$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft File: 36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft (raw, json) Hash identifier: DrOiG2leVFFPRNA+S3fxJCA4+YI/qM1kG6mF8NZ20Ho= Subject key identifier: 17:9D:88:0C:5D:91:48:4C:9B:D1:83:67:29:67:A2:E4:91:F8:9F:67 Authority key identifier: 36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D Certificate issuer: /CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D Certificate serial: 5483BB885D3449067259A172FE74083D855606ED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft Manifest number: BB Signing time: Tue 08 Sep 2026 11:24:08 +0000 Manifest this update: Tue 08 Sep 2026 11:19:08 +0000 Manifest next update: Fri 11 Sep 2026 21:05:08 +0000 Files and hashes: 1: 3130332e37392e3133362e302f32322d3232203d3e2030.roa (hash: YVxEOO9XO2MmyHqD3Ceyf3SLPC873UJ1DWWky7Vnl30=) 2: 36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl (hash: Rsg9XL0GL3a6s0qiOddjJpXP1zpA0+fz1qrm99WcRfw=) 3: 3135372e3131392e32382e302f32322d3232203d3e203538353139.roa (hash: +V7Vd50CrLhAnyJKXkDEE7s1Gt8Bw5Z6WA1KeI/AeLs=) 4: 3130332e3231352e3134302e302f32322d3232203d3e203538353139.roa (hash: rxlfotPYclusuNHWGDhdy78Jx7VJ8aQNKRsyn8w1wxE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 21:05:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:83:bb:88:5d:34:49:06:72:59:a1:72:fe:74:08:3d:85:56:06:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D Validity Not Before: Sep 8 11:19:08 2026 GMT Not After : Sep 11 21:05:08 2026 GMT Subject: CN=179D880C5D91484C9BD183672967A2E491F89F67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c4:48:51:8d:8b:c8:dd:62:78:62:dd:49:6d: c2:8d:1c:28:54:ae:d1:14:a0:e3:2c:da:6b:32:8a: 41:30:db:2a:d0:b9:32:c4:94:37:d5:4c:bd:37:20: 44:3c:db:13:c0:6d:8e:9e:64:23:5c:d3:5c:98:61: 5e:ef:64:a8:a4:ad:fb:09:12:ac:93:e5:7f:51:05: ab:b3:c5:b4:68:e8:35:ac:78:99:65:2c:6a:53:34: 5e:48:21:6c:c5:6f:e5:20:91:9e:73:9c:1a:cd:14: aa:f1:b5:4e:0e:92:15:3d:5e:04:5a:7a:aa:22:cf: 0a:5c:fc:df:26:6f:ef:39:3a:ce:b4:54:a4:48:5b: ee:a1:d0:79:d4:f3:e7:2c:69:98:92:38:13:1b:80: db:86:6c:ec:d4:12:bc:a7:21:b7:48:97:fd:db:25: 40:26:72:87:57:4d:3e:9d:1e:85:dd:ef:69:e5:a7: d0:eb:94:cd:db:89:fa:01:cc:4c:d6:90:9c:f7:5b: 45:76:c5:5a:5e:b4:b1:5b:24:35:da:59:20:ee:96: 6f:67:6e:09:f5:06:c3:a1:7a:e5:15:c5:20:be:21: fd:75:27:61:cc:5e:a8:8b:0b:57:35:43:26:79:f9: 5b:a8:42:9d:cf:0c:77:8e:05:20:25:18:8f:67:af: 51:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9D:88:0C:5D:91:48:4C:9B:D1:83:67:29:67:A2:E4:91:F8:9F:67 X509v3 Authority Key Identifier: keyid:36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:0e:38:fb:f5:a8:fc:46:39:57:c9:b9:33:33:d0:5e:0b:a6: 22:e1:1f:f8:04:5d:20:c9:1c:b4:bf:30:98:70:c5:9f:34:21: 66:08:6f:fe:75:2d:96:d4:da:3a:04:8e:d4:77:a6:b1:8d:6e: b5:ef:05:35:ab:a4:67:fe:8b:4a:7b:9e:59:05:cf:06:e8:79: 19:65:85:3a:d0:77:92:c4:c4:8b:cb:f1:ab:ca:28:20:15:7c: c3:e0:9d:1f:60:0a:49:ac:62:fa:f2:48:7b:82:ba:b6:a1:74: 1f:9c:74:d0:77:cc:60:10:82:33:db:38:b2:c9:b7:9b:46:e9: 48:9f:f4:46:5f:80:0d:f3:15:54:ba:bb:56:7c:24:bf:1d:40: 1f:09:17:a8:43:16:90:02:e1:31:46:b8:4c:1e:07:57:ad:ed: 55:09:4d:41:dd:b2:9f:4e:9a:74:86:4b:24:14:a6:e0:76:8d: b7:a1:e6:5c:a4:de:bc:7e:cf:d8:28:18:df:2f:fb:dd:48:13: bd:16:f1:9f:99:5c:b7:47:c0:8d:38:f5:17:d9:c9:1c:45:a3: 6f:6b:c9:ce:ce:e6:1c:53:46:74:80:57:0e:d4:37:40:34:70: 4b:47:9a:a5:71:cc:90:3c:3a:eb:27:af:6a:a7:86:50:f0:99: 87:80:05:d3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVIO7iF00SQZyWaFy/nQIPYVWBu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZBMEQxMERBNTEzREM3QUM4QjY4QThCOTQ5MzZDMzNE MEYxMzMxRDAeFw0yNjA5MDgxMTE5MDhaFw0yNjA5MTEyMTA1MDhaMDMxMTAvBgNV BAMTKDE3OUQ4ODBDNUQ5MTQ4NEM5QkQxODM2NzI5NjdBMkU0OTFGODlGNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9xEhRjYvI3WJ4Yt1JbcKNHChU rtEUoOMs2msyikEw2yrQuTLElDfVTL03IEQ82xPAbY6eZCNc01yYYV7vZKikrfsJ EqyT5X9RBauzxbRo6DWseJllLGpTNF5IIWzFb+UgkZ5znBrNFKrxtU4OkhU9XgRa eqoizwpc/N8mb+85Os60VKRIW+6h0HnU8+csaZiSOBMbgNuGbOzUErynIbdIl/3b JUAmcodXTT6dHoXd72nlp9DrlM3bifoBzEzWkJz3W0V2xVpetLFbJDXaWSDulm9n bgn1BsOheuUVxSC+If11J2HMXqiLC1c1QyZ5+VuoQp3PDHeOBSAlGI9nr1EnAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUF52IDF2RSEyb0YNnKWei5JH4n2cwHwYDVR0j BBgwFoAUNqDRDaUT3HrItoqLlJNsM9DxMx0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3MjEwNjY1MjMwMzM2Mi8wLzM2QTBEMTBEQTUxM0RDN0FDOEI2OEE4Qjk0OTM2 QzMzRDBGMTMzMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZBMEQxMERBNTEzREM3QUM4QjY4QThCOTQ5MzZDMzNEMEYxMzMxRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzIxMDY2NTIzMDMzNjIvMC8zNkEwRDEwREE1MTNE QzdBQzhCNjhBOEI5NDkzNkMzM0QwRjEzMzFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMw44+/Wo/EY5 V8m5MzPQXgumIuEf+ARdIMkctL8wmHDFnzQhZghv/nUtltTaOgSO1HemsY1ute8F NaukZ/6LSnueWQXPBuh5GWWFOtB3ksTEi8vxq8ooIBV8w+CdH2AKSaxi+vJIe4K6 tqF0H5x00HfMYBCCM9s4ssm3m0bpSJ/0Rl+ADfMVVLq7Vnwkvx1AHwkXqEMWkALh MUa4TB4HV63tVQlNQd2yn06adIZLJBSm4HaNt6HmXKTevH7P2CgY3y/73UgTvRbx n5lct0fAjTj1F9nJHEWjb2vJzs7mHFNGdIBXDtQ3QDRwS0eapXHMkDw66yevaqeG UPCZh4AF0w== -----END CERTIFICATE-----Generated at Thu Sep 10 15:38:30 2026 by rpki-client