27 13:03:47 2026 GMT Not After : Apr 28 15:23:47 2026 GMT Subject: CN=3497B7039E57AB1403985A72B7F3600ED32EFE70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ff:c7:3a:3a:23:5d:31:5d:42:18:99:82:2b: 0e:ce:23:e6:51:7e:64:32:b6:73:73:eb:02:cd:17: 0b:6b:ec:30:e1:5f:f4:8a:ca:d0:22:db:16:08:79: fa:b0:a5:3f:3f:fd:12:96:a4:35:48:a9:7c:85:a4: 85:a5:98:e8:b0:ff:34:c1:e6:50:d5:4d:6e:f0:8e: cf:24:44:55:7d:e2:8e:c3:19:a7:ad:21:3d:01:ec: 7e:72:8e:c4:cf:1f:e8:d7:12:5f:ca:12:43:c9:f8: bc:d9:1a:d8:35:a4:c0:44:af:13:fd:c7:0e:f1:30: a3:b9:d2:48:6c:97:76:e3:79:ac:2a:ee:30:11:03: 53:a3:52:9e:8f:26:5d:38:4b:cc:31:53:02:de:88: a4:de:e6:5b:fe:4f:2e:64:22:65:b1:a9:26:b3:0d: f1:a2:b9:10:fb:d7:0d:a1:6c:b0:5e:48:5b:9c:21: 40:98:ec:c5:28:81:f7:5a:97:f8:92:68:de:88:bd: c9:6a:4a:82:c8:84:82:2a:7f:87:db:4f:b1:47:7d: 73:15:8c:81:20:3a:ef:fd:8f:f4:7d:d8:25:5f:17: 94:63:b4:a3:aa:4f:95:a9:69:0c:55:a5:4f:f6:de: 73:f9:91:16:05:94:70:21:e2:95:17:84:28:96:3a: 6b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:97:B7:03:9E:57:AB:14:03:98:5A:72:B7:F3:60:0E:D3:2E:FE:70 X509v3 Authority Key Identifier: keyid:36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a2:48:c8:b0:4b:1f:61:04:a4:41:2f:80:13:6a:cb:6d:aa: 4e:4e:33:06:52:8d:67:b5:cf:c2:40:f0:76:fb:11:9d:17:32: 15:be:71:a0:65:f4:14:37:e8:c3:a3:03:e3:38:6d:72:14:72: 33:f9:20:25:02:3f:4d:ec:d1:8a:d7:ac:47:6a:45:74:c5:e7: a9:2e:b1:2d:77:dd:64:ab:0e:18:4c:b2:70:19:06:fa:07:1d: 9e:f6:cb:ff:c2:8a:25:22:da:01:28:0b:e3:aa:61:80:a6:05: 0e:ef:28:d1:07:f4:7f:76:1d:9a:a7:ae:74:f2:22:cd:06:6f: 65:78:54:fc:36:dc:22:ef:a3:ed:3a:99:8a:57:3c:7a:35:6e: 40:ab:fb:c3:74:1a:4e:71:12:97:f2:40:ff:fa:79:a7:91:b0: db:26:57:5c:73:90:3d:e6:df:e2:bc:ed:2d:7d:c6:8a:bf:5f: d5:73:d7:33:6c:80:44:d6:fb:ac:af:0c:fe:81:e1:f9:7c:86: 81:10:33:d6:2a:d0:78:96:38:04:c1:da:e6:02:76:44:b3:b6: 3b:b4:41:ba:93:c2:d5:b5:17:79:da:fd:42:dc:f1:78:22:d0: 90:fd:d4:c1:29:02:9c:29:07:fa:71:59:17:b0:e8:df:94:4f: 88:b6:39:71 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUHW9TgTc/xTL9rbH8BchxI34DR80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZBMEQxMERBNTEzREM3QUM4QjY4QThCOTQ5MzZDMzNE MEYxMzMxRDAeFw0yNjA0MjcxMzAzNDdaFw0yNjA0MjgxNTIzNDdaMDMxMTAvBgNV BAMTKDM0OTdCNzAzOUU1N0FCMTQwMzk4NUE3MkI3RjM2MDBFRDMyRUZFNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs/8c6OiNdMV1CGJmCKw7OI+ZR fmQytnNz6wLNFwtr7DDhX/SKytAi2xYIefqwpT8//RKWpDVIqXyFpIWlmOiw/zTB 5lDVTW7wjs8kRFV94o7DGaetIT0B7H5yjsTPH+jXEl/KEkPJ+LzZGtg1pMBErxP9 xw7xMKO50khsl3bjeawq7jARA1OjUp6PJl04S8wxUwLeiKTe5lv+Ty5kImWxqSaz DfGiuRD71w2hbLBeSFucIUCY7MUogfdal/iSaN6IvclqSoLIhIIqf4fbT7FHfXMV jIEgOu/9j/R92CVfF5RjtKOqT5WpaQxVpU/23nP5kRYFlHAh4pUXhCiWOmuFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNJe3A55XqxQDmFpyt/NgDtMu/nAwHwYDVR0j BBgwFoAUNqDRDaUT3HrItoqLlJNsM9DxMx0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3MjEwNjY1MjMwMzM2Mi8wLzM2QTBEMTBEQTUxM0RDN0FDOEI2OEE4Qjk0OTM2 QzMzRDBGMTMzMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZBMEQxMERBNTEzREM3QUM4QjY4QThCOTQ5MzZDMzNEMEYxMzMxRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzIxMDY2NTIzMDMzNjIvMC8zNkEwRDEwREE1MTNE QzdBQzhCNjhBOEI5NDkzNkMzM0QwRjEzMzFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaJIyLBLH2EE pEEvgBNqy22qTk4zBlKNZ7XPwkDwdvsRnRcyFb5xoGX0FDfow6MD4zhtchRyM/kg JQI/TezRitesR2pFdMXnqS6xLXfdZKsOGEyycBkG+gcdnvbL/8KKJSLaASgL46ph gKYFDu8o0Qf0f3YdmqeudPIizQZvZXhU/DbcIu+j7TqZilc8ejVuQKv7w3QaTnES l/JA//p5p5Gw2yZXXHOQPebf4rztLX3Gir9f1XPXM2yARNb7rK8M/oHh+XyGgRAz 1irQeJY4BMHa5gJ2RLO2O7RBupPC1bUXedr9QtzxeCLQkP3UwSkCnCkH+nFZF7Do 35RPiLY5cQ== -----END CERTIFICATE-----Generated at Mon Apr 27 15:02:58 2026 by rpki-client