$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft File: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft (raw, json) Hash identifier: ECBSUrNcnoeF05cJh57zIPUw5hNEPn4Iz/rzSIxiI2A= Subject key identifier: 8B:4D:00:C1:94:3E:74:6B:34:B1:BA:F3:8E:84:76:7C:79:23:AD:B5 Authority key identifier: 36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED Certificate issuer: /CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Certificate serial: 245822A5B3A4BC40A519BB29466CAB94F140BB30 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft Manifest number: 5A Signing time: Thu 26 Mar 2026 19:08:28 +0000 Manifest this update: Thu 26 Mar 2026 19:03:28 +0000 Manifest next update: Fri 27 Mar 2026 21:18:28 +0000 Files and hashes: 1: 36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl (hash: LuaOnMQG9MtGOesPGGk9jMMZbe1k10sMGG9/8i7Tsko=) 2: 3131392e34302e36342e302f32302d3234203d3e203338333738.roa (hash: c0wW6VCicCCnYfYJdn0/kWyv9t5vGCOs/sl/Ap5EabE=) 3: 3130332e39322e38382e302f32322d3234203d3e203338333738.roa (hash: DQtj51onk1QlrsaGulzt3zyofI52x/prSCn1R/58wqA=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:58:22:a5:b3:a4:bc:40:a5:19:bb:29:46:6c:ab:94:f1:40:bb:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED Validity Not Before: Mar 26 19:03:28 2026 GMT Not After : Mar 27 21:18:28 2026 GMT Subject: CN=8B4D00C1943E746B34B1BAF38E84767C7923ADB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:21:4d:c7:f2:2c:c2:ee:8f:8a:53:61:1d:c5: 0f:91:fc:d7:c7:50:73:cc:e4:cd:1a:a2:09:b2:e1: a4:a2:5c:1a:d8:c7:1f:aa:00:c9:c7:26:95:fa:49: 27:62:24:5d:34:2d:55:4f:ed:09:c1:08:02:58:42: 93:9a:93:ba:26:fc:56:c2:14:2d:92:c3:90:e7:bb: 8d:e7:a7:05:9e:28:b2:ca:19:0e:06:d6:84:5a:e0: f8:7d:29:91:90:5e:68:1d:b0:72:8b:82:3c:15:58: 01:23:61:8b:2d:6e:09:ce:79:ee:ba:27:98:f6:de: 46:12:b5:71:9c:d1:6c:94:96:89:f8:e7:da:a2:f7: a6:35:cd:a6:1f:c8:87:7a:b6:d3:f9:8c:4c:1c:82: 89:bb:8b:61:57:ac:e9:ec:e9:f4:c7:f5:a5:26:af: 84:f6:bb:49:e1:b2:5b:ec:f1:4c:49:37:8e:4f:77: 67:d3:4e:05:ec:0d:c0:1f:48:d9:c4:e3:f0:80:03: 4c:70:eb:7d:7b:72:5a:5f:3f:df:63:53:e8:f9:62: 3b:1b:50:ee:a6:88:1a:02:84:22:7b:e6:66:d6:66: e9:17:16:92:c4:c4:0f:cf:69:9a:7c:4e:53:b4:e5: f2:68:53:9d:b2:fa:b8:db:80:b3:69:70:ce:1f:30: 9e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:4D:00:C1:94:3E:74:6B:34:B1:BA:F3:8E:84:76:7C:79:23:AD:B5 X509v3 Authority Key Identifier: keyid:36:DF:1E:D5:1A:E3:9E:7C:7E:A2:CE:0B:EE:C3:03:2E:81:26:6E:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947340801/0/36DF1ED51AE39E7C7EA2CE0BEEC3032E81266EED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:aa:91:5c:76:d1:f4:90:d3:4d:ca:a6:51:da:03:8b:67:0e: 8d:6b:d0:7b:36:87:bd:6f:5c:61:ae:b7:b0:1a:ce:97:3f:79: 01:f0:52:d9:9a:37:c2:9a:0d:24:1f:19:52:4d:5b:33:76:b5: d8:78:8d:49:9f:81:41:b5:99:b1:b0:c4:7f:b7:45:cd:17:53: 49:01:f0:25:f0:d5:8c:77:79:6c:2b:39:5d:97:4a:91:53:4c: 6d:6f:52:23:f8:e2:b5:97:7e:b4:f9:42:86:4c:2a:28:3a:10: 3f:1d:eb:41:58:37:f5:60:61:fc:b6:f5:32:92:b3:e9:7f:95: 9a:18:d1:5e:37:85:13:87:0d:fa:e9:41:5e:3d:43:8f:8d:c8: fe:9f:e2:51:f4:25:eb:fb:0a:6c:d2:89:d8:7e:a4:cf:cd:30: 13:fe:8c:94:02:ff:1e:2e:a4:e2:91:36:2e:15:d7:ca:79:ef: 66:00:14:94:8f:5b:27:da:f2:74:e1:c3:71:e2:95:af:3b:a5: 42:29:b4:f4:5b:9e:b2:53:76:c2:6d:fc:c3:b7:3b:18:80:92: fc:15:fb:da:72:ee:b1:23:a5:b0:a3:db:6b:f4:f7:73:97:64: 51:ce:06:bf:39:55:a6:c2:86:d9:32:a3:77:d2:6a:42:4f:b2: 24:ef:e2:2c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJFgipbOkvEClGbspRmyrlPFAuzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4 MTI2NkVFRDAeFw0yNjAzMjYxOTAzMjhaFw0yNjAzMjcyMTE4MjhaMDMxMTAvBgNV BAMTKDhCNEQwMEMxOTQzRTc0NkIzNEIxQkFGMzhFODQ3NjdDNzkyM0FEQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhIU3H8izC7o+KU2EdxQ+R/NfH UHPM5M0aogmy4aSiXBrYxx+qAMnHJpX6SSdiJF00LVVP7QnBCAJYQpOak7om/FbC FC2Sw5Dnu43npwWeKLLKGQ4G1oRa4Ph9KZGQXmgdsHKLgjwVWAEjYYstbgnOee66 J5j23kYStXGc0WyUlon459qi96Y1zaYfyId6ttP5jEwcgom7i2FXrOns6fTH9aUm r4T2u0nhslvs8UxJN45Pd2fTTgXsDcAfSNnE4/CAA0xw6317clpfP99jU+j5Yjsb UO6miBoChCJ75mbWZukXFpLExA/PaZp8TlO05fJoU52y+rjbgLNpcM4fMJ7xAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUi00AwZQ+dGs0sbrzjoR2fHkjrbUwHwYDVR0j BBgwFoAUNt8e1Rrjnnx+os4L7sMDLoEmbu0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzM0MDgwMS8wLzM2REYxRUQ1MUFFMzlFN0M3RUEyQ0UwQkVFQzMw MzJFODEyNjZFRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZERjFFRDUxQUUzOUU3QzdFQTJDRTBCRUVDMzAzMkU4MTI2NkVFRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDczNDA4MDEvMC8zNkRGMUVENTFBRTM5 RTdDN0VBMkNFMEJFRUMzMDMyRTgxMjY2RUVELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKqRXHbR9JDT TcqmUdoDi2cOjWvQezaHvW9cYa63sBrOlz95AfBS2Zo3wpoNJB8ZUk1bM3a12HiN SZ+BQbWZsbDEf7dFzRdTSQHwJfDVjHd5bCs5XZdKkVNMbW9SI/jitZd+tPlChkwq KDoQPx3rQVg39WBh/Lb1MpKz6X+VmhjRXjeFE4cN+ulBXj1Dj43I/p/iUfQl6/sK bNKJ2H6kz80wE/6MlAL/Hi6k4pE2LhXXynnvZgAUlI9bJ9rydOHDceKVrzulQim0 9FueslN2wm38w7c7GICS/BX72nLusSOlsKPba/T3c5dkUc4GvzlVpsKG2TKjd9Jq Qk+yJO/iLA== -----END CERTIFICATE-----Generated at Fri Mar 27 01:55:18 2026 by rpki-client