$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft File: 36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft (raw, json) Hash identifier: DD8kPMZLT0rKFrl92ptnarLqbdvFtzpYhOyMpD3CZXo= Subject key identifier: DF:3C:A4:83:E9:C7:90:B4:03:A4:2F:C0:C3:40:9F:7C:34:33:0A:D7 Authority key identifier: 36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D Certificate issuer: /CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D Certificate serial: 77C18D01832C4DFED1D8EC5DFB221AEFC491F2C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft Manifest number: 87 Signing time: Fri 24 Jul 2026 11:31:04 +0000 Manifest this update: Fri 24 Jul 2026 11:26:04 +0000 Manifest next update: Sat 25 Jul 2026 11:42:04 +0000 Files and hashes: 1: 36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl (hash: Q1tjXy2yf7m+GVO3oGF8xDZ4JxBAFpH+sFQ/9zQQpyE=) 2: 3130332e3231352e3134302e302f32322d3232203d3e203538353139.roa (hash: rxlfotPYclusuNHWGDhdy78Jx7VJ8aQNKRsyn8w1wxE=) 3: 3135372e3131392e32382e302f32322d3232203d3e203538353139.roa (hash: +V7Vd50CrLhAnyJKXkDEE7s1Gt8Bw5Z6WA1KeI/AeLs=) 4: 3130332e37392e3133362e302f32322d3232203d3e2030.roa (hash: YVxEOO9XO2MmyHqD3Ceyf3SLPC873UJ1DWWky7Vnl30=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c1:8d:01:83:2c:4d:fe:d1:d8:ec:5d:fb:22:1a:ef:c4:91:f2:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D Validity Not Before: Jul 24 11:26:04 2026 GMT Not After : Jul 25 11:42:04 2026 GMT Subject: CN=DF3CA483E9C790B403A42FC0C3409F7C34330AD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ab:93:26:1a:2f:df:a5:4e:53:dd:c6:95:82: ab:d4:4c:94:56:a3:24:a1:02:eb:0d:46:06:54:7c: 35:43:56:26:08:70:d7:c3:22:49:7d:d4:e6:87:22: 59:f2:82:83:e8:ea:14:9f:30:2d:33:af:91:8d:bb: 1f:0c:73:18:32:43:ec:c4:83:ff:28:d8:ba:42:43: 50:b0:98:4f:d0:9f:d7:a3:e9:a4:95:c5:ed:2b:d3: 37:db:dc:9a:22:8b:cb:53:07:c0:27:bf:7f:9b:9d: 98:d0:2e:3e:9e:6d:89:5d:c1:5a:c4:3b:f4:8b:6e: 9c:c2:5f:91:6f:62:68:79:07:ab:88:cb:10:08:a5: d8:e8:9a:c2:a0:29:82:ef:52:b5:da:9b:47:e8:25: ae:fa:24:74:51:b4:70:94:e2:51:18:1a:6a:4a:2f: df:ca:64:05:fc:a5:0f:32:e8:19:24:f4:70:1e:72: 0a:1c:ea:88:b3:a2:c5:6a:13:9b:1a:4e:cc:6b:a6: e7:b4:1a:ac:39:04:e8:67:4a:ef:44:7e:18:c2:d9: c4:6e:82:3c:2e:2e:1a:c1:22:c3:96:60:6e:13:46: 25:b7:c0:28:55:dd:a9:64:c2:31:7e:de:70:8b:77: 79:d1:57:8a:e8:83:0f:7e:79:6f:d7:cf:49:cd:09: 3d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3C:A4:83:E9:C7:90:B4:03:A4:2F:C0:C3:40:9F:7C:34:33:0A:D7 X509v3 Authority Key Identifier: keyid:36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:11:d1:2b:2c:b6:96:0f:08:2e:8f:df:14:4a:05:9e:e2:67: 4b:12:df:8c:2d:96:d1:4e:66:47:77:ff:2b:4c:44:ea:40:8a: 24:40:92:c5:9d:a2:4c:2c:58:ca:62:63:0e:36:f0:9c:5c:15: 5b:5b:98:af:09:64:c6:6c:ed:14:11:c9:92:c9:9d:b0:58:e5: ab:14:fe:4b:e4:76:de:51:c5:58:dd:22:84:d1:f5:26:f2:fb: 8c:90:70:3f:18:1d:e5:d7:9d:ba:53:70:f4:08:ae:c8:e5:48: cf:c4:15:63:45:c9:c6:58:f3:2e:dc:15:fd:24:a2:a4:72:52: ed:f6:cd:c1:4d:b2:8d:7a:d3:8d:dd:b8:6c:56:c4:98:9a:60: 70:22:84:87:af:62:e4:d7:fb:8c:4f:c8:60:21:e3:81:b8:3a: 0d:21:57:71:64:15:e2:9c:1e:9c:14:8f:e8:5f:5a:19:25:05: 6f:a5:50:03:70:b3:72:5a:6c:d0:87:cb:65:11:bc:3c:e7:38: 95:9e:00:d5:51:38:9e:a3:ee:0c:56:6f:77:e4:bc:a8:ba:cd: 6f:18:4a:e6:df:9c:6f:ef:4d:67:fd:92:c0:e9:aa:0c:47:ea: 4b:01:c1:e2:81:3d:d0:ba:cc:9a:5a:6f:ae:39:71:31:33:c1: d3:44:e7:b7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUd8GNAYMsTf7R2Oxd+yIa78SR8sQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZBMEQxMERBNTEzREM3QUM4QjY4QThCOTQ5MzZDMzNE MEYxMzMxRDAeFw0yNjA3MjQxMTI2MDRaFw0yNjA3MjUxMTQyMDRaMDMxMTAvBgNV BAMTKERGM0NBNDgzRTlDNzkwQjQwM0E0MkZDMEMzNDA5RjdDMzQzMzBBRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMq5MmGi/fpU5T3caVgqvUTJRW oyShAusNRgZUfDVDViYIcNfDIkl91OaHIlnygoPo6hSfMC0zr5GNux8McxgyQ+zE g/8o2LpCQ1CwmE/Qn9ej6aSVxe0r0zfb3Joii8tTB8Anv3+bnZjQLj6ebYldwVrE O/SLbpzCX5FvYmh5B6uIyxAIpdjomsKgKYLvUrXam0foJa76JHRRtHCU4lEYGmpK L9/KZAX8pQ8y6Bkk9HAecgoc6oizosVqE5saTsxrpue0Gqw5BOhnSu9EfhjC2cRu gjwuLhrBIsOWYG4TRiW3wChV3alkwjF+3nCLd3nRV4rogw9+eW/Xz0nNCT2fAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU3zykg+nHkLQDpC/Aw0CffDQzCtcwHwYDVR0j BBgwFoAUNqDRDaUT3HrItoqLlJNsM9DxMx0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3MjEwNjY1MjMwMzM2Mi8wLzM2QTBEMTBEQTUxM0RDN0FDOEI2OEE4Qjk0OTM2 QzMzRDBGMTMzMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZBMEQxMERBNTEzREM3QUM4QjY4QThCOTQ5MzZDMzNEMEYxMzMxRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzIxMDY2NTIzMDMzNjIvMC8zNkEwRDEwREE1MTNE QzdBQzhCNjhBOEI5NDkzNkMzM0QwRjEzMzFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShHRKyy2lg8I Lo/fFEoFnuJnSxLfjC2W0U5mR3f/K0xE6kCKJECSxZ2iTCxYymJjDjbwnFwVW1uY rwlkxmztFBHJksmdsFjlqxT+S+R23lHFWN0ihNH1JvL7jJBwPxgd5dedulNw9Aiu yOVIz8QVY0XJxljzLtwV/SSipHJS7fbNwU2yjXrTjd24bFbEmJpgcCKEh69i5Nf7 jE/IYCHjgbg6DSFXcWQV4pwenBSP6F9aGSUFb6VQA3Czclps0IfLZRG8POc4lZ4A 1VE4nqPuDFZvd+S8qLrNbxhK5t+cb+9NZ/2SwOmqDEfqSwHB4oE90LrMmlpvrjlx MTPB00Tntw== -----END CERTIFICATE-----Generated at Fri Jul 24 15:53:17 2026 by rpki-client