$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft File: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft (raw, json) Hash identifier: rbII+7J6TwX1rPUTQA9eyum/QnfpvMmbYsiipmrF5AI= Subject key identifier: 76:0E:08:9F:34:F8:E9:35:63:48:FC:85:CC:35:F4:63:8F:06:32:53 Authority key identifier: 36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED Certificate issuer: /CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Certificate serial: 3A0A67362D92C7A40C4FF3503AEB15C461855D83 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft Manifest number: 99 Signing time: Wed 13 May 2026 02:10:52 +0000 Manifest this update: Wed 13 May 2026 02:05:52 +0000 Manifest next update: Thu 14 May 2026 03:31:52 +0000 Files and hashes: 1: 3130332e39322e38382e302f32322d3234203d3e203338333738.roa (hash: DQtj51onk1QlrsaGulzt3zyofI52x/prSCn1R/58wqA=) 2: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl (hash: FYRGMo+wtuQbtEAfPj0V8GAaY/fTyiLBkCFiUKn24LM=) 3: 3131392e34302e36342e302f32302d3234203d3e203338333738.roa (hash: c0wW6VCicCCnYfYJdn0/kWyv9t5vGCOs/sl/Ap5EabE=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:31:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:0a:67:36:2d:92:c7:a4:0c:4f:f3:50:3a:eb:15:c4:61:85:5d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Validity Not Before: May 13 02:05:52 2026 GMT Not After : May 14 03:31:52 2026 GMT Subject: CN=760E089F34F8E9356348FC85CC35F4638F063253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:97:74:23:46:58:d5:09:d7:35:45:fe:b9:9a: be:6e:13:51:9b:d1:17:13:20:65:19:ad:48:71:59: c9:1f:f7:51:bb:67:82:78:2d:ef:e1:f7:98:4d:e1: 2f:81:fb:93:f2:54:1e:7a:1e:7b:86:5c:cc:9d:2e: 0e:0b:2d:5c:2e:6b:2b:37:05:bd:bd:a0:c2:1e:f3: 71:17:b3:f3:7a:28:35:46:51:5a:cb:ca:28:36:47: a0:a9:e9:e4:23:13:70:74:2d:15:fa:59:22:b1:8c: f2:83:11:1a:d9:22:78:8b:79:44:27:04:2e:60:9d: 5c:7c:15:be:5c:6c:27:00:59:54:13:1c:03:27:29: 15:17:9b:e1:1e:c6:60:f1:49:a9:e8:a5:08:ea:2a: 6b:b6:db:62:fa:ed:4d:ba:f9:52:40:22:9f:ac:07: e1:d9:b2:5e:7e:74:ff:93:ae:df:ec:34:f6:ca:80: 86:c7:ff:2d:87:65:e5:be:27:3e:05:43:6c:e5:e9: d9:13:b1:d1:cf:ff:de:6c:4d:ac:4d:4c:f5:ca:81: 79:80:1f:a2:e3:97:c0:06:e4:c4:dd:e3:c7:27:bc: 25:b3:ed:a2:e1:2b:d5:8a:7e:88:7d:10:7d:0c:7b: 36:f1:df:83:b2:3f:b5:df:00:c0:a6:62:4b:af:20: 77:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0E:08:9F:34:F8:E9:35:63:48:FC:85:CC:35:F4:63:8F:06:32:53 X509v3 Authority Key Identifier: keyid:36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:c4:25:df:0f:35:60:02:f6:39:d3:c0:a7:77:70:ab:bf:3e: 05:f9:88:92:a6:79:e4:c7:07:38:9a:1a:25:d1:4f:ba:37:ab: 42:17:5f:c7:0c:00:4c:7e:c7:ea:0f:a0:b1:86:8d:2a:13:b7: 61:4c:a1:db:2b:3b:e4:7d:05:a4:e8:19:23:5d:73:0a:a0:ff: f2:4b:66:d0:2d:08:ab:9f:d5:51:68:10:cd:55:00:93:76:81: 65:25:bd:90:9c:20:3f:9f:ca:78:19:5a:2e:ac:19:0b:53:af: a9:89:18:95:96:7a:d0:7e:6f:19:5a:01:81:61:e8:1e:ef:75: ec:b2:48:e3:5d:56:19:f6:59:ab:6c:5d:d1:30:9b:02:49:63: 0e:50:60:b4:bf:f8:8b:10:a3:b8:d6:5c:fc:e4:7a:79:f5:da: 1a:f0:a6:7d:67:3c:02:f6:02:31:9f:a0:24:45:36:ef:d9:32: 56:e9:13:3a:2a:86:f2:aa:5a:d0:ee:5b:54:a9:60:f3:32:f0: ac:65:2b:d8:17:76:42:d8:d1:4a:8b:9d:27:9c:f4:6a:c9:ae: d2:0b:e9:d5:60:96:40:c9:8e:63:bd:8e:c9:5d:ff:7f:16:20: db:97:ba:3b:db:7c:9f:03:e3:60:1e:c2:28:66:8e:18:ee:fd: c5:f7:bb:b9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUOgpnNi2Sx6QMT/NQOusVxGGFXYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4 MTI2NkVFRDAeFw0yNjA1MTMwMjA1NTJaFw0yNjA1MTQwMzMxNTJaMDMxMTAvBgNV BAMTKDc2MEUwODlGMzRGOEU5MzU2MzQ4RkM4NUNDMzVGNDYzOEYwNjMyNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYl3QjRljVCdc1Rf65mr5uE1Gb 0RcTIGUZrUhxWckf91G7Z4J4Le/h95hN4S+B+5PyVB56HnuGXMydLg4LLVwuays3 Bb29oMIe83EXs/N6KDVGUVrLyig2R6Cp6eQjE3B0LRX6WSKxjPKDERrZIniLeUQn BC5gnVx8Fb5cbCcAWVQTHAMnKRUXm+EexmDxSanopQjqKmu222L67U26+VJAIp+s B+HZsl5+dP+Trt/sNPbKgIbH/y2HZeW+Jz4FQ2zl6dkTsdHP/95sTaxNTPXKgXmA H6Ljl8AG5MTd48cnvCWz7aLhK9WKfoh9EH0Mezbx34OyP7XfAMCmYkuvIHcDAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdg4InzT46TVjSPyFzDX0Y48GMlMwHwYDVR0j BBgwFoAUNt8e1Rrjnnx+os4L7sMDLoEmbu0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzM0MDgwMS8wLzM2REYxRUQ1MUFFMzlFN0M3RUEyQ0UwQkVFQzMw MzJFODEyNjZFRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4MTI2NkVFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDczNDA4MDEvMC8zNkRGMUVENTFBRTM5 RTdDN0VBMkNFMEJFRUMzMDMyRTgxMjY2RUVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMQl3w81YAL2 OdPAp3dwq78+BfmIkqZ55McHOJoaJdFPujerQhdfxwwATH7H6g+gsYaNKhO3YUyh 2ys75H0FpOgZI11zCqD/8ktm0C0Iq5/VUWgQzVUAk3aBZSW9kJwgP5/KeBlaLqwZ C1OvqYkYlZZ60H5vGVoBgWHoHu917LJI411WGfZZq2xd0TCbAkljDlBgtL/4ixCj uNZc/OR6efXaGvCmfWc8AvYCMZ+gJEU279kyVukTOiqG8qpa0O5bVKlg8zLwrGUr 2Bd2QtjRSoudJ5z0asmu0gvp1WCWQMmOY72OyV3/fxYg25e6O9t8nwPjYB7CKGaO GO79xfe7uQ== -----END CERTIFICATE-----Generated at Wed May 13 19:42:36 2026 by rpki-client