
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft
File: 36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft (raw, json)
Hash identifier: eXiH6FpoV0dl7f+xslWT+BXFQxPSAc9MHlW2nOoCimw=
Subject key identifier: 1B:6F:4A:54:BF:E8:21:A1:69:20:8B:24:03:E5:2C:65:AE:55:E8:34
Authority key identifier: 36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D
Certificate issuer: /CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D
Certificate serial: 2A4EE42A95C35C7B05C50DCB2BDC67F013C89E54
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft
Manifest number: C6
Signing time: Sat 03 Oct 2026 21:07:24 +0000
Manifest this update: Sat 03 Oct 2026 21:02:24 +0000
Manifest next update: Wed 07 Oct 2026 01:25:24 +0000
Files and hashes: 1: 36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl (hash: zE7vSabXC2SpEmpHbNX4lU9fZ0saxjVAWWb88Rmxacc=)
2: 3130332e37392e3133362e302f32322d3232203d3e2030.roa (hash: YVxEOO9XO2MmyHqD3Ceyf3SLPC873UJ1DWWky7Vnl30=)
3: 3135372e3131392e32382e302f32322d3232203d3e203538353139.roa (hash: +V7Vd50CrLhAnyJKXkDEE7s1Gt8Bw5Z6WA1KeI/AeLs=)
4: 3130332e3231352e3134302e302f32322d3232203d3e203538353139.roa (hash: rxlfotPYclusuNHWGDhdy78Jx7VJ8aQNKRsyn8w1wxE=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 07 Oct 2026 01:25:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:4e:e4:2a:95:c3:5c:7b:05:c5:0d:cb:2b:dc:67:f0:13:c8:9e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D
Validity
Not Before: Oct 3 21:02:24 2026 GMT
Not After : Oct 7 01:25:24 2026 GMT
Subject: CN=1B6F4A54BFE821A169208B2403E52C65AE55E834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:be:7a:0e:d4:c4:67:8f:42:4e:e1:3c:f8:
17:c5:73:2d:3f:d5:9b:c6:49:1e:a1:aa:21:e6:19:
53:05:58:49:a5:ea:22:82:2f:18:de:de:5e:be:11:
b7:39:dc:d9:3e:39:ec:3a:01:71:f2:a6:ad:1d:48:
35:e9:e0:84:f4:2c:cc:03:22:28:d2:30:75:a5:87:
87:93:75:ab:e3:ed:0d:92:4a:b8:a1:b4:a4:74:00:
8e:f4:1d:28:03:6d:f2:0e:7e:c1:fc:12:3d:aa:95:
be:94:30:7a:1a:8f:86:5c:95:da:01:33:c0:64:32:
16:46:e5:d3:82:5c:5f:e7:c5:5d:c2:c7:62:0d:c7:
47:31:21:89:42:5c:d1:d4:5a:5e:24:83:42:33:05:
8c:85:cf:95:27:48:33:39:e6:c8:f3:0e:29:d0:eb:
e4:07:24:e5:9e:1b:ef:03:b7:78:63:93:21:c3:3c:
77:79:0f:43:24:83:61:d3:8f:b7:c9:c2:a8:0a:3a:
2b:96:45:b9:5a:1e:ee:ff:40:cf:2b:c4:b8:f3:00:
94:02:6d:50:98:c8:41:92:1f:d9:fa:d8:93:ab:8a:
14:51:73:7e:c1:0d:dd:f8:f1:a3:36:19:40:00:aa:
20:4c:17:2a:f0:81:2c:83:7c:9c:44:c2:44:18:1d:
23:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6F:4A:54:BF:E8:21:A1:69:20:8B:24:03:E5:2C:65:AE:55:E8:34
X509v3 Authority Key Identifier:
keyid:36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7b:ad:6e:e6:a1:82:ef:ac:bb:b9:a8:2f:4e:ad:d5:a9:3b:
a5:a7:b8:19:93:aa:22:a2:9f:34:8e:98:d5:7e:5c:26:2f:44:
5b:aa:84:d0:5f:2e:60:7d:69:35:b6:13:6d:56:27:5f:74:ef:
20:7b:ed:c8:de:c1:9e:11:b9:02:62:47:2c:69:b2:20:97:43:
97:40:42:03:0c:e3:5c:6a:a0:82:74:d9:b7:c6:4d:4d:b4:c2:
5f:6e:73:81:9d:5a:ed:e2:06:42:4b:78:8f:e7:c4:a8:a1:e9:
32:56:ef:be:ae:90:e1:30:9e:95:5d:52:16:fa:a6:96:e6:96:
11:c2:93:de:31:0e:51:17:54:32:73:6c:96:b6:9e:71:64:8f:
2d:e8:44:1e:78:87:f2:7e:5b:de:39:8c:1c:f2:fb:1d:d6:85:
65:5b:92:e3:29:92:a0:5b:6a:a2:ce:a7:32:79:06:17:cb:ac:
8a:b8:a2:f6:fb:9b:a1:39:fe:07:78:d7:01:b1:36:82:61:75:
d8:6f:23:73:01:4f:e7:95:e2:fa:b2:b6:cb:b2:fc:77:5c:cd:
db:4a:78:38:a9:69:1b:e9:79:ab:b3:b2:73:0d:d5:22:6c:a6:
fb:f0:fd:d0:56:9e:6b:61:e1:ff:56:d4:fd:fa:5c:a9:11:8d:
f3:bd:11:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:13:12 2026 by rpki-client