$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft File: 36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft (raw, json) Hash identifier: Fzj95EBWUXtHpiLUrJUs0qEb50FKOSSXUNdxBDfnZA8= Subject key identifier: 3B:CE:50:59:BE:EE:B7:C0:D3:D0:8B:45:C2:4E:75:7E:7A:99:5D:2B Authority key identifier: 36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D Certificate issuer: /CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D Certificate serial: 0F9C5F1E7708024944123594AD3C4F787E422383 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft Manifest number: 26 Signing time: Tue 12 May 2026 19:55:42 +0000 Manifest this update: Tue 12 May 2026 19:50:42 +0000 Manifest next update: Wed 13 May 2026 22:49:42 +0000 Files and hashes: 1: 3130332e3231352e3134302e302f32322d3232203d3e203538353139.roa (hash: rxlfotPYclusuNHWGDhdy78Jx7VJ8aQNKRsyn8w1wxE=) 2: 36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl (hash: G1i4RsCsCRV4xpDao15xDgUlF2VG2XGK70pFc+rWqXQ=) 3: 3135372e3131392e32382e302f32322d3232203d3e203538353139.roa (hash: +V7Vd50CrLhAnyJKXkDEE7s1Gt8Bw5Z6WA1KeI/AeLs=) 4: 3130332e37392e3133362e302f32322d3232203d3e2030.roa (hash: YVxEOO9XO2MmyHqD3Ceyf3SLPC873UJ1DWWky7Vnl30=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:9c:5f:1e:77:08:02:49:44:12:35:94:ad:3c:4f:78:7e:42:23:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D Validity Not Before: May 12 19:50:42 2026 GMT Not After : May 13 22:49:42 2026 GMT Subject: CN=3BCE5059BEEEB7C0D3D08B45C24E757E7A995D2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ef:ae:00:7b:06:08:fe:df:24:49:49:6f:f1: 87:13:6b:a7:eb:49:81:7c:d8:68:ec:1f:e0:ed:54: a0:3f:a3:99:17:a5:ad:f6:98:aa:47:e3:d2:42:2d: e1:29:49:3e:d0:1f:02:f0:19:9d:4e:99:be:96:8d: 74:11:d5:08:17:9b:bc:28:90:41:f6:eb:f9:72:c5: 29:50:98:74:1a:7c:af:f6:c9:bc:57:bc:2e:29:79: 80:b8:d8:c6:97:2b:83:d1:e4:e0:f6:1d:f2:e0:e0: 53:cb:e2:8a:4c:9a:20:a4:65:d9:5d:24:9f:3f:5a: 10:00:66:fe:68:da:45:e4:74:fa:f0:31:c0:ef:60: 6e:48:43:18:b5:db:21:59:6a:05:f1:56:f6:15:ac: b4:ee:5e:b5:37:4f:3e:70:e7:c7:d4:dc:0e:68:54: 62:30:a6:cf:9e:3d:44:49:db:ee:84:94:2f:8b:6e: da:37:5b:9b:6f:b6:39:35:b6:0b:67:43:1e:18:fc: 75:8e:af:ec:bf:78:4e:35:22:80:a3:49:04:88:95: 4a:8c:ef:f4:b9:cf:60:12:ab:ed:c3:74:cf:8b:49: 69:0a:b3:9e:85:a1:9e:52:15:85:54:b4:20:86:fc: 33:18:f3:39:3e:fe:a0:a8:fa:db:1c:b0:93:4f:b3: 16:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:CE:50:59:BE:EE:B7:C0:D3:D0:8B:45:C2:4E:75:7E:7A:99:5D:2B X509v3 Authority Key Identifier: keyid:36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9e:f4:96:81:c4:7f:7f:22:60:e8:29:44:59:36:74:76:8d: 09:fc:45:7f:32:17:56:c1:66:64:09:28:07:24:57:87:61:fa: 9a:8a:a8:b2:0e:3f:d6:38:18:6f:a0:ef:a3:38:9b:6b:da:06: cc:15:31:5c:36:1f:49:bd:d3:fa:eb:29:b6:d3:ed:07:fa:9d: 49:15:b9:fb:3a:39:4c:54:7b:dc:9b:84:e6:4e:e5:8e:72:14: bb:21:b0:44:38:99:92:0e:99:96:e8:a6:65:50:ad:66:91:f0: 28:af:2d:dc:48:0c:24:b2:4a:4b:23:41:df:41:f3:a6:51:c2: e6:97:13:1d:e2:f3:33:41:76:ea:56:bf:1b:06:07:26:f3:b1: 11:30:8c:20:25:e4:6a:08:9d:64:63:07:a0:27:fc:8d:f3:5f: e9:c6:29:b6:af:69:7b:4c:aa:4b:a5:8c:74:22:a8:c9:6c:c6: 60:e4:32:c9:73:4d:c1:af:e5:e8:05:66:97:b2:04:c8:d0:50: 03:f4:16:57:82:d5:33:d7:dc:03:39:9d:9d:a4:93:3c:70:ee: 30:db:15:09:6c:bb:9e:84:93:83:e1:a1:d5:ca:25:56:97:c6: ff:81:18:11:76:30:63:ea:6a:09:ec:cc:48:91:71:8e:38:f6: 81:bd:7b:34 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUD5xfHncIAklEEjWUrTxPeH5CI4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZBMEQxMERBNTEzREM3QUM4QjY4QThCOTQ5MzZDMzNE MEYxMzMxRDAeFw0yNjA1MTIxOTUwNDJaFw0yNjA1MTMyMjQ5NDJaMDMxMTAvBgNV BAMTKDNCQ0U1MDU5QkVFRUI3QzBEM0QwOEI0NUMyNEU3NTdFN0E5OTVEMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ764AewYI/t8kSUlv8YcTa6fr SYF82GjsH+DtVKA/o5kXpa32mKpH49JCLeEpST7QHwLwGZ1Omb6WjXQR1QgXm7wo kEH26/lyxSlQmHQafK/2ybxXvC4peYC42MaXK4PR5OD2HfLg4FPL4opMmiCkZdld JJ8/WhAAZv5o2kXkdPrwMcDvYG5IQxi12yFZagXxVvYVrLTuXrU3Tz5w58fU3A5o VGIwps+ePURJ2+6ElC+Lbto3W5tvtjk1tgtnQx4Y/HWOr+y/eE41IoCjSQSIlUqM 7/S5z2ASq+3DdM+LSWkKs56FoZ5SFYVUtCCG/DMY8zk+/qCo+tscsJNPsxYrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUO85QWb7ut8DT0ItFwk51fnqZXSswHwYDVR0j BBgwFoAUNqDRDaUT3HrItoqLlJNsM9DxMx0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3MjEwNjY1MjMwMzM2Mi8wLzM2QTBEMTBEQTUxM0RDN0FDOEI2OEE4Qjk0OTM2 QzMzRDBGMTMzMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZBMEQxMERBNTEzREM3QUM4QjY4QThCOTQ5MzZDMzNEMEYxMzMxRC5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTcwNzIxMDY2NTIzMDMzNjIvMC8zNkEwRDEwREE1MTNE QzdBQzhCNjhBOEI5NDkzNkMzM0QwRjEzMzFELm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJ70loHEf38i YOgpRFk2dHaNCfxFfzIXVsFmZAkoByRXh2H6moqosg4/1jgYb6Dvoziba9oGzBUx XDYfSb3T+uspttPtB/qdSRW5+zo5TFR73JuE5k7ljnIUuyGwRDiZkg6ZluimZVCt ZpHwKK8t3EgMJLJKSyNB30HzplHC5pcTHeLzM0F26la/GwYHJvOxETCMICXkagid ZGMHoCf8jfNf6cYptq9pe0yqS6WMdCKoyWzGYOQyyXNNwa/l6AVml7IEyNBQA/QW V4LVM9fcAzmdnaSTPHDuMNsVCWy7noSTg+Gh1colVpfG/4EYEXYwY+pqCezMSJFx jjj2gb17NA== -----END CERTIFICATE-----Generated at Wed May 13 12:39:27 2026 by rpki-client