$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft File: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft (raw, json) Hash identifier: CsMOZIAycu2SgWzqPbnX8buizGuc2TpvHx707s+rYTw= Subject key identifier: B5:9C:22:39:37:0B:47:F5:4B:39:C4:0A:9D:48:82:3B:71:14:11:14 Authority key identifier: 36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED Certificate issuer: /CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Certificate serial: 2192A02D17B01ACB9F3D8E673EAD6A674E0B9D3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft Manifest number: F9 Signing time: Thu 23 Jul 2026 20:39:29 +0000 Manifest this update: Thu 23 Jul 2026 20:34:29 +0000 Manifest next update: Fri 24 Jul 2026 20:41:29 +0000 Files and hashes: 1: 3131392e34302e36342e302f32302d3234203d3e203338333738.roa (hash: c0wW6VCicCCnYfYJdn0/kWyv9t5vGCOs/sl/Ap5EabE=) 2: 3130332e39322e38382e302f32322d3234203d3e203338333738.roa (hash: DQtj51onk1QlrsaGulzt3zyofI52x/prSCn1R/58wqA=) 3: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl (hash: 8wcChLfKWpYqNRazISpwlZVEgSIyVSe1q4jgLB1DvK4=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:92:a0:2d:17:b0:1a:cb:9f:3d:8e:67:3e:ad:6a:67:4e:0b:9d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Validity Not Before: Jul 23 20:34:29 2026 GMT Not After : Jul 24 20:41:29 2026 GMT Subject: CN=B59C2239370B47F54B39C40A9D48823B71141114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d5:78:a6:14:b4:5d:92:1c:1e:3b:1e:ba:0a: 7c:c6:66:fa:b5:b5:d1:14:b7:53:9f:fe:69:e0:25: 4d:1c:69:10:e2:df:b7:30:ec:25:d0:94:b3:96:23: 4d:11:50:fd:41:b4:38:a3:2a:e1:54:01:13:7c:db: de:51:fc:29:ab:53:30:f7:bd:f1:b4:69:84:6d:9d: e8:16:ac:91:ba:13:ae:29:57:aa:4d:44:83:12:48: c6:2a:ad:4f:b4:40:1c:f2:7c:8d:db:4d:17:fd:2b: 96:94:f1:28:6d:95:25:cd:05:81:59:48:a5:5a:b2: 93:88:17:94:b5:9e:17:3b:c4:38:ed:d5:fe:6e:08: a4:8f:46:53:5a:f7:74:93:a3:c8:7f:8b:33:52:82: 1f:57:af:61:b6:42:cf:7b:58:f6:f2:90:93:91:d9: 2a:97:01:ee:46:56:b7:78:6b:1d:ba:92:7f:85:d4: db:e5:41:53:76:85:7c:f1:5e:87:88:5b:ed:44:05: 08:e4:b5:12:0e:fc:48:b7:81:46:74:2d:52:54:76: ef:74:40:b3:a9:ae:91:c0:d1:cd:60:0f:41:c0:80: 5e:56:c6:71:f0:42:bb:69:32:e6:db:39:2d:4f:3e: 17:0e:c6:ff:a7:9f:71:e3:1c:6b:81:42:40:48:c3: d5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9C:22:39:37:0B:47:F5:4B:39:C4:0A:9D:48:82:3B:71:14:11:14 X509v3 Authority Key Identifier: keyid:36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f9:c6:a3:a1:33:5e:dd:d1:3c:31:e8:1c:a5:a4:38:56:50: 58:d1:ca:54:2c:03:eb:53:c3:38:e6:85:f1:40:c5:3c:e1:01: dd:ad:41:d2:96:d7:4c:99:d1:b9:a9:a3:04:f3:51:7a:3b:17: f4:88:e5:72:bf:4a:11:6f:64:65:de:9e:6d:4f:33:0d:d9:8d: f6:f9:f3:5c:4e:5d:1e:9e:34:55:6f:5b:59:d6:47:bc:c4:52: fc:0b:45:20:80:65:6f:92:22:af:02:ca:41:36:f0:34:65:d2: 76:a4:31:7d:dc:42:06:16:44:90:39:81:72:2b:24:09:21:0e: 4d:74:46:1f:44:ab:23:bb:3e:a4:31:32:5b:2a:a5:8f:11:bf: 33:76:5a:51:5a:65:4f:3d:32:f0:6f:d1:a8:bf:af:02:ff:7b: 88:5d:ed:58:4d:02:b8:f8:5d:c2:26:03:ea:b0:03:4a:b2:ef: de:2e:44:7b:da:7e:90:8d:e8:b0:bc:17:e5:67:b0:af:fd:e6: 97:89:68:47:cd:d9:f2:a5:29:34:4d:8e:60:a5:b3:06:14:9d: a4:38:89:bd:16:11:ad:75:ea:ae:0d:05:5d:3f:c9:36:06:d5: 72:e4:a7:c6:ca:da:59:e1:46:91:e2:e1:e2:4a:34:c1:7d:e5: f6:e4:3d:17 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUIZKgLRewGsufPY5nPq1qZ04LnT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4 MTI2NkVFRDAeFw0yNjA3MjMyMDM0MjlaFw0yNjA3MjQyMDQxMjlaMDMxMTAvBgNV BAMTKEI1OUMyMjM5MzcwQjQ3RjU0QjM5QzQwQTlENDg4MjNCNzExNDExMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH1XimFLRdkhweOx66CnzGZvq1 tdEUt1Of/mngJU0caRDi37cw7CXQlLOWI00RUP1BtDijKuFUARN8295R/CmrUzD3 vfG0aYRtnegWrJG6E64pV6pNRIMSSMYqrU+0QBzyfI3bTRf9K5aU8ShtlSXNBYFZ SKVaspOIF5S1nhc7xDjt1f5uCKSPRlNa93STo8h/izNSgh9Xr2G2Qs97WPbykJOR 2SqXAe5GVrd4ax26kn+F1NvlQVN2hXzxXoeIW+1EBQjktRIO/Ei3gUZ0LVJUdu90 QLOprpHA0c1gD0HAgF5WxnHwQrtpMubbOS1PPhcOxv+nn3HjHGuBQkBIw9VNAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUtZwiOTcLR/VLOcQKnUiCO3EUERQwHwYDVR0j BBgwFoAUNt8e1Rrjnnx+os4L7sMDLoEmbu0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzM0MDgwMS8wLzM2REYxRUQ1MUFFMzlFN0M3RUEyQ0UwQkVFQzMw MzJFODEyNjZFRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4MTI2NkVFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDczNDA4MDEvMC8zNkRGMUVENTFBRTM5 RTdDN0VBMkNFMEJFRUMzMDMyRTgxMjY2RUVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvnGo6EzXt3R PDHoHKWkOFZQWNHKVCwD61PDOOaF8UDFPOEB3a1B0pbXTJnRuamjBPNRejsX9Ijl cr9KEW9kZd6ebU8zDdmN9vnzXE5dHp40VW9bWdZHvMRS/AtFIIBlb5IirwLKQTbw NGXSdqQxfdxCBhZEkDmBciskCSEOTXRGH0SrI7s+pDEyWyqljxG/M3ZaUVplTz0y 8G/RqL+vAv97iF3tWE0CuPhdwiYD6rADSrLv3i5Ee9p+kI3osLwX5Wewr/3ml4lo R83Z8qUpNE2OYKWzBhSdpDiJvRYRrXXqrg0FXT/JNgbVcuSnxsraWeFGkeLh4ko0 wX3l9uQ9Fw== -----END CERTIFICATE-----Generated at Fri Jul 24 12:36:54 2026 by rpki-client